commit 9f53fa9ff3e62ac30d6a1f3e42a2e0a00ba3cf73
Author: Alexander-D-Karpov <alexandr.d.karpov@gmail.com>
Date:   Tue Oct 15 03:01:27 2024 +0300

    initial commit

diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..f68d109
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,29 @@
+### IntelliJ IDEA ###
+out/
+!**/src/main/**/out/
+!**/src/test/**/out/
+
+### Eclipse ###
+.apt_generated
+.classpath
+.factorypath
+.project
+.settings
+.springBeans
+.sts4-cache
+bin/
+!**/src/main/**/bin/
+!**/src/test/**/bin/
+
+### NetBeans ###
+/nbproject/private/
+/nbbuild/
+/dist/
+/nbdist/
+/.nb-gradle/
+
+### VS Code ###
+.vscode/
+
+### Mac OS ###
+.DS_Store
\ No newline at end of file
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..749f80a
--- /dev/null
+++ b/README.md
@@ -0,0 +1,51 @@
+## Лабораторная работа #2
+
+![https://new.akarpov.ru/files/loWvbepFAhFyHrnHkBZx](https://new.akarpov.ru/media/files/sanspie/MwNdh/areas.png)
+
+Вариант 544
+
+Разработать веб-приложение на базе сервлетов и JSP, определяющее попадание точки на координатной плоскости в заданную область.
+
+Приложение должно быть реализовано в соответствии с шаблоном MVC и состоять из следующих элементов:
+
+    ControllerServlet, определяющий тип запроса, и, в зависимости от того, содержит ли запрос информацию о координатах точки и радиусе, делегирующий его обработку одному из перечисленных ниже компонентов. Все запросы внутри приложения должны передаваться этому сервлету (по методу GET или POST в зависимости от варианта задания), остальные сервлеты с веб-страниц напрямую вызываться не должны.
+    AreaCheckServlet, осуществляющий проверку попадания точки в область на координатной плоскости и формирующий HTML-страницу с результатами проверки. Должен обрабатывать все запросы, содержащие сведения о координатах точки и радиусе области.
+    Страница JSP, формирующая HTML-страницу с веб-формой. Должна обрабатывать все запросы, не содержащие сведений о координатах точки и радиусе области.
+
+Разработанная страница JSP должна содержать:
+
+    "Шапку", содержащую ФИО студента, номер группы и номер варианта.
+    Форму, отправляющую данные на сервер.
+    Набор полей для задания координат точки и радиуса области в соответствии с вариантом задания.
+    Сценарий на языке JavaScript, осуществляющий валидацию значений, вводимых пользователем в поля формы.
+    Интерактивный элемент, содержащий изображение области на координатной плоскости (в соответствии с вариантом задания) и реализующий следующую функциональность:
+        Если радиус области установлен, клик курсором мыши по изображению должен обрабатываться JavaScript-функцией, определяющей координаты точки, по которой кликнул пользователь и отправляющей полученные координаты на сервер для проверки факта попадания.
+        В противном случае, после клика по картинке должно выводиться сообщение о невозможности определения координат точки.
+        После проверки факта попадания точки в область изображение должно быть обновлено с учётом результатов этой проверки (т.е., на нём должна появиться новая точка).
+    Таблицу с результатами предыдущих проверок. Список результатов должен браться из контекста приложения, HTTP-сессии или Bean-компонента в зависимости от варианта.
+
+Страница, возвращаемая AreaCheckServlet, должна содержать:
+
+    Таблицу, содержащую полученные параметры.
+    Результат вычислений - факт попадания или непопадания точки в область.
+    Ссылку на страницу с веб-формой для формирования нового запроса.
+
+Разработанное веб-приложение необходимо развернуть на сервере WildFly. Сервер должен быть запущен в standalone-конфигурации, порты должны быть настроены в соответствии с выданным portbase, доступ к http listener'у должен быть открыт для всех IP.
+
+Вопросы к защите лабораторной работы:
+
+    Java-сервлеты. Особенности реализации, ключевые методы, преимущества и недостатки относительно CGI и FastCGI.
+    Контейнеры сервлетов. Жизненный цикл сервлета.
+    Диспетчеризация запросов в сервлетах. Фильтры сервлетов.
+    HTTP-сессии - назначение, взаимодействие сервлетов с сессией, способы передачи идентификатора сессии.
+    Контекст сервлета - назначение, способы взаимодействия сервлетов с контекстом.
+    JavaServer Pages. Особенности, преимущества и недостатки по сравнению с сервлетами, область применения.
+    Жизненный цикл JSP.
+    Структура JSP-страницы. Комментарии, директивы, объявления, скриптлеты и выражения.
+    Правила записи Java-кода внутри JSP. Стандартные переменные, доступные в скриптлетах и выражениях.
+    Bean-компоненты и их использование в JSP.
+    Стандартные теги JSP. Использование Expression Language (EL) в JSP.
+    Параметры конфигурации JSP в дескрипторе развёртывания веб-приложения.
+    Шаблоны проектирования и архитектурные шаблоны. Использование в веб-приложениях.
+    Архитектура веб-приложений. Шаблон MVC. Архитектурные модели Model 1 и Model 2 и их реализация на платформе Java EE.
+
diff --git a/pom.xml b/pom.xml
new file mode 100644
index 0000000..d70fd68
--- /dev/null
+++ b/pom.xml
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!-- Maven POM configuration for the project -->
+<project xmlns="http://maven.apache.org/POM/4.0.0"
+         xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0
+         http://maven.apache.org/maven-v4_0_0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <groupId>ru.akarpov</groupId>
+    <artifactId>web-2</artifactId>
+    <version>1.0-SNAPSHOT</version>
+    <packaging>war</packaging>
+    <name>Lab Web 2</name>
+    <description>Web application for lab 2</description>
+
+    <properties>
+        <maven.compiler.source>17</maven.compiler.source>
+        <maven.compiler.target>17</maven.compiler.target>
+        <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
+    </properties>
+
+    <dependencies>
+        <!-- Servlet API -->
+        <dependency>
+            <groupId>jakarta.servlet</groupId>
+            <artifactId>jakarta.servlet-api</artifactId>
+            <version>5.0.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <!-- JSP API -->
+        <dependency>
+            <groupId>jakarta.servlet.jsp</groupId>
+            <artifactId>jakarta.servlet.jsp-api</artifactId>
+            <version>3.0.0</version>
+            <scope>provided</scope>
+        </dependency>
+        <!-- JSTL Implementation -->
+        <dependency>
+            <groupId>org.glassfish.web</groupId>
+            <artifactId>jakarta.servlet.jsp.jstl</artifactId>
+            <version>2.0.0</version>
+        </dependency>
+        <!-- Gson for JSON conversion -->
+        <dependency>
+            <groupId>com.google.code.gson</groupId>
+            <artifactId>gson</artifactId>
+            <version>2.10.1</version>
+        </dependency>
+        <!-- JUnit for testing -->
+        <dependency>
+            <groupId>junit</groupId>
+            <artifactId>junit</artifactId>
+            <version>4.13.2</version>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+</project>
diff --git a/src/main/java/ru/akarpov/web2/AreaCheckServlet.java b/src/main/java/ru/akarpov/web2/AreaCheckServlet.java
new file mode 100644
index 0000000..a28eaa5
--- /dev/null
+++ b/src/main/java/ru/akarpov/web2/AreaCheckServlet.java
@@ -0,0 +1,102 @@
+package ru.akarpov.web2;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.annotation.WebServlet;
+import jakarta.servlet.http.*;
+
+import java.io.IOException;
+
+@WebServlet("/check")
+public class AreaCheckServlet extends HttpServlet {
+    protected void doPost(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        // For GET method processing
+        response.sendRedirect(request.getContextPath() + "/index.jsp");
+    }
+
+    protected void doGet(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        processRequest(request, response);
+    }
+
+    private void processRequest(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+
+        long startTime = System.nanoTime();
+
+        String[] xValues = request.getParameterValues("x");
+        String yStr = request.getParameter("y");
+        String rStr = request.getParameter("r");
+
+        double y = 0;
+        double r = 0;
+        boolean valid = true;
+
+        try {
+            y = Double.parseDouble(yStr);
+            r = Double.parseDouble(rStr);
+        } catch (NumberFormatException e) {
+            valid = false;
+        }
+
+        if (xValues == null || xValues.length == 0) {
+            valid = false;
+        }
+
+        if (y < -3 || y > 5) {
+            valid = false;
+        }
+
+        if (r < 2 || r > 5) {
+            valid = false;
+        }
+
+        if (!valid) {
+            request.setAttribute("errorMessage", "Invalid input data");
+            request.getRequestDispatcher("/index.jsp").forward(request, response);
+            return;
+        }
+
+        String currentTime = new java.text.SimpleDateFormat("HH:mm:ss").format(new java.util.Date());
+        long executionTime = (System.nanoTime() - startTime) / 1000000; // in milliseconds
+
+        // Get or create the ResultBean
+        HttpSession session = request.getSession();
+        ResultBean resultBean = (ResultBean) session.getAttribute("resultBean");
+        if (resultBean == null) {
+            resultBean = new ResultBean();
+            session.setAttribute("resultBean", resultBean);
+        }
+
+        for (String xStr : xValues) {
+            double x = 0;
+            try {
+                x = Double.parseDouble(xStr);
+            } catch (NumberFormatException e) {
+                continue;
+            }
+
+            boolean hit = checkHit(x, y, r);
+
+            Result result = new Result(x, y, r, hit, currentTime, executionTime);
+            resultBean.addResult(result);
+        }
+
+        // Forward to result.jsp
+        request.getRequestDispatcher("/result.jsp").forward(request, response);
+    }
+
+    private boolean checkHit(double x, double y, double r) {
+        if (x <= 0 && y >= 0 && x >= -r && y <= r / 2) {
+            // Triangle in +Y -X quadrant
+            return y <= (x + r) / 2;
+        } else if (x >= 0 && y >= 0 && x <= r && y <= r) {
+            // Quarter circle in +Y +X quadrant
+            return (x * x + y * y) <= r * r;
+        } else if (x >= 0 && y <= 0 && x <= r && y >= -r / 2) {
+            // Rectangle in -Y +X quadrant
+            return true;
+        }
+        return false;
+    }
+}
diff --git a/src/main/java/ru/akarpov/web2/ClearServlet.java b/src/main/java/ru/akarpov/web2/ClearServlet.java
new file mode 100644
index 0000000..5077f0e
--- /dev/null
+++ b/src/main/java/ru/akarpov/web2/ClearServlet.java
@@ -0,0 +1,23 @@
+package ru.akarpov.web2;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.annotation.WebServlet;
+import jakarta.servlet.http.*;
+
+import java.io.IOException;
+
+@WebServlet("/clear")
+public class ClearServlet extends HttpServlet {
+    protected void doPost(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        HttpSession session = request.getSession();
+        session.removeAttribute("resultBean");
+        response.setStatus(HttpServletResponse.SC_OK);
+    }
+
+    // Ensure that GET requests are also handled
+    protected void doGet(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        doPost(request, response);
+    }
+}
diff --git a/src/main/java/ru/akarpov/web2/ControllerServlet.java b/src/main/java/ru/akarpov/web2/ControllerServlet.java
new file mode 100644
index 0000000..a52ec23
--- /dev/null
+++ b/src/main/java/ru/akarpov/web2/ControllerServlet.java
@@ -0,0 +1,36 @@
+package ru.akarpov.web2;
+
+import jakarta.servlet.ServletException;
+import jakarta.servlet.annotation.WebServlet;
+import jakarta.servlet.http.*;
+
+import java.io.IOException;
+
+@WebServlet("/controller")
+public class ControllerServlet extends HttpServlet {
+    protected void doPost(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        // For GET method processing
+        response.sendRedirect(request.getContextPath() + "/index.jsp");
+    }
+
+    protected void doGet(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        processRequest(request, response);
+    }
+
+    private void processRequest(HttpServletRequest request, HttpServletResponse response)
+            throws ServletException, IOException {
+        String[] xValues = request.getParameterValues("x");
+        String y = request.getParameter("y");
+        String r = request.getParameter("r");
+
+        if (xValues != null && y != null && r != null) {
+            System.out.println("ControllerServlet: Forwarding to /check");
+            request.getRequestDispatcher("/check").forward(request, response);
+        } else {
+            System.out.println("ControllerServlet: Missing parameters, redirecting to index.jsp");
+            response.sendRedirect(request.getContextPath() + "/index.jsp");
+        }
+    }
+}
diff --git a/src/main/java/ru/akarpov/web2/Result.java b/src/main/java/ru/akarpov/web2/Result.java
new file mode 100644
index 0000000..57961d4
--- /dev/null
+++ b/src/main/java/ru/akarpov/web2/Result.java
@@ -0,0 +1,26 @@
+package ru.akarpov.web2;
+
+public class Result {
+    private double x;
+    private double y;
+    private double r;
+    private boolean hit;
+    private String currentTime;
+    private long executionTime;
+
+    public Result(double x, double y, double r, boolean hit, String currentTime, long executionTime) {
+        this.x = x;
+        this.y = y;
+        this.r = r;
+        this.hit = hit;
+        this.currentTime = currentTime;
+        this.executionTime = executionTime;
+    }
+
+    public double getX() { return x; }
+    public double getY() { return y; }
+    public double getR() { return r; }
+    public boolean isHit() { return hit; }
+    public String getCurrentTime() { return currentTime; }
+    public long getExecutionTime() { return executionTime; }
+}
diff --git a/src/main/java/ru/akarpov/web2/ResultBean.java b/src/main/java/ru/akarpov/web2/ResultBean.java
new file mode 100644
index 0000000..1045d36
--- /dev/null
+++ b/src/main/java/ru/akarpov/web2/ResultBean.java
@@ -0,0 +1,21 @@
+package ru.akarpov.web2;
+
+import java.io.Serializable;
+import java.util.ArrayList;
+import java.util.List;
+
+public class ResultBean implements Serializable {
+    private List<Result> results;
+
+    public ResultBean() {
+        results = new ArrayList<>();
+    }
+
+    public List<Result> getResults() {
+        return results;
+    }
+
+    public void addResult(Result result) {
+        results.add(result);
+    }
+}
diff --git a/src/main/webapp/index.jsp b/src/main/webapp/index.jsp
new file mode 100644
index 0000000..7625ef1
--- /dev/null
+++ b/src/main/webapp/index.jsp
@@ -0,0 +1,120 @@
+<%@ page contentType="text/html;charset=UTF-8" language="java" %>
+<%@ page import="java.util.List" %>
+<%@ page import="java.util.Set" %>
+<%@ page import="java.util.HashSet" %>
+<%@ page import="ru.akarpov.web2.Result" %>
+<%@ page import="ru.akarpov.web2.ResultBean" %>
+<%@ page import="com.google.gson.Gson" %>
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <title>Лабораторная работа №2</title>
+    <link rel="stylesheet" href="<%= request.getContextPath() %>/styles.css">
+</head>
+<body>
+<header class="header">
+    <h1>Лабораторная работа №2</h1>
+    <p>ФИО студента: Карпов Александр Дмитриевич</p>
+    <p>Группа: P3213</p>
+    <p>Вариант: 544</p>
+</header>
+
+<div class="container">
+    <div class="form-container">
+        <canvas id="canvas" width="300" height="300"></canvas>
+        <%
+            ResultBean resultBean = (ResultBean) session.getAttribute("resultBean");
+            List<Result> results = null;
+            double lastR = 0;
+            double lastY = 0;
+            Set<Double> lastXValues = new HashSet<>();
+            if (resultBean != null) {
+                results = resultBean.getResults();
+                if (results != null && !results.isEmpty()) {
+                    Result lastResult = results.get(results.size() - 1);
+                    lastR = lastResult.getR();
+                    lastY = lastResult.getY();
+                    for (Result res : results) {
+                        if (res.getR() == lastR && res.getY() == lastY) {
+                            lastXValues.add(res.getX());
+                        }
+                    }
+                }
+            }
+        %>
+        <form id="point-form" action="<%= request.getContextPath() %>/controller" method="get">
+            <table>
+                <tr>
+                    <td><label>X:</label></td>
+                    <td>
+                        <% for (int i = -4; i <= 4; i++) { %>
+                        <label>
+                            <input type="checkbox" name="x" value="<%= i %>" <%= lastXValues.contains((double)i) ? "checked" : "" %>><%= i %>
+                        </label>
+                        <% } %>
+                    </td>
+                </tr>
+                <tr>
+                    <td><label for="y">Y:</label></td>
+                    <td><input type="text" id="y" name="y" required value="<%= lastY != 0 ? lastY : "" %>"></td>
+                </tr>
+                <tr>
+                    <td><label for="r">R:</label></td>
+                    <td><input type="text" id="r" name="r" required value="<%= lastR != 0 ? lastR : "" %>"></td>
+                </tr>
+                <tr>
+                    <td colspan="2"><input type="button" value="Check" onclick="submitForm()"></td>
+                </tr>
+            </table>
+        </form>
+        <button id="clear-button">Очистить все</button>
+    </div>
+
+    <div class="result-container">
+        <h2>Results</h2>
+        <table id="results">
+            <tr>
+                <th>X</th>
+                <th>Y</th>
+                <th>R</th>
+                <th>Result</th>
+                <th>Timestamp</th>
+                <th>Execution Time (ms)</th>
+            </tr>
+            <%
+                if (results != null && !results.isEmpty()) {
+                    for (Result res : results) {
+            %>
+            <tr>
+                <td><%= res.getX() %></td>
+                <td><%= res.getY() %></td>
+                <td><%= res.getR() %></td>
+                <td><%= res.isHit() ? "Попадание" : "Промах" %></td>
+                <td><%= res.getCurrentTime() %></td>
+                <td><%= res.getExecutionTime() %></td>
+            </tr>
+            <%
+                    }
+                }
+            %>
+        </table>
+    </div>
+</div>
+
+<script>
+    const results = <%
+        ResultBean resultBeanJson = (ResultBean) session.getAttribute("resultBean");
+        if (resultBeanJson != null && resultBeanJson.getResults() != null) {
+            out.print(new Gson().toJson(resultBeanJson.getResults()));
+        } else {
+            out.print("[]");
+        }
+    %>;
+</script>
+<script>
+    const contextPath = '<%= request.getContextPath() %>';
+</script>
+<script src="<%= request.getContextPath() %>/script.js"></script>
+</body>
+</html>
diff --git a/src/main/webapp/result.jsp b/src/main/webapp/result.jsp
new file mode 100644
index 0000000..85d14ba
--- /dev/null
+++ b/src/main/webapp/result.jsp
@@ -0,0 +1,60 @@
+<%@ page contentType="text/html;charset=UTF-8" language="java" %>
+<%@ page import="java.util.List"%>
+<%@ page import="ru.akarpov.web2.Result"%>
+<%@ page import="ru.akarpov.web2.ResultBean"%>
+<!DOCTYPE html>
+<html lang="ru">
+<head>
+    <meta charset="UTF-8">
+    <title>Результаты проверки</title>
+    <link rel="stylesheet" href="<%= request.getContextPath() %>/styles.css">
+</head>
+<body>
+<h1>Результаты проверки</h1>
+<table border="1">
+    <tr>
+        <th>X</th>
+        <th>Y</th>
+        <th>R</th>
+        <th>Результат</th>
+        <th>Время</th>
+        <th>Время выполнения (мс)</th>
+    </tr>
+    <%
+        // Retrieve the ResultBean from the session
+        ResultBean resultBean = (ResultBean) session.getAttribute("resultBean");
+        if (resultBean != null) {
+            List<Result> results = resultBean.getResults();
+            if (results != null && !results.isEmpty()) {
+                // Display all results
+                for (Result res : results) {
+    %>
+    <tr>
+        <td><%= res.getX() %></td>
+        <td><%= res.getY() %></td>
+        <td><%= res.getR() %></td>
+        <td><%= res.isHit() ? "Попадание" : "Промах" %></td>
+        <td><%= res.getCurrentTime() %></td>
+        <td><%= res.getExecutionTime() %></td>
+    </tr>
+    <%
+        }
+    } else {
+    %>
+    <tr>
+        <td colspan="6">No results found.</td>
+    </tr>
+    <%
+        }
+    } else {
+    %>
+    <tr>
+        <td colspan="6">No results found.</td>
+    </tr>
+    <%
+        }
+    %>
+</table>
+<p><a href="<%= request.getContextPath() %>/controller">Вернуться к форме</a></p>
+</body>
+</html>
diff --git a/src/main/webapp/script.js b/src/main/webapp/script.js
new file mode 100644
index 0000000..66f215d
--- /dev/null
+++ b/src/main/webapp/script.js
@@ -0,0 +1,282 @@
+function submitForm() {
+    console.log('submitForm called');
+    const xElements = document.getElementsByName('x');
+    const y = document.getElementById('y').value.trim();
+    const r = document.getElementById('r').value.trim();
+
+    let xSelected = false;
+    for (let i = 0; i < xElements.length; i++) {
+        if (xElements[i].checked) {
+            xSelected = true;
+            break;
+        }
+    }
+
+    if (!xSelected) {
+        alert("Пожалуйста, выберите хотя бы одно значение X.");
+        return;
+    }
+
+    if (!validateInput(y, r)) {
+        alert("Некорректные данные для Y или R.");
+        return;
+    }
+
+    document.getElementById('point-form').submit();
+}
+
+function validateInput(y, r) {
+    const yValue = parseFloat(y.replace(',', '.'));
+    const rValue = parseFloat(r.replace(',', '.'));
+
+    if (isNaN(yValue) || isNaN(rValue)) return false;
+    if (yValue < -3 || yValue > 5) return false; // Include boundaries
+    if (rValue < 2 || rValue > 5) return false;  // Include boundaries
+    return true;
+}
+
+function drawGraph(r) {
+    if (isNaN(r) || r < 2 || r > 5) {
+        r = 2;
+    }
+
+    try {
+        const canvas = document.getElementById('canvas');
+        const ctx = canvas.getContext('2d');
+
+        // Ensure the canvas is properly initialized
+        if (!canvas || !ctx) {
+            console.error('Canvas or context not found.');
+            return;
+        }
+
+        const width = canvas.width;
+        const height = canvas.height;
+        const centerX = width / 2;
+        const centerY = height / 2;
+        const scale = (width / 2 - 40) / r;
+
+        // Clear the canvas before drawing
+        ctx.clearRect(0, 0, width, height);
+
+        // Draw the area (shaded region)
+        ctx.fillStyle = 'rgba(0, 0, 255, 0.3)';
+
+        // Triangle (+Y -X quadrant)
+        ctx.beginPath();
+        ctx.moveTo(centerX, centerY);
+        ctx.lineTo(centerX - r * scale, centerY);
+        ctx.lineTo(centerX, centerY - (r / 2) * scale);
+        ctx.closePath();
+        ctx.fill();
+
+        // Quarter Circle (+Y +X quadrant)
+        ctx.beginPath();
+        ctx.moveTo(centerX, centerY);
+        ctx.arc(centerX, centerY, r * scale, -Math.PI / 2, 0, false);
+        ctx.closePath();
+        ctx.fill();
+
+        // Rectangle (-Y +X quadrant)
+        ctx.fillRect(centerX, centerY, r * scale, (r / 2) * scale);
+
+        // Draw axes
+        ctx.strokeStyle = 'black';
+        ctx.lineWidth = 1;
+        ctx.beginPath();
+        // X-axis
+        ctx.moveTo(0, centerY);
+        ctx.lineTo(width, centerY);
+        // Y-axis
+        ctx.moveTo(centerX, 0);
+        ctx.lineTo(centerX, height);
+        ctx.stroke();
+
+        // Draw arrows
+        ctx.beginPath();
+        // X-axis arrow
+        ctx.moveTo(width - 10, centerY - 5);
+        ctx.lineTo(width, centerY);
+        ctx.lineTo(width - 10, centerY + 5);
+        // Y-axis arrow
+        ctx.moveTo(centerX - 5, 10);
+        ctx.lineTo(centerX, 0);
+        ctx.lineTo(centerX + 5, 10);
+        ctx.stroke();
+
+        // Draw labels
+        ctx.fillStyle = 'black';
+        ctx.font = '12px Arial';
+
+        // Labels for X-axis
+        ctx.fillText('X', width - 15, centerY - 10);
+        ctx.fillText('-R', centerX - r * scale - 10, centerY + 15);
+        ctx.fillText('-R/2', centerX - (r / 2) * scale - 15, centerY + 15);
+        ctx.fillText('R/2', centerX + (r / 2) * scale - 5, centerY + 15);
+        ctx.fillText('R', centerX + r * scale - 5, centerY + 15);
+
+        // Labels for Y-axis
+        ctx.fillText('Y', centerX + 10, 15);
+        ctx.fillText('R', centerX + 5, centerY - r * scale + 5);
+        ctx.fillText('R/2', centerX + 5, centerY - (r / 2) * scale + 5);
+        ctx.fillText('-R/2', centerX + 5, centerY + (r / 2) * scale + 5);
+        ctx.fillText('-R', centerX + 5, centerY + r * scale + 5);
+
+        // Draw tick marks
+        ctx.beginPath();
+        // X-axis ticks
+        ctx.moveTo(centerX - r * scale, centerY - 5);
+        ctx.lineTo(centerX - r * scale, centerY + 5);
+        ctx.moveTo(centerX - (r / 2) * scale, centerY - 5);
+        ctx.lineTo(centerX - (r / 2) * scale, centerY + 5);
+        ctx.moveTo(centerX + (r / 2) * scale, centerY - 5);
+        ctx.lineTo(centerX + (r / 2) * scale, centerY + 5);
+        ctx.moveTo(centerX + r * scale, centerY - 5);
+        ctx.lineTo(centerX + r * scale, centerY + 5);
+
+        // Y-axis ticks
+        ctx.moveTo(centerX - 5, centerY - r * scale);
+        ctx.lineTo(centerX + 5, centerY - r * scale);
+        ctx.moveTo(centerX - 5, centerY - (r / 2) * scale);
+        ctx.lineTo(centerX + 5, centerY - (r / 2) * scale);
+        ctx.moveTo(centerX - 5, centerY + (r / 2) * scale);
+        ctx.lineTo(centerX + 5, centerY + (r / 2) * scale);
+        ctx.moveTo(centerX - 5, centerY + r * scale);
+        ctx.lineTo(centerX + 5, centerY + r * scale);
+
+        ctx.stroke();
+    } catch (e) {
+        console.error('Error in drawGraph:', e);
+    }
+}
+
+function drawPoints(results, currentR) {
+    try {
+        const canvas = document.getElementById('canvas');
+        const ctx = canvas.getContext('2d');
+
+        const width = canvas.width;
+        const height = canvas.height;
+        const centerX = width / 2;
+        const centerY = height / 2;
+        const scale = (width / 2 - 40) / currentR;
+
+        results.forEach(result => {
+            const x = parseFloat(result.x);
+            const y = parseFloat(result.y);
+            const pointR = parseFloat(result.r);
+            const hit = result.hit;
+
+            if (pointR === 0) return;
+
+            const scaleFactor = scale * (currentR / pointR);
+
+            const canvasX = centerX + x * scaleFactor;
+            const canvasY = centerY - y * scaleFactor;
+
+            ctx.beginPath();
+            ctx.arc(canvasX, canvasY, 3, 0, 2 * Math.PI);
+            ctx.fillStyle = hit ? 'green' : 'red'; // Green if hit, red if miss
+            ctx.fill();
+        });
+    } catch (e) {
+        console.error('Error in drawPoints:', e);
+    }
+}
+
+function updateGraph() {
+    try {
+        console.log('updateGraph called');
+        let rInput = document.getElementById('r').value.trim();
+        if (rInput === '') {
+            console.log('R is empty, skipping graph update.');
+            return;
+        }
+        let rValue = parseFloat(rInput);
+        if (isNaN(rValue) || rValue < 2 || rValue > 5) {
+            console.log('Invalid R value, using default R = 2');
+            rValue = 2; // Default R value
+        }
+        drawGraph(rValue);
+        if (typeof results !== 'undefined' && results.length > 0) {
+            drawPoints(results, rValue);
+        }
+    } catch (e) {
+        console.error('Error in updateGraph:', e);
+    }
+}
+
+let debounceTimer;
+window.onload = function() {
+    console.log('window.onload called');
+    updateGraph();
+
+    const canvas = document.getElementById('canvas');
+    canvas.addEventListener('click', function(event) {
+        console.log('Canvas clicked');
+        let rValue = parseFloat(document.getElementById('r').value.trim());
+        if (isNaN(rValue) || rValue < 2 || rValue > 5) {
+            alert("Введите корректное значение R перед выбором точки на графике.");
+            return;
+        }
+
+        const rect = canvas.getBoundingClientRect();
+        const xClick = event.clientX - rect.left;
+        const yClick = event.clientY - rect.top;
+
+        const width = canvas.width;
+        const height = canvas.height;
+        const centerX = width / 2;
+        const centerY = height / 2;
+        const scale = (width / 2 - 40) / rValue;
+
+        const x = (xClick - centerX) / scale;
+        const y = (centerY - yClick) / scale;
+
+        const xRounded = Math.round(x);
+        const yRounded = Math.round(y * 1000) / 1000;
+
+        const xElements = document.getElementsByName('x');
+        for (let i = 0; i < xElements.length; i++) {
+            xElements[i].checked = false;
+        }
+        let closestX = Math.max(-4, Math.min(4, xRounded));
+        for (let i = 0; i < xElements.length; i++) {
+            if (parseInt(xElements[i].value) === closestX) {
+                xElements[i].checked = true;
+                break;
+            }
+        }
+
+        document.getElementById('y').value = yRounded;
+        document.getElementById('r').value = rValue;
+
+        submitForm();
+    });
+
+    document.getElementById('r').addEventListener('input', function() {
+        clearTimeout(debounceTimer);
+        debounceTimer = setTimeout(function() {
+            console.log('R input changed');
+            updateGraph();
+        }, 300);
+    });
+
+    document.getElementById('clear-button').addEventListener('click', function() {
+        console.log('Clear button clicked');
+        fetch(contextPath + '/clear', { method: 'POST', credentials: 'include' })
+            .then(() => {
+                document.getElementById('results').innerHTML = `
+                <tr>
+                    <th>X</th>
+                    <th>Y</th>
+                    <th>R</th>
+                    <th>Result</th>
+                    <th>Timestamp</th>
+                    <th>Execution Time (ms)</th>
+                </tr>`;
+                results = [];
+                updateGraph();
+            });
+    });
+};
diff --git a/src/main/webapp/styles.css b/src/main/webapp/styles.css
new file mode 100644
index 0000000..9f6dd80
--- /dev/null
+++ b/src/main/webapp/styles.css
@@ -0,0 +1,54 @@
+body {
+    font-family: Arial, sans-serif;
+    background-color: #f0f0f0;
+}
+
+.header {
+    background-color: #333;
+    color: white;
+    text-align: center;
+    padding: 1em;
+    font-family: cursive;
+}
+
+.container {
+    display: flex;
+    justify-content: space-around;
+    margin-top: 2em;
+}
+
+.form-container, .result-container {
+    background-color: white;
+    padding: 2em;
+    border-radius: 8px;
+    box-shadow: 0 0 10px rgba(0,0,0,0.1);
+}
+
+table {
+    border-collapse: collapse;
+    width: 100%;
+}
+
+th, td {
+    border: 1px solid #ddd;
+    padding: 8px;
+    text-align: left;
+}
+
+th {
+    background-color: #f2f2f2;
+}
+
+input[type="text"], input[type="button"] {
+    margin: 10px 0;
+    padding: 5px;
+}
+
+#canvas {
+    border: 1px solid #000;
+    margin-bottom: 20px;
+}
+
+input[type="radio"] {
+    margin-right: 10px;
+}
diff --git a/wildfly/.galleon/hashes/appclient/configuration/hashes b/wildfly/.galleon/hashes/appclient/configuration/hashes
new file mode 100644
index 0000000..921c8ad
--- /dev/null
+++ b/wildfly/.galleon/hashes/appclient/configuration/hashes
@@ -0,0 +1,4 @@
+appclient.xml
+532495c876209d571f74d5a3300d22536f9746a1
+logging.properties
+f23d8fbead4340131038bf8f07af607f9b73134b
diff --git a/wildfly/.galleon/hashes/docs/contrib/scripts/hashes b/wildfly/.galleon/hashes/docs/contrib/scripts/hashes
new file mode 100644
index 0000000..c2a772c
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/contrib/scripts/hashes
@@ -0,0 +1,2 @@
+README.md
+a503e1f53e876dff2dabbb5e0dfccd4c9b07192f
diff --git a/wildfly/.galleon/hashes/docs/contrib/scripts/init.d/hashes b/wildfly/.galleon/hashes/docs/contrib/scripts/init.d/hashes
new file mode 100644
index 0000000..c3cdcee
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/contrib/scripts/init.d/hashes
@@ -0,0 +1,6 @@
+wildfly-init-debian.sh
+fa501ea0a2a20b75eb537c3ba0f56c8be6dbd6a3
+wildfly-init-redhat.sh
+62b0e3f39cf470646f4ac06a2e9e903f95bb5054
+wildfly.conf
+c9137d05357cfb2c33feb3b01ae666d254057623
diff --git a/wildfly/.galleon/hashes/docs/contrib/scripts/service/amd64/hashes b/wildfly/.galleon/hashes/docs/contrib/scripts/service/amd64/hashes
new file mode 100644
index 0000000..169c0b3
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/contrib/scripts/service/amd64/hashes
@@ -0,0 +1,2 @@
+wildfly-service.exe
+b62a0082e9780327ff7681b9c05da2d706476e42
diff --git a/wildfly/.galleon/hashes/docs/contrib/scripts/service/hashes b/wildfly/.galleon/hashes/docs/contrib/scripts/service/hashes
new file mode 100644
index 0000000..e69d351
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/contrib/scripts/service/hashes
@@ -0,0 +1,6 @@
+service.bat
+d849c6b71473cb85d5079cfc5eb2bc6735ed5650
+wildfly-mgr.exe
+39cd9893df296428257366dce25110f0eff4c07b
+wildfly-service.exe
+6e4a3a72fb9bd66b6f6755ea3c1fa922a3073453
diff --git a/wildfly/.galleon/hashes/docs/contrib/scripts/systemd/hashes b/wildfly/.galleon/hashes/docs/contrib/scripts/systemd/hashes
new file mode 100644
index 0000000..5098d3e
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/contrib/scripts/systemd/hashes
@@ -0,0 +1,8 @@
+README
+ea7d8cf2c8a88751a1681275d4d7e3191140647d
+launch.sh
+296ca556f9627ca313528d8e53a400d42241b5e5
+wildfly.conf
+41f6c8dcfe4fad4aa43f8aed8f1eb78c58ffb71f
+wildfly.service
+152a4416c489fca0f8b6a4b474fc8f7efd484665
diff --git a/wildfly/.galleon/hashes/docs/examples/configs/hashes b/wildfly/.galleon/hashes/docs/examples/configs/hashes
new file mode 100644
index 0000000..afadac2
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/examples/configs/hashes
@@ -0,0 +1,30 @@
+domain-ec2.xml
+e96f4a06598c812dae96ae3564aa0b9d9fb7d0fe
+standalone-activemq-colocated.xml
+5f1570cf40a906228aac7b72ae6516a13b8cb356
+standalone-azure-full-ha.xml
+016f30a17a8d718917bbd334a2e2020eb2ca280c
+standalone-azure-ha.xml
+d53551afe579e2b698d1f00bee968c41838b358c
+standalone-core-microprofile.xml
+5fbd781fee684f74f9d06e9504e087ee117df40d
+standalone-core.xml
+6e354b6db6b11e5458606da11c85dfe425d48bc7
+standalone-ec2-full-ha.xml
+68e8eacbcc8fee7ab4a5df643a66980d77e899ee
+standalone-ec2-ha.xml
+b60e10d467d12b629aaefb323b9da3dab2ea04fe
+standalone-genericjms.xml
+87b88458623939078129c148d74328cfef6e0cd3
+standalone-gossip-full-ha.xml
+9d1f0893b328d55a882c277e8be607cd12ff2a83
+standalone-gossip-ha.xml
+fea615fa07d0914d884af32be1eadb05f5eef35a
+standalone-jts.xml
+17587b6dece2646dacce5b36fa023b5a2eac324f
+standalone-minimalistic.xml
+5c218b78a243c0ccd02b0bbce90a946a0981bf8a
+standalone-rts.xml
+34dc75ebc42e844df9f23be9775d614b1a763b25
+standalone-xts.xml
+f2861b8fdd8d5654dfdcddc5c6c678deb5e8476a
diff --git a/wildfly/.galleon/hashes/docs/examples/hashes b/wildfly/.galleon/hashes/docs/examples/hashes
new file mode 100644
index 0000000..2c37b8b
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/examples/hashes
@@ -0,0 +1,2 @@
+enable-microprofile.cli
+2dd0552bcfc0007fd139808b3fc99fc741f17de1
diff --git a/wildfly/.galleon/hashes/docs/licenses/hashes b/wildfly/.galleon/hashes/docs/licenses/hashes
new file mode 100644
index 0000000..43a187e
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/licenses/hashes
@@ -0,0 +1,56 @@
+MIT_CONTRIBUTORS.txt
+c40dbd2dbcd064fd5e2e6e48e2c986ed9db9f1f1
+apache license 2.0.txt
+2b8b815229aa8a61e483fb4ba0588b8b6c491890
+bsd 2-clause simplified license.html
+257a88e5266e7383d43e66a62b25d14f8e9d5731
+bsd 3-clause new or revised license.html
+ea037166f736172dfcb91ab34e211b325c787823
+common public license 1.0.txt
+7cdb9c36e1d419e07f88628cd016c0481796b89e
+creative commons attribution 2.5.html
+a3f15d06f44729420d7ab2d87ca9bee7cf2820fe
+eclipse distribution license, version 1.0.txt
+d520e5d0b7b10f2d36f17ba00b7ea38704f3eed7
+eclipse public license 1.0.txt
+77a188d578cd71a45134542ea192f93064d1ebf1
+eclipse public license 2.0.txt
+b086d72d0fe9af38418dab524fe76eea3cb1eec3
+fsf all permissive license.html
+fcf4e258a3d90869c3a2e7fc55154559318b8eb4
+gnu general public license v2.0 only, with classpath exception.txt
+cef61f92dbf47fb27b16d36a4146ec7df7dced6d
+gnu lesser general public license v2.1 only.txt
+01a6b4bf79aca9b556822601186afab86e8c4fbf
+gnu lesser general public license v2.1 or later.txt
+46dee26f31cce329fa13eacb74f8ac5e52723380
+gnu lesser general public license v3.0 only.txt
+e7d563f52bf5295e6dba1d67ac23e9f6a160fab9
+gnu lesser general public license v3.0 or later.txt
+e7d563f52bf5295e6dba1d67ac23e9f6a160fab9
+gnu library general public license v2 only.txt
+44f7289042b71631acac29b2f143330d2da2479e
+indiana university extreme lab software license 1.1.1.html
+451bc145d38a999eab098ca1e10ef74a5db08654
+licenses.css
+b4bdad965c7c9487b8390ea9d910df591b62a680
+licenses.html
+cb41c851cf6d7c9ec4a074d67059f48aa8942d5c
+licenses.xml
+7cfe1231224cc32de446afdd5fb768b8f791fae4
+licenses.xsl
+bdf6fbb28dce0e2eed2a2bf1a3e4e030f03536b2
+mit license.txt
+19eff4fc59155a9343582148816eeb9ffb244279
+mit-0.html
+50ac12745b7d3674089f3dc1cf326ee0365ef249
+mozilla public license 2.0.html
+c541f06ec7085d6074c6599f38b11ae4a2a31050
+wildfly-ee-feature-pack-licenses.html
+f2d63b2af07dc5331748a92ffb7e136c6eedb829
+wildfly-ee-feature-pack-licenses.xml
+1b5777ba1ae36633ad89d9111eae0d6775e0cb5e
+wildfly-feature-pack-licenses.html
+2942724a34de6587b489a4893efb6bb89e972aae
+wildfly-feature-pack-licenses.xml
+51966be64e342f872f2e8c7b06b12ece79bc544e
diff --git a/wildfly/.galleon/hashes/docs/schema/hashes b/wildfly/.galleon/hashes/docs/schema/hashes
new file mode 100644
index 0000000..d4e5501
--- /dev/null
+++ b/wildfly/.galleon/hashes/docs/schema/hashes
@@ -0,0 +1,1072 @@
+README.md
+77268b5fd0fe2426197d12c31ee44849483050b3
+application-client_10.xsd
+1bb9dd91fb6c6fb902fd9dba68adec29d60ce6e2
+application-client_6.xsd
+bad89cdc3e2b3ebc6c2156ebf7c5c10185a12f60
+application-client_7.xsd
+48b932239f5a9247b8b554d79055a816ad3a296d
+application-client_8.xsd
+a6dfb639df159e616eacd32be7af31531a0376c1
+application-client_9.xsd
+c27a7ced1520dcfd1d8c1afbff4ea1b428b4981b
+application_10.xsd
+702ba2c827517b30e9ad4b74b885fe2b4d831711
+application_1_4.xsd
+2a96e3a967905f216b6710ca679bfc91d7c87ac5
+application_5.xsd
+5d4182d6eed0376392af24cd4a14dd0e8e2fa512
+application_6.xsd
+be48d4d6edbf0203c2067cb16080a123f0d4704d
+application_7.xsd
+e0af44c54ab0e720276345e21fae77c6a0ec3b45
+application_8.xsd
+973db36108b53b5aba34dabd7419c19e5e5dce32
+application_9.xsd
+28a2d6d688fea53eccd595e685287b2637f4b176
+batch-jberet_1_0.xsd
+26c7570896e441f355bf9998e9cb3f951f65f3a4
+discovery-1_0.xsd
+8d1ac9771e7aae82f90ef779e3441bc15191f76b
+distributable-web_1_0.xsd
+6bbe68c68f337dda02181905d007a8ddd4c9f264
+distributable-web_2_0.xsd
+e82495fbd6351b9184d9f648198b11d9fc1404e7
+distributable-web_3_0.xsd
+b1fd8981b9bb4ca2378021f941706ea328816a85
+distributable-web_4_0.xsd
+84442d54f65fd6a859c3be02a479cb1ff4f4f83a
+ejb-jar_2_1.xsd
+d5a9ecf8a76b9dc04b4f1b809e0472cbfad9131d
+ejb-jar_3_0.xsd
+a2cc8465692b2c0ccde3c1b15cb0fadc949d95a2
+ejb-jar_3_1.xsd
+abd5440d0e67decf4c9af8fa9af76c3e0b04fe70
+ejb-jar_3_2.xsd
+c513e1b1aaf7d742e0cc5633716b2ad85bf785bc
+ejb-jar_4_0.xsd
+3eae1f806455e92a5f6fc53a5bfee9e271cd1626
+elytron-1_0.xsd
+00208af2c0fd20d158c34b07ba2d0fa8ce77df33
+elytron-1_0_1.xsd
+762a1570aaa768e3c5433d002e6d5e18587adb4b
+elytron-client-1_1.xsd
+15231bc6a40a8e88908faf9f816547b8271f2bc2
+elytron-client-1_2.xsd
+cc53bf2390c33f21d399935c67506019278fa89e
+elytron-client-1_3.xsd
+e0b153e97eb22134c0dd6371ab2a02ae34b9bfc8
+elytron-client-1_4.xsd
+08ff7785356903297c0d4ad498b0e9a1cf94752e
+elytron-client-1_5.xsd
+8e895f93828b136632bb0669e7928418e0793882
+elytron-client-1_6.xsd
+069074e8fc0ef6a83050b3bea38c138e161889a5
+elytron-client-1_7.xsd
+0bd4c28e8af73cc7fc15fd09909e8dbcfc1017c1
+elytron-identity-1_1.xsd
+1025bf6ff3ac202fea080e7666c4672a1e86a624
+elytron-identity-1_2.xsd
+b4a4f0a80e2779971757f3f0eed87270a0a16643
+j2ee_1_4.xsd
+b8887ae9d0998d4e651e464741fef381a4dc8252
+j2ee_jaxrpc_mapping_1_1.xsd
+9a7a3b47656509745aa81b27ca78b025776f6b3c
+j2ee_web_services_1_1.xsd
+787ec4b5546017dfe009cb3be345c7fc0d8daa67
+j2ee_web_services_client_1_1.xsd
+19e06c37dc0bbd62d37b14f304d4122df245154e
+jakartaee_10.xsd
+2f9b7686e52ad908dbf37492c9de80df6f868e7e
+jakartaee_9.xsd
+5ca78b7ccdc92425b9c9e836a5e99fe9c612483b
+jakartaee_web_services_2_0.xsd
+a2058dd6fe7d7cb0377e46d35a87c4f45d7a1729
+jakartaee_web_services_client_2_0.xsd
+23b435efceec65145373da4101b5331ddecb7e7c
+jakartaee_web_services_metadata_handler_3_0.xsd
+5b329945c3e47228da0b7fe725d6c7641f17e36a
+java-properties_1_0.xsd
+d7c10d2aa6539679f0d40889536660415442d5af
+javaee_5.xsd
+6596a18fb93c179f7df27f5770b6f8ea2063a45b
+javaee_6.xsd
+4ad44509dadc8ccdad917bcb41c7101ab01adfe9
+javaee_7.xsd
+f7ea0bc24f0d68f30b5ef8b02a202da6bead16f8
+javaee_8.xsd
+8e1a6a067b6e4c8177c9d2a24dd3478029b8d5d4
+javaee_web_services_1_2.xsd
+87bff550e10a003e0594037fc91c85bb49c57940
+javaee_web_services_1_3.xsd
+8cd832fe033c93995a6f4a0aac8e48dee339b6c7
+javaee_web_services_1_4.xsd
+266af274f3326413cab9b4d70abf16f48e6bc198
+javaee_web_services_client_1_2.xsd
+0b3161f8af208d215dfcf063181d43389612e446
+javaee_web_services_client_1_3.xsd
+df12d78d2b0530f0bbefa1094fb28bb086f4c944
+javaee_web_services_client_1_4.xsd
+b92027015b0a6670781ad8031961d0b1a77598a3
+jboss-app_7_0.xsd
+3c2ccad9347413a3a5c49f54ebe15280f1e6488b
+jboss-app_7_1.xsd
+465b8cd42241a9ef8833f41c4c0ebd63abfcf9e4
+jboss-app_8_0.xsd
+5c27acab04d8916c3e66656ffb42fa493492089f
+jboss-app_8_1.xsd
+92559dd56db5df6ba841b914b623c95147cd373b
+jboss-app_9_0.xsd
+ae1732088afe693c3cc03e54b683c485e2ee4d01
+jboss-as-cli_1_0.xsd
+efb1bf90189435d5be8935605da61cc161ba9649
+jboss-as-cli_1_1.xsd
+58185229cfedb328b3bf76ae5fff14af3c6c9a7a
+jboss-as-cli_1_2.xsd
+15ee758313de399dafed586347eb62fd505b0adc
+jboss-as-cli_1_3.xsd
+32ba972e49639b9228c3bebe1a04af05401ff590
+jboss-as-cli_2_0.xsd
+44535c3684b8d17ccc6856aa7c44d904b308b74b
+jboss-as-config_1_7.xsd
+e44f008ffc127cf02fdb010a64707de5e522c6c0
+jboss-as-config_1_8.xsd
+442340095a147db047f2d0992e14ff28babfdc2b
+jboss-as-config_2_0.xsd
+5b8d20fc763f0377e635c29c178f26d8aef90101
+jboss-as-config_2_1.xsd
+2f1847781fa1a31fb6e16e0e39cc508f9a2a6039
+jboss-as-config_2_2.xsd
+14195606bfad631120fc01bc515b1811cbb43eef
+jboss-as-datasources_1_1.xsd
+6a1dbb119803f018d7c345b1898bb83a941deb94
+jboss-as-datasources_1_2.xsd
+d341b05c6bf3da1350571df7dbe6b9695c661364
+jboss-as-deployment-scanner_1_0.xsd
+4428411544dfe23255a997a25a06d9fb90e6ea2d
+jboss-as-deployment-scanner_1_1.xsd
+e77c4c2fbebdd09d89904282b09d3ca2088dfe5d
+jboss-as-deployment-scanner_2_0.xsd
+e564d34438a6ffac3ebd578edb53aede9089c94e
+jboss-as-ee_1_0.xsd
+50ac701da11029a6de19157fa9f33b875f40e058
+jboss-as-ee_1_1.xsd
+a32925c7c5a7908b978f4e81631c323f8bc72ced
+jboss-as-ee_1_2.xsd
+31aa2ca8b4325fdd679a26cbf59a76da1a668cff
+jboss-as-ee_2_0.xsd
+3a0b5507d222816999d63d194c0ddaf9951a67c1
+jboss-as-ee_3_0.xsd
+c5060782ebce144520bcf585bb4af2c44ab4f44c
+jboss-as-ee_4_0.xsd
+89e6c80b5764b4aabb8967bf9796d833dbe0f5af
+jboss-as-ee_5_0.xsd
+ed92a02882f535d1578c488579b528decec7de15
+jboss-as-ee_6_0.xsd
+4787034df1a159544e87161a37504a69a35dae18
+jboss-as-ejb3_1_0.xsd
+3828f309551e6addb2be407e3a12db03b19526b7
+jboss-as-ejb3_1_1.xsd
+49e0e0dc772b0fc159cbc716c546a4e28b79a0b5
+jboss-as-ejb3_1_2.xsd
+a48c9f824669967c17e0c5c4abd00241b32f3551
+jboss-as-ejb3_1_3.xsd
+e3817bfd5ac7f2619b9895c99865eed26303cd2e
+jboss-as-ejb3_1_4.xsd
+c35d2f4ff5b5106a6d199c11afdfd7df4b256358
+jboss-as-ejb3_1_5.xsd
+a9137ac78e6ecfea2d482c82a427eed32944f341
+jboss-as-ejb3_2_0.xsd
+92a3ee13851c10d5f82b4467b63b8bdc5c226682
+jboss-as-iiop-openjdk_1_0.xsd
+11bc8d0bc63e9b7a73968479043f91d634576684
+jboss-as-infinispan_10_0.xsd
+39cb274974983b505569e5ce66b7d4b777b0932a
+jboss-as-infinispan_11_0.xsd
+9d1a25dfcdc461db90876cdfd08256de0a075538
+jboss-as-infinispan_12_0.xsd
+128b2647e4254f67294bfc722f8ccadd5aac83ba
+jboss-as-infinispan_13_0.xsd
+c41cefa49b864b831e60f858d642f93056d5056a
+jboss-as-infinispan_14_0.xsd
+e19d87f8134d79085934bab2eee09c3429f89d45
+jboss-as-infinispan_1_0.xsd
+a59b565fe1506cd846d47fdec8102ab941cb59a5
+jboss-as-infinispan_1_1.xsd
+9d10a0049bc8081f17364f385fff0042c42e20d8
+jboss-as-infinispan_1_2.xsd
+3243ecdc060d0a98c2211bacf04765275f12538c
+jboss-as-infinispan_1_3.xsd
+863e2b6514131a4c97c9f8a8369b07ef59ac6133
+jboss-as-infinispan_1_4.xsd
+5ef5f662e2b26a08ff205869a68e9492f57be926
+jboss-as-infinispan_1_5.xsd
+7a551d8ec437047c30f2dbe5e033516bee9b1a2f
+jboss-as-infinispan_2_0.xsd
+74c82f6493bd10757cbf9672b7ac19b84346b8fc
+jboss-as-infinispan_3_0.xsd
+9ae35ded7fac49895efbe6559f9c8d7ffec7ccea
+jboss-as-infinispan_4_0.xsd
+6e8637649f14022f5ac207554dc5e9ae3f51542a
+jboss-as-infinispan_5_0.xsd
+67228419ac44e407c5caa4211f81bc6ac2a391ca
+jboss-as-infinispan_6_0.xsd
+8e3d07cce7700b6db4a0e82ccaf5e749f4d665ed
+jboss-as-infinispan_7_0.xsd
+ed8af9a9512a41b9ad7f5706facb2b0ed598e465
+jboss-as-infinispan_8_0.xsd
+f28a4ecd2df0e6b0541dc5113faef1853a6bf197
+jboss-as-infinispan_9_0.xsd
+db98b68e0f7c67fcf060cf30db55dd9e971e8ac8
+jboss-as-infinispan_9_1.xsd
+fb859c662d3aea1101aa0420c133e62835430ae5
+jboss-as-jaxrs_1_0.xsd
+593587d97ab040014eef8f37ad7b4bc1822920c9
+jboss-as-jaxrs_2_0.xsd
+84c08156f153715b5b29b6d7a3d8b9b84db637c7
+jboss-as-jaxrs_3_0.xsd
+f175216fac89311ddde8f19ac3f3918c47c047e9
+jboss-as-jca_1_1.xsd
+ee2ccf4967b7ae847ac36250bede0f09a2c5e66b
+jboss-as-jdr_1_0.xsd
+cbacd371febb93f0952b238d1eecb4e7bdb57dca
+jboss-as-jgroups_1_0.xsd
+b14802c4cba0e685dfe289ee7af4e61140a7a8cc
+jboss-as-jgroups_1_1.xsd
+507fa2b90f13b42315ae3969c63175c79493aab7
+jboss-as-jgroups_2_0.xsd
+e743abb55ed5ccf4f554abec4dc2c92937e88992
+jboss-as-jgroups_3_0.xsd
+d3188fc12db1305c87d497fc9f0b57a192be064b
+jboss-as-jgroups_4_0.xsd
+868f6248a2a1ef110ccabbb836d6af728d7d135c
+jboss-as-jgroups_5_0.xsd
+22fb0c05205d5b37b39965332f3e858fd0a5bf2b
+jboss-as-jgroups_6_0.xsd
+c09e97590630fdaa8ad2665fdb554053334b164e
+jboss-as-jgroups_7_0.xsd
+0d8e5d2723d4cd4f01793e27e046f3380fd7efe7
+jboss-as-jgroups_8_0.xsd
+98cdba4a16264bad655589c23c61ac112d480601
+jboss-as-jgroups_9_0.xsd
+08c20269d1c82336cec426c1d7a150d6387a9b10
+jboss-as-jmx_1_0.xsd
+fe53df5cd74afb4c41e92ac8fa45a6d99b5dc25b
+jboss-as-jmx_1_1.xsd
+661eea4053d426ce0326e031c8d7409e343d6d56
+jboss-as-jmx_1_2.xsd
+234abdbb9a166a9b9ae93282f261674395091d47
+jboss-as-jmx_1_3.xsd
+2fe7bca846949b6be7d0e0df6629af9a0ed5c422
+jboss-as-jpa_1_0.xsd
+e1078b433d320683e7a063e0e2ba60cd1ab0b8aa
+jboss-as-jpa_1_1.xsd
+7ca7123c878c743504cb910b766561f93e68bbde
+jboss-as-jsf_1_0.xsd
+8ddad5bdab5985623da903c5face996cb01d27d3
+jboss-as-jsf_1_1.xsd
+d121d9972229cba0d8c2bb85b53a4b97a9f958b1
+jboss-as-jsr77_1_0.xsd
+0c45c45c63671e4dcd64d33e12a252667fa995cd
+jboss-as-logging_1_0.xsd
+5e2157061da67e43904157c1179474d964e1cb14
+jboss-as-logging_1_1.xsd
+cb2d7d086179a4ac947b0aea08498106ad505402
+jboss-as-logging_1_2.xsd
+4bfe2825fb82a2544b745830190aec02d74c39dc
+jboss-as-logging_1_3.xsd
+765e28782aa95ccecf146f3958ec1ff2b122e006
+jboss-as-logging_1_4.xsd
+b3f48cf6813939f712d77ca5bb59a96d74b7ffc6
+jboss-as-logging_1_5.xsd
+33c13d259cebff1ca21ea0673a84adf47c31758a
+jboss-as-logging_2_0.xsd
+726c25351d3c3bdf96f90d5cee7d72e61b16fef1
+jboss-as-logging_3_0.xsd
+ad823081ef784c94339740e8698888363f0398a4
+jboss-as-logging_4_0.xsd
+9c8b7d0d1a9a31c382832574be132534ddc3638e
+jboss-as-logging_5_0.xsd
+fe0850b6bdd53d3059535a88969ca1aeb0db1fd4
+jboss-as-logging_6_0.xsd
+568075cc5192f16d9f56b06065f7073f06aeaf90
+jboss-as-logging_7_0.xsd
+bce3c86077c3bf34ace43ce325320567ebdd4ad8
+jboss-as-logging_8_0.xsd
+12482f4c0929faf1b95a33c3d923fd937478fb08
+jboss-as-mail_1_0.xsd
+8ba25ae2853d547a60903b02018061d896eace98
+jboss-as-mail_1_1.xsd
+fd7e0b7f086868fcddf82ffdc5a5705015d213d5
+jboss-as-mail_1_2.xsd
+425ab77c9c7d747f6cafbc5df83290a177df3464
+jboss-as-mod-cluster_1_0.xsd
+0b76e8b763e0dbcfc6906015e10efd6f2be836d3
+jboss-as-mod-cluster_1_1.xsd
+4f3c7a92cba3f4d626c56372d1b3ad77672f116e
+jboss-as-mod-cluster_1_2.xsd
+8cceb83cf58ea75515aff5fc41db7105aa1cddf3
+jboss-as-mod-cluster_2_0.xsd
+9a86005bf10887967e454364736874acfa325e8c
+jboss-as-mod-cluster_3_0.xsd
+20b8f4eade6fd119f3ea20d634e28d5ec23e97b9
+jboss-as-mod-cluster_4_0.xsd
+400216d3cc5ca7b8456205ac68a34c9aa0fa1844
+jboss-as-mod-cluster_5_0.xsd
+589ea023374d01f1f80b861516025ac1311858cf
+jboss-as-mod-cluster_6_0.xsd
+13a7f277556f6f9a3504f3f58aa0dfcfe33bf5f6
+jboss-as-naming_1_0.xsd
+4ed3ea7796e8eb7c0a7cd55c43d0765117d1d5a5
+jboss-as-naming_1_1.xsd
+d103c230dad45a113e133a2bac739fe8cbdf6d36
+jboss-as-naming_1_2.xsd
+e1fe7dc996d491478a1c4833fd7a8c762c0e4fca
+jboss-as-naming_1_3.xsd
+dc017b8b57445c0f68705ddc43317ed24169bec1
+jboss-as-naming_1_4.xsd
+ff76cab8ff0852b1e9c0391706da255836c994b8
+jboss-as-naming_2_0.xsd
+25d18a8b04efe24390d1f9a4d4e9537bf495eb6c
+jboss-as-pojo_1_0.xsd
+b0551caf2cd940a224f9be1c4922ec26d7b7277b
+jboss-as-remoting_1_0.xsd
+7fcce646b06b3b3f75da867be23098ee09a43895
+jboss-as-remoting_1_1.xsd
+43f777f0a20307e494adbc773f193fddf9dae5cc
+jboss-as-remoting_1_2.xsd
+2ee96d02fa2ca718f7891599292c7a9b01d5a90d
+jboss-as-resource-adapters_1_0.xsd
+981aee4591b25081147d7e6dbc1a18bb762de362
+jboss-as-resource-adapters_1_1.xsd
+d20babab2aabc8ec579eee7f4b38130c1e303d17
+jboss-as-sar_1_0.xsd
+b02386dcc42d69518569f83228a6f4bbd7a5e00f
+jboss-as-security_1_0.xsd
+0ba6cdc5b88d5e3e0d6f51163f46ed807e96ec18
+jboss-as-security_1_1.xsd
+660b291ab4c2f6722cd0248c0fe912b16f455dd5
+jboss-as-security_1_2.xsd
+becc853521aecbbf57dd0246c5f21a3085157efe
+jboss-as-threads_1_0.xsd
+aecee97f20d7bef3587a25b5d9caad220c5fff13
+jboss-as-threads_1_1.xsd
+4f02e71bb0fa3506fa6c29538a9d121c8991c09b
+jboss-as-txn_1_0.xsd
+4bb7d57d6edfe761bc2d60a56f1241d69cdbd1ac
+jboss-as-txn_1_1.xsd
+aff481b3be1f2eeebec32cd1dbe218f17c0f1be1
+jboss-as-txn_1_2.xsd
+281f5c1bc29cf938ca692c51750cbe2445e02526
+jboss-as-txn_1_3.xsd
+e45fc4282848b4f8dc142a5d7fde0041ca06cc1f
+jboss-as-txn_1_4.xsd
+a4a37187e6de08bb511bd0f38bdf9e5909d099f1
+jboss-as-txn_1_5.xsd
+e813fb41c820d6c1d6c6da08b07a1c82c49c260f
+jboss-as-txn_2_0.xsd
+59eb8c25f0f818b4042c84cdb2f098008fa7a564
+jboss-as-webservices_1_0.xsd
+4ca1773561ae64b01c8ea66c2db2614960616eae
+jboss-as-webservices_1_1.xsd
+a1b4db27f20628700886c00bb57442dd4b2bb441
+jboss-as-webservices_1_2.xsd
+8f2205974c45a410f4339899c716acfd539560f9
+jboss-as-webservices_2_0.xsd
+1d91be09bda64f8a42840ca96c91ec889d1be524
+jboss-as-weld_1_0.xsd
+63ff4b6e79f750334dd5135ea09c01bfd51701fa
+jboss-as-weld_2_0.xsd
+a35a6ecc2a18002fdc0f03d9f5db570a5118fe4d
+jboss-as-weld_3_0.xsd
+6407bdd424c14a899a1f7c50b15c8f69c6f0bee5
+jboss-as-weld_4_0.xsd
+fc0363ab96608f3557e4221e815d4fc89981be39
+jboss-as-weld_5_0.xsd
+ebc8b7488aec1de94a5edcd8fb0cd35231b274e4
+jboss-as-xts_1_0.xsd
+dae13f22fd0b8cb0feec517844559473c6aabd82
+jboss-as-xts_2_0.xsd
+2c68e8bb1b8becc2f453e8265f69d3e4fa660ae2
+jboss-as-xts_3_0.xsd
+d9600d8e1fb00cd8580179ddf95594860bf929e7
+jboss-client_6_0.xsd
+76b1a9811d74cf342efdf0a6da24b9d157a2462e
+jboss-client_8_0.xsd
+f6fbe37b13f9ebf1732110112dad062546f99be4
+jboss-client_8_1.xsd
+fd2bb6e40179348adaa1d11eadfe027c6b949962
+jboss-client_9_0.xsd
+318431c528255ac1673e6b390e9ce2a38dfc3d8f
+jboss-common_5_1.xsd
+16750029d41941f49fe4ae4bce9b6872a3e545b3
+jboss-common_6_0.xsd
+f3053a95173774a5aa3f71d1bbd1cdfdba252f73
+jboss-common_7_0.xsd
+b48d6db12787d55edca14686d63912903a05f32a
+jboss-common_7_1.xsd
+788011a7a2f121915f780111e4369322cdd61819
+jboss-common_8_0.xsd
+e8a89d3500c7362a44533d864ccba06fa779b793
+jboss-common_8_1.xsd
+845af68567662671faa7fe79e99deafac03aef70
+jboss-common_9_0.xsd
+31e702ab81eb5e1dde3ecdd63733d6008b6c5191
+jboss-deployment-dependencies-1_0.xsd
+a0f896292397bcf173bca7fadc653b8180125d5f
+jboss-deployment-structure-1_0.xsd
+0f4e155321f186df2a30166c14da040b4791467e
+jboss-deployment-structure-1_1.xsd
+32de0ebb1b6805a9ede42c1469273118bad6d9bb
+jboss-deployment-structure-1_2.xsd
+f856ecfe691dc28a207175046a65e727c9969329
+jboss-deployment-structure-1_3.xsd
+e4362ce61cd52e9b2f9bd6237e30a2db759a3e28
+jboss-ejb-cache_1_0.xsd
+690e929b91df9f8676fee04c9dccd6da2c953706
+jboss-ejb-cache_2_0.xsd
+c83aba51007b1db8a99f31bee43e1129a5a69607
+jboss-ejb-client_1_0.xsd
+66eddbcc5d0d50c45da7ae0ecc1630a386950aae
+jboss-ejb-client_1_1.xsd
+41cd8683c7d672ffdd32aa8c45c0f09cdc8e9f26
+jboss-ejb-client_1_2.xsd
+425d5ba17ab71e3954da0143ff028d8346556cc6
+jboss-ejb-client_1_3.xsd
+54238166142d78a29c4192a94a96a09c4f66649b
+jboss-ejb-client_1_4.xsd
+5a2053350879625c752488d8fe0606ef639a3be0
+jboss-ejb-client_1_5.xsd
+a12dff73ae40b9b8e5a14c5e2c510f595825397d
+jboss-ejb-clustering_1_1.xsd
+957de001e2bc61137d0d786324b301359ba12943
+jboss-ejb-clustering_2_0.xsd
+a9763a0ea44dfd106565e263a7071930246e9890
+jboss-ejb-container-interceptors_1_0.xsd
+b1b2cabffcf73bc6682a86e794b836a8894795f8
+jboss-ejb-container-interceptors_2_0.xsd
+256b58afdf3cd516466aacb394620aa6b5eeff9f
+jboss-ejb-delivery-active_1_0.xsd
+1594e230053151b0fc4460b5d2c0974f07e2949d
+jboss-ejb-delivery-active_1_1.xsd
+59f01a95f4bd6af475fdcb2580d0708b4140cb0b
+jboss-ejb-delivery-active_1_2.xsd
+440ea3398d2a0a06f702753e982561c13fe42859
+jboss-ejb-delivery-active_2_0.xsd
+843d5a1e370fdf9d38365137eb1b678b1a1e2a72
+jboss-ejb-delivery_3_0.xsd
+658a421d9b10cbaa3259310c8663b137286b7ee6
+jboss-ejb-iiop_1_0.xsd
+824335e09c369293a2c19a1e5fdf7cf966ad00d1
+jboss-ejb-iiop_1_1.xsd
+cdcb89189562bcacaf7e665531d2d719fef284cd
+jboss-ejb-iiop_1_2.xsd
+d227c05367758f824fe58db34aea9aac8a3d22fa
+jboss-ejb-iiop_2_0.xsd
+24a8df905641f1537f19f5141229734a9ea96bff
+jboss-ejb-pool_1_0.xsd
+25443240cf37ba90bc87a593b10757fe82a4f709
+jboss-ejb-pool_2_0.xsd
+d6bcb528ff83477eddb2be6d9708e34a24e47532
+jboss-ejb-resource-adapter-binding_1_0.xsd
+db23ed456835899d679248b946b3b45461fe9717
+jboss-ejb-resource-adapter-binding_2_0.xsd
+c54204d1e6f88b45c27ce49d7364b7784d5feca1
+jboss-ejb-security-role_1_0.xsd
+a1ae805b6d8136c5aa35a9e63ba258c3edbc2276
+jboss-ejb-security-role_2_0.xsd
+3df1c72095e95f78a7b5f28037c02f5233e9fa4d
+jboss-ejb-security_1_0.xsd
+cd304009d57b13ed16b1c8b618389a5da75ca5f7
+jboss-ejb-security_1_1.xsd
+4be44ca737e70f16cae606b23947d442c676c78d
+jboss-ejb-security_2_0.xsd
+c7fa0047c00a9346fd31f248422df215ee0fe1f2
+jboss-ejb-timer-service_2_0.xsd
+a208aeaca921cc5531266d5c5d678b681207dac0
+jboss-ejb3-2_0.xsd
+ac3011e6f323c09f6c1fa59767e6102ad5ff7fc2
+jboss-ejb3-2_1.xsd
+a6f6dea09944f40d08c8ea38417341a852de94db
+jboss-ejb3-4_0.xsd
+3f4558028d85b07bf95c4193888f6710c5a023f9
+jboss-ejb3-spec-2_0.xsd
+f0299f74d9e9580c3bc78f3de6fc1db509cedffd
+jboss-ejb3-spec-2_1.xsd
+307f6cda70369f204510e1c7ce5881690a3db443
+jboss-ejb3-spec-4_0.xsd
+09dc0658f81bdc4792162d83cdc9f851d156a3d8
+jboss-jpa_1_0.xsd
+e9cc701fb65d025162014f8e553004d5a82ff62e
+jboss-pojo_7_0.xsd
+b3bb5a61588be8a1b56ffada6be67b06caf1525d
+jboss-remoting_5_0.xsd
+e694d9531b1a67c92d59979d30a5c17da037022c
+jboss-remoting_5_1.xsd
+621806c4568630ddfda7a52de4bea9475b2b2991
+jboss-remoting_5_2.xsd
+c9c096f4f049a806d2e93072c919c2b9b55178de
+jboss-service_7_0.xsd
+25e4038326dddfc052039c10ad6645610f4ea601
+jboss-web_10_0.xsd
+413dfc364de9d759eec7d299630a7ea770d71d89
+jboss-web_10_1.xsd
+f08d95202e5fcb0f5626d555077231ade2c22de5
+jboss-web_11_0.xsd
+f5e15ce86ae72879a039a5fa5501124994c37102
+jboss-web_11_1.xsd
+57497fb8d97f743883ca5569e813c060f81cc638
+jboss-web_12_0.xsd
+f6a52af5a52270fb90a335aaa07f8625c5bdcb5a
+jboss-web_12_1.xsd
+ad381da602058c5031b34bae2eb0b19f2254ecdd
+jboss-web_13_0.xsd
+b862ed19bdcd30f9c2708dffcfb8d1089db4b9cd
+jboss-web_14_0.xsd
+6ad2a3271aa45c764f9f071751e39ca62bb0092f
+jboss-web_14_1.xsd
+0735fb0c9f32311026c35b001e7912472ea53b14
+jboss-web_15_0.xsd
+5f88cbbf9bd4f2f16cc135ef347302391bc91e6e
+jboss-web_7_0.xsd
+1464a66423e90a8bd6262c586ea4dbe57aebdeb1
+jboss-web_7_1.xsd
+fa3ebe01a24d4573bf6d0475e07fae558a455dfe
+jboss-web_7_2.xsd
+84b06df110e156ed09007a0db54ab5d95637daf2
+jboss-web_7_3.xsd
+74fb7633343e3e057648ed62fec697e4ff84b1ba
+jboss-web_8_0.xsd
+6aa207f10c66ec995726de29b6a53293878a2994
+jboss-weld-1_0.xsd
+325d3a32d4cb33b2d1f9e25647ac94686c35a97d
+jboss-weld-1_1.xsd
+a313d3a1617e431ec5e56ea312512a6cda931927
+jbossws-jaxws-config_4_0.xsd
+162b91f3e6beb6b5e68bf64e72e4bc159f50bc1d
+jbossws-jaxws-config_5_0.xsd
+0e50cdc20930a945395d072a15765eb25af0f694
+jbossws-web-services_1_0.xsd
+a2918b10880bfe162a17ff6d4bca648bee73c749
+jbxb_1_0.xsd
+fddd1ba12428219f99de3c2c65ab7c351fe8ebba
+jndi-binding-service_1_0.xsd
+c78b4deb58e8e1e6d64b30358e739d144c9bdcdd
+jsp_2_0.xsd
+2050e5381f33e3c185ad6768c79b86a8ecbd2dc8
+jsp_2_1.xsd
+8a1ec112119b91cfae77243447ebcc2fd6a659f0
+jsp_2_2.xsd
+95fcbdef41d08fc1d07e7208c8c97b2aa63a635d
+jsp_2_3.xsd
+79a34765cfa0f26963b2b7bb8ddca45f0410b5c2
+jsp_3_0.xsd
+27892316f15e8943232289d50b3e7392168e9e0f
+jsp_3_1.xsd
+3671bf5469984857ae0e4ed9add3b895613e17a6
+module-1_0.xsd
+3d23eb55a382fc2a8599a65156a4a0c5e3f933e1
+module-1_1.xsd
+2fe17f16616c499609a34c7d885718298671290b
+module-1_2.xsd
+df3f1670969ba85b022ee59d9526dd598ca1442f
+module-1_3.xsd
+8bd5a2193763a2db3004f7e06a7115c4ab9c5b8b
+module-1_5.xsd
+6bbd1ce5f142a6fa7ea0865421f1b0ec0b758106
+module-1_6.xsd
+4e3bb5abcf172a8ba0aac308e8a21e208f749be3
+module-1_7.xsd
+44ab9d6ce7fe29bb97a07ae31e8a5f8574acd39a
+module-1_8.xsd
+735bda10aa457b3f14fc70ee54a9a0e767e77dfc
+module-1_9.xsd
+85a7a838826aed8414b506a01fff0c82ba898458
+mvc-krazo_1.0.xsd
+f3a1275d81a1b34e34f5f1bacb04c67d0309ef44
+orm_1_0.xsd
+22e560f5ec31e7a82f0c00e5a3f1ad91d6039e20
+orm_3_1.xsd
+84d186ce347f5df4ffb144247bce8c70acfcdc8e
+persistence_1_0.xsd
+47640df2fc242f398edada7616aa7f91174354a3
+persistence_2_0.xsd
+5a1a08044f28e595224f70467bcaf64592e0bb68
+persistence_3_0.xsd
+92ff6c1cec35dd3cd16252b4d602cf08526e8e33
+shared-session-config_1_0.xsd
+754942810540cc287f89410f01a717b012cc869c
+shared-session-config_2_0.xsd
+aa4e02f73e89221f373057870902bdf73c76b69a
+singleton-deployment_1_0.xsd
+273d0cf5d66e46b883e8354e11fcf9ced3f4173d
+trans-timeout-1_0.xsd
+cd815ace62d491b455335620aaf850624221c9c6
+trans-timeout-1_1.xsd
+7900b92efa0b0630509980b40b7a74695e9945a7
+trans-timeout-2_0.xsd
+2f5a9b3a2791619b1278ca8089c837c3e788324c
+user-roles_1_0.xsd
+1099f544be1ecb0a677bf55c49fd9bb3f193639a
+web-app_2_4.xsd
+95a7d2becf1ef7c57509c149ca6c62744d170bed
+web-app_2_5.xsd
+2fbbd8c4f298eb8dc6c405264be8d775317a6ecc
+web-app_3_0.xsd
+65929d9933e60ea51a5e072e966a363bf8fbccb9
+web-app_3_1.xsd
+f4ceb7bffcfa77d14c19b46ca882fe6162ce3263
+web-app_4_0.xsd
+10a0a7ad0cb551ef6f0e8e89e3333b966abf896a
+web-app_5_0.xsd
+5a0deab2943ab8ff23091b610a9fa674d2529fbb
+web-app_6_0.xsd
+e8b275ff229c79a714b8fddae862ae55f9449583
+web-common_3_0.xsd
+22076bc075751d07f2813c28c44bada9cb015267
+web-common_3_1.xsd
+dd9eaa2ebcd0291d1551ef449b827b6c807a306f
+web-common_4_0.xsd
+4d90199aac4f9e04eed7cd107e2e7384e04bffc2
+web-common_5_0.xsd
+0ce3667b1aedd2c58dd54bf244f7d46778e6fa71
+web-common_6_0.xsd
+b78fab65ad92dec0d7e1870cdc5a12f75e2d8f97
+web-facelettaglibrary_2_2.xsd
+46b1f638acba41cb0e8b1e80deb0bf73ac4e37ce
+web-facelettaglibrary_2_3.xsd
+ba14cfbbfea8c788b3df4de5d8e2649dbafecfdf
+web-facelettaglibrary_3_0.xsd
+ff6a40532e7f2fb160e11a70dccebb8492798ea7
+web-facelettaglibrary_4_0.xsd
+6473912f98572f12d3a8684bbeac4560fef9ef42
+web-facesconfig_1_2.xsd
+45342c7a781359b75bfa2df9a21c10c71bef81ea
+web-facesconfig_2_2.xsd
+75dc55c9bfc9bd62ba2974300f4545e38d48a245
+web-facesconfig_3_0.xsd
+0793df8b6c5b4d4000a719a618866b8077ef8b80
+web-facesconfig_4_0.xsd
+db535a5d19d9f5299f7429346fe8e16e97f5d61d
+web-fragment_3_0.xsd
+9eb4e6b7b908bc092d59f1303ce8835877aef482
+web-fragment_3_1.xsd
+76648ec3a9818fa5275c8131ad0f378ff75a3ea0
+web-fragment_4_0.xsd
+3df1a4850f080f1ab0b545c5e000a78d68d0e11d
+web-fragment_5_0.xsd
+abb85fe76e7c3a3247365e499b9f0f286cec7bca
+web-fragment_6_0.xsd
+077bfc396055b8cb8e30aae33d74c6bafd0bfab5
+web-jsptaglibrary_2_0.xsd
+f499c6091d5fe777f84368a0c91f0c5f9f72e919
+web-jsptaglibrary_2_1.xsd
+76485f9f641f24840f14bf0bfd76c3bfae78dd18
+web-jsptaglibrary_3_0.xsd
+f6e1f53a06c3d4e7544052de2c605536c6d49e85
+web-jsptaglibrary_3_1.xsd
+a4a45d330af58ee2892c2430ce54ad71f598c175
+web-partialresponse_2_2.xsd
+c7d2c01990e5755ce5d4fe54088f762ff61bb27c
+web-partialresponse_2_3.xsd
+dc62bd9bc0432dcf20efb497929448f8a9f0b035
+web-partialresponse_3_0.xsd
+6e68a52e1c60e46db54d9751263cd456d31daf2c
+web-partialresponse_4_0.xsd
+1782121ddf05963c2bf3b1b8250b38a00d7e0188
+wildfly-agroal_1_0.xsd
+ffcf52c6a54e4a2f4aa8a646b7a2ba21c49bafac
+wildfly-agroal_2_0.xsd
+c25703e8be4bb7558cf2db9d8493a259aef80766
+wildfly-batch-jberet_1_0.xsd
+d1e9273783e2e11ac26976e9c4e63d7f89d7bbca
+wildfly-batch-jberet_2_0.xsd
+78245f5a87e978610fd56b7200255d90aca181e7
+wildfly-batch-jberet_3_0.xsd
+3e0f11d555c706b087948266aa25fad28253e6b2
+wildfly-bean-validation_1_0.xsd
+3f9c5b24ba68cc42b19187b297e628632f488f47
+wildfly-cli_3_0.xsd
+e5fb04c07e8512a995dffbd72ccb3b5135586252
+wildfly-cli_3_1.xsd
+34c7c2748302e62f01dbc4e556fe19cb77dd63cd
+wildfly-cli_3_2.xsd
+38fe7448a0bcfe344bcaca31368bc6595ee1d59e
+wildfly-cli_3_3.xsd
+06605915457ec9fb35c4a13ce5c610cda888622b
+wildfly-cli_3_4.xsd
+2ce48eafffaa89f2dc1e6ae3969af704bfc7b511
+wildfly-cli_4_0.xsd
+3f0f8787987f0a8c596dcb6547413229e5cfe3d3
+wildfly-client-ejb_3_0.xsd
+897acfe95eb61e5b3a2c46e19ec42c47ba55249a
+wildfly-client-ejb_3_1.xsd
+466f3ac53264e19d9b79e278744653a061b3e594
+wildfly-client-ejb_3_2.xsd
+b4b146fc603e531601508dd048fcdfeb7d17c2ab
+wildfly-client_1_0.xsd
+35f832713f356ceedfb501ce7bb59f9fe5ebbf49
+wildfly-config_10_0.xsd
+d3036ba6758e44af07ce6d7c6bc217daa278bf06
+wildfly-config_11_0.xsd
+8a8b6396fa0ed8b17b6885ab463bab47662ec7a3
+wildfly-config_12_0.xsd
+ee7bfe2625d45b32e58b15601c2cb06497176931
+wildfly-config_13_0.xsd
+32298ea32e5257e84e5562c7f8977ea051e70dd2
+wildfly-config_14_0.xsd
+ec2468549b8876a2bcdbc8a4ad95ea97997d3cf1
+wildfly-config_15_0.xsd
+1b1099b0b942933436f3cda307567ddeb8ee96d9
+wildfly-config_16_0.xsd
+2213c6cd8e063a6677ece9221911f76f03a6932d
+wildfly-config_17_0.xsd
+ec31690f64656fb19906ad2b6eecd81412f28c07
+wildfly-config_18_0.xsd
+34fb95ba5be0b527543c6cd899872d5a4cd05af4
+wildfly-config_19_0.xsd
+247fd3e87518c64c123b28ec5686135ddffd7f85
+wildfly-config_20_0.xsd
+ad654a0893117f5c2b978d3d029ba503b195a7ec
+wildfly-config_3_0.xsd
+4ccbb8cb39a783f5acfb443c416d853b16ff4a62
+wildfly-config_4_0.xsd
+6191d15e27af6d7bd1d6c4d785d6030bc0aadd67
+wildfly-config_4_1.xsd
+0494f568e2a1e41987927c924e20c5f089d06be2
+wildfly-config_4_2.xsd
+1b5dd439bbae6b6588902d09c76aa911ea779946
+wildfly-config_5_0.xsd
+198306e52cd3b198ca2718f0a4cce8e63c81c4db
+wildfly-config_6_0.xsd
+42343778acd31e92f89283fa7e96d8a2acd92ecf
+wildfly-config_7_0.xsd
+e5c4b336e169d844c1aabcdc232f07054206dd61
+wildfly-config_8_0.xsd
+b578e3e0178a7ef9b813027a0a17a79833a86ae8
+wildfly-config_9_0.xsd
+a8c350917c77f42c2550159c92ee4079723edcfc
+wildfly-config_community_20_0.xsd
+b5e4b40fcc0080684fcf2576599aa4bc6a96f540
+wildfly-core-management_1_0.xsd
+9c99943d1d6275655194ad741ec41989bb36dd0a
+wildfly-core-management_preview_1_0.xsd
+8f82e08ba98fe2fe2d4e168f33b0ffd931f57e71
+wildfly-credential-reference_1_0.xsd
+a1616b7b491fc9a4a76fe4990222062de1f5bef1
+wildfly-credential-reference_1_1.xsd
+47d4be6ca08c7ca55233f5771608d85891b3a35c
+wildfly-datasources_2_0.xsd
+09e65a80afba630ca65914e807b48709ee37d065
+wildfly-datasources_3_0.xsd
+75e682277689e54d9d73448f2a8ee012f4211bed
+wildfly-datasources_4_0.xsd
+2066b31c5302f3fac83b938171299035f9a8b244
+wildfly-datasources_5_0.xsd
+6d6ab2a5f016c5239092d23c5a5fdfb8cac1264a
+wildfly-datasources_6_0.xsd
+1100ec67b8ed75c299d089bed8ed70e39be9ac9d
+wildfly-datasources_7_0.xsd
+f428d5f27c105da1790d7fb7c99f0f93fae03ade
+wildfly-datasources_7_1.xsd
+55a7372daa9f9ed5fce46df11c178a8ee41fb021
+wildfly-datasources_7_2.xsd
+459baec1ddc25f66c6b3d8d917b756186e441685
+wildfly-discovery_1_0.xsd
+972292ebcb8519bff8e3244c1c3e9a2f018b2a98
+wildfly-distributable-ejb_1_0.xsd
+d014ba7f933c0e5c1e51c4bf603453a6ac46af40
+wildfly-distributable-web_1_0.xsd
+ab8c85907f5a9b46e998f166bf4a9ccae6098fbf
+wildfly-distributable-web_2_0.xsd
+15094966127469ceaa05c1a84f27c3019271204d
+wildfly-distributable-web_3_0.xsd
+04c21acdb90317ca10936866e9ac7847176f1d7d
+wildfly-distributable-web_4_0.xsd
+3db5e8796d81f7f5669d6a93011dc3440746881f
+wildfly-ee-security_1_0.xsd
+e52bcd083176489543bfe0221a20eb19e92c8fb1
+wildfly-ejb-timer_1_0.xsd
+0f3b4b2c761b981de13d8d374672e82e32a3f3ff
+wildfly-ejb3_10_0.xsd
+91dfbf391ec1453f860edde3f73c9ced22ae2810
+wildfly-ejb3_3_0.xsd
+affcb7a295de32bae12bef3839c68f7ba8d66603
+wildfly-ejb3_4_0.xsd
+a268236222653edf71981b9303cfeed6936b63e8
+wildfly-ejb3_5_0.xsd
+eb85c55cf8093684186cf1291e3c29dd7dd970e9
+wildfly-ejb3_6_0.xsd
+a21c3b767b29e94c32d9e20998f588814f9026c0
+wildfly-ejb3_7_0.xsd
+b7d347b70a8a361aa5d084b9bc3c0ca7b54e4eb1
+wildfly-ejb3_8_0.xsd
+41fce34c7d3bc64b6afe0a9c5c4736f9b8765b24
+wildfly-ejb3_9_0.xsd
+dfe3e066dffb35f061b2289796ccdbccc64527b7
+wildfly-elytron-oidc-client_1_0.xsd
+aeb9df27c86c85894a4f17690659177b80fb0917
+wildfly-elytron-oidc-client_2_0.xsd
+a3bf7aad199c4043d82190a8fe07ee68b6252748
+wildfly-elytron-oidc-client_preview_2_0.xsd
+564cfa9e76b5e73153f56061bfdf6f163396ba2f
+wildfly-elytron-oidc-client_preview_3_0.xsd
+779484f105e2edec4b722b360f9afd79b5080321
+wildfly-elytron_10_0.xsd
+8ba06cbc1524ef262ff6b6ddee143b3981e0c4d7
+wildfly-elytron_11_0.xsd
+b3133b8ef93394a17f9910aec82f86e80ac54ad5
+wildfly-elytron_12_0.xsd
+a7a9780f2512f12663ad2c46e1040b459365ebd6
+wildfly-elytron_13_0.xsd
+6955c044d4202bcf13341021220caaf7d1a1cdad
+wildfly-elytron_14_0.xsd
+f0d4e2d9fd2161e6f16dad5d6863378e8eeed280
+wildfly-elytron_15_0.xsd
+e19e29461448c54a5ce8d1897374764fb062b29c
+wildfly-elytron_15_1.xsd
+24299e02445dda9c5186dfb5e3725c24a1a3f4f1
+wildfly-elytron_16_0.xsd
+08b5b49910314781a0818e258478e8dabaad47f5
+wildfly-elytron_17_0.xsd
+0fd7e5b432dff8291d15b76c19067ef06e457c4d
+wildfly-elytron_18_0.xsd
+318d7027dd25b864a7244b14745d2ae993599b1b
+wildfly-elytron_1_0.xsd
+30bf13d75d4f51c579c4342e7dc0db32b4b70017
+wildfly-elytron_1_1.xsd
+ebd6c90e35cc2fb27e515bb79d2d10d07b7eeda5
+wildfly-elytron_1_2.xsd
+d137091da5bb611eae7fe83532e84e81107477ba
+wildfly-elytron_2_0.xsd
+32500732d29aeadc5d99b8511023feff258eb044
+wildfly-elytron_3_0.xsd
+306e2bee6e1f1ee7ab37469b3857114978f50018
+wildfly-elytron_4_0.xsd
+36f88cb5bdbc80f0522b396785e95d389eb422b1
+wildfly-elytron_5_0.xsd
+9b821b1771d3092eb30b87c3bef5425d8609a421
+wildfly-elytron_6_0.xsd
+e8bc2a02a7ca8caffac37d6f6c8de385bb3dbbc0
+wildfly-elytron_7_0.xsd
+0eb8f591575d8177930624233d12c286edf92126
+wildfly-elytron_8_0.xsd
+c1e7c71d6a4ba62d0512ea837817313cffc52b2c
+wildfly-elytron_9_0.xsd
+1259f15698bb7243d02bafe4639de683c832b91e
+wildfly-elytron_community_18_0.xsd
+f4bb77c4d9cfdf23285f3306b4044760c1e9ab17
+wildfly-health_1_0.xsd
+281db52c3fc89e1c165be4274ad3ad27ca05cd24
+wildfly-http-client_1_0.xsd
+8ba350c867997b86e5169e4de76bae9c6cfc4ac3
+wildfly-iiop-openjdk_2_0.xsd
+03b66946e04323adc4f0e3f534f0724b2e0eabb0
+wildfly-iiop-openjdk_2_1.xsd
+90ebfe5c78609ad2c5e70478668401b8e9ffb8fb
+wildfly-iiop-openjdk_3_0.xsd
+b9a562da029dc392a29180d00914c888832b2d83
+wildfly-io_1_0.xsd
+a1f2facaa75e46245b78dfc05b219ce0ba8150b7
+wildfly-io_1_1.xsd
+c863cedf4bc477ea71b1b72042778e56107e8bc2
+wildfly-io_2_0.xsd
+342d4a925c71dcbc5058751b62a0bb33ca3b3f26
+wildfly-io_3_0.xsd
+c795b2c1cb4a29d7a64be4cacefd26a5fdeaf14b
+wildfly-io_4_0.xsd
+eff35e88a2b4cec0d243ea00e00fdb232f437ed3
+wildfly-jca_2_0.xsd
+cc70071db378f6fbbbed9d167987ed081425a489
+wildfly-jca_3_0.xsd
+105f78a64e4ffd08be9feea5e0ee5cc442b39883
+wildfly-jca_4_0.xsd
+057cea77937ea4f60e29ead63e71144bbc9c218a
+wildfly-jca_5_0.xsd
+946df4e724027c038783050c550b953c048a7882
+wildfly-jca_6_0.xsd
+08978178f2a2433eb8a7f67849a526855a09a775
+wildfly-keycloak_1_1.xsd
+d283b2fa8eb7b8bbfc335c52b995fd0c514d2cd0
+wildfly-keycloak_1_2.xsd
+e49d69fbb9b56463cfb7a50c65c2e52bc0d9fd28
+wildfly-mail_2_0.xsd
+260440c2ca964e3da93647eb092b0688846add84
+wildfly-mail_3_0.xsd
+ab48f1ef5953383df3f171e6c3f30991f941b516
+wildfly-mail_4_0.xsd
+119f090c621aa5507be20a637db43b166b242038
+wildfly-messaging-activemq-deployment_1_0.xsd
+c6681a3af5c86395fdcf134d299ff85368b360b5
+wildfly-messaging-activemq_10_0.xsd
+96a7439daab0e3563a204e803ed10ed28bca9a36
+wildfly-messaging-activemq_11_0.xsd
+995791f6a1e16413cf63f271c4c992a8991ae0b5
+wildfly-messaging-activemq_12_0.xsd
+4b47421a247ebd919d78e3c1b178b1fa60ca2fe6
+wildfly-messaging-activemq_13_0.xsd
+cf92d27a824523e0e8ab1a439de92a206d4792a4
+wildfly-messaging-activemq_13_1.xsd
+f44e88aa83c11c014142d3705eebffca9028a5fd
+wildfly-messaging-activemq_14_0.xsd
+1809d81bf22f437a31babddc8aff1b8830878e1f
+wildfly-messaging-activemq_15_0.xsd
+0215443ad9c38bf8956edbaada87feb94afd91ce
+wildfly-messaging-activemq_16_0.xsd
+720f6a2bc42799d98411fddfb19f127829006eca
+wildfly-messaging-activemq_1_0.xsd
+61b20820b7b5cafefe86c89d80d261fb39dbc542
+wildfly-messaging-activemq_2_0.xsd
+189eab50bb5e977db5b914f1740d29418b68963e
+wildfly-messaging-activemq_3_0.xsd
+c5263f0704d986c13cd0faa14544e2b0dc0a4c84
+wildfly-messaging-activemq_4_0.xsd
+0b55ea6d8691400e49f4cf726aa7d19fa7573788
+wildfly-messaging-activemq_5_0.xsd
+b51f803824be9b7b2dc311f12d3e63e6d0a4e885
+wildfly-messaging-activemq_6_0.xsd
+e479dc4063288af70a30f6360366701ccad9ffee
+wildfly-messaging-activemq_7_0.xsd
+9540cc3193c2356694e3bd7b8992db19ec6d3223
+wildfly-messaging-activemq_8_0.xsd
+ad572663c79e28d26afb8363403e38f2ac2e1b07
+wildfly-messaging-activemq_9_0.xsd
+febfac39c568765feed74e7f0826a924bb2fc319
+wildfly-metrics_1_0.xsd
+0c639cdb416d063cbe75e193d7757ac2bb87a309
+wildfly-micrometer_1_0.xsd
+e19a39d7a05973c514e26c081663f99f0d8b6294
+wildfly-micrometer_1_1.xsd
+5efe3eb73742ebd010ce4e5ac4446d002bc5fc3c
+wildfly-microprofile-config-smallrye_1_0.xsd
+1c2d047a662aec5716187c1b9b4d163c6d58d101
+wildfly-microprofile-config-smallrye_2_0.xsd
+1e8667bafa5a105fbb224bf5376e883b9ea143ee
+wildfly-microprofile-fault-tolerance-smallrye_1_0.xsd
+3543c039dca106bff62547b88feb1a6b4c116468
+wildfly-microprofile-health-smallrye_1_0.xsd
+47c6b11655456b300ddebfd57e85864d9ab6b82d
+wildfly-microprofile-health-smallrye_2_0.xsd
+ca86df7727673706786c734b9538c4f2af22d855
+wildfly-microprofile-health-smallrye_3_0.xsd
+302042e4c84f0dc752ef3f2276608287eec15aac
+wildfly-microprofile-jwt-smallrye_1_0.xsd
+758835f093aa9739d542a7ec21fdd68d5150e976
+wildfly-microprofile-lra-coordinator_1_0.xsd
+6246effed560873ec30993de2594e537b2a9a7f0
+wildfly-microprofile-lra-participant_1_0.xsd
+7c533ab71706677bd7427f1f4f1aeaee27608a33
+wildfly-microprofile-metrics-smallrye_1_0.xsd
+2f236c680897fbd544447b37bdeae6d8ad78c9cf
+wildfly-microprofile-metrics-smallrye_2_0.xsd
+96717b4bce97e7f3aaad112fee043ab92215cf76
+wildfly-microprofile-openapi-smallrye_1_0.xsd
+377924d2fb6fea7007c99761d90f64ce075af59b
+wildfly-microprofile-opentracing_1_0.xsd
+31e9d74a8cc774442eac15e73f6ab79699c8f857
+wildfly-microprofile-opentracing_2_0.xsd
+0454dad46db2ba56b9710690bdbbff62a0e7c164
+wildfly-microprofile-opentracing_3_0.xsd
+78f9bd2432d4aac932190a1ba597b09bcf982457
+wildfly-microprofile-reactive-messaging-smallrye_1_0.xsd
+df7ad95501603c5f9142b432aea4b205dd349d1e
+wildfly-microprofile-reactive-streams-operators-smallrye_1_0.xsd
+7ec833b605d3f2c50c6e2cfe433bdb62aa8167ab
+wildfly-microprofile-telemetry_1_0.xsd
+0d3226dbcc382ca17fbddc8ad21da85fc7dbe0d7
+wildfly-mvc-krazo_preview_1_1.xsd
+0076e679591ba92ae27eaf6e405000a70d0a3ae8
+wildfly-opentelemetry_1_0.xsd
+e42e147fefa1302525d641316519ceff9a782b1f
+wildfly-opentelemetry_1_1.xsd
+a809681065c277a7cdd3829810eab463dea45732
+wildfly-picketlink-federation_1_0.xsd
+f8393af3c4fa4eedb659fbc155fc49767bb7e439
+wildfly-picketlink-federation_1_1.xsd
+e4ccfe170114b1658ba4f85d4129c58a342d53e5
+wildfly-picketlink-federation_2_0.xsd
+b77eec2994e672d8a41e8d2bf5185072c4d5136c
+wildfly-picketlink-idm_1_0.xsd
+c32280f36f32c74e0978e721643e0d46218d8978
+wildfly-picketlink-idm_1_1.xsd
+95e9b6bdbb163c04d44cd377175607f54ec737a8
+wildfly-picketlink-idm_2_0.xsd
+4c94eea0050f3234b81c4ae83eca17998b76af4f
+wildfly-remoting_2_0.xsd
+cae24fa6b2c031d0135592b01a34d4dc18483c08
+wildfly-remoting_3_0.xsd
+e1d5a1b63584138d56422cde2bfc841538d70f5e
+wildfly-remoting_4_0.xsd
+9e489bf4c74d45aa2f3528cf9c63b82c31b99eef
+wildfly-remoting_5_0.xsd
+bc6243d6960bdedb432f54c3554b35ce4ce90714
+wildfly-remoting_6_0.xsd
+fbbb4e1b34c287b46a01d105bd6d2c294a10fe61
+wildfly-remoting_7_0.xsd
+9d1ded36786dfa7820b0a599141e8de45ae19eac
+wildfly-request-controller_1_0.xsd
+2ac6d68d3a0ae8ced6bd33add63f1c20504c6478
+wildfly-resource-adapters_2_0.xsd
+6efd1d58220f9e48673b1bb64c67478793441e58
+wildfly-resource-adapters_3_0.xsd
+f1d54784ac7e1e2715d5a1ef8226b92e4a32d348
+wildfly-resource-adapters_4_0.xsd
+7de84613de7951b78c9f1821822d10fa8eebab88
+wildfly-resource-adapters_5_0.xsd
+5d54b48dfafc3e055010f9bf32d2f56fbd6ff1ea
+wildfly-resource-adapters_6_0.xsd
+5674ee64c24f87aac46a5e38b157c10135fc5b45
+wildfly-resource-adapters_6_1.xsd
+ce15f559a4d38590b4bb9cd382d73af0643becc6
+wildfly-resource-adapters_7_0.xsd
+71eb052092f77e4722870ca20bea7f8d7d88b02f
+wildfly-resource-adapters_7_1.xsd
+ab91f57ecf76be0766d33f872d418358e3d9a401
+wildfly-rts_1_0.xsd
+f132b64f3749718817c94bda1f319b14550b1bfe
+wildfly-security-manager_1_0.xsd
+f2f8d76823e6199dcf55150acd6e02fb46ae80bb
+wildfly-security_2_0.xsd
+c3b792be636f6c7a0433dc2eedddfa4eeb26467b
+wildfly-singleton_1_0.xsd
+7a66c03eed1e392e0bb24cf7cbafb67d8669b439
+wildfly-threads_2_0.xsd
+3987abc2c0a4a6ee4c1189f2023a30c1fba2475c
+wildfly-txn_3_0.xsd
+938e6731cccdea6886b1e2e64a7659e4235ef00c
+wildfly-txn_4_0.xsd
+ff5dd5941c74ed9073392c0a6815b8735c0aea94
+wildfly-txn_5_0.xsd
+5dd08a9bfb8dbc83ee2ab5215b1064e0556b0187
+wildfly-txn_6_0.xsd
+8775546bddef6b7e2f757ce5ba10efa915aa8b5a
+wildfly-undertow_10_0.xsd
+5f45e754b8669706c5e82c554c4d6ee9654a9685
+wildfly-undertow_11_0.xsd
+0c00764d8367deaf7031cd80020ca50f8a5ba700
+wildfly-undertow_12_0.xsd
+582076f80f82e7fcc5b1c6c5a9a488ed7d2ab63b
+wildfly-undertow_13_0.xsd
+6b6e733d002374f9c2a12bef1a2c821e0341594a
+wildfly-undertow_14_0.xsd
+c1c1e064ea1af3a3b39f95912ff8dc8590752f5c
+wildfly-undertow_3_1.xsd
+86377cd1597fe86f5948ca73e83b3ff67c31a49c
+wildfly-undertow_4_0.xsd
+5d0f4cd956188967005863f7923776fee4cb2f5c
+wildfly-undertow_5_0.xsd
+0fde9967d2544ec8421c4f46d49aaa86793bb8d1
+wildfly-undertow_6_0.xsd
+b834ce962d1b37f373d68967cd58d4d7d461eefd
+wildfly-undertow_7_0.xsd
+6251ec7ebd96787d71b9badca3852ed4f85a0a8a
+wildfly-undertow_8_0.xsd
+55e790fc9d72ce117b5db9414f285e365e7c3dcf
+wildfly-undertow_9_0.xsd
+0c036dc34a252ab1ca1a6f1f66b52c373424c957
+wildfly-undertow_preview_14_0.xsd
+9ed1c581917bc1d6cd1d6a91d73d5e6eaeac9b74
+xml.xsd
+4c24da64fbc5582d40fe3dd73c9c3adcff9d756f
+xnio_3_5.xsd
+05174025083a0a69e0b9cae1d5c095d527049cd0
diff --git a/wildfly/.galleon/hashes/domain/configuration/hashes b/wildfly/.galleon/hashes/domain/configuration/hashes
new file mode 100644
index 0000000..16396e5
--- /dev/null
+++ b/wildfly/.galleon/hashes/domain/configuration/hashes
@@ -0,0 +1,20 @@
+application-roles.properties
+2339b5b3b5544b9a54b2a17a077a43277f4becac
+application-users.properties
+0cdb9ca548eca6503a3cb0e4c7ce80f5336a1c82
+default-server-logging.properties
+f79da20ce3f13ecf153f75c77bf9d9cb7870509d
+domain.xml
+daaecccdabe0ae4bd03815b2bbae7f922803efb9
+host-primary.xml
+925039b4ddb39e39840e77ae069ca505c93392d4
+host-secondary.xml
+a1e167d1161fa1dac7793729144d850514726e9f
+host.xml
+730c4b5bac2ef744b0127ac57df7e526c5e1ab17
+logging.properties
+1138aa7e1af0a0a93f0dc8754773b19dcbc7a68e
+mgmt-groups.properties
+8a5ca3eeb904c2b6f2bc60f12e7cefed4b5d09b0
+mgmt-users.properties
+b79a69eb57c60d16a626e20256c7531e2e22fe21
diff --git a/wildfly/.galleon/hashes/hashes b/wildfly/.galleon/hashes/hashes
new file mode 100644
index 0000000..5d165d4
--- /dev/null
+++ b/wildfly/.galleon/hashes/hashes
@@ -0,0 +1,8 @@
+LICENSE.txt
+58853eb8199b5afe72a73a25fd8cf8c94285174b
+README.txt
+4e02800d2609dc82e957cfcf5eae12eeb1120349
+copyright.txt
+165a59628b050f2faa2477a2a62a92aa024ca1e3
+jboss-modules.jar
+ad33a0ca75c8189ebbfd8eedbb489a1453b96dea
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/asm/asm/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/asm/asm/main/hashes
new file mode 100644
index 0000000..03f4cea
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/asm/asm/main/hashes
@@ -0,0 +1,6 @@
+asm-9.7.jar
+073d7b3086e14beb604ced229c302feff6449723
+asm-util-9.7.jar
+c0655519f24d92af2202cb681cd7c1569df6ead6
+module.xml
+2fdd92766986752fe05bf9e499a5b89fbfed4b5a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/carrotsearch/hppc/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/carrotsearch/hppc/main/hashes
new file mode 100644
index 0000000..5e4377e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/carrotsearch/hppc/main/hashes
@@ -0,0 +1,4 @@
+hppc-0.8.1.jar
+ffc7ba8f289428b9508ab484b8001dea944ae603
+module.xml
+7ff9b09d68ddb811bca586f99c7e4895fc11cc99
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/classmate/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/classmate/main/hashes
new file mode 100644
index 0000000..59a0eab
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/classmate/main/hashes
@@ -0,0 +1,4 @@
+classmate-1.5.1.jar
+3fe0bed568c62df5e89f4f174c101eab25345b6c
+module.xml
+2c2407d2d12a8b2cd853b25ca0592659cf961c23
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/hashes
new file mode 100644
index 0000000..b114bef
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/hashes
@@ -0,0 +1,4 @@
+jackson-annotations-2.17.0.jar
+880a742337010da4c851f843d8cac150e22dff9f
+module.xml
+e4a8dbea35ecf4bdb108eefc4f7a5fefc2bd8ad0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/hashes
new file mode 100644
index 0000000..c93e3c4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/hashes
@@ -0,0 +1,4 @@
+jackson-core-2.17.0.jar
+a6e5058ef9720623c517252d17162f845306ff3a
+module.xml
+68cdc0d521772e10b6bd0ed00f8e9d5d1a8fa58c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/hashes
new file mode 100644
index 0000000..6baa875
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/hashes
@@ -0,0 +1,4 @@
+jackson-databind-2.17.0.jar
+7173e9e1d4bc6d7ca03bc4eeedcd548b8b580b34
+module.xml
+afae2e2a7304f640bd4c77db1e7013cb48e6fbce
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/hashes
new file mode 100644
index 0000000..060e9fe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/hashes
@@ -0,0 +1,4 @@
+jackson-dataformat-yaml-2.17.0.jar
+57a963c6258c49febc11390082d8503f71bb15a9
+module.xml
+43440d6ca1b0a4d926a413a73f59c4adae389922
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/hashes
new file mode 100644
index 0000000..da4ab1b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/hashes
@@ -0,0 +1,4 @@
+jackson-datatype-jdk8-2.17.0.jar
+95519a116d909faec29da76cf6b944b4a84c2c26
+module.xml
+4f672ef5b562b6de8be01280e228d87f3cdab036
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/hashes
new file mode 100644
index 0000000..934fa6c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/hashes
@@ -0,0 +1,4 @@
+jackson-datatype-jsr310-2.17.0.jar
+3fab507bba9d477e52ed2302dc3ddbd23cbae339
+module.xml
+f3e236cbeb6c19474f74c1798dd38dbc66b7a4a6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/hashes
new file mode 100644
index 0000000..feadc71
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/hashes
@@ -0,0 +1,8 @@
+jackson-jakarta-rs-base-2.17.0.jar
+191c316a3951956fb982b7965cea7e142d9fb87e
+jackson-jakarta-rs-json-provider-2.17.0.jar
+2f86fc40907f018a45c4d5dd2a5ba43b526fa0cb
+jackson-module-jakarta-xmlbind-annotations-2.17.0.jar
+0e652f73b9c3d897b51336d9e17c2267bb716917
+module.xml
+68d13970e8c3a97f5e048798554507fd12b72081
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/main/hashes
new file mode 100644
index 0000000..c13a203
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+09257ddbe3ca160f3ccae184177749efb82a72ce
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/github/ben-manes/caffeine/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/ben-manes/caffeine/main/hashes
new file mode 100644
index 0000000..2a8fa92
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/ben-manes/caffeine/main/hashes
@@ -0,0 +1,4 @@
+caffeine-3.1.8.jar
+24795585df8afaf70a2cd534786904ea5889c047
+module.xml
+b5d5c01752d3997d117ec900faa1f167a9b1c285
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/btf/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/btf/main/hashes
new file mode 100644
index 0000000..3d20dea
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/btf/main/hashes
@@ -0,0 +1,4 @@
+btf-1.2.jar
+9e66651022eb86301b348d57e6f59459effc343b
+module.xml
+25ed39b0eb6131b1b16f5ad02344a2c4a6bce80c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/jackson-coreutils/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/jackson-coreutils/main/hashes
new file mode 100644
index 0000000..b5f05c6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/jackson-coreutils/main/hashes
@@ -0,0 +1,4 @@
+jackson-coreutils-1.8.jar
+491a6e1130a180c153df9f2b7aabd7a700282c67
+module.xml
+edd282e5b4a283be2818d75ca8d9f12147a5f241
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/json-patch/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/json-patch/main/hashes
new file mode 100644
index 0000000..e45efcd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/json-patch/main/hashes
@@ -0,0 +1,4 @@
+json-patch-1.9.jar
+0a4c3c97a0f5965dec15795acf40d3fbc897af4b
+module.xml
+d617d8be6e99f49dbf75754fb3b4568b38237e6b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/msg-simple/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/msg-simple/main/hashes
new file mode 100644
index 0000000..9b75f6d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/fge/msg-simple/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+55470daae6c253ebf9e114335255bd209e7a4c1e
+msg-simple-1.1.jar
+f261263e13dd4cfa93cc6b83f1f58f619097a2c4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/github/luben/zstd-jni/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/luben/zstd-jni/main/hashes
new file mode 100644
index 0000000..f78b519
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/github/luben/zstd-jni/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d614911cd191a7d479ffa4ac976e043eb963a02e
+zstd-jni-1.5.6-5.jar
+6b0abf5f2e68df5ffac02cba09fc2d84f7ebd631
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/google/code/gson/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/code/gson/main/hashes
new file mode 100644
index 0000000..0fe55ec
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/code/gson/main/hashes
@@ -0,0 +1,4 @@
+gson-2.8.9.jar
+8a432c1d6825781e21a02db2e2c33c5fde2833b9
+module.xml
+e9fece80c079e4436e45267429813501f4852b2d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/google/guava/failureaccess/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/guava/failureaccess/main/hashes
new file mode 100644
index 0000000..a9be170
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/guava/failureaccess/main/hashes
@@ -0,0 +1,4 @@
+failureaccess-1.0.2.jar
+c4a06a64e650562f30b7bf9aaec1bfed43aca12b
+module.xml
+7d7ad1fd8299119798c90c5915e4993f56711804
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/google/guava/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/guava/main/hashes
new file mode 100644
index 0000000..aa41ea5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/guava/main/hashes
@@ -0,0 +1,4 @@
+guava-33.0.0-jre.jar
+161ba27964a62f241533807a46b8711b13c1d94b
+module.xml
+5b9a85ab34e0fe19c3a3b31f4954ae40db2b600f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/google/protobuf/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/protobuf/main/hashes
new file mode 100644
index 0000000..d3f1f47
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/google/protobuf/main/hashes
@@ -0,0 +1,10 @@
+module.xml
+eca834efdc39015b90e7129b01d7b1fa6ba5d064
+perfmark-api-0.23.0.jar
+0b813b7539fae6550541da8caafd6add86d4e22f
+proto-google-common-protos-2.0.1.jar
+20827628ea2b9f69ae22987b2aedb0050e9c470d
+protobuf-java-3.25.5.jar
+5ae5c9ec39930ae9b5a61b32b93288818ec05ec1
+protobuf-java-util-3.25.5.jar
+38cc5ce479603e36466feda2a9f1dfdb2210ef00
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/googlecode/javaewah/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/googlecode/javaewah/main/hashes
new file mode 100644
index 0000000..b26decd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/googlecode/javaewah/main/hashes
@@ -0,0 +1,4 @@
+JavaEWAH-1.2.3.jar
+13a27c856e0c8808cee9a64032c58eee11c3adc9
+module.xml
+cbc42f2e507993437ba185fdd71dd24fc070c32d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/h2database/h2/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/h2database/h2/main/hashes
new file mode 100644
index 0000000..e7d51b8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/h2database/h2/main/hashes
@@ -0,0 +1,4 @@
+h2-2.2.224.jar
+7bdade27d8cd197d9b5ce9dc251f41d2edc5f7ad
+module.xml
+8f9bda63c7655da79d2d54a359bcadc474b66143
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/ibm/async/asyncutil/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/ibm/async/asyncutil/main/hashes
new file mode 100644
index 0000000..2659801
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/ibm/async/asyncutil/main/hashes
@@ -0,0 +1,4 @@
+asyncutil-0.1.0.jar
+440941c382166029a299602e6c9ff5abde1b5143
+module.xml
+4a7d1e02072bbab6c935aa93fc915c26b7c5feae
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/microsoft/azure/storage/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/microsoft/azure/storage/main/hashes
new file mode 100644
index 0000000..3ef5952
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/microsoft/azure/storage/main/hashes
@@ -0,0 +1,4 @@
+azure-storage-8.6.6.jar
+49d84b103a4700134ce56d73b4195f18fd226729
+module.xml
+0c37ed43810e653e80519241466019e2ee2d8f82
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/hashes
new file mode 100644
index 0000000..bc3696a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+0d381cde567d8896a94fe44993a10758ed433b49
+nimbus-jose-jwt-9.37.3.jar
+700f71ffefd60c16bd8ce711a956967ea9071cec
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/squareup/protoparser/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/squareup/protoparser/main/hashes
new file mode 100644
index 0000000..fcbc938
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/squareup/protoparser/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+29f238d58ebc8744f45165df41858bf9c0ca4782
+protoparser-4.0.3.jar
+e61ee0b108059d97f43143eb2ee7a1be8059a30e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/bind/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/bind/main/hashes
new file mode 100644
index 0000000..fe6720e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/bind/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+863fd9eefeafd585ab00c7c1d91a8b16c82f7ab9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/fastinfoset/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/fastinfoset/main/hashes
new file mode 100644
index 0000000..4743708
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/fastinfoset/main/hashes
@@ -0,0 +1,4 @@
+FastInfoset-2.1.1.jar
+650c84348bbcf4461bd24d38e67f7a7ce687de24
+module.xml
+a18a415193ecb4584702dba76cff75e83b457330
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/messaging/saaj/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/messaging/saaj/main/hashes
new file mode 100644
index 0000000..3b44b4a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/com/sun/xml/messaging/saaj/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+4036fdadd18b5ac952d374077e9e8c43ae7deba9
+saaj-impl-3.0.0.jar
+592e76b886471149217e4090b02e3d36fd702777
+stax-ex-2.1.0.jar
+33160568d70c01da407f8ba982bacf283d00ad4a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/hashes
new file mode 100644
index 0000000..da65539
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c62ca7298e8392d9d3e0405e6ee250e523cb3ac3
+pem-keystore-2.4.0.jar
+a4ba3c7b740b9dada642e1b219d537bafd8c237c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/gnu/getopt/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/gnu/getopt/main/hashes
new file mode 100644
index 0000000..75fc3ad
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/gnu/getopt/main/hashes
@@ -0,0 +1,4 @@
+java-getopt-1.0.13.jar
+bb29ac2c2ab8b92945f01706de4b56c97989c6a9
+module.xml
+5b1ec5d7710dff2dbc3beceda959bcc47ddbec8e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/ibm/jdk/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/ibm/jdk/main/hashes
new file mode 100644
index 0000000..df1b84c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/ibm/jdk/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+7f680a09778318f400ff51232088d954c87c4c6f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/internal/javax/json/api/ee8/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/internal/javax/json/api/ee8/main/hashes
new file mode 100644
index 0000000..1531db6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/internal/javax/json/api/ee8/main/hashes
@@ -0,0 +1,4 @@
+jakarta.json-1.1.6.jar
+a39aba0ef0a70c3f54a44a2c539a4f11c9bb07e8
+module.xml
+2abfebbc96fe44e75ccc1d75cb3e3ecd7ba206a2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/agroal/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/agroal/main/hashes
new file mode 100644
index 0000000..1abc628
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/agroal/main/hashes
@@ -0,0 +1,8 @@
+agroal-api-2.0.jar
+9fd418b07a6563b68034688ca7dce74f5b83d233
+agroal-narayana-2.0.jar
+38261488606baf55ea34b71ce14918ea7a5dac88
+agroal-pool-2.0.jar
+a299e789a67d04dca63afe03a1778db184c32962
+module.xml
+9b810fce6660bd1ab7c730f86721e23229dac58e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/grpc/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/grpc/main/hashes
new file mode 100644
index 0000000..6fa6454
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/grpc/main/hashes
@@ -0,0 +1,4 @@
+grpc-api-1.58.0.jar
+1f761949cdfd418a5f662e0d22d2c95f60099c0b
+module.xml
+70fcff9cd43b97454103ad68cadaa7837f826861
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/micrometer/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/micrometer/main/hashes
new file mode 100644
index 0000000..50e3f44
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/micrometer/main/hashes
@@ -0,0 +1,8 @@
+micrometer-commons-1.12.4.jar
+a57f10c78956b38087f97beae66cf14cb8b08d34
+micrometer-core-1.12.4.jar
+d5b91e2847de7c1213889c532789743eb2f96337
+micrometer-registry-otlp-1.12.4.jar
+9aa2c330c53bb34994474ea7e4af2ea4bde00071
+module.xml
+a70e6656b7cf14699801149b23974bfe91e16861
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-buffer/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-buffer/main/hashes
new file mode 100644
index 0000000..5796f16
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-buffer/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+925e1b23b45dd66458558cef75bdae902ea4fe13
+netty-buffer-4.1.112.Final.jar
+bdc12df04bb6858890b8aa108060b5b365a26102
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-dns/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-dns/main/hashes
new file mode 100644
index 0000000..eb4e3a9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-dns/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e59675e52c0c00b202387e7b6fb4dfa176f0f0a3
+netty-codec-dns-4.1.112.Final.jar
+06724b184ee870ecc4d8fc36931beeb3c387b0ee
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-http/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-http/main/hashes
new file mode 100644
index 0000000..3fff306
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-http/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+cd1a7e08b5553c3db9337136a723b8c43a481d25
+netty-codec-http-4.1.112.Final.jar
+81af1040bfa977f98dd0e1bd9639513ea862ca04
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-http2/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-http2/main/hashes
new file mode 100644
index 0000000..c0cd95d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-http2/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+bc195e36f7b6f0602bd7a334709399f7320b1fb7
+netty-codec-http2-4.1.112.Final.jar
+7fa28b510f0f16f4d5d7188b86bef59e048f62f9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-socks/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-socks/main/hashes
new file mode 100644
index 0000000..c0d4f98
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec-socks/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1cebdee3eb95c6ca79cf9b9ce3271f6318acc807
+netty-codec-socks-4.1.112.Final.jar
+9aed7e78c467d06a47a45b5b27466380a6427e2f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec/main/hashes
new file mode 100644
index 0000000..42f6ce8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-codec/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e90cb28d30b63ea5fdd53e0f9fe8754014de2808
+netty-codec-4.1.112.Final.jar
+c87f2ec3d9a97bd2b793d16817abb2bab93a7fc3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-common/main/hashes
new file mode 100644
index 0000000..742f9f4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ad45835c0c9fae924beafbef4ffebaacbf8e142d
+netty-common-4.1.112.Final.jar
+b2798069092a981a832b7510d0462ee9efb7a80e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-handler-proxy/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-handler-proxy/main/hashes
new file mode 100644
index 0000000..789925c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-handler-proxy/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+2c4b2b0499cd6b2e17cd4ba88eb1fe907a9e4f3f
+netty-handler-proxy-4.1.112.Final.jar
+b23c87a85451b3b0e7c3e8e89698cea6831a8418
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-handler/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-handler/main/hashes
new file mode 100644
index 0000000..677a7ef
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-handler/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d0527c530e1a3f31681c8696a5e59bb3bdfb4e23
+netty-handler-4.1.112.Final.jar
+3d5e2d5bcc6baeeb8c13a230980c6132a778e036
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-resolver-dns/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-resolver-dns/main/hashes
new file mode 100644
index 0000000..22210d2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-resolver-dns/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d6cb4a71e47f9f14b34d452f602a203fe2fbea4f
+netty-resolver-dns-4.1.112.Final.jar
+375872f1c16bb51aac016ff6ee4f5d28b1288d4d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-resolver/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-resolver/main/hashes
new file mode 100644
index 0000000..3837067
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-resolver/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+0a32d197a9185d7b58033a081a9eeb9793c1579f
+netty-resolver-4.1.112.Final.jar
+58a631d9d44c4ed7cc0dcc9cffa6641da9374d72
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/hashes
new file mode 100644
index 0000000..bdd4290
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+863e4219a1dfc002dcf1994b6cd2f769c19cb9ea
+netty-transport-classes-epoll-4.1.112.Final.jar
+67e590356eb53c20aaabd67f61ae66f628e62e3d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/hashes
new file mode 100644
index 0000000..5d9a7b7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/hashes
@@ -0,0 +1,4 @@
+libnetty_transport_native_epoll_aarch_64.so
+d91245bbfc0a28956ac3ff4462e6538258d61549
+libnetty_transport_native_epoll_x86_64.so
+ac0a9a606bad55960a9eee49abb0c3e5d6f9b6ec
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/hashes
new file mode 100644
index 0000000..d49ef46
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4dc70a8a40c219dcf7e13578fd0a43f2bc9ede16
+netty-transport-classes-kqueue-4.1.112.Final.jar
+c3dffba44e055e3b26df6ab0373a95cc869aa1a5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/hashes
new file mode 100644
index 0000000..d3a20a4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/hashes
@@ -0,0 +1,4 @@
+libnetty_transport_native_kqueue_aarch_64.jnilib
+b516398cee63916f2ae9f6a3466c8cd294dfa057
+libnetty_transport_native_kqueue_x86_64.jnilib
+41324ce328616888f599b871e34a4682b6dae7c4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/hashes
new file mode 100644
index 0000000..5867043
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/hashes
@@ -0,0 +1,10 @@
+module.xml
+f2abb9553117379fa9b2c31f4ada68f1bcb266a0
+netty-transport-native-unix-common-4.1.112.Final-linux-aarch_64.jar
+40af10f2e9d2f880fa0483aba72fe1dcc9cae7c1
+netty-transport-native-unix-common-4.1.112.Final-linux-x86_64.jar
+ac9a4b5356bc670876b8b4f6168cdcd36e754c97
+netty-transport-native-unix-common-4.1.112.Final-osx-aarch_64.jar
+5e0581a5c6fa67fe60de9aced9cb1e7f72760a3f
+netty-transport-native-unix-common-4.1.112.Final-osx-x86_64.jar
+f0f3d7fb98730167563f46ed3a28de350020ade1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport/main/hashes
new file mode 100644
index 0000000..4baeffa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/netty/netty-transport/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+0fc10d2d691968f00f250fee76a68990c8731705
+netty-transport-4.1.112.Final.jar
+77cd136dd3843f5e7cbcf68c824975d745c49ddb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/api/events/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/api/events/main/hashes
new file mode 100644
index 0000000..eab6384
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/api/events/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b72dd90eba7b4b30a1b6300e38586291d964b9e5
+opentelemetry-api-events-1.29.0-alpha.jar
+cdc6b637c6374d4ae4be5cad381f6a566fb4310e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/api/main/hashes
new file mode 100644
index 0000000..8bf22e8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5ae30518f673e863225d06b9f09e02b59e999f7a
+opentelemetry-api-1.29.0.jar
+45010687a1181dc886fd12403e48cf76e94c65b1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/context/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/context/main/hashes
new file mode 100644
index 0000000..76a55a7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/context/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e10b8c675381e92b7420d16a33ee4ec582a66a61
+opentelemetry-context-1.29.0.jar
+a4cf6857f268b9637ea330fffc70c1e6421d1d55
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/exporter/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/exporter/main/hashes
new file mode 100644
index 0000000..7fa7fd6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/exporter/main/hashes
@@ -0,0 +1,6 @@
+jackson-jr-objects-2.17.0.jar
+6cb65146f087913a83c45b6ac545a14abab87f5d
+module.xml
+af28c92284c884561f7af1c551cca1d79346e21c
+opentelemetry-exporter-common-1.29.0.jar
+7fa947205c2e85383c5b24139325f36a9e474067
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/hashes
new file mode 100644
index 0000000..292d43c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+d66d51ec88bc115ef02e7b89624373fc41b9cf88
+opentelemetry-instrumentation-annotations-1.29.0.jar
+6edb53b63c1f46226225eb133fc07d260e1e17e8
+opentelemetry-instrumentation-annotations-support-1.29.0-alpha.jar
+73caf0c51d7ef8020b247b6e412cd7558a2c9669
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/hashes
new file mode 100644
index 0000000..ff94e83
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+12eadfa399dd92c79c2fb402fca9614f48f71c44
+opentelemetry-instrumentation-api-1.29.0.jar
+3b556416c538d67851a93f4504fff927a6d4e259
+opentelemetry-instrumentation-api-semconv-1.29.0-alpha.jar
+8535f5de435a6fd30022ff7ab5aefabadd39fa6d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/otlp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/otlp/main/hashes
new file mode 100644
index 0000000..a195361
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/otlp/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+c9d82787b8d2ceabe922cdfa51fbbca1b056c1a4
+opentelemetry-exporter-otlp-1.29.0.jar
+471956f2773b5409355a09da6ef4cb8976c82db2
+opentelemetry-exporter-otlp-common-1.29.0.jar
+992edd4ba5d473abcd6b4ca126f11149b2bdba0c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/proto/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/proto/main/hashes
new file mode 100644
index 0000000..075d28d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/proto/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a19996c9d304145ff01fc6990002248660855fc1
+opentelemetry-proto-0.20.0-alpha.jar
+08771bb034e6a5bdb54f665015dd70989f3af1dd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/sdk/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/sdk/main/hashes
new file mode 100644
index 0000000..7d27f56
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/sdk/main/hashes
@@ -0,0 +1,16 @@
+module.xml
+844e4bba65c9dd94701d30bd02ffbc652459582c
+opentelemetry-sdk-1.29.0.jar
+5d3a0e83ab6a2849c5b4123d539f994a721ddcd5
+opentelemetry-sdk-common-1.29.0.jar
+a4a84b83c226c91a54bd0e9244d49908875cea3a
+opentelemetry-sdk-extension-autoconfigure-1.29.0.jar
+36bd08550cbdcc4f58a4949e0f97f97443220a2d
+opentelemetry-sdk-extension-autoconfigure-spi-1.29.0.jar
+b810dedc1fc8b28892eca5fa945e1c82cb95be4f
+opentelemetry-sdk-logs-1.29.0.jar
+68151d4465c12183db8edc4f9d8f0a878bada16b
+opentelemetry-sdk-metrics-1.29.0.jar
+6bb59616f1180286bc2ccf40e34d636984581ba9
+opentelemetry-sdk-trace-1.29.0.jar
+1008bf3794f6fc10238b1f63d0546ae817ad1783
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/semconv/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/semconv/main/hashes
new file mode 100644
index 0000000..c0e7dd7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/opentelemetry/semconv/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4e5edb8b00f2b4c37507095bc1e27e7c441eb96b
+opentelemetry-semconv-1.29.0-alpha.jar
+8ee51f51d9c1c959b537c8dba67d7a524204b974
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/hashes
new file mode 100644
index 0000000..4951d5b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+419aba5903f8f4bd9fe8c0d6058b0eefa09acc52
+rxjava-2.2.21.jar
+6f13f24c44567fc660aab94d639cda9f0fe95628
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/hashes
new file mode 100644
index 0000000..a8f7127
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+acbfff5ca0bb8621e85525b180c2d8350625f4ef
+rxjava-3.1.9.jar
+48e7bf08885ac9b539cd0632a4cb0cdbc119d7cd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/annotation/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/annotation/main/hashes
new file mode 100644
index 0000000..03fbcbb
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/annotation/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+df62c8cf2d8994ea6d785bd6402eabba6cd31a4c
+smallrye-common-annotation-2.5.0.jar
+54575b7610b6b189ef7c37f0f6168c87b25d21b7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/classloader/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/classloader/main/hashes
new file mode 100644
index 0000000..85caff9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/classloader/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9fdb2784d97e1aa8b53575ee27baf3aac094a092
+smallrye-common-classloader-2.5.0.jar
+78b0875cf23df5484abf936bf4f7b88b818a6cb1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/constraint/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/constraint/main/hashes
new file mode 100644
index 0000000..fceac58
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/constraint/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c0517e0d53f41de17600852ada2b3f16516749b3
+smallrye-common-constraint-2.5.0.jar
+9f4db695157c32d3e2f57e839e6ee26c62ffb0c5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/expression/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/expression/main/hashes
new file mode 100644
index 0000000..f2e1fc8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/expression/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+0d6620464c806375a51128510b3f22801fea4e30
+smallrye-common-expression-2.5.0.jar
+642efea7327a3a629be98b91d64cf0460379a0de
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/function/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/function/main/hashes
new file mode 100644
index 0000000..c384e93
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/function/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+08924090aae6bc1a39b1a97a6ddef8dca72a6281
+smallrye-common-function-2.5.0.jar
+2446bbfb678b8714773c63a8817029f4e10d710d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/vertx-context/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/vertx-context/main/hashes
new file mode 100644
index 0000000..87c75df
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/common/vertx-context/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3de044dcb13eefee2a7f2391f271c9414a3d389c
+smallrye-common-vertx-context-2.5.0.jar
+80bcc663ff7bfd0a836ec2d5a51e450b1431480b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/config/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/config/main/hashes
new file mode 100644
index 0000000..c6e19ab
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/config/main/hashes
@@ -0,0 +1,10 @@
+module.xml
+2671ffa5db8aaa296864f7a45f6a7d9529aa0c3e
+smallrye-config-3.9.1.jar
+db69e3239e5a75d6928d86400e2afb751a3acbbd
+smallrye-config-common-3.9.1.jar
+de6d57980444f662c42c2c39e8f9186c445560fb
+smallrye-config-core-3.9.1.jar
+b2343758437289cd9d7ffb5401b8526378bf8e73
+smallrye-config-source-file-system-3.9.1.jar
+cf4652740e690ad3556aed0bd03a1e9c92d5a7dc
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/fault-tolerance/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/fault-tolerance/main/hashes
new file mode 100644
index 0000000..400e537
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/fault-tolerance/main/hashes
@@ -0,0 +1,10 @@
+module.xml
+fd273b82ac66aaf34d865a2de6d46ef12e08b84d
+smallrye-fault-tolerance-6.4.0.jar
+0662eecac1bae3c4f6ee901a21381478625f5c50
+smallrye-fault-tolerance-api-6.4.0.jar
+b2bdc0f633a1204c1ea8a5b80f1182b7172c2bc3
+smallrye-fault-tolerance-autoconfig-core-6.4.0.jar
+472db528556bf83bad4a2174e06582c25188c7be
+smallrye-fault-tolerance-core-6.4.0.jar
+a2bc5aee3ec05844361fc82f767e2d73d5340839
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/health/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/health/main/hashes
new file mode 100644
index 0000000..78a918c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/health/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+68b20823132b0a2ce1dedfb6aca4f39826c8ce72
+smallrye-health-4.0.4.jar
+58314c5b3234c68ec3b7a218adc8f620648036b5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/jandex/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/jandex/main/hashes
new file mode 100644
index 0000000..4d79df5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/jandex/main/hashes
@@ -0,0 +1,4 @@
+jandex-3.2.2.jar
+fc728e126caef7ce1f83872758c07e98b465e2c1
+module.xml
+fa16560ba2e5b936f0fdd7ffc2b6da769dc27476
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/jwt/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/jwt/main/hashes
new file mode 100644
index 0000000..0c718c3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/jwt/main/hashes
@@ -0,0 +1,10 @@
+module.xml
+783353b37c92da4ec7cc9b0dd18c97d0a1e36fa4
+smallrye-jwt-4.3.1.jar
+00f1df087ab1832779d1d44c36b9cebc0c95b26a
+smallrye-jwt-cdi-extension-4.3.1.jar
+6c134e90b7c30b944084508b47d1a4d0686de1fc
+smallrye-jwt-common-4.3.1.jar
+9962b23ca5b0c51df160f7c217617b2a2046873e
+smallrye-jwt-http-mechanism-4.3.1.jar
+2d03a8369f97c58583c7c6170329c4e8dc96c2e2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/openapi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/openapi/main/hashes
new file mode 100644
index 0000000..f920629
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/openapi/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+a59e580b193b63741f45908451cde7a533e3815d
+smallrye-open-api-core-3.10.0.jar
+f0f275279a50b856d6e8f42fa0b7a9a4889b4fcc
+smallrye-open-api-jaxrs-3.10.0.jar
+30b493acdcdbf4b635741cd2cbbdd3decafc7d6d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/opentelemetry/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/opentelemetry/main/hashes
new file mode 100644
index 0000000..6a163fd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/opentelemetry/main/hashes
@@ -0,0 +1,12 @@
+module.xml
+fd54c865f6dad7d5b4bd6f1a5fbd43afc2367ccb
+smallrye-opentelemetry-api-2.6.0.jar
+7518adf82c9d104b344f1552a652d78431c091fe
+smallrye-opentelemetry-cdi-2.6.0.jar
+d6b187fa936c71f62a2a94966b6c7b37c9592a8d
+smallrye-opentelemetry-exporters-2.6.0.jar
+4d70df959d99c3a32215bbf5245e909ad761292a
+smallrye-opentelemetry-propagation-2.6.0.jar
+11012e346f7e7460453e6e154fab8be5c5684928
+smallrye-opentelemetry-rest-2.6.0.jar
+6443ce33011846ab405b0844ff44f5b7da149bef
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/converters/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/converters/api/main/hashes
new file mode 100644
index 0000000..b6e1fa4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/converters/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+562636ce3079380b503bfe6c3a5d357eb4a779ba
+smallrye-reactive-converter-api-2.6.0.jar
+fad9ca6fe7748c4b5e20f6e3dbbc5a2859a692c2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/hashes
new file mode 100644
index 0000000..0f91322
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3bd4ec88945af2cbe4ec411b4325deab7c52eb4c
+smallrye-reactive-messaging-amqp-4.24.0.jar
+3e95fb430846ffbfaf94056660cffe56eeb44ed1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/hashes
new file mode 100644
index 0000000..dbc7cee
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+377ac8e32fd304d01ee471a36566df3df7a759cd
+smallrye-reactive-messaging-kafka-api-4.24.0.jar
+126ef67c2aeb91c4de14a993a5a6d5f12b9a0fb6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/hashes
new file mode 100644
index 0000000..27e6099
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e85cc7ef40ac1f84c5a6dfa747dc27e970fc2bae
+smallrye-reactive-messaging-kafka-4.24.0.jar
+d3e1e41ee9f140e81f7f52918fbd0898ac44e32f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/main/hashes
new file mode 100644
index 0000000..c3f23b8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/connector/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+1ea14d75f4820c1ffc3410c125474011a1c29b58
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/main/hashes
new file mode 100644
index 0000000..0fda480
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/messaging/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+28c097e73496229fa35c5dce56094ed6f07dfa25
+smallrye-reactive-messaging-provider-4.24.0.jar
+d8e73cfc97081cb42689082cf609cad4ed98adc8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/main/hashes
new file mode 100644
index 0000000..9a4a58e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5b03df6f6331bc9f09659407e2c49f865d6308b2
+mutiny-2.6.2.jar
+a9d048d316c5edf294946d672985d45dc074bcd3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/hashes
new file mode 100644
index 0000000..678f782
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+83a8b29ec75115ca7cf1e8db68a9874ef2a57798
+mutiny-reactive-streams-operators-2.6.2.jar
+c5ada555742152afac4d961aa86777cd4946f987
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/hashes
new file mode 100644
index 0000000..be6c974
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d1a7b19c3a907dde34f8c3c35d75fe59ce7c96a0
+smallrye-mutiny-vertx-amqp-client-3.13.2.jar
+5fd22dfc43acb54be9e30836f9823c40d565453a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/hashes
new file mode 100644
index 0000000..9e9f11a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9ac05985e65f8103daf0c765b115a8ba048aa3c0
+smallrye-mutiny-vertx-core-3.13.2.jar
+1e3c1091bc13490ff5f324c492a83ffa3a729d63
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/hashes
new file mode 100644
index 0000000..75b1d28
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e309cb778ff68e75b14e728cba3a091559018ff6
+smallrye-mutiny-vertx-kafka-client-3.13.2.jar
+2444867036204d7cd8716531fe5ee4c5706ddc56
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/hashes
new file mode 100644
index 0000000..43bfd42
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c4b4b595c25fa12cf2025c0f4037cc0578d26fc6
+smallrye-mutiny-vertx-runtime-3.13.2.jar
+16278a0f51437a110163129164f3ed2c4cb7cddd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/hashes
new file mode 100644
index 0000000..da26fa4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+fe37263f30c00c7b2a20687ce7654d109bed839c
+mutiny-zero-flow-adapters-1.1.0.jar
+4310dc4d38540f1ff946f6099f7d9fb69a61b696
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/hashes
new file mode 100644
index 0000000..9727670
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6d4ba3200cfcf51460c6e8ea92e557abece579ef
+mutiny-zero-1.1.0.jar
+1166d9ecdc4d06b5a2ebbd43ca76258db13062aa
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/core/main/hashes
new file mode 100644
index 0000000..c56b61d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/core/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7391cc22298613c165e82b332b089cd284a9ed2e
+undertow-core-2.3.17.Final.jar
+b99fed301cd9840dfa220c74d3333cf34d877e68
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/jsp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/jsp/main/hashes
new file mode 100644
index 0000000..c3270a1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/jsp/main/hashes
@@ -0,0 +1,4 @@
+jastow-2.2.8.Final.jar
+79b5a9d7f6d7b601925d17a8a50b3970a49adca3
+module.xml
+30e7c5cca7f0c20d3e8993d9d952986111a5dd71
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/servlet/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/servlet/main/hashes
new file mode 100644
index 0000000..26f5778
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/servlet/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+50a5629c9e41c9707fc7b14a6ad9223a76628423
+undertow-servlet-2.3.17.Final.jar
+5f0c26c02f877be8fa52b4ae944dac4061c9e1ab
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/websocket/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/websocket/main/hashes
new file mode 100644
index 0000000..6a339e9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/undertow/websocket/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+67057515068e64f8c60e626d14ada9b5ea588dc2
+undertow-websockets-jsr-2.3.17.Final.jar
+f8042cbe55d1138c0345c27f8246b2447e81ee65
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/amqp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/amqp/main/hashes
new file mode 100644
index 0000000..6d5b712
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/amqp/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c6b6811b27cab2e77d7496417690ab95fe5eb6a4
+vertx-amqp-client-4.5.10.jar
+2c9e5a1bd843fa7c11d5ade070aff92ac4901dd3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/kafka/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/kafka/main/hashes
new file mode 100644
index 0000000..69c8025
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/kafka/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+84114c34e6be8522b1dbff8a654d95d76e47d1fe
+vertx-kafka-client-4.4.9.jar
+3c03d69236190617bee252b441bad18851f7d08d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/main/hashes
new file mode 100644
index 0000000..671e4f2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/client/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+60683c43e6dbc0daddc2816ce0e83a362005088d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/core/main/hashes
new file mode 100644
index 0000000..a9fab33
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/core/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1284467828f6bd74b2b711b22d179067545c3f77
+vertx-core-4.5.10.jar
+ea8f5e6d69b47b87f595e70f5ad708b1a2f47c40
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/grpc-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/grpc-client/main/hashes
new file mode 100644
index 0000000..37b0198
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/grpc-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+62a2b9358d5d2ea4e0e2b723f61262377aafe943
+vertx-grpc-client-4.5.10.jar
+a4afc5e68416061b14c14f0a5e020aa8c5f5e47f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/grpc-common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/grpc-common/main/hashes
new file mode 100644
index 0000000..acc4c4d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/grpc-common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+18da7de7837cc2f438cdfaee2bf0311bbed0ca13
+vertx-grpc-common-4.5.10.jar
+64f8da7cd2a906040bb8cc17f34587cccfa1234f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/proton/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/proton/main/hashes
new file mode 100644
index 0000000..a6488de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/io/vertx/proton/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+54857144604eb2f2d1b93491395ab8df609b61a5
+vertx-proton-4.5.10.jar
+370480f3367ada016a9334eb6747eb5dfc36a8b8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/activation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/activation/api/main/hashes
new file mode 100644
index 0000000..0e1051e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/activation/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.activation-api-2.1.3.jar
+fa165bd70cda600368eee31555222776a46b881f
+module.xml
+e26526a036503eaad428c37d97b6fea9a323ca2b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/annotation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/annotation/api/main/hashes
new file mode 100644
index 0000000..91698ac
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/annotation/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.annotation-api-2.1.1.jar
+48b9bda22b091b1f48b13af03fe36db3be6e1ae3
+module.xml
+41b67207d862beb378daba79574b536c0c527371
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/batch/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/batch/api/main/hashes
new file mode 100644
index 0000000..af7986d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/batch/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.batch-api-2.1.1.jar
+dfd728f3fc2f086484410ba2e5d06a26a371ed1d
+module.xml
+3358814578a7180a918df8f7ebea76289215c01c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/ejb/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/ejb/api/main/hashes
new file mode 100644
index 0000000..7852e8e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/ejb/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.ejb-api-4.0.1.jar
+70f6c55dad415f58b8428ae4bb215484368b8764
+module.xml
+7930c1236c2307e2efe21d420d3ab9a033954995
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/el/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/el/api/main/hashes
new file mode 100644
index 0000000..66870ae
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/el/api/main/hashes
@@ -0,0 +1,4 @@
+jboss-el-api_5.0_spec-4.0.1.Final.jar
+51a054e7a25d6c6a074f477170d9b4e14b796d10
+module.xml
+2aa0233d68041920f458538fee5c8d22a5810b6c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/enterprise/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/enterprise/api/main/hashes
new file mode 100644
index 0000000..d7c2efa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/enterprise/api/main/hashes
@@ -0,0 +1,6 @@
+jakarta.enterprise.cdi-api-4.0.1.jar
+2012f388c6de83e29101cbf82c3ed2bd37931c64
+jakarta.enterprise.lang-model-4.0.1.jar
+2b195781faad31c1724d8122136909c34c3ae79e
+module.xml
+6795b584e201bebba329b8e1e22330035c018c57
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/hashes
new file mode 100644
index 0000000..594fa9c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.enterprise.concurrent-api-3.0.3.jar
+88e8071c53a6f10855e60e38e60a56ed5b8adfd6
+module.xml
+965f8ef5046225c851036a47ab0e9e634b0e2f50
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/faces/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/faces/api/main/hashes
new file mode 100644
index 0000000..02c46d6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/faces/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+93ba97dee5ed64c631f9abdf5554f3cc771a9c95
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/faces/impl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/faces/impl/main/hashes
new file mode 100644
index 0000000..fa983f5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/faces/impl/main/hashes
@@ -0,0 +1,4 @@
+jakarta.faces-4.0.7.jar
+9e684f08dabfa7da26d4823ceb5bafdc6084f3ae
+module.xml
+6686681e5f81a8ca79224f110986474156ae253a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/inject/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/inject/api/main/hashes
new file mode 100644
index 0000000..55fcc33
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/inject/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.inject-api-2.0.1.jar
+4c28afe1991a941d7702fe1362c365f0a8641d1e
+module.xml
+ba722619af180806016ba1012ba234993a50b6fd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/interceptor/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/interceptor/api/main/hashes
new file mode 100644
index 0000000..5b61ddd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/interceptor/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.interceptor-api-2.1.0.jar
+1d06a662708601400af4556577ee514c4ad01549
+module.xml
+f9e23a47b7e032e366d8ea8c012fcbe9ada06f74
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/jms/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/jms/api/main/hashes
new file mode 100644
index 0000000..b7cad9b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/jms/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.jms-api-3.1.0.jar
+e194cf91a3f908e4846542849ac11a8e0b3c68ad
+module.xml
+b7571cf57333fbfa5bcb6d8a7cc3b141792261b1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/json/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/json/api/main/hashes
new file mode 100644
index 0000000..0562e58
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/json/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.json-api-2.1.3.jar
+4febd83e1d9d1561d078af460ecd19532383735c
+module.xml
+c6cfe05d10446c66909b321a3f2ce9e14fdb7ba4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/json/bind/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/json/bind/api/main/hashes
new file mode 100644
index 0000000..98d6079
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/json/bind/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.json.bind-api-3.0.1.jar
+af7f10b8aa6475b6f6cc9d47ad85748629d05b79
+module.xml
+425ce9ab0d7916dfdda2da7d2db9613eeb559e07
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/mail/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/mail/api/main/hashes
new file mode 100644
index 0000000..43e7807
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/mail/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.mail-api-2.1.3.jar
+a327aa5f514ba86e80d54584417d7376ed2bde0e
+module.xml
+93033de85544590675928e41a5f88e66724a84d6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/mvc/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/mvc/api/main/hashes
new file mode 100644
index 0000000..e2c45cf
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/mvc/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.mvc-api-2.1.0.jar
+e0e4b626aa77665673602128bee749485cb5fef1
+module.xml
+3c62b1ff3a6b2d5d5418a4219c2f7fa49d497443
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/persistence/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/persistence/api/main/hashes
new file mode 100644
index 0000000..7503cd8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/persistence/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.persistence-api-3.1.0.jar
+66901fa1c373c6aff65c13791cc11da72060a8d6
+module.xml
+f9e8322e26931140e27211d0f11d6f872dacb1f8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/resource/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/resource/api/main/hashes
new file mode 100644
index 0000000..fb35a3d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/resource/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.resource-api-2.1.0.jar
+d98f0ac826cdc85f80061c21bc061841ac6d374c
+module.xml
+d692ed0461eb679da0b94bc75317721e73f63794
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/auth/message/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/auth/message/api/main/hashes
new file mode 100644
index 0000000..796a901
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/auth/message/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.authentication-api-3.0.0.jar
+e1e3503070dcddcc9e24a062f734069446a99bc3
+module.xml
+57bb63c7ff0c23534c4171bb77cb969a86516907
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/enterprise/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/enterprise/api/main/hashes
new file mode 100644
index 0000000..a02a849
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/enterprise/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.security.enterprise-api-3.0.0.jar
+ca9d8039c16db579b7d45813015c8d677105bc0f
+module.xml
+9face788ef3e11fc025cd4ccf3e4d37cda6b3278
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/jacc/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/jacc/api/main/hashes
new file mode 100644
index 0000000..eb9214f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/security/jacc/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.authorization-api-2.1.0.jar
+31be189d7aa43710ac9a2ee422de3df1314deea8
+module.xml
+e6a555623bda2abc63db97ae5eb04fdc8c526c23
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/api/main/hashes
new file mode 100644
index 0000000..69fb7ff
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.servlet-api-6.0.0.jar
+abecc699286e65035ebba9844c03931357a6a963
+module.xml
+13d8fba83bf7a09de70ef25486eba4803f1c0799
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/jsp/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/jsp/api/main/hashes
new file mode 100644
index 0000000..f3cbd10
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/jsp/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.servlet.jsp-api-3.1.1.jar
+47d30c6abf7ad834f21a0e45593bff25dbf7d7ee
+module.xml
+fbf6d94837a562d2c96b0f5f02ab19c1283cbabd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/jstl/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/jstl/api/main/hashes
new file mode 100644
index 0000000..df40d6b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/servlet/jstl/api/main/hashes
@@ -0,0 +1,6 @@
+jakarta.servlet.jsp.jstl-3.0.1-jbossorg-1.jar
+ef0e93aede12f124bb68f02f8c95ec700d553128
+jakarta.servlet.jsp.jstl-api-3.0.2.jar
+3993114cd341afa42b2c2841c88ef653fa7ef3ee
+module.xml
+57befac07b3366cf0932e9f69616ef1836fd6121
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/transaction/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/transaction/api/main/hashes
new file mode 100644
index 0000000..9f6173d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/transaction/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.transaction-api-2.0.1.jar
+51a520e3fae406abb84e2e1148e6746ce3f80a1a
+module.xml
+14dc6db319fd5989baad686fdc0e63285440aa79
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/validation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/validation/api/main/hashes
new file mode 100644
index 0000000..d85494d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/validation/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.validation-api-3.0.2.jar
+92b6631659ba35ca09e44874d3eb936edfeee532
+module.xml
+aa37217854aa5987fbcdec8977e77e9b2caaa655
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/websocket/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/websocket/api/main/hashes
new file mode 100644
index 0000000..55e8883
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/websocket/api/main/hashes
@@ -0,0 +1,6 @@
+jakarta.websocket-api-2.1.1.jar
+d3614cd4fe86803efe3f94d57f17925d3edff712
+jakarta.websocket-client-api-2.1.1.jar
+bc149b7e22d6b2372835a3124cbcf24924982874
+module.xml
+3c04743e5ab18747bc67d07f6343892a15745d17
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/ws/rs/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/ws/rs/api/main/hashes
new file mode 100644
index 0000000..9386a94
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/ws/rs/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.ws.rs-api-3.1.0.jar
+15ce10d249a38865b58fc39521f10f29ab0e3363
+module.xml
+e336f6547ec6be33d0f8518f6ce898dded5c0724
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/bind/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/bind/api/main/hashes
new file mode 100644
index 0000000..1ede097
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/bind/api/main/hashes
@@ -0,0 +1,4 @@
+jakarta.xml.bind-api-4.0.2.jar
+6cd5a999b834b63238005b7144136379dc36cad2
+module.xml
+9931136a6a3803e25011fff4300e38f4d75745ef
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/soap/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/soap/api/main/hashes
new file mode 100644
index 0000000..843cfcd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/soap/api/main/hashes
@@ -0,0 +1,4 @@
+jboss-saaj-api_3.0_spec-1.0.0.Final.jar
+4515c94374f92daa56bf077f733e8b4242215b1e
+module.xml
+8a193e28c94c1c393e9b1750614a239bbb1d5c24
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/ws/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/ws/api/main/hashes
new file mode 100644
index 0000000..f44d5fe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/jakarta/xml/ws/api/main/hashes
@@ -0,0 +1,4 @@
+jboss-jakarta-xml-ws-api_4.0_spec-1.0.0.Final.jar
+73ec4238a0e0c8960f6ac746453df7be5c054307
+module.xml
+b15704ec01df347cd7141f189059b09147c64518
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javaee/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javaee/api/main/hashes
new file mode 100644
index 0000000..f8d54a4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javaee/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+942806186dec4538f9994128a5fee41fe7e6e2ee
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/activation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/activation/api/main/hashes
new file mode 100644
index 0000000..6bc71a3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/activation/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f921c2ba1fdfa8bf951f52c3e090de06d846d60f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/annotation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/annotation/api/main/hashes
new file mode 100644
index 0000000..0c36d99
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/annotation/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+37a744002956b01cc8a630c6c53d03a8ea721210
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/api/main/hashes
new file mode 100644
index 0000000..7e4a9f6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+72e2b2d1ca7707b939f572ef8d998732f10fc905
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/batch/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/batch/api/main/hashes
new file mode 100644
index 0000000..8f97ec6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/batch/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+6a193b2cf3e5b87640a50434bd73959a945a8c45
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/ejb/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/ejb/api/main/hashes
new file mode 100644
index 0000000..3ff8660
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/ejb/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f8689ec81bdb3d68233440986f5129c1b64243e9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/el/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/el/api/main/hashes
new file mode 100644
index 0000000..be81867
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/el/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+2a9dc053e713cc7349e163d835ad695bd07cb14c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/enterprise/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/enterprise/api/main/hashes
new file mode 100644
index 0000000..0c3d6d0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/enterprise/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+3c84f40b80fcecfdb6ffb4e9d962b7cd3727c641
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/enterprise/concurrent/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/enterprise/concurrent/api/main/hashes
new file mode 100644
index 0000000..a66d437
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/enterprise/concurrent/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+54cd4d1c6b604d70e4d55a0645827d75a021a48f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/faces/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/faces/api/main/hashes
new file mode 100644
index 0000000..e4c40d8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/faces/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+99303efbd52e805deecf61662fdb4a283f549c13
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/inject/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/inject/api/main/hashes
new file mode 100644
index 0000000..34bef37
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/inject/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+607116ba416f78d5485f05be5f1be52e3c036714
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/interceptor/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/interceptor/api/main/hashes
new file mode 100644
index 0000000..dc121de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/interceptor/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+932175712dfa55593b02fb02a304dc1d5ac7796c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/jms/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/jms/api/main/hashes
new file mode 100644
index 0000000..d874bf1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/jms/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+6aa754af5525f7be2b7fb446e557730526effc29
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/json/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/json/api/main/hashes
new file mode 100644
index 0000000..c06910a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/json/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+3b1a0c1b66b41b7796616072db8358aff7741362
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/json/bind/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/json/bind/api/main/hashes
new file mode 100644
index 0000000..c0cdc53
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/json/bind/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+2b5afa617ce80edbfd596f60489fe0aaa52ac6f1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/jws/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/jws/api/main/hashes
new file mode 100644
index 0000000..287e537
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/jws/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+ddc8855201226b4e374e5eca00f2109574f4e3b1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/mail/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/mail/api/main/hashes
new file mode 100644
index 0000000..2977af5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/mail/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+1273383e562673fa22b8f24abbec14d48c8af992
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/orb/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/orb/api/main/hashes
new file mode 100644
index 0000000..37ed404
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/orb/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+883ebc14010753e020a554116b822e1eeb6ab1ac
+openjdk-orb-10.1.0.Final.jar
+59eb5486f4f553f66d0a65ef3bb8fc1f87df8e6f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/persistence/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/persistence/api/main/hashes
new file mode 100644
index 0000000..eb98638
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/persistence/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+c9468a916839ce8f0a881a47f902e642afb8ff88
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/resource/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/resource/api/main/hashes
new file mode 100644
index 0000000..42da00a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/resource/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+9f6439f7995cc64f18963ebfb2ec1128ede9c6f8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/rmi/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/rmi/api/main/hashes
new file mode 100644
index 0000000..3219a14
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/rmi/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+c77c07f1581505192ef65de902e340317d796c27
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/auth/message/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/auth/message/api/main/hashes
new file mode 100644
index 0000000..54609e3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/auth/message/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+00c0960b28c14d029b288a8ea7c73e8ddebdbb2a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/enterprise/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/enterprise/api/main/hashes
new file mode 100644
index 0000000..2fb0be5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/enterprise/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+eb055ea0a9aa88e87db29f6b02b596961e57b72d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/jacc/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/jacc/api/main/hashes
new file mode 100644
index 0000000..7dd764b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/security/jacc/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+8106af8aa12e239ce68a3d86d1a3b655d45ee5ea
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/api/main/hashes
new file mode 100644
index 0000000..525994d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f414a1cc7cd512dddcf2a11bdad63a6720499e8a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/jsp/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/jsp/api/main/hashes
new file mode 100644
index 0000000..1b0ab8d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/jsp/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+6b01313f8debaacc2165c3789f22fdb8c1003123
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/jstl/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/jstl/api/main/hashes
new file mode 100644
index 0000000..b44f8c1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/servlet/jstl/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f23633ef90ef0050fe012c1d09c713e044e817e3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/sql/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/sql/api/main/hashes
new file mode 100644
index 0000000..21e0910
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/sql/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+47542f620d335193d5bf843f187319c961d8dd27
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/transaction/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/transaction/api/main/hashes
new file mode 100644
index 0000000..d756e06
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/transaction/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+9fae5c4a7d8216c5d586a0baf281cba39ff0c5cf
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/validation/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/validation/api/main/hashes
new file mode 100644
index 0000000..51f8b2d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/validation/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+4c197ef01469c178397cbfe2d15c09b51cb3f245
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/websocket/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/websocket/api/main/hashes
new file mode 100644
index 0000000..27005a5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/websocket/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+ffb7701eb6d7968ea8edf12ff6bf7dc2f852537d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/ws/rs/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/ws/rs/api/main/hashes
new file mode 100644
index 0000000..7a050d9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/ws/rs/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+cb7e44beff2beaaf89284e9e1134c994f0791aff
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/wsdl4j/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/wsdl4j/api/main/hashes
new file mode 100644
index 0000000..6a13fa4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/wsdl4j/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9c92d7eaeba8361fbb08cd3d72bfdde6b0823273
+wsdl4j-1.6.3.jar
+6d106a6845a3d3477a1560008479312888e94f2f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/bind/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/bind/api/main/hashes
new file mode 100644
index 0000000..202e350
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/bind/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+bba1b556cdd49cf1d3410f60e300feb231a99f32
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/soap/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/soap/api/main/hashes
new file mode 100644
index 0000000..823525d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/soap/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+c83483a5cafcd0e0a1d057f89f816fa24f3849e9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/stream/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/stream/api/main/hashes
new file mode 100644
index 0000000..74498c0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/stream/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+334e531ddaec43a491bdaea650ab521500662095
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/ws/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/ws/api/main/hashes
new file mode 100644
index 0000000..0aa32fa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/javax/xml/ws/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+7ae9d6d452b8bf8631dcafcf61508223bf5cf683
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/net/bytebuddy/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/net/bytebuddy/main/hashes
new file mode 100644
index 0000000..56b5398
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/net/bytebuddy/main/hashes
@@ -0,0 +1,4 @@
+byte-buddy-1.14.18.jar
+0081e9b9a20944626e6757b5950676af901c2485
+module.xml
+49da42fc7ed4c21d84a939baa78921c3eef44c7f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/net/jcip/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/net/jcip/main/hashes
new file mode 100644
index 0000000..cc2944c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/net/jcip/main/hashes
@@ -0,0 +1,4 @@
+jcip-annotations-1.0.jar
+afba4942caaeaf46aab0b976afd57cc7c181467e
+module.xml
+a38bbd85cb47d36e1af426a20feabb44cab55fea
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/aesh/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/aesh/main/hashes
new file mode 100644
index 0000000..d723921
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/aesh/main/hashes
@@ -0,0 +1,8 @@
+aesh-2.4.jar
+40d95d2a707a25fa41aa390cf719292f19f625e4
+aesh-extensions-1.8.jar
+78073b44d1c4b53bb02eaeb264c4a3ee551b84c6
+module.xml
+9ba714710f12e0e17e6752bbef95c91f720131e6
+readline-2.2.jar
+0cf54ff74c7d9a56ea382ad326723aed566759a7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/antlr/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/antlr/main/hashes
new file mode 100644
index 0000000..421730c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/antlr/main/hashes
@@ -0,0 +1,6 @@
+antlr4-4.13.0.jar
+9de576e69845e1d92da3479dd481677efdf21d52
+antlr4-runtime-4.13.0.jar
+5a02e48521624faaf5ff4d99afc88b01686af655
+module.xml
+e3bfe3ed692b3f02c3f90c7dffd199efa5ae2284
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/client/main/hashes
new file mode 100644
index 0000000..2fab456
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/client/main/hashes
@@ -0,0 +1,10 @@
+artemis-core-client-2.37.0.jar
+fa0e8aac1d0db695995c2616120345c2bcd77326
+artemis-hqclient-protocol-2.37.0.jar
+2950d87a5ea8f048eb9b48e0af59970a6e3f5f70
+artemis-jakarta-client-2.37.0.jar
+313a3342089f9aa925a5d71af015b8cff69b64a2
+artemis-selector-2.37.0.jar
+4ece0fb9fbdd4df8bb643478d7c0d8a6051a8b9b
+module.xml
+f380bdf85ffd7ee23b096740cafd43d49e34d645
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/commons/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/commons/main/hashes
new file mode 100644
index 0000000..49bcb6b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/commons/main/hashes
@@ -0,0 +1,4 @@
+artemis-commons-2.37.0.jar
+f504f11c93d3f9614f042f72ef6fe4999b4f278c
+module.xml
+ad6f45660e898df94a90825382dd7b465f5c5a8d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/hashes
new file mode 100644
index 0000000..e9bd88a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/hashes
@@ -0,0 +1,6 @@
+activemq-artemis-native-2.0.0.jar
+a1bdd3cea7822f3b90063456b0c9928702076bd1
+artemis-journal-2.37.0.jar
+9083858a5fd032a8993a736752ab31a2c497698a
+module.xml
+062c5cb708f2fd9b46186bbcb432ac804e24c0f1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-i686/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-i686/hashes
new file mode 100644
index 0000000..af260c9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-i686/hashes
@@ -0,0 +1,2 @@
+libartemis-native-32.so
+2d3f109f61606f34d4c0a8ae88ba7ab1d508ea93
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-x86_64/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-x86_64/hashes
new file mode 100644
index 0000000..f193252
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-x86_64/hashes
@@ -0,0 +1,2 @@
+libartemis-native-64.so
+27575ef4251eb86f8d6f740e5adba12eb575ed10
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/main/hashes
new file mode 100644
index 0000000..c309afa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/main/hashes
@@ -0,0 +1,12 @@
+artemis-cli-2.37.0.jar
+75ac08152c8306015ab21cfd977fab20bb32b12b
+artemis-dto-2.37.0.jar
+f411caccc17aa2ac0c498e9f50aa786508da2b1e
+artemis-jakarta-server-2.37.0.jar
+b2395f7fdd9f692987d81836c59be11f72312311
+artemis-jdbc-store-2.37.0.jar
+722d7827e01adf29b3bf60a18134d45cea0b9698
+artemis-server-2.37.0.jar
+d830695125020e520303a7d8e91990c2dacf7eac
+module.xml
+c25061b449440a8ccd6689ac41b01d4700fae6dc
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/hashes
new file mode 100644
index 0000000..5a60f59
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/hashes
@@ -0,0 +1,4 @@
+artemis-amqp-protocol-2.37.0.jar
+49b4b344b250940379750cdc86fb8490a297f871
+module.xml
+794a9df49c11230b4f8115855bb1944acca8e79f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/hashes
new file mode 100644
index 0000000..778cee6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/hashes
@@ -0,0 +1,4 @@
+artemis-hornetq-protocol-2.37.0.jar
+41f09d7e8f6d71f4c1f88e138c9a7fc5c7c21cbc
+module.xml
+4a90893d59b4c7e86ca775cabe2243354c04070f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/hashes
new file mode 100644
index 0000000..139fc21
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/hashes
@@ -0,0 +1,4 @@
+artemis-stomp-protocol-2.37.0.jar
+2373dd8fce8305981ad2b6f3dbd99b39aad4997a
+module.xml
+ff5751bf2d79c1f1beb5f5bd00cda839a59491f3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/ra/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/ra/main/hashes
new file mode 100644
index 0000000..9a9de40
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/ra/main/hashes
@@ -0,0 +1,4 @@
+artemis-jakarta-ra-2.37.0.jar
+aba16550282bf39b948816cab33da60f40dd830a
+module.xml
+478e11d1abe4a146751be6157b824e3b9b6bc596
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/hashes
new file mode 100644
index 0000000..4080d3d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/hashes
@@ -0,0 +1,4 @@
+artemis-jakarta-service-extensions-2.37.0.jar
+434b61cb824db57fcb7c7f41f80472fc8a638a1b
+module.xml
+8cb00fb02f1b777c7ab950a16f212805a2946f67
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/beanutils/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/beanutils/main/hashes
new file mode 100644
index 0000000..7840a02
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/beanutils/main/hashes
@@ -0,0 +1,4 @@
+commons-beanutils-1.9.4.jar
+d52b9abcd97f38c81342bb7e7ae1eee9b73cba51
+module.xml
+8ac939470c59f848bf021bfbf6558a5fa3e8903a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/cli/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/cli/main/hashes
new file mode 100644
index 0000000..0fc69ce
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/cli/main/hashes
@@ -0,0 +1,4 @@
+commons-cli-1.9.0.jar
+e1cdfa8bf40ccbb7440b2d1232f9f45bb20a1844
+module.xml
+3bae24ec0adba62f588ec183bf8ad3f60b382c2e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/codec/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/codec/main/hashes
new file mode 100644
index 0000000..b4d8c61
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/codec/main/hashes
@@ -0,0 +1,4 @@
+commons-codec-1.17.1.jar
+973638b7149d333563584137ebf13a691bb60579
+module.xml
+5789afce571c7145881995d54d5461e8b70385e1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/collections/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/collections/main/hashes
new file mode 100644
index 0000000..b6eeb13
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/collections/main/hashes
@@ -0,0 +1,4 @@
+commons-collections-3.2.2.jar
+8ad72fe39fa8c91eaaf12aadb21e0c3661fe26d5
+module.xml
+6c1ff54fb86ef3dca681e0840c2f4ea2ee10e45b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/io/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/io/main/hashes
new file mode 100644
index 0000000..41eccc2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/io/main/hashes
@@ -0,0 +1,4 @@
+commons-io-2.16.1.jar
+377d592e740dc77124e0901291dbfaa6810a200e
+module.xml
+3f944588a08e306f3d6aec37e870f698ecc50141
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/lang3/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/lang3/main/hashes
new file mode 100644
index 0000000..c4121a5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/lang3/main/hashes
@@ -0,0 +1,4 @@
+commons-lang3-3.15.0.jar
+21581109b4be710ea4b195d5760392ec284f9f11
+module.xml
+9b7133b9807177da365f1f0cfd02fb3a40b46c49
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/logging/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/logging/main/hashes
new file mode 100644
index 0000000..2b1998e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/commons/logging/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+05a0731dec088b70ee0152e73582675c6a010d75
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/impl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/impl/main/hashes
new file mode 100644
index 0000000..0ea2439
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/impl/main/hashes
@@ -0,0 +1,68 @@
+cxf-rt-bindings-coloc-4.0.5.jar
+81769a7371eb3ac7edd9c47f255e625abd87bf3c
+cxf-rt-bindings-soap-4.0.5.jar
+507f545e16425927576d9ab258700f6a3ed0d586
+cxf-rt-bindings-xml-4.0.5.jar
+1a8ade29671661ca79e28c8a88c02e634891223d
+cxf-rt-databinding-aegis-4.0.5.jar
+8797c5dc3840fe91be05b0beddc3ca2bdf7c8f9c
+cxf-rt-databinding-jaxb-4.0.5.jar
+df67c6e08d187e89a54161b38bc11c8fe81d5393
+cxf-rt-features-clustering-4.0.5.jar
+6ac8c04fa246a268f132269098908b30904142a5
+cxf-rt-features-throttling-4.0.5.jar
+0908ff6dd6f324d1b6208ae2eaf3faf35d06c0f0
+cxf-rt-frontend-jaxws-4.0.5.jar
+f00df82878e79de888fb3ee6faa8c44120e26061
+cxf-rt-frontend-simple-4.0.5.jar
+dd0e8e40f0d24722ac5a913a159fe727b05e031d
+cxf-rt-management-4.0.5.jar
+6056780ed5d9a01632cb39f495882b7403d41a2f
+cxf-rt-security-4.0.5.jar
+742881f9658a2047d6585e8560f980e96a5a5237
+cxf-rt-security-saml-4.0.5.jar
+2611cf982091fecabfc6832af80eef49425d9c32
+cxf-rt-transports-http-4.0.5.jar
+ea347faf04243b8d379f2ce642584826af4772f7
+cxf-rt-transports-http-hc-4.0.5.jar
+6e549af497801a43c6648b10aadf7ccc59ab59e5
+cxf-rt-transports-jms-4.0.5.jar
+9565c44453c060f2da12a548c83d4d0aa9c640e1
+cxf-rt-transports-local-4.0.5.jar
+ff2d7b5963c7d3ce288fc2c34ef45d63c43050b1
+cxf-rt-ws-addr-4.0.5.jar
+4b8423c34aacdf46fabfdfcee6db9a1e35937bcf
+cxf-rt-ws-mex-4.0.5.jar
+33e9c3aa8b4e5b7f50398876bd032260e1587f03
+cxf-rt-ws-policy-4.0.5.jar
+73d810ef70c3c6b15f035b541da5500c18e66a9d
+cxf-rt-ws-rm-4.0.5.jar
+d23de1ee2d97e3fd6bf1dabf9fe4daa4dc65db01
+cxf-rt-wsdl-4.0.5.jar
+ef7b22244c54f902449a6b325992ab42ea7f8574
+cxf-services-ws-discovery-api-4.0.5.jar
+e5cc5aa699cb17233484b03420b3e389dc6fe834
+cxf-tools-common-4.0.5.jar
+2b65993ddb44ae927907198aac697d541fc02857
+cxf-tools-java2ws-4.0.5.jar
+a4da6e250ba9b46f091faadb6fd615601e95c16e
+cxf-tools-validator-4.0.5.jar
+f472f85d5e7400b64ae1b9d298836a159f7fb742
+cxf-tools-wsdlto-core-4.0.5.jar
+83012d17410e2494f5b2446664ba5c8a79bc9770
+cxf-tools-wsdlto-databinding-jaxb-4.0.5.jar
+12dcda3d5dad70fd502f6cdcbb91c6558eb8faf0
+cxf-tools-wsdlto-frontend-jaxws-4.0.5.jar
+339f3d1dfa16df8df44f101ad0aebc0b8328ca9c
+cxf-xjc-boolean-4.0.0.jar
+1c9fac9f0df0f99c97dc432f2aebeed5303aa9b9
+cxf-xjc-bug986-4.0.0.jar
+858fb6a168ceccf5eca6d9e5378b13108c97dd4d
+cxf-xjc-dv-4.0.0.jar
+77ce44a6627ada77c864ec309df9d0a83c073feb
+cxf-xjc-runtime-4.0.0.jar
+f1b0608642ad5a49d8d97206fdc5bf81b6b1a0fe
+cxf-xjc-ts-4.0.0.jar
+2821917f37837b806930549a008c595e4db88782
+module.xml
+24e53be9353720a01fa7294c5675a9d40d6dc0a0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/main/hashes
new file mode 100644
index 0000000..4d13884
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/main/hashes
@@ -0,0 +1,6 @@
+cxf-core-4.0.5.jar
+81f67bcbf12287755ddf6b1a526920c3d3d92ae9
+cxf-rt-features-logging-4.0.5.jar
+2f99b246a39d7c383251860b0ab4dd963abb9dcb
+module.xml
+16dcfd90742d61d023b792e489747b2eef346203
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/services-sts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/services-sts/main/hashes
new file mode 100644
index 0000000..e330659
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/services-sts/main/hashes
@@ -0,0 +1,4 @@
+cxf-services-sts-core-4.0.5.jar
+2657aaa67e5c65f48ca80a483c9fb7a68c1bcdfc
+module.xml
+9dea6f73cd787c3994ab8247fb5bcea58500326c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/ws-security/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/ws-security/main/hashes
new file mode 100644
index 0000000..a605d6f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/cxf/ws-security/main/hashes
@@ -0,0 +1,4 @@
+cxf-rt-ws-security-4.0.5.jar
+0209b0b0628c23f674979b2caa5ae86e6f480c36
+module.xml
+51ab351e7bd1312271c10fab4ec058512907547f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/httpcomponents/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/httpcomponents/core/main/hashes
new file mode 100644
index 0000000..69d8646
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/httpcomponents/core/main/hashes
@@ -0,0 +1,6 @@
+httpclient-4.5.14.jar
+1194890e6f56ec29177673f2f12d0b8e627dec98
+httpcore-4.4.16.jar
+51cf043c87253c9f58b539c9f7e44c8894223850
+module.xml
+a30f322caa264a49efb3a95f32de62b789ff919c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/httpcomponents/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/httpcomponents/main/hashes
new file mode 100644
index 0000000..b85dc2f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/httpcomponents/main/hashes
@@ -0,0 +1,8 @@
+httpasyncclient-4.1.5.jar
+cd18227f1eb8e9a263286c1d7362ceb24f6f9b32
+httpcore-nio-4.4.16.jar
+cd21c80a9956be48c4c1cfd2f594ba02857d0927
+httpmime-4.5.14.jar
+6662758a1f1cb1149cf916bdac28332e0902ec44
+module.xml
+d65140469dc17e136709005a994699e5be717258
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/james/mime4j/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/james/mime4j/main/hashes
new file mode 100644
index 0000000..28cea2e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/james/mime4j/main/hashes
@@ -0,0 +1,8 @@
+apache-mime4j-core-0.8.11.jar
+6d1eb5f7b84eaa9d38fca13b761f01c693aef3da
+apache-mime4j-dom-0.8.11.jar
+f0d42ab9a5832b5f5d05afc004b31245b838e0fc
+apache-mime4j-storage-0.8.11.jar
+874a7338051442158412a2734bbb84a8595e1428
+module.xml
+d011c2d83eeea5fbc7ca7f6bc9111bfb72ad0e4e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/kafka/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/kafka/client/main/hashes
new file mode 100644
index 0000000..8108999
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/kafka/client/main/hashes
@@ -0,0 +1,4 @@
+kafka-clients-3.7.1.jar
+75a75c47eb912f3fd06df62a9e4b3b554d5b2bec
+module.xml
+209fe824e64fa4d7071bb940df0010e496de4b47
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/logging/log4j/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/logging/log4j/api/main/hashes
new file mode 100644
index 0000000..9704269
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/logging/log4j/api/main/hashes
@@ -0,0 +1,4 @@
+log4j-api-2.23.1.jar
+9c15c29c526d9c6783049c0a77722693c66706e1
+module.xml
+0246d9a19d110043bb922f190dfa4306e4c3ae69
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/lucene/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/lucene/main/hashes
new file mode 100644
index 0000000..f7f4fae
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/lucene/main/hashes
@@ -0,0 +1,14 @@
+lucene-analysis-common-9.11.1.jar
+51286aca019db66311f71496191b4bd7adaf3dcf
+lucene-core-9.11.1.jar
+8f52ba14b21774f41ce33cf5ca111cbdefeed7f9
+lucene-facet-9.11.1.jar
+fc129b47da9592a2fb83435dcead5b7618fd7066
+lucene-join-9.11.1.jar
+f7d63c04f3cc2ec8d7df73178db20de34cf60667
+lucene-queries-9.11.1.jar
+027fc885a0442a0442f426f7fea9743f6fcf3c43
+lucene-queryparser-9.11.1.jar
+ad6e5b135e1e284d4462d717086ce13a3ce01b4a
+module.xml
+df036fe053766899da7654034fd4a3bf2358f5d5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/neethi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/neethi/main/hashes
new file mode 100644
index 0000000..142b865
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/neethi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b4be1310d4bfae968722514f607315b5e3cdba75
+neethi-3.2.0.jar
+4e409cf251f420f65130d458256f7be1ad68f055
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/qpid/proton/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/qpid/proton/main/hashes
new file mode 100644
index 0000000..0374cba
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/qpid/proton/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e16429f60c85bcb74187c96cb99d8b262eee959f
+proton-j-0.34.1.jar
+e0d6c62cef4929db66dd6df55bee699b2274a9cc
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/santuario/xmlsec/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/santuario/xmlsec/main/hashes
new file mode 100644
index 0000000..7011bab
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/santuario/xmlsec/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+37a16fb18c7bd2a73ba23f3332e345875c686163
+xmlsec-3.0.4.jar
+0dcec7ec98a8343720f3d074233e4b1f15904947
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/sshd/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/sshd/main/hashes
new file mode 100644
index 0000000..570c2d9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/sshd/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+2437d2ef69e4549c0a0d7d04f9f33e3c87bab4f3
+sshd-common-2.13.2.jar
+dc9be542599fdfe446371d39a65a8d643533aeba
+sshd-core-2.13.2.jar
+f2bd9ead479126cbbaa1fda906e1c3b5caddac5c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/velocity/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/velocity/main/hashes
new file mode 100644
index 0000000..5166d46
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/velocity/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+f25f7ad8a9640824fa8558fa2cdb32003c24310c
+velocity-engine-core-2.3.jar
+e2133b723d0e42be74880d34de6bf6538ea7f915
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/ws/security/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/ws/security/main/hashes
new file mode 100644
index 0000000..76d4475
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/ws/security/main/hashes
@@ -0,0 +1,14 @@
+module.xml
+d790079b8d6fb9872a8d00f1f3877370ef5ea015
+wss4j-bindings-3.0.3.jar
+f5a0676c7021d8a018091b9b47fab226d91007a0
+wss4j-policy-3.0.3.jar
+5dba86b7a64fe6f0e50d0e64af8f77e3e1617742
+wss4j-ws-security-common-3.0.3.jar
+cd70a8961a8535eb76feff602abe2dafe2ff87d3
+wss4j-ws-security-dom-3.0.3.jar
+d6092cadf1a73a358c794cc06bf8b1b2672d358c
+wss4j-ws-security-policy-stax-3.0.3.jar
+978ece24da4c507203497002c56aa51a177e6114
+wss4j-ws-security-stax-3.0.3.jar
+1894b8c8b33dce03645a9f2c3bc61050333aaa4f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/ws/xmlschema/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/ws/xmlschema/main/hashes
new file mode 100644
index 0000000..c01eab9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/ws/xmlschema/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7cf8ddd072de27aaa9d295c64380b86cb0ee4a03
+xmlschema-core-2.3.0.jar
+5b99c4a647ee7155fcab0f7ec2a8737129281d68
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/xml-resolver/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/xml-resolver/main/hashes
new file mode 100644
index 0000000..7bf0755
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/apache/xml-resolver/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c857b3cc127251a92ca94b884051145ad1acf39f
+xml-resolver-1.2.jar
+3d0f97750b3a03e0971831566067754ba4bfd68c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bitbucket/jose4j/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bitbucket/jose4j/main/hashes
new file mode 100644
index 0000000..b296dae
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bitbucket/jose4j/main/hashes
@@ -0,0 +1,4 @@
+jose4j-0.9.6.jar
+357a3836bb5da16f314f3a1e954518e5468cd915
+module.xml
+4205816765122bbae404810e631dc4327634a989
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcmail/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcmail/main/hashes
new file mode 100644
index 0000000..2a278aa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcmail/main/hashes
@@ -0,0 +1,4 @@
+bcjmail-jdk18on-1.78.1.jar
+1055af38cea5cf8c4064fe31d8c9ca3a5cd9a6a5
+module.xml
+91580c4fd7e2fcba9dc65f85dfadd2331ce495c8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcpg/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcpg/main/hashes
new file mode 100644
index 0000000..fc44045
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcpg/main/hashes
@@ -0,0 +1,4 @@
+bcpg-jdk18on-1.78.1.jar
+6c8dbcec20355278ec54840e735f63db2479150e
+module.xml
+9200a3c4404670ba15a8755ddb86838905250556
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcpkix/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcpkix/main/hashes
new file mode 100644
index 0000000..a00f9c4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcpkix/main/hashes
@@ -0,0 +1,4 @@
+bcpkix-jdk18on-1.78.1.jar
+17b3541f736df97465f87d9f5b5dfa4991b37bb3
+module.xml
+4296eaad34639c4657d4e175427b62c693369f9d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcprov/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcprov/main/hashes
new file mode 100644
index 0000000..475256f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcprov/main/hashes
@@ -0,0 +1,4 @@
+bcprov-jdk18on-1.78.1.jar
+39e9e45359e20998eb79c1828751f94a818d25f8
+module.xml
+172b6d6e1d8dabcde6c22181cdc8543207bb5416
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcutil/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcutil/main/hashes
new file mode 100644
index 0000000..72aad34
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/bcutil/main/hashes
@@ -0,0 +1,4 @@
+bcutil-jdk18on-1.78.1.jar
+5353ca39fe2f148dab9ca1d637a43d0750456254
+module.xml
+f965ea9e23e3cea3729433d44a58622a1dc03bf2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/main/hashes
new file mode 100644
index 0000000..0895135
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/bouncycastle/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+3ebddc847410d400fd83e83a00013c98638d7f8d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/codehaus/woodstox/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/codehaus/woodstox/main/hashes
new file mode 100644
index 0000000..3b2b0ce
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/codehaus/woodstox/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+291de27c3c96f675aab49d019e2586632dbac653
+stax2-api-4.2.2.jar
+b0d746cadea928e5264f2ea294ea9a1bf815bbde
+woodstox-core-6.4.0.jar
+c47579857bbf12c85499f431d4ecf27d77976b7c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/angus/activation/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/angus/activation/main/hashes
new file mode 100644
index 0000000..738d10b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/angus/activation/main/hashes
@@ -0,0 +1,4 @@
+angus-activation-2.0.2.jar
+41f1e0ddd157c856926ed149ab837d110955a9fc
+module.xml
+9134597844c15abd967b670fb4b04a1f0edf865d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/angus/mail/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/angus/mail/main/hashes
new file mode 100644
index 0000000..038ac7d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/angus/mail/main/hashes
@@ -0,0 +1,4 @@
+angus-mail-2.0.3.jar
+56f811522d693700013768db83b741a65da6c61c
+module.xml
+a4371cb9e20c6c03d62f346a6137f575568d7219
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/jdt/ecj/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/jdt/ecj/main/hashes
new file mode 100644
index 0000000..7e735de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/jdt/ecj/main/hashes
@@ -0,0 +1,4 @@
+ecj-3.32.0.jar
+eb5412c458ba32c6370594ad4d617210637e7a2c
+module.xml
+a0b56acf4f4d06761d40bb02efb541781423b6a9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/jgit/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/jgit/main/hashes
new file mode 100644
index 0000000..f5464e5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/jgit/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+af3b9ce90835fb51f207fd72c7c11ee013dc35ac
+org.eclipse.jgit-6.10.0.202406032230-r.jar
+e1166b8b313939890f29a5c611614b67e396b07e
+org.eclipse.jgit.ssh.apache-6.10.0.202406032230-r.jar
+fc044de51fbbf87b6717dd673ff9a180248f7de8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/krazo/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/krazo/core/main/hashes
new file mode 100644
index 0000000..71a7529
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/krazo/core/main/hashes
@@ -0,0 +1,4 @@
+krazo-core-3.0.1.jar
+d5c5e9214d77cd324806ccde4ab151a42d3ed6c5
+module.xml
+b80e79d67533c41554161cef44d95318d6fe9468
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/krazo/resteasy/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/krazo/resteasy/main/hashes
new file mode 100644
index 0000000..8178ca1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/krazo/resteasy/main/hashes
@@ -0,0 +1,4 @@
+krazo-resteasy-3.0.1.jar
+fa514dd5ca62bc69a784d99be9737362a09f7514
+module.xml
+fd05343bc36527dc0c6fb8c820ba3e6e90c5d7fb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/config/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/config/api/main/hashes
new file mode 100644
index 0000000..e28aa4b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/config/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-config-api-3.1.jar
+cef8b70598a93582a4084fe67f4686eb399e70fd
+module.xml
+25bed4e381ed61389f4ba2ac7e6f1fd3c9859640
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/hashes
new file mode 100644
index 0000000..03a7f17
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-fault-tolerance-api-4.0.2.jar
+296db409f97459d4056f0235cd9f9adb198ddf65
+module.xml
+cf65c4fead056dd207c8e9ca3461fbcb11bb7709
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/health/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/health/api/main/hashes
new file mode 100644
index 0000000..c808ac7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/health/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-health-api-4.0.1.jar
+395ea08f4f636696fb23b84a18ba81430cfebe7c
+module.xml
+3022d004320cadfecef7d4d40b7c78e99e1c67ed
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/hashes
new file mode 100644
index 0000000..01f7da5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-jwt-auth-api-2.1.jar
+895da00d45d76ffcdaf5e3a45987a1b286e22a58
+module.xml
+e272ae2be6ff04ea71d650074780be7fe973a008
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/hashes
new file mode 100644
index 0000000..2b45bda
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-lra-api-2.0.jar
+2b7465bc73292992d0046dbc17cfad81a70546bb
+module.xml
+1078f7e3a304e97a42dc6e517c8e513c4fcf42e1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/hashes
new file mode 100644
index 0000000..3be7a6f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-openapi-api-3.1.1.jar
+24d319e0caeca078d2bc748d063ba4f7239d44dc
+module.xml
+30007c34ab87d8a4654df8f23f8d6bed2dbd36f3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/hashes
new file mode 100644
index 0000000..f7aaaf2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7d8adb04264d029ebc5efcbaf97c728e7a33ce17
+smallrye-reactive-messaging-api-4.24.0.jar
+bc52b1440904598ea9dc2f49a3dd86cbe63e984c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/hashes
new file mode 100644
index 0000000..a1ea88f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/hashes
@@ -0,0 +1,4 @@
+microprofile-reactive-streams-operators-api-3.0.jar
+254af64a4449279b85565baa1bd53d9e68f9804f
+module.xml
+5437b36dc1326c964ec619a7eefc2d55ebd5861f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/hashes
new file mode 100644
index 0000000..9fed154
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/hashes
@@ -0,0 +1,4 @@
+microprofile-reactive-streams-operators-core-3.0.jar
+bc234c712ab27b967beade1e5b9f0fca522baa42
+module.xml
+2e9066e9dd0dcbc501cb77f3e5acfe4d1511a41e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/restclient/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/restclient/main/hashes
new file mode 100644
index 0000000..9c0b621
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/microprofile/restclient/main/hashes
@@ -0,0 +1,4 @@
+microprofile-rest-client-api-3.0.1.jar
+e97ba8b1ff7b654cf6c9f6d90929e8360aff5b3c
+module.xml
+d6d69940cd479347d175231a4c8ef4a2029b8571
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/parsson/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/parsson/main/hashes
new file mode 100644
index 0000000..6024cb6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/parsson/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+dd35ef90bdfe5820f9efca3639255c16a4ea848c
+parsson-1.1.7.jar
+f5825abecd373006262dd319d7df8c5cdbd140ca
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/persistence/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/persistence/main/hashes
new file mode 100644
index 0000000..b7e0c96
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/persistence/main/hashes
@@ -0,0 +1,4 @@
+jipijapa-eclipselink-34.0.0.Beta1.jar
+1950a99a102782b0d8cbf0c250e7d8bad239bcfe
+module.xml
+fc66e56f6c9b32dacad7c64e4325c53a358d4e56
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/yasson/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/yasson/main/hashes
new file mode 100644
index 0000000..50d1820
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/eclipse/yasson/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3533119d32dd59c3246888d88c1104600cb14beb
+yasson-3.0.2.jar
+2815c4c989f2ad05fb75cd74543fe4178d0ffee9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/elasticsearch/client/rest-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/elasticsearch/client/rest-client/main/hashes
new file mode 100644
index 0000000..a65712e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/elasticsearch/client/rest-client/main/hashes
@@ -0,0 +1,6 @@
+elasticsearch-rest-client-8.15.0.jar
+e9a332922ccd796dcd0b5bc2c68c8c13a99cf73a
+elasticsearch-rest-client-sniffer-8.15.0.jar
+87c226bb2c0c38f090ba084584dbb6370c15bf88
+module.xml
+2c801cf87f7da8019e01b384f14850abe3af6613
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/fusesource/jansi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/fusesource/jansi/main/hashes
new file mode 100644
index 0000000..77303f4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/fusesource/jansi/main/hashes
@@ -0,0 +1,4 @@
+jansi-1.18.jar
+d9205bbcd4b5f9cd1effe752d18f73bd942d783f
+module.xml
+d9174b51eafff51d70e4c4741ad4fe7f5d4c6ecb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/expressly/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/expressly/main/hashes
new file mode 100644
index 0000000..2cfdb50
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/expressly/main/hashes
@@ -0,0 +1,4 @@
+expressly-5.0.0.jar
+78637fec7db6414c3ad32f3aa9e5d6610a299e5b
+module.xml
+21af148b0b892fb14771055587c3bb5923933d5a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jakarta/el/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jakarta/el/main/hashes
new file mode 100644
index 0000000..7e678df
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jakarta/el/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+2f46fef8a19114b6ad73b53397e6b23ea2a3cddf
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/hashes
new file mode 100644
index 0000000..f5db1e7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/hashes
@@ -0,0 +1,4 @@
+jakarta.enterprise.concurrent-3.0.0.jar
+994d0c7c967612073dbaf66019cf294865e6f7c3
+module.xml
+8ced03db86e802a0af153ccf3884afe6bd9148fd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/javax/el/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/javax/el/main/hashes
new file mode 100644
index 0000000..7e88634
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/javax/el/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+bcf72efb6be551410e851d465f2fb883f4fac1e4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/javax/enterprise/concurrent/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/javax/enterprise/concurrent/main/hashes
new file mode 100644
index 0000000..52a3ec8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/javax/enterprise/concurrent/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+817a17e1d5157d5d98e12e3cc842835b5b9cffbd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jaxb/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jaxb/main/hashes
new file mode 100644
index 0000000..69df0f1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/jaxb/main/hashes
@@ -0,0 +1,24 @@
+codemodel-4.0.5.jar
+864b81adf23a01d8ada0c41c321a5abf3da7b909
+istack-commons-runtime-4.1.2.jar
+18ec117c85f3ba0ac65409136afa8e42bc74e739
+istack-commons-tools-4.1.2.jar
+585c1af261fbc0b0cccf72f4d6c5ff11c1e596b1
+jaxb-core-4.0.5.jar
+007b4b11ea5542eea4ad55e1080b23be436795b3
+jaxb-jxc-4.0.5.jar
+f4f772e34662bd1bbdd5288de81a1037e5d0fbf1
+jaxb-runtime-4.0.5.jar
+ca84c2a7169b5293e232b9d00d1e4e36d4c3914a
+jaxb-xjc-4.0.5.jar
+0bb71e2d9ca1199c2ccb3818f2ae1f92c0c03d76
+module.xml
+983a56a75980cb793f14447a0fe53a1667920980
+relaxng-datatype-4.0.5.jar
+049fc6b58302234b638c3ab48518c51d34cd565b
+rngom-4.0.5.jar
+1e9cb44bc280097458096d2f08fdb1ce93cc2fe6
+txw2-4.0.5.jar
+f36a4ef12120a9bb06d766d6a0e54b144fd7ed98
+xsom-4.0.5.jar
+ab8587d9df8baa8cd86f0026ab526cbcb7ab1edf
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/soteria/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/soteria/main/hashes
new file mode 100644
index 0000000..461b59f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/glassfish/soteria/main/hashes
@@ -0,0 +1,6 @@
+jakarta.security.enterprise-3.0.3.jar
+30a7349eddcec0b968e44a306c5037d4177c23dd
+module.xml
+4da500dd8ed67662c0514eb057e72b754af8f0ad
+soteria.spi.bean.decorator.weld-3.0.3.jar
+8c8a5f439c72cc86265b1c2130c41a64ebf5b965
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/commons-annotations/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/commons-annotations/main/hashes
new file mode 100644
index 0000000..8af9d6d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/commons-annotations/main/hashes
@@ -0,0 +1,4 @@
+hibernate-commons-annotations-7.0.1.Final.jar
+c21c8b84ab6c56b181014df3df2ed1467a7a7e88
+module.xml
+e40c69b0f59ba71ed2d40b7e5a63b4bed7144c87
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/envers/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/envers/main/hashes
new file mode 100644
index 0000000..38455cb
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/envers/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+8df6d8592fbfcc1521036808cdb2307fa5d07713
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/infinispan/main/hashes
new file mode 100644
index 0000000..771a829
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/infinispan/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+d20545aeb3f6c88617b88a7fccd0b968790971c2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/hashes
new file mode 100644
index 0000000..7c1d436
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/hashes
@@ -0,0 +1,4 @@
+jipijapa-hibernate6-34.0.0.Beta1.jar
+fc6e044f965c007b977f2f378b928efa04be52f5
+module.xml
+c709edb548ae17280c4965824e39b8ae4db739d6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/main/hashes
new file mode 100644
index 0000000..dd26334
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/main/hashes
@@ -0,0 +1,6 @@
+hibernate-core-6.6.1.Final.jar
+ed9578e39619607bdaa8765a42365ec9048a965a
+hibernate-envers-6.6.1.Final.jar
+939b9569560b07ba299838a4be2f14a4b7d6882e
+module.xml
+4a9c6f2090a702c02a74cf956d1721af0e171d07
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hashes
new file mode 100644
index 0000000..37c69b7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hashes
@@ -0,0 +1,4 @@
+hibernate-search-backend-elasticsearch-7.2.1.Final.jar
+ee4cd7b7c1e81608b1b941002cda12bc7c77e26b
+module.xml
+d87fc2695b83ba9041f8eb104feeaafd4746922c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/backend/lucene/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/backend/lucene/main/hashes
new file mode 100644
index 0000000..ca401e1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/backend/lucene/main/hashes
@@ -0,0 +1,4 @@
+hibernate-search-backend-lucene-7.2.1.Final.jar
+fc09f40e891b5e52dd40b329c6f1330ac6b94ba3
+module.xml
+0fe06904c1606eff062b8373fd3ee3b961df8fda
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/engine/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/engine/main/hashes
new file mode 100644
index 0000000..15bdf59
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/engine/main/hashes
@@ -0,0 +1,6 @@
+hibernate-search-engine-7.2.1.Final.jar
+b16ef2ba615df7b34f5f447d918e8ad1cb465762
+hibernate-search-util-common-7.2.1.Final.jar
+50be07e442a3a25de416da968cc5b9b24252c781
+module.xml
+2ff3e866367f36aa2b3263e0624d8164a64d40ac
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/hashes
new file mode 100644
index 0000000..ae104d9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/hashes
@@ -0,0 +1,4 @@
+jipijapa-hibernatesearch-34.0.0.Beta1.jar
+3e55f92306d144ebe0cb817cc70793e7958ea362
+module.xml
+349b4f51f8aea1c2f376091df3855823928a610b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/mapper/orm/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/mapper/orm/main/hashes
new file mode 100644
index 0000000..aee2fb9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/mapper/orm/main/hashes
@@ -0,0 +1,4 @@
+hibernate-search-mapper-orm-7.2.1.Final.jar
+f3fff5e1739e2ad00f29dde7ae3db5a93d1b14b8
+module.xml
+f42de77cb12e071fee6cb253f74ca83edb0a24f2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hashes
new file mode 100644
index 0000000..a45a83e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hashes
@@ -0,0 +1,4 @@
+hibernate-search-mapper-pojo-base-7.2.1.Final.jar
+313d46025ab50c4d01d04eeb5778556abd9f3e0b
+module.xml
+4d650d309e2dd0696200a120a7a6df68f556f043
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/orm/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/orm/main/hashes
new file mode 100644
index 0000000..a181bfe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/search/orm/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+945211eb6bb38cda1a58e59fb6980d2962f64fab
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/validator/cdi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/validator/cdi/main/hashes
new file mode 100644
index 0000000..6924a44
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/validator/cdi/main/hashes
@@ -0,0 +1,4 @@
+hibernate-validator-cdi-8.0.1.Final.jar
+33f54bc269994729513d28776a2aead1b2190298
+module.xml
+74cdc8facbad9c967e698be5efd1669a05f5ed11
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/validator/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/validator/main/hashes
new file mode 100644
index 0000000..b1ca6ac
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hibernate/validator/main/hashes
@@ -0,0 +1,4 @@
+hibernate-validator-8.0.1.Final.jar
+e49e116b3d3928060599b176b3538bb848718e95
+module.xml
+b7f5f3b9d30b18a1905cde293491402f5faf638d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/hornetq/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/hornetq/client/main/hashes
new file mode 100644
index 0000000..4f6936b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/hornetq/client/main/hashes
@@ -0,0 +1,8 @@
+hornetq-commons-2.4.9.Final.jar
+dda76bb4ecd91909f7a21e671bbd426f43a4eca5
+hornetq-core-client-2.4.9.Final.jar
+09bbbd729f498e23205520fbd2af2cbb49ed6347
+hornetq-jakarta-client-2.4.9.Final.jar
+25f5c2ded2a62dfc0a84de399c7a6e3f3449854b
+module.xml
+f881ce8fa4e853f6976c61fddc6dd8c401ce528e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cachestore/remote/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cachestore/remote/main/hashes
new file mode 100644
index 0000000..188f6ea
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cachestore/remote/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+9dfebb00ebba622ab51d9d8bb6930b654483d7f7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/common/main/hashes
new file mode 100644
index 0000000..d4adb1a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/common/main/hashes
@@ -0,0 +1,4 @@
+infinispan-cdi-common-jakarta-14.0.31.Final.jar
+471c9908f337b174d537cfa53efb5a3ca75759f2
+module.xml
+8b558677b399cc7445b461f55bb7df8699c15e3c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/embedded/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/embedded/main/hashes
new file mode 100644
index 0000000..08f8db1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/embedded/main/hashes
@@ -0,0 +1,4 @@
+infinispan-cdi-embedded-jakarta-14.0.31.Final.jar
+551502ec8fdb94e43f146a2be3ce5a08e46a57d3
+module.xml
+d9431815d71b0cef15f9292de0cff88c365e2845
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/remote/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/remote/main/hashes
new file mode 100644
index 0000000..717c623
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/cdi/remote/main/hashes
@@ -0,0 +1,4 @@
+infinispan-cdi-remote-jakarta-14.0.31.Final.jar
+da7a53580b5d3ff44cc4f8e18e5933dd723e509f
+module.xml
+4cfc31c26d2a87869ead4cd33228e5eed1340cf8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/client/hotrod/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/client/hotrod/main/hashes
new file mode 100644
index 0000000..002d186
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/client/hotrod/main/hashes
@@ -0,0 +1,4 @@
+infinispan-client-hotrod-jakarta-14.0.31.Final.jar
+0d6677f1e1046dc13e55bd0fe66d26ba6c292a5a
+module.xml
+4088b300d45c7f7a1030f49fb28b8cd0dbe29d34
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/commons/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/commons/main/hashes
new file mode 100644
index 0000000..96ca1ce
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/commons/main/hashes
@@ -0,0 +1,4 @@
+infinispan-commons-jakarta-14.0.31.Final.jar
+9e3c1c2bfc6c5663ff06a2950b0f39687053a953
+module.xml
+9862324b4eb014b5daf1436faa3d677418cc6489
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/core/main/hashes
new file mode 100644
index 0000000..d1d1bea
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/core/main/hashes
@@ -0,0 +1,4 @@
+infinispan-core-jakarta-14.0.31.Final.jar
+be0613a54199f0c74d8dba4a3c9bd0d31066930d
+module.xml
+4093ca457819f499d539070da6901b6d84b932d0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/counter/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/counter/main/hashes
new file mode 100644
index 0000000..9d13aeb
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/counter/main/hashes
@@ -0,0 +1,4 @@
+infinispan-clustered-counter-14.0.31.Final.jar
+e8bdeb3c1fabebfbf3932014f76cee723272a34b
+module.xml
+5a4c1a7541f40cbd663bc476590a2f6160e757b5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/hibernate-cache/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/hibernate-cache/main/hashes
new file mode 100644
index 0000000..d4b1acc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/hibernate-cache/main/hashes
@@ -0,0 +1,8 @@
+infinispan-hibernate-cache-commons-14.0.31.Final.jar
+6ad9b7945fdbc60eaa1f38a0248e333bad2f7b2c
+infinispan-hibernate-cache-spi-14.0.31.Final.jar
+f25e5b70abc090a8bacfee4c902f06b7d3755dee
+infinispan-hibernate-cache-v62-14.0.31.Final.jar
+77d1c88c5c8c27127172e592771de1c7bf90dc8b
+module.xml
+ddb3e7e77fa83a722b7cdfbe5a45081847be0971
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/lock/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/lock/main/hashes
new file mode 100644
index 0000000..f236942
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/lock/main/hashes
@@ -0,0 +1,4 @@
+infinispan-clustered-lock-14.0.31.Final.jar
+fc667c6510f572572058c09a38254b38339cd70c
+module.xml
+706caba2944e701bdf0e44d057878523cdcdc8dc
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/main/hashes
new file mode 100644
index 0000000..66ef326
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+d180c52b7cef75b0429cdd4acba6a5553ac92b50
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/objectfilter/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/objectfilter/main/hashes
new file mode 100644
index 0000000..00f390b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/objectfilter/main/hashes
@@ -0,0 +1,4 @@
+infinispan-objectfilter-14.0.31.Final.jar
+cb01ddfe84362a3003dc2657dfee89a1337ef4e3
+module.xml
+50d17bdb5468712934bf0898984a16d2b71e912a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/persistence/jdbc/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/persistence/jdbc/main/hashes
new file mode 100644
index 0000000..6a36b89
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/persistence/jdbc/main/hashes
@@ -0,0 +1,6 @@
+infinispan-cachestore-jdbc-common-jakarta-14.0.31.Final.jar
+2b9311eb7f012414a911980845c463b1e5194acf
+infinispan-cachestore-jdbc-jakarta-14.0.31.Final.jar
+967d75925cdb9d79a9cb3be7bbde0db0ea3f0633
+module.xml
+1da3adf7d9098ea32b74442e00cc65629fb6b2f9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/persistence/remote/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/persistence/remote/main/hashes
new file mode 100644
index 0000000..4a1571f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/persistence/remote/main/hashes
@@ -0,0 +1,4 @@
+infinispan-cachestore-remote-14.0.31.Final.jar
+bcb2506579cafa9b625babd98fc0bbaee30c8188
+module.xml
+439b59bee0e28aaf36032c07197442a65ff830fa
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/protostream/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/protostream/main/hashes
new file mode 100644
index 0000000..9657431
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/protostream/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+988cade68fadcb0f0629cb527546958db854b92e
+protostream-4.6.5.Final.jar
+d5f1c139b8fda0cc040fd3dffd24407e47579b4e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/protostream/types/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/protostream/types/main/hashes
new file mode 100644
index 0000000..f714202
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/protostream/types/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+47c8b7fbe0ada5ddad4acdd8014ab68f766ee183
+protostream-types-4.6.5.Final.jar
+4547fd8256d0b6ac572f181d79f86a85892ec8e1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/client/main/hashes
new file mode 100644
index 0000000..aa107f4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/client/main/hashes
@@ -0,0 +1,4 @@
+infinispan-remote-query-client-14.0.31.Final.jar
+68de10c99cc5c8cdeabb990574d4aa202568a56a
+module.xml
+f4f219d5a263465e80e56fa02d2a0a2513463dea
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/core/main/hashes
new file mode 100644
index 0000000..15c1369
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/core/main/hashes
@@ -0,0 +1,4 @@
+infinispan-query-core-14.0.31.Final.jar
+e002953111569aecb613f97cf7999c0dad4b4caf
+module.xml
+964c3302cada1a5e973c4db68d2673caf5574d2b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/dsl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/dsl/main/hashes
new file mode 100644
index 0000000..ee13cbe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/dsl/main/hashes
@@ -0,0 +1,4 @@
+infinispan-query-dsl-14.0.31.Final.jar
+a5145cf6d1bb776a82198c74c9e073b7b0605dce
+module.xml
+facab91822b5fab2dc08f60f78438d6c055401e0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/main/hashes
new file mode 100644
index 0000000..0a43df0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/infinispan/query/main/hashes
@@ -0,0 +1,4 @@
+infinispan-query-14.0.31.Final.jar
+a44831dc54b1d3d184fd493a033acfb1c44a00e0
+module.xml
+bcf8c5f1b231f38d2b4f3d0e9b80d82b1a89faf5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jasypt/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jasypt/main/hashes
new file mode 100644
index 0000000..1fca2f2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jasypt/main/hashes
@@ -0,0 +1,4 @@
+jasypt-1.9.3.jar
+0d99ef9540f51c617f2a293b460f025d2ee563dd
+module.xml
+40bdb38577565f064b71aeacef3be124a1f14e8c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jberet/jberet-core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jberet/jberet-core/main/hashes
new file mode 100644
index 0000000..75463cc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jberet/jberet-core/main/hashes
@@ -0,0 +1,4 @@
+jberet-core-3.0.0.Final.jar
+8c0f964ccee60d33c0fdf8532de021d5511b61c7
+module.xml
+8b16465642d263c49919079e5d8f8b857167f62a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/appclient/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/appclient/main/hashes
new file mode 100644
index 0000000..9b38382
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/appclient/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+bd141719d3284f28552629aed997a2cfbd63189b
+wildfly-appclient-34.0.0.Beta1.jar
+f2f528f830315af79e2d1a6712f99391664e88a6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/cli/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/cli/main/hashes
new file mode 100644
index 0000000..ac312c7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/cli/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+509c99a0d18b5316f8e68bd33d6e24ca778935e7
+wildfly-cli-26.0.0.Beta5.jar
+4b03f6d2ab8959c45c3fc83d51927b3a10cf628b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/common/main/hashes
new file mode 100644
index 0000000..5862a2e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ac6045d3a7b21903d1d1c86097fcd3d1c6902d4a
+wildfly-clustering-common-34.0.0.Beta1.jar
+61dd16da49f97a9b65e88262ad09b2e9ecd9363f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/ejb3/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/ejb3/infinispan/main/hashes
new file mode 100644
index 0000000..69e4a42
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/ejb3/infinispan/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+9d086ab51520c5cffad7537ee885f3f77fa20261
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/hashes
new file mode 100644
index 0000000..ae8ebdc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7f7a9a7d5dc3b41829f8fe9728a0427a72b2b365
+wildfly-clustering-infinispan-extension-34.0.0.Beta1.jar
+8a9c9b46dd3a28504577f4a376a2c22cebff6cc3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/hashes
new file mode 100644
index 0000000..7088537
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1144a1e97d06d557d6c536396d606bc71b6d3a89
+wildfly-clustering-jgroups-extension-34.0.0.Beta1.jar
+609d4f0c137c29230c08d3c3895eaba14e68c80a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/web/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/web/infinispan/main/hashes
new file mode 100644
index 0000000..432d969
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/clustering/web/infinispan/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+84690ea4c8f9b840daf440d2c57da411cd3ebcf1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/connector/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/connector/main/hashes
new file mode 100644
index 0000000..a43e14d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/connector/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ee2bddfc1f376e9fdc5fbe1f61181fe8fc194aa9
+wildfly-connector-34.0.0.Beta1.jar
+24e6b5b686b353e308a7197e56c53523e18d5307
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/console/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/console/main/hashes
new file mode 100644
index 0000000..02fda8c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/console/main/hashes
@@ -0,0 +1,4 @@
+hal-console-3.7.5.Final-resources.jar
+9ccf53374b84c066bc44f61f66fccdbe8ab965d2
+module.xml
+5bca0b2f45f581a47a5a23fb54cef4920ca8eaff
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller-client/main/hashes
new file mode 100644
index 0000000..f19c580
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+360d88a146d815371bc6c05726020cfa3aa6497e
+wildfly-controller-client-26.0.0.Beta5.jar
+1117a56ea7c62375d120b6b24ac6a0f925186a15
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller/main/dir/META-INF/services/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller/main/dir/META-INF/services/hashes
new file mode 100644
index 0000000..7f53f75
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller/main/dir/META-INF/services/hashes
@@ -0,0 +1,2 @@
+org.jboss.as.controller.persistence.ConfigurationExtension
+59a6ced6bdbb2b9aaf4d539f5498299cfff5a554
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller/main/hashes
new file mode 100644
index 0000000..fefbb1f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/controller/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+2e1ef35a5bda06733ff6f2ad34036091a17d63e9
+wildfly-controller-26.0.0.Beta5.jar
+c8411a8c188426c1539f09bc57850cc39d4a8b01
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/core-security/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/core-security/main/hashes
new file mode 100644
index 0000000..a21e2b6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/core-security/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+963beae2f87ebc15f2c640b8c1a919a2a3578447
+wildfly-core-security-26.0.0.Beta5.jar
+18c7b99151f97daa455ca423b440d9592b414a84
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/deployment-repository/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/deployment-repository/main/hashes
new file mode 100644
index 0000000..3c9e1d4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/deployment-repository/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e5eb96a62c8bf713c4ce98a98cd0ae7f35b28dd5
+wildfly-deployment-repository-26.0.0.Beta5.jar
+18760eb7305b5e16d6502267d676e5dae33c77e5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/deployment-scanner/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/deployment-scanner/main/hashes
new file mode 100644
index 0000000..971343b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/deployment-scanner/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+529758fe9918a01d6c1fc022252bb10454731412
+wildfly-deployment-scanner-26.0.0.Beta5.jar
+6af0606d63c86581d71ef9a371a2d4d65ceec441
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-add-user/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-add-user/main/hashes
new file mode 100644
index 0000000..996bced
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-add-user/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+55920e29d7e08075022d3ff081baa5c4ff5fa32c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/hashes
new file mode 100644
index 0000000..afc1d42
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+15c18ca680209a9b7ade15a92851a3d337787ccb
+wildfly-domain-http-error-context-26.0.0.Beta5.jar
+26304f45ac726ccbb2995d543ba3ee0e13953fad
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-http-interface/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-http-interface/main/hashes
new file mode 100644
index 0000000..e4198df
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-http-interface/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8814be982500351d71ab9b25be0bc0d08b411de9
+wildfly-domain-http-interface-26.0.0.Beta5.jar
+1e913fe206ad250840a6ed5a0710792ea5324dba
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-management/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-management/main/hashes
new file mode 100644
index 0000000..4f87770
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/domain-management/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8849899afab02c23725e52b14d40c600b03b6f6f
+wildfly-domain-management-26.0.0.Beta5.jar
+89892636a3a23459804a559de405748093bc298a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ee/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ee/main/hashes
new file mode 100644
index 0000000..221ff5c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ee/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+bff355e69b5b1c7c4ba43920643bb82e2841fcde
+wildfly-ee-34.0.0.Beta1.jar
+4fe5018e6e95744cbf69dd9601de85772e872405
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ejb3/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ejb3/main/hashes
new file mode 100644
index 0000000..62f18d8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ejb3/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+05c49d0be6aedd565c13d816feb1bd6456a21deb
+wildfly-ejb3-34.0.0.Beta1.jar
+afdee4b1b0dcf502edac097cbcf5d78e9d27c547
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ejb3/main/timers/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ejb3/main/timers/hashes
new file mode 100644
index 0000000..ce35d04
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/ejb3/main/timers/hashes
@@ -0,0 +1,2 @@
+timer-sql.properties
+0ab3936b6ab31fd4868832c68d6801e1506aac8a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/host-controller/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/host-controller/main/hashes
new file mode 100644
index 0000000..2278507
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/host-controller/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+511bf945ecfa2ff066cfa44bba23978d4c43c2ef
+wildfly-host-controller-26.0.0.Beta5.jar
+c502b279f5f3bb114646e6dcd92c5701a86ced75
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jaxrs/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jaxrs/main/hashes
new file mode 100644
index 0000000..2f720a0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jaxrs/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e59102faf1afe148d2f98ca35ed60fe99b2a24e5
+wildfly-jaxrs-34.0.0.Beta1.jar
+aea995bc2b17d3bedd19c18b2fe3145eca7c890f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jdr/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jdr/main/hashes
new file mode 100644
index 0000000..3dc0081
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jdr/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e3438f26f40b4a1dfcedb4e5826c8186ece59125
+wildfly-jdr-34.0.0.Beta1.jar
+6950dfe5a31ea2800f6644e5fd3f2d1f8b85c7ec
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jdr/main/resources/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jdr/main/resources/hashes
new file mode 100644
index 0000000..9d1127a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jdr/main/resources/hashes
@@ -0,0 +1,2 @@
+plugins.properties
+7314d8ed0b5c49442c65e0b7662166b678945d3d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jmx/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jmx/main/hashes
new file mode 100644
index 0000000..d66d050
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jmx/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b0eac7fdd1761c2caff3cef1f0300a634cdb3f20
+wildfly-jmx-26.0.0.Beta5.jar
+d4f0a80b1407a9f653c0ac9b119d86d48321e95d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jpa/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jpa/main/hashes
new file mode 100644
index 0000000..fa102a5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jpa/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+62fa32a6d27ad6583e69c786f9aa24b6444f9f50
+wildfly-jpa-34.0.0.Beta1.jar
+3635bd4c60e1cf4315d09d2167fca12bdda2f91e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jpa/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jpa/spi/main/hashes
new file mode 100644
index 0000000..7ddb5f3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jpa/spi/main/hashes
@@ -0,0 +1,4 @@
+jipijapa-spi-34.0.0.Beta1.jar
+55f85ee81fa9ccea23fd6c4e9d5cc0c58b81cb74
+module.xml
+0b84300cef644e89283e5689f302aeb6328c189d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsf-injection/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsf-injection/main/hashes
new file mode 100644
index 0000000..41b0983
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsf-injection/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+f8e48f73e1c4dc3e29fec9f761127480fcd3ceb0
+weld-jsf-5.1.3.Final.jar
+8b7758d38e42b8ebc09d3fb1c6de3f18c6ee0360
+wildfly-jsf-injection-34.0.0.Beta1.jar
+9c53114b3ce2e2c3df92a9a1f8af71eb402af1b2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsf/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsf/main/hashes
new file mode 100644
index 0000000..889b2da
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsf/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1c9d5e16b594017c7c30991f9bec0ae181286d73
+wildfly-jsf-34.0.0.Beta1.jar
+d4239386bef7aa7d20052887ea3ae6638c17b0e5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsr77/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsr77/main/hashes
new file mode 100644
index 0000000..18458e5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/jsr77/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3001f98ce071399b1c47ec3b0483387af23b8f98
+wildfly-jsr77-34.0.0.Beta1.jar
+726b39596c557d8eb35ca74030377c37d47ea513
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/logging/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/logging/main/hashes
new file mode 100644
index 0000000..769a6bc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/logging/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+90906e66ba48349ebb46ffc8c8e77c7f7a403b19
+wildfly-logging-26.0.0.Beta5.jar
+1c64f7489b05ef4ed8199687cc9beb6529569d94
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/mail/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/mail/main/hashes
new file mode 100644
index 0000000..c185e27
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/mail/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+17aa98f5a130b88539da711c0ef6fa380f260e88
+wildfly-mail-34.0.0.Beta1.jar
+3a758cc9407985645f6ae1777571438d9d4ad3aa
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/management-client-content/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/management-client-content/main/hashes
new file mode 100644
index 0000000..c38d205
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/management-client-content/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4cba5ccda4222f69121557b1fb87c699234683e8
+wildfly-management-client-content-26.0.0.Beta5.jar
+4de7f78ae5c060dd79226310a6e9dff81deb0024
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/modcluster/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/modcluster/main/hashes
new file mode 100644
index 0000000..de1f11f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/modcluster/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+e339ea904dd91c576e6c28f0f73f76bd29110814
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/naming/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/naming/main/hashes
new file mode 100644
index 0000000..53a8951
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/naming/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+acc24f859427ad6089ce32e5e74ce197ee312345
+wildfly-naming-34.0.0.Beta1.jar
+081bce2e672d9db97c4a7fa23a25b8310ca3f3d4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/network/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/network/main/hashes
new file mode 100644
index 0000000..9053b3e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/network/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8ca24fbacb65066b559a815d1921913e488b0df2
+wildfly-network-26.0.0.Beta5.jar
+5ebb229c744ed78bcea49484706fd38c165bd9bb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/patching/cli/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/patching/cli/main/hashes
new file mode 100644
index 0000000..2816f9e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/patching/cli/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f7d1051e9507017352710bf96e8f1028ace47ced
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/patching/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/patching/main/hashes
new file mode 100644
index 0000000..98040de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/patching/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+713f209c93f8846860302997f8ad112ae60ee570
+wildfly-patching-26.0.0.Beta5.jar
+faf40381a900193ba962977c23f21451c7d90f40
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/platform-mbean/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/platform-mbean/main/hashes
new file mode 100644
index 0000000..37b9dd5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/platform-mbean/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9fd841bc6c4d5030ee0e8a1fed9c58976d110ef9
+wildfly-platform-mbean-26.0.0.Beta5.jar
+4026b27457eda5b794e04f9ada8f7d57dd340ee8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/pojo/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/pojo/main/hashes
new file mode 100644
index 0000000..2b0ceb8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/pojo/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+936a1916f2128cfa38705a5b683bedaa549b294c
+wildfly-pojo-34.0.0.Beta1.jar
+6c7e42638328099a04d2cc78d90e0c18dc15666c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/process-controller/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/process-controller/main/hashes
new file mode 100644
index 0000000..c849abe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/process-controller/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3ff29e382e1abd9fe6f97ca928ec11b4c892ba54
+wildfly-process-controller-26.0.0.Beta5.jar
+3bd4820a20fd3870023cd56f67fc97903a66e649
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/product/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/product/main/hashes
new file mode 100644
index 0000000..634a2d9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/product/main/hashes
@@ -0,0 +1,6 @@
+banner.txt
+0ee4100e62d3c02e6691773758f1a75ca7a2171e
+module.xml
+dc455bf26b37b7bc58d73b5243daa3298e837ea5
+wildfly-feature-pack-product-conf-34.0.0.Beta1.jar
+f3fcfdd1bd6d9827e2808c79835a20343ebb5f2f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/protocol/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/protocol/main/hashes
new file mode 100644
index 0000000..687a9c1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/protocol/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1161dce22557389fd3fed454e97b1cf61557cdd2
+wildfly-protocol-26.0.0.Beta5.jar
+ae593cd1a513a79c2206e26adf44a639c45de460
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/remoting/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/remoting/main/hashes
new file mode 100644
index 0000000..ab7d029
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/remoting/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4caee9321c81073b18c7ba4a2716b3a0c30f2bab
+wildfly-remoting-26.0.0.Beta5.jar
+4a38d6b50ff3428ad5c8fe3400ff9d084dce7ce8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/sar/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/sar/main/hashes
new file mode 100644
index 0000000..d29d3b6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/sar/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+50a99d1a295666c05d08d15c120f275afe8275c0
+wildfly-sar-34.0.0.Beta1.jar
+d74bf5477b9cfc516271f7d509752cabe5855283
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/security/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/security/main/hashes
new file mode 100644
index 0000000..577f241
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/security/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c395dacfa04ae8c60e93d19328cd9bf23a38bb1b
+wildfly-security-34.0.0.Beta1.jar
+761528c8b203c47648a96b4e2e4f1b1167aa67fd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/server/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/server/main/hashes
new file mode 100644
index 0000000..d61dc97
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/server/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+74cc1761e9be32ae8ae6a7b9a88572bfd77dc964
+wildfly-server-26.0.0.Beta5.jar
+35173d80b417d54b81032abf998973629b7c1f14
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/standalone/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/standalone/main/hashes
new file mode 100644
index 0000000..b202d0b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/standalone/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+1f7ceddb46dd7c7cfe5d4ee6b2b2c89cbc652f0b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/system-jmx/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/system-jmx/main/hashes
new file mode 100644
index 0000000..f220a17
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/system-jmx/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+63d79f92eb082f40b1dcbcec3ac7e0def6f5aa02
+wildfly-system-jmx-34.0.0.Beta1.jar
+9a86b9b9c5e1c6c113dcd02bce1024174ad49ce1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/threads/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/threads/main/hashes
new file mode 100644
index 0000000..f5165e1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/threads/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+99d90bdc9db3edaef4569605185e3a4074989629
+wildfly-threads-26.0.0.Beta5.jar
+3fa6226fa0653800e8818131b5f0513554693ed4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/transactions/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/transactions/main/hashes
new file mode 100644
index 0000000..ab8cdc4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/transactions/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+01ca641d431ca4e699d48f834ada0a9c17ff0cd3
+wildfly-transactions-34.0.0.Beta1.jar
+914d7d745c377f75f573253069231305e0cecaf8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/version/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/version/main/hashes
new file mode 100644
index 0000000..38f401e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/version/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+999ac08a2be0089a0b4665a636ea2dfadad8b96c
+wildfly-version-26.0.0.Beta5.jar
+010cb6e83107d619472813757e5beb4c48c5e2c8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/web-common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/web-common/main/hashes
new file mode 100644
index 0000000..8be4949
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/web-common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1666a2e93589b673e8b52e0aff68f08d0ae45ee0
+wildfly-web-common-34.0.0.Beta1.jar
+91cad62d9a73d219a508dfb28e0e0171a55a0512
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/webservices/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/webservices/main/hashes
new file mode 100644
index 0000000..3076303
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/webservices/main/hashes
@@ -0,0 +1,6 @@
+jbossws-cxf-resources-7.2.0.Final.jar
+549ea37b93e741b4b1b95d6bd72b5bc2a356e8bf
+module.xml
+133d2d2418db653950f83e573f1bc13a9d286376
+wildfly-webservices-server-integration-34.0.0.Beta1.jar
+c64fe4310d3698a9f1bf1df7ae35a439650f27a8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/webservices/server/integration/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/webservices/server/integration/main/hashes
new file mode 100644
index 0000000..298da89
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/webservices/server/integration/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f6f45ab35e98d7ec906169dff50077a97dd9ad7f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/hashes
new file mode 100644
index 0000000..d4503b0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e0f8c0c348719ede98a3623af91ce25a4421902b
+wildfly-weld-bean-validation-34.0.0.Beta1.jar
+25a07019e10a775ab6c9b9c83c2f52893984af40
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/common/main/hashes
new file mode 100644
index 0000000..b2ae216
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c547113df091fc560de6e64a1bed38bb19c21378
+wildfly-weld-common-34.0.0.Beta1.jar
+da2f52ea9e3eff689ef932e01c947f5c58852286
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/ejb/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/ejb/main/hashes
new file mode 100644
index 0000000..f905f74
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/ejb/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+db0fb41f7f367f6504600db550dfab535241f38d
+wildfly-weld-ejb-34.0.0.Beta1.jar
+5c8764318a2f622117fd0e976cc442bc8000fc02
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/jpa/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/jpa/main/hashes
new file mode 100644
index 0000000..a9d8873
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/jpa/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+70b980de8d5590718112166ba6b6098eeeaccede
+wildfly-weld-jpa-34.0.0.Beta1.jar
+ba2f78513adf0bfdb06317cd7b066e144862c42f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/main/hashes
new file mode 100644
index 0000000..66728fc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6f5ecaedf673d3dce859636a0a9a8f732435f0a1
+wildfly-weld-34.0.0.Beta1.jar
+40e9d955401d12343f42f2dc35466254ee2273e3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/spi/main/hashes
new file mode 100644
index 0000000..53d73cd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+61b54381fe670df065b4b6a56fc21c7d1ba46759
+wildfly-weld-spi-34.0.0.Beta1.jar
+8d27611c50b72e64e5e0f1404eea0cd60d2595ad
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/transactions/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/transactions/main/hashes
new file mode 100644
index 0000000..a0eb34d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/transactions/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+da023a773ee6e9fbc651b012fd0f5c5d4249eb05
+wildfly-weld-transactions-34.0.0.Beta1.jar
+f0a084e97241adf067b5b2422db70de720b1d5ff
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/webservices/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/webservices/main/hashes
new file mode 100644
index 0000000..cc55afa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/weld/webservices/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d4166488c22043001973e56a7a049cc5124ba93a
+wildfly-weld-webservices-34.0.0.Beta1.jar
+2c403e12a5a06362b915eff5aa235359ab866404
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/xts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/xts/main/hashes
new file mode 100644
index 0000000..8049bca
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/as/xts/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+326e3c2a01a1f7279dd894217fe205d90a90a4df
+wildfly-xts-34.0.0.Beta1.jar
+8fefde77da630f2e00c6425e4d9369b7aefabc0a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/classfilewriter/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/classfilewriter/main/hashes
new file mode 100644
index 0000000..f6bcd1d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/classfilewriter/main/hashes
@@ -0,0 +1,4 @@
+jboss-classfilewriter-1.3.1.Final.jar
+c4111088ac83e5fb84d127f014aee48c60c4cfcb
+module.xml
+c5b3d487c4446fcafa437a2b2eb4f243b493e2fd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/common-beans/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/common-beans/main/hashes
new file mode 100644
index 0000000..a14b11a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/common-beans/main/hashes
@@ -0,0 +1,4 @@
+jboss-common-beans-2.0.1.Final.jar
+7e1c0c5c5104fd46d9f0fff1f6e63ee7ec3fbb48
+module.xml
+c549f3c131d3b82e3fdf61354031dd69a9a93a46
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/dmr/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/dmr/main/hashes
new file mode 100644
index 0000000..7b4440a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/dmr/main/hashes
@@ -0,0 +1,4 @@
+jboss-dmr-1.7.0.Final.jar
+4aa82d5029b3860019adae657d22e9e783f844ba
+module.xml
+169ef5c0a247f3a91e8ab77e443a8d88b5161a38
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ejb-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ejb-client/main/hashes
new file mode 100644
index 0000000..4eed1ce
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ejb-client/main/hashes
@@ -0,0 +1,4 @@
+jboss-ejb-client-5.0.7.Final.jar
+4380e85c4c9a2ce92c81e29ca80cb283136b9080
+module.xml
+68df6fdccd0a8cfd090531fea1228b997460d227
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ejb3/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ejb3/main/hashes
new file mode 100644
index 0000000..dafc2fa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ejb3/main/hashes
@@ -0,0 +1,4 @@
+jboss-ejb3-ext-api-2.4.0.Final.jar
+0d52165b247a38aa73ecee49e573d8c5583ce70f
+module.xml
+e1f199f017f9ef7fab7529faf858bf5dca49e574
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/genericjms/main/META-INF/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/genericjms/main/META-INF/hashes
new file mode 100644
index 0000000..ac2e9ad
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/genericjms/main/META-INF/hashes
@@ -0,0 +1,2 @@
+ra.xml
+ce249eaa924df8771a20ad180fa29f5e507b0ac1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/genericjms/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/genericjms/main/hashes
new file mode 100644
index 0000000..cb9b801
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/genericjms/main/hashes
@@ -0,0 +1,4 @@
+generic-jms-ra-jar-3.0.0.Final.jar
+3965a22eea2e24cd8b9f48d67b7bf5a60cfcc49a
+module.xml
+336a6e6425b31dae2d824194fbbde270335e1e03
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/iiop-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/iiop-client/main/hashes
new file mode 100644
index 0000000..5f36a85
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/iiop-client/main/hashes
@@ -0,0 +1,4 @@
+jboss-iiop-client-2.0.1.Final.jar
+081e3b7514c2998f99fc3e3f5e8bd2ef2b4196f1
+module.xml
+e992401658ad78751b18c732903781ed405ea066
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/invocation/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/invocation/main/hashes
new file mode 100644
index 0000000..cfdec03
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/invocation/main/hashes
@@ -0,0 +1,4 @@
+jboss-invocation-2.0.1.Final.jar
+e57f20bd53a9d0fb29b08237425e26f293d14ecd
+module.xml
+d221565d43cf2bd2c357492f18f82ae7e522df3b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/api/main/hashes
new file mode 100644
index 0000000..847a4ba
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/api/main/hashes
@@ -0,0 +1,8 @@
+ironjacamar-common-api-3.0.10.Final.jar
+789249d7ead0aed457523da292b89bd14bf120dd
+ironjacamar-common-spi-3.0.10.Final.jar
+46309829300d74802f91138da9231b4f70969dc6
+ironjacamar-core-api-3.0.10.Final.jar
+238eafb330af966e9bad32d83c1d66998c51854f
+module.xml
+4806677ffe07a9b4d6d8ad3d63fa4e0d6a275851
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/impl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/impl/main/hashes
new file mode 100644
index 0000000..676d45f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/impl/main/hashes
@@ -0,0 +1,10 @@
+ironjacamar-common-impl-3.0.10.Final.jar
+b8fe4e508af203b58bec59ab4c91b27be25db036
+ironjacamar-core-impl-3.0.10.Final.jar
+30f460df1af12ccaeb34ba42d8fb919ba1ddc92f
+ironjacamar-deployers-common-3.0.10.Final.jar
+1457cab61dda24c1c9526ba119a8c0fe68799f66
+ironjacamar-validator-3.0.10.Final.jar
+dfdeb5436182a03ec1376f61d28ee03ae4e0f94f
+module.xml
+80f9d9a1ecccf20687fbe487bde9415fd59fdd76
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/hashes
new file mode 100644
index 0000000..a30f534
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/hashes
@@ -0,0 +1,4 @@
+ironjacamar-jdbc-3.0.10.Final.jar
+9d20e56e97b1f7ba8668de417417b190c105353d
+module.xml
+cb6de249ba2a77ca41f94043f22b3c6e38ed4c93
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jandex/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jandex/main/hashes
new file mode 100644
index 0000000..437d5ef
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jandex/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+61b3c4ae9f606e265b234d8d580307b7ef373c64
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jaxbintros/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jaxbintros/main/hashes
new file mode 100644
index 0000000..305c8f6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jaxbintros/main/hashes
@@ -0,0 +1,4 @@
+jboss-jaxb-intros-2.0.1.jar
+89581d09e710cb30898a21155bc11060e5c034c4
+module.xml
+a85a4d23ff4e1c5b22f6f9fd1d894cc20ccda21f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/hashes
new file mode 100644
index 0000000..b0cd45e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/hashes
@@ -0,0 +1,4 @@
+jboss-transaction-spi-8.0.0.Final.jar
+c9ac775a105f4f7326c3b3052aee9c5ab1b29403
+module.xml
+6a08521bb546a39f34616b0cef8690513fc087c7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jts/integration/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jts/integration/main/hashes
new file mode 100644
index 0000000..5e3403d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jts/integration/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6809c754ed86c48011789ab082f4c29776c5f169
+narayana-jts-integration-7.0.2.Final.jar
+52b526c72b123a70fc5245fc296eabbc11e211fd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jts/main/hashes
new file mode 100644
index 0000000..5a0cbf1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/jts/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6249c49e42b430c3e6c337f0e0bfa6824d3eceaa
+narayana-jts-idlj-7.0.2.Final.jar
+a7676826167c15eb5d5100aae90127675aaefa12
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/commons/logging/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/commons/logging/main/hashes
new file mode 100644
index 0000000..feefd19
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/commons/logging/main/hashes
@@ -0,0 +1,4 @@
+commons-logging-jboss-logging-1.0.0.Final.jar
+27a4e823d661bde67ec103bba2baf33cddde6e75
+module.xml
+fe8d0007a3cb78af150cffce21ceb0b4d647fc3e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/hashes
new file mode 100644
index 0000000..9b3dc81
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/hashes
@@ -0,0 +1,4 @@
+jul-to-slf4j-stub-1.0.1.Final.jar
+4399b60dd598134860176c93f17b0acdfd3c8ad7
+module.xml
+faf489ff0b77a1cbdcf546fab46bc319bd4be8ae
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/main/hashes
new file mode 100644
index 0000000..0db773f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logging/main/hashes
@@ -0,0 +1,4 @@
+jboss-logging-3.6.1.Final.jar
+886afbb445b4016a37c8960a7aef6ebd769ce7e5
+module.xml
+7730fc378071a988dc611a3cc6945990268b5edc
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logmanager/log4j2/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logmanager/log4j2/main/hashes
new file mode 100644
index 0000000..ca87671
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logmanager/log4j2/main/hashes
@@ -0,0 +1,4 @@
+log4j2-jboss-logmanager-2.0.1.Final.jar
+923637cb019786de2cf2bcd38af4cc79be2bb91e
+module.xml
+8486f64b4725e00c24339c08fa51b947b118ed03
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logmanager/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logmanager/main/hashes
new file mode 100644
index 0000000..0854259
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/logmanager/main/hashes
@@ -0,0 +1,4 @@
+jboss-logmanager-2.1.19.Final.jar
+d21ac9875c9814fb9f444ab3cec00d3207f60d51
+module.xml
+8c2147b56d76409c95f3651a983b56c56212a414
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/marshalling/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/marshalling/main/hashes
new file mode 100644
index 0000000..e6763e7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/marshalling/main/hashes
@@ -0,0 +1,4 @@
+jboss-marshalling-2.2.1.Final.jar
+578b032c0f1c66fdf436b1a9a4be7b4461c96d45
+module.xml
+fc1c71f0309a9a83883d35e4f774e711ba965d07
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/marshalling/river/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/marshalling/river/main/hashes
new file mode 100644
index 0000000..b93aed8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/marshalling/river/main/hashes
@@ -0,0 +1,4 @@
+jboss-marshalling-river-2.2.1.Final.jar
+b3cdba9eae3b61b853b5a3a2765711db95419db4
+module.xml
+7849ada571a4088c1263238dcd091f0e0ef413f4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/appclient/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/appclient/main/hashes
new file mode 100644
index 0000000..10410a4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/appclient/main/hashes
@@ -0,0 +1,4 @@
+jboss-metadata-appclient-16.0.0.Final.jar
+91e266f6b46747d89e97d9f64a78173aa9194fa7
+module.xml
+6084d916c78a6154a376abd566b2645341fb4b09
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/common/main/hashes
new file mode 100644
index 0000000..ce475de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/common/main/hashes
@@ -0,0 +1,4 @@
+jboss-metadata-common-16.0.0.Final.jar
+1b2c0bc66fd68b708c9520847fd78cf0c76e1a05
+module.xml
+62829762e88f462160d8b936d391e1402a62cd05
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/ear/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/ear/main/hashes
new file mode 100644
index 0000000..fc31f5f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/ear/main/hashes
@@ -0,0 +1,4 @@
+jboss-metadata-ear-16.0.0.Final.jar
+2f21755541fe52fa88200e9c7f2364d4383e3115
+module.xml
+d8fcf3b709ca7b189cab83f86650242520302962
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/ejb/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/ejb/main/hashes
new file mode 100644
index 0000000..79f6759
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/ejb/main/hashes
@@ -0,0 +1,4 @@
+jboss-metadata-ejb-16.0.0.Final.jar
+b71651669df52009c7be7cfd07ce50d8db6f01d4
+module.xml
+978886443bf2c87b9da57b52ca5d6f069a566a5c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/web/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/web/main/hashes
new file mode 100644
index 0000000..a4bce36
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/metadata/web/main/hashes
@@ -0,0 +1,4 @@
+jboss-metadata-web-16.0.0.Final.jar
+57719b7ec84408ffbc06998392e493966a0b4321
+module.xml
+7241be026d56f4f57075ffe35ac56689f0917ab6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/hashes
new file mode 100644
index 0000000..3e04883
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/hashes
@@ -0,0 +1,4 @@
+mod_cluster-container-spi-2.0.4.Final.jar
+b838489988309127b2eec51d95a8e3dcd084847e
+module.xml
+3b38017de2c9ee95b81098eaf2ce63104c359d02
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/core/main/hashes
new file mode 100644
index 0000000..be34db2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/core/main/hashes
@@ -0,0 +1,4 @@
+mod_cluster-core-2.0.4.Final.jar
+e71b5a76493cb099ce4f456b06b4f6c36606ce4a
+module.xml
+97fde9680d29b7cdbdf6ba92ac6e2b3b9c881327
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/hashes
new file mode 100644
index 0000000..75328e0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/hashes
@@ -0,0 +1,4 @@
+mod_cluster-load-spi-2.0.4.Final.jar
+1a91999f614037a65e880dbaae437c954c0a296a
+module.xml
+f096f6ef8f64ab4c1f44ecd9a97311562018b264
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/msc/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/msc/main/hashes
new file mode 100644
index 0000000..f5ce612
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/msc/main/hashes
@@ -0,0 +1,4 @@
+jboss-msc-1.5.5.Final.jar
+465d432fefa8ef6ef36181f01b20e98790cd60d8
+module.xml
+bb93402b5d5150f795e2ac4ad58bfc717dcb712d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/hashes
new file mode 100644
index 0000000..54f8114
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/hashes
@@ -0,0 +1,4 @@
+lra-coordinator-jar-7.0.2.Final.jar
+fffb396939e00b0a687055ba40c4a0de4e9246dc
+module.xml
+97c7bb7f39326e56a96a50986f3f936567467201
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/hashes
new file mode 100644
index 0000000..f37b656
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/hashes
@@ -0,0 +1,8 @@
+lra-client-7.0.2.Final.jar
+6b62f30f33815376ce15d36167261270b76b6b3d
+lra-proxy-api-7.0.2.Final.jar
+a8375064b60fabcf575f59429394240697e688af
+module.xml
+801be438e6fd72f6d507e89976374bfcde47d1df
+narayana-lra-7.0.2.Final.jar
+a3a8ea016430d877d454091e3450fac5e19c1fce
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/hashes
new file mode 100644
index 0000000..5af88aa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/hashes
@@ -0,0 +1,4 @@
+lra-service-base-7.0.2.Final.jar
+071c47d7663552202e6994e8a99a7b58863e911b
+module.xml
+c45bf9b369f57375c5432f1f0626f4126df3ceff
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/main/hashes
new file mode 100644
index 0000000..5beec47
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/narayana/rts/main/hashes
@@ -0,0 +1,10 @@
+module.xml
+1c0e8ea0c840b9c406f03180bc72f8aa9879edb6
+restat-api-7.0.2.Final.jar
+f1ade7e9cf982e8bae27126aa551d541022cdd58
+restat-bridge-7.0.2.Final.jar
+d714eed9f9ce9d7d41ec786d21f9c409b00ea77a
+restat-integration-7.0.2.Final.jar
+634a64fccd10e8e35dd82d972b49cb90fababd9b
+restat-util-7.0.2.Final.jar
+d90052dff94913154da44ed2192229ad19b99142
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remote-naming/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remote-naming/main/hashes
new file mode 100644
index 0000000..13e15b2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remote-naming/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+18f36161fa31aee77d43200bc07cc72cb681809e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remoting-jmx/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remoting-jmx/main/hashes
new file mode 100644
index 0000000..54ad777
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remoting-jmx/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d8201bc6c38de76e2188dc0d67102fd2de335004
+remoting-jmx-3.1.0.Final.jar
+b626f6340f966f49ce17d7db649b854e4df8fa13
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remoting/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remoting/main/hashes
new file mode 100644
index 0000000..d2e9a80
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/remoting/main/hashes
@@ -0,0 +1,4 @@
+jboss-remoting-5.0.29.Final.jar
+e27fef56f6f6f7cf7b818d351c8537df550d1c84
+module.xml
+64da5ca33ceb4274cec614048d0ffe2381ce6b64
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/hashes
new file mode 100644
index 0000000..85d0651
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/hashes
@@ -0,0 +1,4 @@
+microprofile-config-2.1.5.Final.jar
+056a15e8be93f94d6b863a47429176fc8e307d9c
+module.xml
+45778cd506ca94537fbbf927b434150aff786a4b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/hashes
new file mode 100644
index 0000000..85d4039
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6ffd8522c16707e169c7f8bfe4486b0dadf1f028
+resteasy-atom-provider-6.2.10.Final.jar
+ead2eb5301d1dba1e7a94c4693bc5491be1e6059
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/hashes
new file mode 100644
index 0000000..a03b94f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+f82e9270955555412c25795cfd72cf772c99ae0f
+resteasy-cdi-6.2.10.Final.jar
+ba3721c4aca994da4ce18b622eb04790bcc85ed8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/hashes
new file mode 100644
index 0000000..0b61221
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+50d197c2f04f49c375a66cb5fe840838aac16ce6
+resteasy-client-api-6.2.10.Final.jar
+0729093158b53c043aec0aba81c22d735c277b81
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/hashes
new file mode 100644
index 0000000..f366565
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/hashes
@@ -0,0 +1,6 @@
+microprofile-rest-client-2.1.5.Final.jar
+49aa1b9b575f5ea7381a9fab4a7e0d8bfecc0680
+microprofile-rest-client-base-2.1.5.Final.jar
+d907bc593179726d89cfd632e0261016b2db9da2
+module.xml
+356c08922ae2975df76ca01eb9566cab6497b002
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/hashes
new file mode 100644
index 0000000..683cd87
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+17adf7d860f11c38e1d3f0061c972744f261f7dc
+resteasy-client-6.2.10.Final.jar
+370a6933242ba9489b5801b378c28a14f075c219
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/hashes
new file mode 100644
index 0000000..fda3bfd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+63d2c2ca99a680211b87967c11f0919528308a5b
+resteasy-core-spi-6.2.10.Final.jar
+abadd84680e18b69d581e59d84fcbe229e7b0d0a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/hashes
new file mode 100644
index 0000000..9698432
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+2c7e74e9065a6c77bf54c01f1ec5f57ae637e7fa
+resteasy-core-6.2.10.Final.jar
+f14f9537f2ee0c3c556e2cbcc44a68159f41254d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/hashes
new file mode 100644
index 0000000..a18f604
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5458cc1cc8407581b7c35cf718ffab3bfd97b646
+resteasy-crypto-6.2.10.Final.jar
+56be5baf413172f94810188c8fd5bbb9a489fd5a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/hashes
new file mode 100644
index 0000000..8560004
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ab16a54861a8616b4dce7724eb88bdca3ad15f54
+resteasy-jackson2-provider-6.2.10.Final.jar
+6bb8e17ec2d08fc8517433053276f7be8d7dc8ce
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/hashes
new file mode 100644
index 0000000..f349edc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c5e77f1743a2aba00cb21f6a0254cc49875be639
+resteasy-jaxb-provider-6.2.10.Final.jar
+afe483b0506401c891b8c9e426daa9075fc31a17
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxrs/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxrs/main/hashes
new file mode 100644
index 0000000..4626940
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxrs/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+3125ee381efa76c7e97facfc189c99d3a4e5f6e1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/hashes
new file mode 100644
index 0000000..0575017
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d05922353680d7a66508c45443f706de14665a1f
+resteasy-jsapi-6.2.10.Final.jar
+8c5d1431b083192c15ec93674f8207dacc1b34f2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/hashes
new file mode 100644
index 0000000..60f902a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5b45403056d0170236230776b6db3945c584e52b
+resteasy-json-binding-provider-6.2.10.Final.jar
+e912ad8bf3bac99798bb8af77e095e28136ca4d6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/hashes
new file mode 100644
index 0000000..d99c963
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+21edaaf27bf55c86d6f9a53fde4ef10f67c5ee46
+resteasy-json-p-provider-6.2.10.Final.jar
+3b00994f9e3037bf55acd647d1099c30de96df34
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/hashes
new file mode 100644
index 0000000..b94ed96
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d7aabc225defaf7da207a371f86ff8b10cf6d02b
+resteasy-multipart-provider-6.2.10.Final.jar
+af72cc0a51b431a4b03fa7e90027155e1e1c4acb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/hashes
new file mode 100644
index 0000000..4d1ae81
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+808676428e1527dff2ad7b98c3a25b91ccb48703
+resteasy-rxjava2-6.2.10.Final.jar
+46417cbf52ebe36fe56560286660ea673e8036e7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/hashes
new file mode 100644
index 0000000..2996621
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/hashes
@@ -0,0 +1,2 @@
+resteasy-spring-3.1.3.Final.jar
+14aac958513f81536fb679c9656dc49344565b8a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/hashes
new file mode 100644
index 0000000..7ad65fd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+92a580329dbf47eb0b79b768eba6fe7b983f37b9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/hashes
new file mode 100644
index 0000000..21fe5cc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b6f65cf55bf7a75d1936d8b925044b109c2f5631
+resteasy-tracing-api-2.0.1.Final.jar
+da84a86ff0b30952c643071b9502b2d9f46af35a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/hashes
new file mode 100644
index 0000000..255b5be
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+966c07156fb1b3199f775c2bf62a78c2d2654690
+resteasy-validator-provider-6.2.10.Final.jar
+9f32844d717228894332328326af9f7797f534ce
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/staxmapper/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/staxmapper/main/hashes
new file mode 100644
index 0000000..31ff5de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/staxmapper/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e8b184ef0b0bf3adfa9ff532379dedf3ab452eeb
+staxmapper-1.5.0.Final.jar
+aed22f933b1f586e9384ae0527fded3a93bd7feb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/stdio/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/stdio/main/hashes
new file mode 100644
index 0000000..14b4a2b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/stdio/main/hashes
@@ -0,0 +1,4 @@
+jboss-stdio-1.1.0.Final.jar
+6d491f645353bdd0164515d86c8ac6fac0ac0b3e
+module.xml
+449611b43aed55af18655c10073db8f83b0eda54
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/threads/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/threads/main/hashes
new file mode 100644
index 0000000..462c977
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/threads/main/hashes
@@ -0,0 +1,4 @@
+jboss-threads-2.4.0.Final.jar
+e5fd3062157678118150fd37cbc6d4fb06d11c23
+module.xml
+f0749511dfc52442a0d6c5fce11bf8a83ce0b57f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/vfs/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/vfs/main/hashes
new file mode 100644
index 0000000..53fecc6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/vfs/main/hashes
@@ -0,0 +1,4 @@
+jboss-vfs-3.3.2.Final.jar
+748b9f156f35bf63ead9887f040cfc48af18f7f0
+module.xml
+acf287f5c0b6ca68eb3f8b5725f092e5c08d7935
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/api/main/hashes
new file mode 100644
index 0000000..4184823
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+13f248762915040030a22b424ab1a66e852c6c54
+weld-api-5.0.SP3.jar
+d912a98b3753c170efdb929b21a0b34f535063e9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/core/main/hashes
new file mode 100644
index 0000000..51754f2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/core/main/hashes
@@ -0,0 +1,12 @@
+module.xml
+c1f87a9532c170179ab505d7083073d0abb6fa85
+weld-core-impl-5.1.3.Final.jar
+ca9a6e469174c311885f29b180fa13be4f5c72ad
+weld-ejb-5.1.3.Final.jar
+cfa90934983cea1bb4f832ff397d6c9637136d15
+weld-jta-5.1.3.Final.jar
+700a47d772d21b629965fa34faad42a7cf1c5ce0
+weld-lite-extension-translator-5.1.3.Final.jar
+2afb6c297cb98b0ca1fd4e125596cde69d943e04
+weld-web-5.1.3.Final.jar
+444e9e84436c2d878d44c21f0762160680aa98cb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/spi/main/hashes
new file mode 100644
index 0000000..e7ebdcb
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/weld/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1b6910c11efbaa573838e755159f3869a0e07579
+weld-spi-5.0.SP3.jar
+e24b5f540396d389849088e7c29c5cf6c345bdf7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/api/main/hashes
new file mode 100644
index 0000000..d37e4cf
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/api/main/hashes
@@ -0,0 +1,4 @@
+jbossws-api-3.0.0.Final.jar
+e4632ff6aad881c3d5010d0ab7d553616f8bea4c
+module.xml
+bdeff6ac0b9e341a5738ddbcb6ae6479dd0c5fc5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/common/main/hashes
new file mode 100644
index 0000000..40c5717
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/common/main/hashes
@@ -0,0 +1,4 @@
+jbossws-common-5.0.0.Final.jar
+508aa2bafbf4c296c95c8930c2f88d714defc01b
+module.xml
+c01bd3416b48a19cd82cee964c32db25eb05658b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/hashes
new file mode 100644
index 0000000..b1b0438
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+5f101eb9d49b053e24ce074a396f228731243a34
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/hashes
new file mode 100644
index 0000000..05b3d68
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/hashes
@@ -0,0 +1,4 @@
+jbossws-cxf-factories-7.2.0.Final.jar
+98a5a575e96fb7ceaa206a2b764d32a335ec9c9d
+module.xml
+e5ddbbe09f3428f294fe5006f630237e77acb566
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/hashes
new file mode 100644
index 0000000..5b32473
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/hashes
@@ -0,0 +1,4 @@
+jbossws-cxf-server-7.2.0.Final.jar
+e6c763ffe2a21bbffe2a41d3f5e335cd7f1e78e2
+module.xml
+bbc260755183421e7e6d6c3fbe967704d4ca0152
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/hashes
new file mode 100644
index 0000000..4301ad1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/hashes
@@ -0,0 +1,4 @@
+jbossws-cxf-transports-udp-7.2.0.Final.jar
+22d3ebe1f1d3ecd1c6bb0b3521c3b35c18a483ea
+module.xml
+e6c3b9e7f51c0d6c563f3b8f627477f197f81363
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/hashes
new file mode 100644
index 0000000..471a7e2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/hashes
@@ -0,0 +1,4 @@
+jbossws-cxf-transports-undertow-7.2.0.Final.jar
+5bf2e15bba56a19ac560c9d44f8802ecef13d845
+module.xml
+d5f2e15319e172f4ae3eb914806134b6a8b41d43
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/sts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/sts/main/hashes
new file mode 100644
index 0000000..15caa26
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/cxf/sts/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+cb3fa7aba011a9216909d0f4dcddda9bd0e9925f
+wildfly-webservices-opensaml-sysconfig-34.0.0.Beta1.jar
+91491647abb3471bb0b840db00409455717091b4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/jaxws-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/jaxws-client/main/hashes
new file mode 100644
index 0000000..56edb60
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/jaxws-client/main/hashes
@@ -0,0 +1,4 @@
+jbossws-cxf-client-7.2.0.Final.jar
+066a2bf35418bb9185d4960dee064294683b91f0
+module.xml
+5f5ef0ac8a1262fdaa66e7ce8e1727d995068974
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/hashes
new file mode 100644
index 0000000..65f8717
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/hashes
@@ -0,0 +1,4 @@
+jaxws-undertow-httpspi-2.0.0.Final.jar
+092794d75f35f57ec5776c835739f5b5064e2fd0
+module.xml
+01a3b5105c8d1391aacb8c02b2acfc5564ae868d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/saaj-impl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/saaj-impl/main/hashes
new file mode 100644
index 0000000..9a76ee1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/saaj-impl/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+2cbae91a9d2ad5e1fe050c26428f9a04dd4d930a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/spi/main/hashes
new file mode 100644
index 0000000..e30d7bc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/spi/main/hashes
@@ -0,0 +1,4 @@
+jbossws-spi-5.0.0.Final.jar
+297b53c5837a05531821d075d9418fc366083514
+module.xml
+ed98fba531236546db5e6c8a67868784f3da641b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/common/main/hashes
new file mode 100644
index 0000000..73181c3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/common/main/hashes
@@ -0,0 +1,4 @@
+jbossws-common-tools-2.1.0.Final.jar
+d2aeed3b467ff21a81f4cca99e08becceeb9e387
+module.xml
+bee7f44caa47ac4f1f227056612bc46a05616e28
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/wsconsume/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/wsconsume/main/hashes
new file mode 100644
index 0000000..1440233
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/wsconsume/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+db455a7fc54b3b2691e1f25051ce77f08c1d2257
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/wsprovide/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/wsprovide/main/hashes
new file mode 100644
index 0000000..c1e4998
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/ws/tools/wsprovide/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+07654b26de83fa7144dafd2dacddeb56994cd486
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/main/hashes
new file mode 100644
index 0000000..d20e772
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+2b5e18e1b3dd337563444b7ac473bddae4835fc1
+xnio-api-3.8.16.Final.jar
+7c98c649a4583523c23cc0a7e62ddace1f486b54
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/hashes
new file mode 100644
index 0000000..6af7c52
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+f45bac804a466ea5f3a51923619eafb93cfdae05
+netty-xnio-transport-0.1.10.Final.jar
+c92ea784a4a020ec6d8fc83f2b092a027dcf4900
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/nio/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/nio/main/hashes
new file mode 100644
index 0000000..1299362
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xnio/nio/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a9b88a4fa11997819dd47dc7f469b98421160a74
+xnio-nio-3.8.16.Final.jar
+9aab17706a371a212fd051b09c7959d29d051379
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xts/main/hashes
new file mode 100644
index 0000000..58aed34
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jboss/xts/main/hashes
@@ -0,0 +1,6 @@
+jbosstxbridge-7.0.2.Final.jar
+7d809512ee120788ab18b5b003bfa5b3b2333cf9
+jbossxts-7.0.2.Final.jar
+d52629368df33c97f0f24f6b377c3118523d91c8
+module.xml
+849c08639865d83b61e34bafe38b5b2a9ded9885
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jctools/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jctools/main/hashes
new file mode 100644
index 0000000..847cd4c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jctools/main/hashes
@@ -0,0 +1,4 @@
+jctools-core-4.0.5.jar
+9ab38ca19877236986db4894ef1400a7ca23db80
+module.xml
+c9173d17dd2241311cf25ae7bf01c8b2a68efb6c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/aws/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/aws/main/hashes
new file mode 100644
index 0000000..8f92ce8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/aws/main/hashes
@@ -0,0 +1,4 @@
+jgroups-aws-3.0.0.Final.jar
+0fc2e5669e70bfc816cf50e0031e08b8c82ad899
+module.xml
+de8dd09bf84f619e3193ec33cf582f59c179c86b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/azure/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/azure/main/hashes
new file mode 100644
index 0000000..d58eac3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/azure/main/hashes
@@ -0,0 +1,4 @@
+jgroups-azure-2.0.2.Final.jar
+b727e7d3e15ad59ad41259055d2e0471f1e28f44
+module.xml
+d39dbdb58a6d81cedddbd74a7e056d3e41a4d363
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/kubernetes/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/kubernetes/main/hashes
new file mode 100644
index 0000000..7d93eb6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/kubernetes/main/hashes
@@ -0,0 +1,4 @@
+jgroups-kubernetes-2.0.2.Final.jar
+49dbe596a8c0fa906ada87a8103123873b19ff22
+module.xml
+23786ef65c36ca2f1a6b519cd8116c6ca6df9347
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/main/hashes
new file mode 100644
index 0000000..ff38569
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/jgroups/main/hashes
@@ -0,0 +1,4 @@
+jgroups-5.2.28.Final.jar
+0bda9f645880cfdfb1bfd281b438ec6b1c2ece32
+module.xml
+ce9e92ce956692bb8364adec9f2b5ce6b038f0b1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/joda/time/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/joda/time/main/hashes
new file mode 100644
index 0000000..c7f2448
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/joda/time/main/hashes
@@ -0,0 +1,4 @@
+joda-time-2.12.7.jar
+d015b997eccd511e5567218a51651ff0625f6f25
+module.xml
+b37cebb4079e3f94498ce3aa48ff0fbf87a0daea
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/hashes
new file mode 100644
index 0000000..95510f5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+361188ae066f8f9c8c6061bb0b1f1a09afde6a54
+wildfly-keycloak-34.0.0.Beta1.jar
+31a6b6c94d4a0bf898d0ae0baa91368150b70cb8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/lz4/lz4-java/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/lz4/lz4-java/main/hashes
new file mode 100644
index 0000000..a131443
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/lz4/lz4-java/main/hashes
@@ -0,0 +1,4 @@
+lz4-java-1.8.0.jar
+4b986a99445e49ea5fbf5d149c4b63f6ed6c6780
+module.xml
+ba553e65a972e726319339b1f4fd218299564047
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/omg/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/omg/api/main/hashes
new file mode 100644
index 0000000..5821b1b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/omg/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+a33d3cb735d5fd4bf9ab03c2fa30bee4eb6b5389
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/opensaml/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/opensaml/main/hashes
new file mode 100644
index 0000000..3f82d17
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/opensaml/main/hashes
@@ -0,0 +1,32 @@
+cryptacular-1.2.5.jar
+a8a4542bac306650a4299825e6217001aadbc11c
+java-support-8.0.0.jar
+298f946e93922d789b6231599a446cea9dbbe80e
+module.xml
+c85b73af18df802938f876aae7f2a35010182f6e
+opensaml-core-4.3.0.jar
+6773e581374b2b30c8acdeff59278363a37ddafd
+opensaml-profile-api-4.3.0.jar
+73f712945c01750bcb91e0d4c3c95e48f0010bf9
+opensaml-saml-api-4.3.0.jar
+86ac06b15963033e9495487995f5f0aea1cc96ea
+opensaml-saml-impl-4.3.0.jar
+b3fccacc4cb775e0f1c57354bd0beb4e9b7da0a7
+opensaml-security-api-4.3.0.jar
+77d0101d8be9be40db41b6f33823c6952fd5e122
+opensaml-security-impl-4.3.0.jar
+9772c7dd74f9ddf5edc22bae4bdb87f54970fac9
+opensaml-soap-api-4.3.0.jar
+9f04cd64085670fb65ad98c7c23ab333af10be45
+opensaml-xacml-api-4.3.0.jar
+44e299c1fa958aa8f1c2cf81ac72e7f877ed123b
+opensaml-xacml-impl-4.3.0.jar
+50dbb7935bb02b90feb314a857a5c7e90ca26891
+opensaml-xacml-saml-api-4.3.0.jar
+695bf030dde946144576b5e03631b4b3eae7f87e
+opensaml-xacml-saml-impl-4.3.0.jar
+8c651b5a5867dee21e407d7d00a1af4c0475da73
+opensaml-xmlsec-api-4.3.0.jar
+5c20fadeeb77c1bb689139b17621ea7f5b719f5f
+opensaml-xmlsec-impl-4.3.0.jar
+a1c9c88fcad6db5e83e488bbbe9e1aff42d9dece
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/projectodd/vdx/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/projectodd/vdx/main/hashes
new file mode 100644
index 0000000..8f49c79
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/projectodd/vdx/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+3a8f121c931ec3bb1026ff54e97d6d4cfb1ebdd3
+vdx-core-1.1.6.jar
+f685489cc2abe5882eb139840589be2ab6e322b8
+vdx-wildfly-1.1.6.jar
+2dac020b2e9b17f2d2ecba8d1b96f102624c07ab
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/reactivestreams/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/reactivestreams/main/hashes
new file mode 100644
index 0000000..e9a5054
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/reactivestreams/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+693797bbb899c9f61275d3705aeb694481e90faf
+reactive-streams-1.0.4.jar
+3864a1320d97d7b045f729a326e1e077661f31b7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/slf4j/impl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/slf4j/impl/main/hashes
new file mode 100644
index 0000000..b215bf3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/slf4j/impl/main/hashes
@@ -0,0 +1,6 @@
+jbosgi-xservice.properties
+360c93386e1ddc034ae6123efef936caabd5f597
+module.xml
+1cb7d3845fce53804f1c9182089a7bc9d26d14aa
+slf4j-jboss-logmanager-2.0.1.Final.jar
+890ec24b613af4a7e5af096a70e5629f4e3252b3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/slf4j/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/slf4j/main/hashes
new file mode 100644
index 0000000..3b48e71
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/slf4j/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a9c938dbb5ec439635d5794a825b6fc12e22ee37
+slf4j-api-2.0.13.jar
+80229737f704b121a318bba5d5deacbcf395bc77
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/hashes
new file mode 100644
index 0000000..1d70b73
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/hashes
@@ -0,0 +1,6 @@
+README.txt
+c40e175b32272d94bb57ed9c0623f01323db770e
+wildfly-ee-galleon-pack-unstable-api-annotation-index.zip
+d95665c9498b9b244b602af93f6930a4c5b53c9b
+wildfly-galleon-pack-unstable-api-annotation-index.zip
+d3d3c062762a2c967a42be482955a1016ebb66ed
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/hashes
new file mode 100644
index 0000000..7075d1e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+df79ed09951a7f597e9559de9828e5554652cd4c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/bootable-jar/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/bootable-jar/main/hashes
new file mode 100644
index 0000000..b271787
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/bootable-jar/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5aae7e8d1a45c3e15d6679016dd35475fcb9ba14
+wildfly-jar-runtime-26.0.0.Beta5.jar
+a5fb27652e2286337a652a3e94467f476c36a9c1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/client/config/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/client/config/main/hashes
new file mode 100644
index 0000000..49b8fdf
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/client/config/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ba2302c3842c4ee386a8d72d4c09c544cd033927
+wildfly-client-config-1.0.1.Final.jar
+2a803b23c40a0de0f03a90d1fd3755747bc05f4b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/hashes
new file mode 100644
index 0000000..6eb4ae9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9626df31e579cde9e17b741ddbd02f333c2fa826
+wildfly-clustering-cache-infinispan-common-1.1.2.Final.jar
+64f75f5686cc305c0b895f557eb86b1abe1ca137
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/hashes
new file mode 100644
index 0000000..87375da
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8b71aa10f6077277e59b4ec948c669915e44e352
+wildfly-clustering-cache-infinispan-embedded-1.1.2.Final.jar
+548c27f5210ea15f660a8251eed93e3b227a1926
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/hashes
new file mode 100644
index 0000000..5351489
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3487a206798a0312897a83d862f54e0f063bcec6
+wildfly-clustering-cache-infinispan-remote-1.1.2.Final.jar
+4a870e4ec1a092075e99f70a2754a316cf5001fd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/hashes
new file mode 100644
index 0000000..bf67910
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7b041db95db2f873b6b3d5f31f987c54a7750141
+wildfly-clustering-cache-spi-1.1.2.Final.jar
+f92e21444692df73ceeed05436ae6a7126c3057b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/context/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/context/main/hashes
new file mode 100644
index 0000000..a057138
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/context/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+38ca07cad2a4aae5ed861fc179e630a5067cff9d
+wildfly-clustering-context-1.1.2.Final.jar
+20db806c24767cf20b65b5d152766b5ed944d5be
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/hashes
new file mode 100644
index 0000000..49a8f0b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e6376ffc6b5279de1a037c5f691617604024606a
+wildfly-clustering-ejb-cache-34.0.0.Beta1.jar
+05e08564d8270cdf8aa38e67579bcb996f5065d5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/hashes
new file mode 100644
index 0000000..f50e988
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ec502adf7e794c27b8b49ed28afe6e3329906535
+wildfly-clustering-ejb-client-34.0.0.Beta1.jar
+9551606175a5b7dd2681f7c3a42010c24ce3f945
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/hashes
new file mode 100644
index 0000000..fd7b4fe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+0c29940c148906e9a68fd9c1ee5c639e01f6832b
+wildfly-clustering-ejb-infinispan-34.0.0.Beta1.jar
+dc29d6b4ccb93f13effa2928413d0707dffa171d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/hashes
new file mode 100644
index 0000000..92c421c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b54ac14479c84515b6c234b977d653c189110a08
+wildfly-clustering-ejb-spi-34.0.0.Beta1.jar
+f26785b814ab77adc4de5bad1bfdba2ce0d93c4d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/hashes
new file mode 100644
index 0000000..d93620d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8747041145b4e69c6a7ef8d2f19c789913381846
+wildfly-clustering-el-expressly-34.0.0.Beta1.jar
+9dba8253adb5bef7d17fd9ffd4593494bb043ec0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/faces/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/faces/api/main/hashes
new file mode 100644
index 0000000..36c40f2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/faces/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5d5a34d18cee6741dbb42804b13aadc4cd2d770c
+wildfly-clustering-faces-api-34.0.0.Beta1.jar
+6f06a4e39232e3ff9685213a4ba5219190c20e05
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/hashes
new file mode 100644
index 0000000..9d5d98d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+aeb1108a828c6df0346a01261df0391c8a00446c
+wildfly-clustering-faces-mojarra-34.0.0.Beta1.jar
+c488b9df04bae33c8f29d86d5051d82b2a1b475b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/hashes
new file mode 100644
index 0000000..1b6eabd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3722adb4bc4b728ffadf7f46e97163a8d7bb346f
+wildfly-clustering-infinispan-client-api-34.0.0.Beta1.jar
+ac852524284ee39d5f644765d88571740a845203
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/hashes
new file mode 100644
index 0000000..c471d07
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+98185f7bb8437a9ab3433ae7a99c6dbdf3da146f
+wildfly-clustering-infinispan-client-service-34.0.0.Beta1.jar
+875b90b323d6334ff92520e3f35431c057316d15
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/hashes
new file mode 100644
index 0000000..09cbd75
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+100aa55028fa3118d1c38f9dbc1b91af89c08087
+wildfly-clustering-infinispan-embedded-service-34.0.0.Beta1.jar
+8e3296b1b1d4dd79bd91ba0e53dee9a0d0e007c0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/hashes
new file mode 100644
index 0000000..641f5a4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a12a9d9a7ff7c1b155c4dd3f625fac24dd324e86
+wildfly-clustering-jgroups-api-34.0.0.Beta1.jar
+7d2db75c487cf10dfa3cac8a95c90fc5746afae6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/hashes
new file mode 100644
index 0000000..1cebf9f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+99b7d95ad48e111d4349580750a5a49daab145cc
+wildfly-clustering-jgroups-spi-34.0.0.Beta1.jar
+3c7a6b7386a6cdae5b041205dc87c9ed5b13ef2e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/hashes
new file mode 100644
index 0000000..d4b8cb4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+60446bd0f94a00760a31abc18a618bc36d2bda0d
+wildfly-clustering-marshalling-api-34.0.0.Beta1.jar
+824df16caa80f15b281c2448f4af748381a3ac10
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/hashes
new file mode 100644
index 0000000..c0b64e7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+9149ac4a4b84f6400215a478768c96ff2115b5bd
+wildfly-clustering-marshalling-jboss-1.1.2.Final.jar
+5d948e06b013e7f73a1f79d8938bdef8cc4c2b86
+wildfly-clustering-marshalling-jboss-34.0.0.Beta1.jar
+f0e6d517f8a5668a0d21667ebe16f7aa7e5a1a00
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/hashes
new file mode 100644
index 0000000..12fa690
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+2381c986117b7c9b0a6594e92b332a230bd11004
+wildfly-clustering-marshalling-protostream-1.1.2.Final.jar
+1e59d3937d1e70d009339abd2565aeba1585e6a8
+wildfly-clustering-marshalling-protostream-34.0.0.Beta1.jar
+2cd69e4835827e960d2cf4bc04f4f9565ed0b9f4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/hashes
new file mode 100644
index 0000000..a94a0f8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d513c13ddfb3ea253ad555cc2657f458e6d4051d
+wildfly-clustering-marshalling-spi-1.1.2.Final.jar
+5dafd7892dc661895d1894f165d4f8ba4cf083a2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/api/main/hashes
new file mode 100644
index 0000000..88f6e37
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/api/main/hashes
@@ -0,0 +1,6 @@
+module.xml
+c499e155393cfdd829e6f14b475a0634238272b4
+wildfly-clustering-server-api-1.1.2.Final.jar
+4cec13d15b177f36de885c53af0b709d7744c5e9
+wildfly-clustering-server-api-34.0.0.Beta1.jar
+985d1de90c24ba2547703b89e4bc7b0bea74e39d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/hashes
new file mode 100644
index 0000000..def1d5e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+aa62036245261badddfe376703fac3134772a6a6
+wildfly-clustering-server-infinispan-1.1.2.Final.jar
+3e61fa6616b964ce03591177d57406b4815ba0f6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/hashes
new file mode 100644
index 0000000..478cbde
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+981ae8e9dffae7097524fc1f57956d8b05fddd2e
+wildfly-clustering-server-jgroups-1.1.2.Final.jar
+5f4a2cef18620a6e0841ccaf8623c9f81c46ede6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/local/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/local/main/hashes
new file mode 100644
index 0000000..279c62a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/local/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d253f1d41d0a6ed81eafc27e90017aa93708542e
+wildfly-clustering-server-local-1.1.2.Final.jar
+ea437d458bdb186341cb7b21ed1c2660eda6d836
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/main/hashes
new file mode 100644
index 0000000..c8385c4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+85baf4886ff6d8c52e6597b79732bc2ab352dab7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/service/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/service/main/hashes
new file mode 100644
index 0000000..ea935cc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/service/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5e317a25267614a8dd5ab576182115526667f899
+wildfly-clustering-server-service-34.0.0.Beta1.jar
+70328b41bbfd9134edd3bd9225cae5868494d7ef
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/spi/main/hashes
new file mode 100644
index 0000000..f67b2d2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/server/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3b9107d1ddb9523d2ab606fed53048140a02dbd3
+wildfly-clustering-server-spi-1.1.2.Final.jar
+554ab1c48b3503c3a85c9835ba4aae4ac70d28f5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/service/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/service/main/hashes
new file mode 100644
index 0000000..149eee6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/service/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b54b470de82e348b065326bfa8f532e19dfc19b0
+wildfly-clustering-service-34.0.0.Beta1.jar
+94963dbd4ac844a3abf1173bf99a9f30f72ca676
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/cache/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/cache/main/hashes
new file mode 100644
index 0000000..10d8082
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/cache/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9d5a21a8b74fd070491bd8496d1e34085dd9e5b1
+wildfly-clustering-session-cache-1.1.2.Final.jar
+222728fe146ebef6d4f73c21410e71f12b1d6376
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/hashes
new file mode 100644
index 0000000..15e823c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ab4dc316970af3fea0ada6a6ad10e513690aa11f
+wildfly-clustering-session-infinispan-embedded-1.1.2.Final.jar
+25911db2b479223dd8f5b9a37238b78cb89f3910
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/hashes
new file mode 100644
index 0000000..bbb893d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c6995a1a97843c789a89778c08c89382fa29b5c2
+wildfly-clustering-session-infinispan-remote-1.1.2.Final.jar
+ccd3f16083d5d0495b7c89c8e4ea2a1798deff4f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/hashes
new file mode 100644
index 0000000..c524bdb
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5d60b96dd63d2f62139663b5a0cc5682bf011b72
+wildfly-clustering-session-spec-servlet-6.0-1.1.2.Final.jar
+8e18a6f4cc5accb28402f2fe04a64122fb0f148b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/hashes
new file mode 100644
index 0000000..0e91357
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4d703e101078093c6c41d432a593c9862b347786
+wildfly-clustering-session-spec-spi-1.1.2.Final.jar
+a8f724ab6d73a65a50b5d9763f671b7389d655bd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spi/main/hashes
new file mode 100644
index 0000000..838fa2b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/session/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+30a55c1141faf86226c90fcbc66bd813ad084345
+wildfly-clustering-session-spi-1.1.2.Final.jar
+3193a300b216e892ffc09df7f5a784e487fd8239
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/hashes
new file mode 100644
index 0000000..3b66bc4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c304d8414eead68967a42b56137b3054e5c9aecf
+wildfly-clustering-singleton-api-34.0.0.Beta1.jar
+2de0571cc1813b3de148cfe5be2f99955b0327b5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/hashes
new file mode 100644
index 0000000..a9d1b63
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+808d1b294fd32d26b5db608a55fc00f240491c5e
+wildfly-clustering-singleton-compat-34.0.0.Beta1.jar
+4c7b7bb09e1926ac1e40d3b2dfbed3e5e733e0a7
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/main/hashes
new file mode 100644
index 0000000..1dbbc1f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+0212a5c18343613a13fabefeabf3facc4e9060c8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/hashes
new file mode 100644
index 0000000..ef2ae8a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3d46bf508a271895291f4d71aebb3373775ce084
+wildfly-clustering-singleton-server-34.0.0.Beta1.jar
+4e56c6129a8274bd3193cedd79e2fb6a4206e242
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/api/main/hashes
new file mode 100644
index 0000000..a057d30
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7c3a5dfbd773d2d6a2c8033b1e0d03818663aad0
+wildfly-clustering-web-api-34.0.0.Beta1.jar
+a886daf70847eb3401b4cab50c5645cd0417cd70
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/container/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/container/main/hashes
new file mode 100644
index 0000000..e8e6ae8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/container/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c0bfc1f4df266abb77bf17a5f2ca28d552b47684
+wildfly-clustering-web-container-34.0.0.Beta1.jar
+2c39a5405c13e319740c432acc3885a988c2bb43
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/hotrod/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/hotrod/main/hashes
new file mode 100644
index 0000000..6e1f7b7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/hotrod/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+e03fedb7ed61440bf49e0b1a9d7df8117877b1cd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/infinispan/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/infinispan/main/hashes
new file mode 100644
index 0000000..1a5e468
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/infinispan/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+acebb4c54966a0087465a20c83ea75b0e8936cdd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/service/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/service/main/hashes
new file mode 100644
index 0000000..6f57366
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/service/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+eabf5700378228e855cb392797adde67864df4bc
+wildfly-clustering-web-service-34.0.0.Beta1.jar
+1f9179ae090518b9523dd31a5d5fc19979901b86
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/hashes
new file mode 100644
index 0000000..f9f3953
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7192367e525d57019495281976812baf7cb87fb0
+wildfly-clustering-web-undertow-34.0.0.Beta1.jar
+8990a1dee3bd2011ed221fb0d7f928b6abbc6dfe
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/core/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/core/main/hashes
new file mode 100644
index 0000000..1fbc824
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/core/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e61d530cc89692ba9e8a829d8e004a4901826d2a
+wildfly-clustering-weld-core-34.0.0.Beta1.jar
+f2ec6ebbc24a76f0856049be7fa0c0bb5444fd93
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/hashes
new file mode 100644
index 0000000..0f32df9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+91e82076fb79e6162ddc6c926a9e5a8c5977b0ad
+wildfly-clustering-weld-ejb-34.0.0.Beta1.jar
+7f14fca9d333ff7e3e5846b7c07467e3ed892739
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/web/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/web/main/hashes
new file mode 100644
index 0000000..36bc2bd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/clustering/weld/web/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4b60786f313cd5db7598798878f05e0b6bb0bee2
+wildfly-clustering-weld-web-34.0.0.Beta1.jar
+b7a5843e81aa1032d27cff2a2c238149c247a27a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/common/main/hashes
new file mode 100644
index 0000000..df8c34e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+43407bc7d2979c9949d490fc2a1cc1abb0ada8c6
+wildfly-common-1.7.0.Final.jar
+b5237d5e5a46ede4e4e142d79623d04b59d11476
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/discovery/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/discovery/main/hashes
new file mode 100644
index 0000000..ba48825
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/discovery/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6b2e5781a8b77f853487ba55d7aa69b4e692fca4
+wildfly-discovery-client-1.3.0.Final.jar
+e1f76d4eb93a118485133b5d8d036483da109f3b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/embedded/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/embedded/main/hashes
new file mode 100644
index 0000000..a4170c2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/embedded/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8976a8171d3597c2b434a9459fc8ac78cf4f04ec
+wildfly-embedded-26.0.0.Beta5.jar
+0a3d2b906989ed31897388020f55d4fe2a7c96db
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/event/logger/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/event/logger/main/hashes
new file mode 100644
index 0000000..7874d6f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/event/logger/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+86224b52f675807035635640c7615debce0ebe96
+wildfly-event-logger-26.0.0.Beta5.jar
+b47c20a9ace4a347ff8245d8ff548c63cd3e0a91
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/hashes
new file mode 100644
index 0000000..6ade7a5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+e69c7986827956ba1058d232bd2d3949452f54a3
+wildfly-batch-jberet-34.0.0.Beta1.jar
+5b6d6160adea004898ddd21516f4481b853c0e1b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/bean-validation/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/bean-validation/main/hashes
new file mode 100644
index 0000000..761a16f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/bean-validation/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+19632493f52e5e0dfdfc9fa59b8849627191bb9a
+wildfly-bean-validation-34.0.0.Beta1.jar
+4fc16297e6cb98583a65cbb9b7aa81db9e74aa63
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/hashes
new file mode 100644
index 0000000..38e4462
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+705e143097192a00edae36f363a8cbf3294529b8
+wildfly-clustering-ejb-extension-34.0.0.Beta1.jar
+808a72fe232ada4431185f89ec290afc447122a8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/server/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/server/main/hashes
new file mode 100644
index 0000000..780da9e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/server/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a816c805d129a57590d735687f179a8f8490806c
+wildfly-clustering-server-extension-34.0.0.Beta1.jar
+3480cd1b01d3f286c345da51082beaafdb27f8c4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/hashes
new file mode 100644
index 0000000..183600f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+f4e86ef25be088b1cdb06e3238cf25234b2f7bb6
+wildfly-clustering-singleton-extension-34.0.0.Beta1.jar
+e37e4c7042112a4dbd9c46b1021c8f0590623e33
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/web/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/web/main/hashes
new file mode 100644
index 0000000..43da8e4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/clustering/web/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+556834ff28435e1429a55d1d1e6ada35f24983ec
+wildfly-clustering-web-extension-34.0.0.Beta1.jar
+67a02e777e310ec126489edbc50543d25741ff8d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/core-management-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/core-management-client/main/hashes
new file mode 100644
index 0000000..271a52f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/core-management-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+eb90eb405941b821bf5029de9ea38f8de4afe245
+wildfly-core-management-client-26.0.0.Beta5.jar
+630acd8d7fa57da2dc3a67b30a580ce0ed76fdf1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/core-management/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/core-management/main/hashes
new file mode 100644
index 0000000..f1958a2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/core-management/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+60b0e37581ec85f43b90ba1194ce5fbc94d75251
+wildfly-core-management-subsystem-26.0.0.Beta5.jar
+65fc09e456c39073abfd6817856510299d091e7c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/hashes
new file mode 100644
index 0000000..f257c43
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+49197dae4cc6dfe9074a9e1716c24fea237652eb
+wildfly-datasources-agroal-34.0.0.Beta1.jar
+743c285ce72df39889a368ab710192dfc75b7bf4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/discovery/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/discovery/main/hashes
new file mode 100644
index 0000000..f8c98dc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/discovery/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c3ac23944dedb126f96df43731fe0c57b540afa6
+wildfly-discovery-26.0.0.Beta5.jar
+cf3192306220fc8c10adcd8b79b66ffd7d41c619
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/ee-security/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/ee-security/main/hashes
new file mode 100644
index 0000000..6c2c2c3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/ee-security/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+57ed7fe9263d2f67e22a4d125d4778938ce6d6ff
+wildfly-ee-security-34.0.0.Beta1.jar
+6e0d6e1d6880ee9359b2de990c9fadafc99a21f1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/hashes
new file mode 100644
index 0000000..a6d31b3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+98a1ad896fee3e5519f60675e7b1f10dc0f80fd9
+wildfly-elytron-oidc-client-subsystem-34.0.0.Beta1.jar
+e7ace3aa826057c528195cea46a412c8fcd96998
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron/jaas-realm/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron/jaas-realm/main/hashes
new file mode 100644
index 0000000..4581773
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron/jaas-realm/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+edc2c8cbae09b18ce7c02096c69eff6331052d29
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron/main/hashes
new file mode 100644
index 0000000..56b025a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/elytron/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4de17c69b493e8f706173b5506031f8c01d4d1b9
+wildfly-elytron-integration-26.0.0.Beta5.jar
+c3ae783039bf7e5b9d69e82bd258213942388b21
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/health/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/health/main/hashes
new file mode 100644
index 0000000..2e77a51
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/health/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a34ffb3a1a1c7737189e31036c5790b62d1951a6
+wildfly-health-34.0.0.Beta1.jar
+7a80c5476e0a3b19292682e58ce9240cfd41bad4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/io/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/io/main/hashes
new file mode 100644
index 0000000..1442f4d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/io/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+73ee3733632e12715658a9ee570ec97845270bbd
+wildfly-io-26.0.0.Beta5.jar
+4d388a5401395c4c4fc8ebd1b666df37a4e9bb6a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/hashes
new file mode 100644
index 0000000..e059319
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c8241720c0f907147737bd398c29729f32c28b4b
+wildfly-messaging-activemq-injection-34.0.0.Beta1.jar
+f1c7feb676c86539008ecd569edc31a95ede74fb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/hashes
new file mode 100644
index 0000000..c15fbf3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/hashes
@@ -0,0 +1,6 @@
+artemis-wildfly-integration-2.0.2.Final.jar
+1abce05863e933be93f51cbc3dc97ee37d26baf2
+module.xml
+5bc3aa6b106d237acc8cb14d9ffbf3d00d91ad27
+wildfly-messaging-activemq-subsystem-34.0.0.Beta1.jar
+ce3d4140824c41da9bf20944434e9201423b7556
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/metrics/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/metrics/main/hashes
new file mode 100644
index 0000000..1f18fef
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/metrics/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+99d735d5179980f4706c2e50a8084d7d4b303a16
+wildfly-metrics-34.0.0.Beta1.jar
+e9e7946cc00a2993f15cb30066517a8ee1360cd3
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/micrometer/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/micrometer/main/hashes
new file mode 100644
index 0000000..f8e5aaa
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/micrometer/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+f6a189798779de9fb3b677a952cb8efe2f413c30
+wildfly-micrometer-34.0.0.Beta1.jar
+d93c98c8a93b75b5062ca23934e701d926036be8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/hashes
new file mode 100644
index 0000000..4f7164e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b4d8702bcd90137a0ef99e7976b98866befdd2d9
+wildfly-microprofile-config-smallrye-34.0.0.Beta1.jar
+d4b90d505de729076c6816976f2313b3c87e7e4b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/hashes
new file mode 100644
index 0000000..83c493a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4031c798c7ce3214a515bc787ae1462efea2f85a
+wildfly-microprofile-fault-tolerance-smallrye-extension-34.0.0.Beta1.jar
+c302b2cf9e0eefe26d05fd31c0825aa4f28ed0d8
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/hashes
new file mode 100644
index 0000000..d8cc334
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a09ca4476d12ba783db2cf15f8a278d346051479
+wildfly-microprofile-health-smallrye-34.0.0.Beta1.jar
+78cf1b47525a74fd6f220d49af36353a51b2a529
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/hashes
new file mode 100644
index 0000000..f78e806
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+cac7f22b49f432090201a454702574e046011c3c
+wildfly-microprofile-jwt-smallrye-34.0.0.Beta1.jar
+aebe3bdeaacbd606e79e5e52e8aa6b6ada338882
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/hashes
new file mode 100644
index 0000000..3a4590d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+de4237a9ec9c972458fd3f47476482c93c9ed06c
+wildfly-microprofile-lra-coordinator-34.0.0.Beta1.jar
+4fa9804ae1cc5d9fae9ac0be9c73f5fbb8ea0a57
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/hashes
new file mode 100644
index 0000000..40998b7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9bf6be4c5ed447ba696a25c9cee225b941d4c2b1
+wildfly-microprofile-lra-participant-34.0.0.Beta1.jar
+ab5b41eadbb95df948f3c8bbb5fe4b37f31e7fdb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/hashes
new file mode 100644
index 0000000..b7f6e79
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6c232a8b0d1e2a5423f40c5514fcedfe9ea25240
+wildfly-microprofile-metrics-smallrye-34.0.0.Beta1.jar
+301fdbe763fecdeb0bf87dc8701cdc094df2b357
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/hashes
new file mode 100644
index 0000000..1a76892
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+a722625b0cbe1bbd8c684236af2d09ddb5edc984
+wildfly-microprofile-openapi-smallrye-34.0.0.Beta1.jar
+b62972ce5f147936fd2a29a4c727aa129d9d4ec4
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/hashes
new file mode 100644
index 0000000..0a3876d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+abd5b6749f29072af1754fe01eb8329c885c28c3
+wildfly-microprofile-opentracing-extension-34.0.0.Beta1.jar
+e8fab2565f1694af9bd76350c397b266eb6e4084
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/hashes
new file mode 100644
index 0000000..00abf1f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+9fcb957d3e63441c16a6501b44543cb90fd89f91
+wildfly-microprofile-reactive-messaging-34.0.0.Beta1.jar
+b97cef239e83068ca9567703bf3d3baa46eb8387
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/hashes
new file mode 100644
index 0000000..b57c4bb
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+d5e2469a814d1fca444d729649b11822fb2ab06f
+wildfly-microprofile-reactive-streams-operators-34.0.0.Beta1.jar
+0d3117a18791d7b52496d7fc01cc51880535ebe9
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/hashes
new file mode 100644
index 0000000..f506b10
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7af8f8f9fc9946b2c18b29325201274758f670f0
+wildfly-microprofile-telemetry-cdi-provider-34.0.0.Beta1.jar
+eb5991c4ab2a20d660e2c1d1d9b19b6067584078
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/hashes
new file mode 100644
index 0000000..2c81537
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b669f19b1367fac8d900b73a3b3b868207891de8
+wildfly-microprofile-telemetry-34.0.0.Beta1.jar
+c13880de00ccd43060446922c86a383ed1bc8717
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/hashes
new file mode 100644
index 0000000..839638f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+1ed8e9880d000e1a5bafaa847257ade1d6372052
+wildfly-mod_cluster-extension-34.0.0.Beta1.jar
+3028513e967774511498e8ae221f4cbc34d65bc1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/hashes
new file mode 100644
index 0000000..c67e181
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+8f156333d561776f972e2edeaaa94db61b07a471
+mvc-krazo-subsystem-1.0.0.Final.jar
+4d66f4c0c46f336936f819dc4eedf1e635871673
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/hashes
new file mode 100644
index 0000000..e19260a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+de4819e05905a015ccd8cdcf91c40a51a4c31f1d
+wildfly-opentelemetry-api-34.0.0.Beta1.jar
+b5954c69fa9765ba1ef76c53d4a5298de1b681ba
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/hashes
new file mode 100644
index 0000000..77328b6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c83ae2f159b95ddbe1be64fec3be6e7bd1629901
+wildfly-opentelemetry-34.0.0.Beta1.jar
+2f514d75072185d6df186782c455c4e27ff6007a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/picketlink/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/picketlink/main/hashes
new file mode 100644
index 0000000..e55f0f2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/picketlink/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+f2d5a5de804093b180f079fc14401fb2219313b8
+wildfly-picketlink-34.0.0.Beta1.jar
+08b1e3bf9358b759e804f39c4c66e457067f0203
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/request-controller/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/request-controller/main/hashes
new file mode 100644
index 0000000..f15b093
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/request-controller/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+65b4d82338952b418daa752f3f12b6d19ce65022
+wildfly-request-controller-26.0.0.Beta5.jar
+29980d0850737ac3b3c3c2520395c214f761fb50
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/rts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/rts/main/hashes
new file mode 100644
index 0000000..c9103f8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/rts/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+af58374ee57c85e8ac9347a45ded55c9fec45e3e
+wildfly-rts-34.0.0.Beta1.jar
+97683971ad68c336b971280b4b12730d874c4662
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/security/manager/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/security/manager/main/hashes
new file mode 100644
index 0000000..e38f8f7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/security/manager/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6f72568338002c6c76797c1c9de7ba0460508f8b
+wildfly-security-manager-26.0.0.Beta5.jar
+eccb79efe4b86c214c9be4aab0ebed78f40305ee
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/undertow/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/undertow/main/hashes
new file mode 100644
index 0000000..5ac659e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/extension/undertow/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7e229006cb758d70ac27c47d02bf34264f7ad23f
+wildfly-undertow-34.0.0.Beta1.jar
+fdf33e0f1f7782c247a59842e729ecf24c943cf1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/common/main/hashes
new file mode 100644
index 0000000..d4b0a80
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b266ab9406966861358a33ec0d21ac85cee9b78c
+wildfly-http-client-common-2.0.7.Final.jar
+e644938d4e9eeee188e5cbf0d3ae81d5b64ee685
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/ejb/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/ejb/main/hashes
new file mode 100644
index 0000000..6fef5b4
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/ejb/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+039c9e946a24097841abf1df4ce606381070ad71
+wildfly-http-ejb-client-2.0.7.Final.jar
+6d0fb27d916fb38100c328def6dbceecd8561791
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/naming/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/naming/main/hashes
new file mode 100644
index 0000000..de062a7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/naming/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+452bf0c88259d9eaf33867371984e6c944e460ca
+wildfly-http-naming-client-2.0.7.Final.jar
+d3976e577a3a9f16d93765ea7dcc1492a303337b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/transaction/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/transaction/main/hashes
new file mode 100644
index 0000000..55c4394
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/http-client/transaction/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+16bea9c3372cf0f13b04b2ddd6d74de7de9ad653
+wildfly-http-transaction-client-2.0.7.Final.jar
+8e9131c925a3ae04229290c1012a9c1201b26a8b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/iiop-openjdk/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/iiop-openjdk/main/hashes
new file mode 100644
index 0000000..6471b43
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/iiop-openjdk/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+71bbeff8e992a14f094c31c79d330a7799f635d1
+wildfly-iiop-openjdk-34.0.0.Beta1.jar
+1d68819587371f3b54638478de3b6c3a57b8cfe1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/installation-manager/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/installation-manager/api/main/hashes
new file mode 100644
index 0000000..c6391f7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/installation-manager/api/main/hashes
@@ -0,0 +1,4 @@
+installation-manager-api-1.0.3.Final.jar
+a7c32d5588c3c970a6c32cd691d776b02f97c2e5
+module.xml
+9e0cac51fb6512a8f9255d8f7c1707e4ed4de7e6
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/installation-manager/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/installation-manager/main/hashes
new file mode 100644
index 0000000..8beb873
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/installation-manager/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+175d00c2f3cee948050173ec07518c729dfc359a
+wildfly-installation-manager-26.0.0.Beta5.jar
+cb651465b680305bf76f1ac4cfa347add14dd122
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/io/spi/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/io/spi/main/hashes
new file mode 100644
index 0000000..ceb518c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/io/spi/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+bc833bcd1f7f3c0212b017d7d93d5c24d85ac23d
+wildfly-io-spi-26.0.0.Beta5.jar
+c2e00053dbe85fdca59b97eb647e24aec9d28b3e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/micrometer/deployment/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/micrometer/deployment/main/hashes
new file mode 100644
index 0000000..e238b13
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/micrometer/deployment/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3b277a49d932fbd4f72c9e68ebd9f7bcc2f7ec1e
+wildfly-micrometer-deployment-34.0.0.Beta1.jar
+a27dd23fb306abe888909e5524083eb32a7b5012
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/hashes
new file mode 100644
index 0000000..2c40fa3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+439666d445f0a41ac2735935c21132077346735c
+wildfly-microprofile-fault-tolerance-smallrye-deployment-34.0.0.Beta1.jar
+37ab484c3a33fcb4607896de417d4598efbfe202
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/hashes
new file mode 100644
index 0000000..128457f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+095b5bec04eb1e0e77ee7ed5471a578e3e943801
+wildfly-mod_cluster-undertow-34.0.0.Beta1.jar
+576e710dc069d617ad783ee84aea6f3b3901c5e1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/naming-client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/naming-client/main/hashes
new file mode 100644
index 0000000..8f633de
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/naming-client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+bdc312d992c9629433aa24a1b771f8c559523ddd
+wildfly-naming-client-2.0.1.Final.jar
+de91966c0f1a3d99d22a68ef1ff3cf26e0e3e203
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/naming/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/naming/main/hashes
new file mode 100644
index 0000000..3ee4a97
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/naming/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f820938e5308c953c4ea020c5f9f17366f4813d1
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/hashes
new file mode 100644
index 0000000..3ba23cf
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4f777a6b7aaee783b82b3b16fd9e7d32c253f12b
+wildfly-openssl-java-2.2.5.Final.jar
+fc8e20e1e190071d90bf2bc7ad11c4ca805d0f81
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-s390x/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-s390x/hashes
new file mode 100644
index 0000000..c01676b
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-s390x/hashes
@@ -0,0 +1,2 @@
+libwfssl.so
+c6f1fdbe38e77c0575582df1050445c5b39baedf
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-x86_64/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-x86_64/hashes
new file mode 100644
index 0000000..417dfbc
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-x86_64/hashes
@@ -0,0 +1,2 @@
+libwfssl.so
+7d37ba636ba187420daf3461472b79395d5e108d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/macosx-x86_64/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/macosx-x86_64/hashes
new file mode 100644
index 0000000..5332191
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/macosx-x86_64/hashes
@@ -0,0 +1,2 @@
+libwfssl.dylib
+3116eee7a1ede2b0c302ed3538ea9fda0a61a8ec
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/win-x86_64/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/win-x86_64/hashes
new file mode 100644
index 0000000..290d5e6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/openssl/main/lib/win-x86_64/hashes
@@ -0,0 +1,2 @@
+wfssl.dll
+1e11455da006ecf58821fd962c3bc0bc12593454
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/dep/jts/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/dep/jts/main/hashes
new file mode 100644
index 0000000..08ddfb2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/dep/jts/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+2fce47448022e388da719b0c725cca3d57227b91
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/hashes
new file mode 100644
index 0000000..b87d507
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c18cf91248140fdca4aecb5b82b9ee0e499cbfd4
+wildfly-microprofile-reactive-messaging-amqp-34.0.0.Beta1.jar
+d7e0475cc6574e4b53aafc038ce168fd77670361
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/hashes
new file mode 100644
index 0000000..a3e6244
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7a93ba5e048dc826d4ce3d50bfa43d014cbdce69
+wildfly-microprofile-reactive-messaging-common-34.0.0.Beta1.jar
+e447f9979e900f05b193455f72bb7c2796e8deef
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/hashes
new file mode 100644
index 0000000..df0e40e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ed844ccc713646d3b9f82026e40155d61b7e3591
+wildfly-microprofile-reactive-messaging-config-34.0.0.Beta1.jar
+cfd2983eb873b93c9185b5148ec8ddf12af7d019
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/hashes
new file mode 100644
index 0000000..7a903b2
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+5107b5882e58abe5f6ce93871565a251d2ef61d3
+wildfly-microprofile-reactive-messaging-kafka-34.0.0.Beta1.jar
+e233e254111ff02511577c8f24f0da491ce72841
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/hashes
new file mode 100644
index 0000000..c178af6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+7d2286713f01df20bd3b652ae6199c97c4118d8b
+wildfly-microprofile-reactive-streams-operators-cdi-provider-34.0.0.Beta1.jar
+f7889871dcfeec5b63eec84bea6025eb5337d6cb
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-base/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-base/main/hashes
new file mode 100644
index 0000000..4f53ae5
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-base/main/hashes
@@ -0,0 +1,130 @@
+module.xml
+ac447cad5d871798f89a87a3d4171fc4df07d956
+wildfly-elytron-asn1-2.6.0.Final.jar
+b23693cad663ed4bc784a27875e615eb0388d17b
+wildfly-elytron-audit-2.6.0.Final.jar
+d21c4e76e18645e8d5ad99b3528eddab98077b93
+wildfly-elytron-auth-2.6.0.Final.jar
+22d695c7182b79c386cc8763eb760114feb53a6e
+wildfly-elytron-auth-server-2.6.0.Final.jar
+2c52fd90ad7597ba60d0399a01c2543b61dd27f2
+wildfly-elytron-auth-server-deprecated-2.6.0.Final.jar
+2831859a8d930a7512e57fe19045ccf60279d27f
+wildfly-elytron-auth-server-http-2.6.0.Final.jar
+ec2e038974dfbb0f0d8599004996b3ffa0e98a50
+wildfly-elytron-auth-server-sasl-2.6.0.Final.jar
+190546f55399bac7cbf5e19b6f60ca68470ba7fd
+wildfly-elytron-auth-util-2.6.0.Final.jar
+54e7c238f632146cd23d6ff83b934df1321f387b
+wildfly-elytron-base-2.6.0.Final.jar
+f8bd055b09a0d2041932dbf41721ece98bb8caab
+wildfly-elytron-client-2.6.0.Final.jar
+68be91d4c28ca916b7c7b4f37abf72da5df83a68
+wildfly-elytron-credential-2.6.0.Final.jar
+74cfa7c2b455bc0d1d63d8727e4accd6f9621c96
+wildfly-elytron-credential-source-impl-2.6.0.Final.jar
+a810d96b611c36477a421e4bec5b9cad83eda80a
+wildfly-elytron-credential-store-2.6.0.Final.jar
+afeedcf2deec5f771ddbb3633bbd5b9d2974bff9
+wildfly-elytron-digest-2.6.0.Final.jar
+4279c0d43e691aadace4adb59917c94bd4c98015
+wildfly-elytron-dynamic-ssl-2.6.0.Final.jar
+cb63fddb0d504f62704e3aedf4e37bde6be6e8d0
+wildfly-elytron-encryption-2.6.0.Final.jar
+1102f2c2d47b7971da4ba47e7c3910eca59beb1b
+wildfly-elytron-http-2.6.0.Final.jar
+98ee7d54bf7e9948f3bd521c0e15d824e70faee0
+wildfly-elytron-http-basic-2.6.0.Final.jar
+347d1cc2001596b70e4488cef352cbd8b27bcd9e
+wildfly-elytron-http-bearer-2.6.0.Final.jar
+9ceac26eb1f874bd667a105fcdd46fb66cb39044
+wildfly-elytron-http-cert-2.6.0.Final.jar
+aaa05cf6cadbe56e510cb406f73a4dc9b549a806
+wildfly-elytron-http-digest-2.6.0.Final.jar
+2b2d7bbce0a077c2a76fbe2ce8d6e5546db79c38
+wildfly-elytron-http-external-2.6.0.Final.jar
+3c3b57db970a1ac0b9feb9dfda1f6aa4500c066a
+wildfly-elytron-http-form-2.6.0.Final.jar
+4b16d1cbb0b61000fa1d2e1aa75f06b49b6b0801
+wildfly-elytron-http-spnego-2.6.0.Final.jar
+82a3f666a788b5d2dea5f8cdd8ace75ed7a76fab
+wildfly-elytron-http-sso-2.6.0.Final.jar
+6e72a9851e690bd31c4e190b889268481c3787e6
+wildfly-elytron-http-util-2.6.0.Final.jar
+99994f93ee765c4c962418fd3a1967e10e4dda99
+wildfly-elytron-json-util-2.6.0.Final.jar
+c5d467d31af97013b28fad8995f5259e7dfbb527
+wildfly-elytron-keystore-2.6.0.Final.jar
+09b8bc8ca881a6dc4d8093dcfae63e75095b862e
+wildfly-elytron-mechanism-2.6.0.Final.jar
+9fd755959fc58822d23fdc3edccd50eb38d3edbf
+wildfly-elytron-mechanism-digest-2.6.0.Final.jar
+7f3c4451629939f6f48756ac68fc1f40f44b8274
+wildfly-elytron-mechanism-gssapi-2.6.0.Final.jar
+2ec3e3ddd8c9833c7e12593dd84cfa5a69d3e087
+wildfly-elytron-mechanism-http-2.6.0.Final.jar
+0fa7053c83c95a38b89c4419e7a8a7de4fe574b4
+wildfly-elytron-mechanism-oauth2-2.6.0.Final.jar
+1fec90dcb70925e0db3154ac829a0c743982a166
+wildfly-elytron-mechanism-scram-2.6.0.Final.jar
+fbeef1c08ee753e16a6bf8410f6e06d434bcf5e8
+wildfly-elytron-password-impl-2.6.0.Final.jar
+83488d2eb7ccfe107acaa50fd65decb3c15c050a
+wildfly-elytron-permission-2.6.0.Final.jar
+1af6caad895f65a97b8f29f52d8fe7e511b7bcd0
+wildfly-elytron-provider-util-2.6.0.Final.jar
+9298430973619b1167440e6d9da5576c32b2ec45
+wildfly-elytron-realm-2.6.0.Final.jar
+6dce9540676544ce844d0b4cd2d67cfd5ac9b6cd
+wildfly-elytron-realm-jdbc-2.6.0.Final.jar
+fa59cf6c448bbd956c676a92a328207da3ada354
+wildfly-elytron-realm-ldap-2.6.0.Final.jar
+3f9deeb7f158bc615b9adb04f788bfcfc1df215a
+wildfly-elytron-realm-token-2.6.0.Final.jar
+2975c10f1186d2ae0b58481540aeb50cfc88a906
+wildfly-elytron-sasl-2.6.0.Final.jar
+eb859024d6f7a7b77bf4f4389f1435d3500133f2
+wildfly-elytron-sasl-anonymous-2.6.0.Final.jar
+04af4d4fcdea2dad7bac314bd116725774f9cae9
+wildfly-elytron-sasl-auth-util-2.6.0.Final.jar
+86c0e74e203ea4b8252137f8d9a90157df4298aa
+wildfly-elytron-sasl-digest-2.6.0.Final.jar
+a46707268c364a55cc88d4b58f8d3fb412f8f9be
+wildfly-elytron-sasl-entity-2.6.0.Final.jar
+b065116de5212909cb17aa7263a0f5b3f97b12a6
+wildfly-elytron-sasl-external-2.6.0.Final.jar
+dd3037ab0f2d4d53295c5de4c877980e48e6c493
+wildfly-elytron-sasl-gs2-2.6.0.Final.jar
+d0faf8e3e9cbf223907bd867fa9aefe839af810b
+wildfly-elytron-sasl-gssapi-2.6.0.Final.jar
+6d3d46bd30bae6a30a99f9925a11c38ae11aacdb
+wildfly-elytron-sasl-localuser-2.6.0.Final.jar
+a32ac940afd41351139d32f11dca8ff8fc9cfbf9
+wildfly-elytron-sasl-oauth2-2.6.0.Final.jar
+6a164439c03d688c4218453ef7cd602804dadb3b
+wildfly-elytron-sasl-otp-2.6.0.Final.jar
+59ca3058000eb2a70ce4cf70354f1079f115f628
+wildfly-elytron-sasl-plain-2.6.0.Final.jar
+3c66746772944f9a44560a09501c825ae40b90f9
+wildfly-elytron-sasl-scram-2.6.0.Final.jar
+cd8453b6834c46b2b5bf5aa5d212b87ac6d35706
+wildfly-elytron-security-manager-2.6.0.Final.jar
+6e80e7766a08f3ff5d1704db822a03fe2a5087a0
+wildfly-elytron-security-manager-action-2.6.0.Final.jar
+1a8e2b45ebd105feba15eeaf7d794d0425dce600
+wildfly-elytron-ssh-util-2.6.0.Final.jar
+d865d66dd54d5e6acbbd23fc13ad782bf9ffb602
+wildfly-elytron-ssl-2.6.0.Final.jar
+1f289735dc4a0be4d5f3b3768ddfbb9a8cd2abdb
+wildfly-elytron-util-2.6.0.Final.jar
+02ecf4c1692ab58875d62f257810ac98b97f2328
+wildfly-elytron-x500-2.6.0.Final.jar
+190cf3dc64a2d47664a0521cdafdf1659c9d5062
+wildfly-elytron-x500-cert-2.6.0.Final.jar
+e6d902e5818705631d60beb5897b70407d7362fa
+wildfly-elytron-x500-cert-acme-2.6.0.Final.jar
+8632a746205cd305683c20780886ea30ced98033
+wildfly-elytron-x500-cert-util-2.6.0.Final.jar
+290bd5d30c71298e0262dc90d2a6973d0c42f7d5
+wildfly-elytron-x500-principal-2.6.0.Final.jar
+75071c6c4057f62fb5738ce76340165af906329f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/hashes
new file mode 100644
index 0000000..9aa7d10
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+aa1483e2c4f97f7ffd74367ce15cd242233e5489
+wildfly-elytron-http-oidc-2.6.0.Final.jar
+9c2d6886a16a8feb5c31317ab071458bf68aa80e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/hashes
new file mode 100644
index 0000000..a599fde
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+94bf04d9efaaa667c4d11df9f4e1c0d59b59d49e
+wildfly-elytron-jose-jwk-2.6.0.Final.jar
+0f21b787a8f88fe607be127b1e9a3fcca250af50
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/hashes
new file mode 100644
index 0000000..35ad509
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+bfae6b3d53f2bbe45b3b6c2fbade6e2a701f2dba
+wildfly-elytron-jose-util-2.6.0.Final.jar
+ddcf3eb3b5f2905ccd9b0aa381ede64a39606a15
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/hashes
new file mode 100644
index 0000000..1df8710
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+ed7586cbc363cb27280a595a35955b2b44929d51
+wildfly-elytron-jwt-2.0.0.Final.jar
+cec772f7cfde8a5fe721698c9dd163d62be6fd1f
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-private/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-private/main/hashes
new file mode 100644
index 0000000..1176e6d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-private/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+a528675574163eeb864e3927c491d77e89772b4e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-tool/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-tool/main/hashes
new file mode 100644
index 0000000..723c0bd
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-tool/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b6f1b09d8310dda72b2ff01624cf89ef886e9d89
+wildfly-elytron-tool-2.6.0.Final.jar
+764c166d1c0f9e3637c045d10f3f6092787d636c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/hashes
new file mode 100644
index 0000000..25ca093
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+c58d47efb8d247dcf09ce12e9b035c3e982544f7
+undertow-server-servlet-4.1.0.Final.jar
+bc9a124c6b9e5879cbe4d626c09fd9b1c86e3a14
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/hashes
new file mode 100644
index 0000000..c8b3f80
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+db20b7521fc5f32c36c180a9881fb545f7f85fef
+undertow-server-4.1.0.Final.jar
+92a5a89ebb1f33c106870ceec993012b3a640d1c
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron/main/hashes
new file mode 100644
index 0000000..ad3321a
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/elytron/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+b6278df217dd0219d89c8ec2b7e33f87bb81d3f2
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/hashes
new file mode 100644
index 0000000..b84fe9d
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+afc6f101a9cfb6e13b8755eb9e55469c31a566c8
+wildfly-elytron-http-stateful-basic-2.6.0.Final.jar
+f5fc0e13f9ac46626403123f2a898a7a76ec4741
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/hashes
new file mode 100644
index 0000000..f18272e
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/hashes
@@ -0,0 +1,4 @@
+jakarta-authentication-3.0.3.Final.jar
+8cfee79c239c8640db4c4dc0097fe93db48db6f3
+module.xml
+ce08bacd61d1a667c49acaaa54a4b9a89907d47d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/hashes
new file mode 100644
index 0000000..e937905
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/hashes
@@ -0,0 +1,4 @@
+jakarta-authorization-3.0.3.Final.jar
+83ba4010e1e8e5a7aa1d7fca09c5e53d465c06f0
+module.xml
+9f057f4b1b7bd8c04598c3fd450da86c2d2eea83
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/hashes
new file mode 100644
index 0000000..57f8fa7
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/hashes
@@ -0,0 +1,4 @@
+jakarta-client-resteasy-3.0.3.Final.jar
+25ba6e81f9aaa8e6d8e46fb51e54e3796a855f30
+module.xml
+24e24e96a830171eecf7ba2a1e10f8d29a4fd498
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/hashes
new file mode 100644
index 0000000..db932c8
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/hashes
@@ -0,0 +1,4 @@
+jakarta-client-webservices-3.0.3.Final.jar
+a7e1d3e10fa33b1a26b6a6ac810d7c71099a60d1
+module.xml
+d8560a551f2e7eb9f80c6e407540737dbd38fdce
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/security/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/security/main/hashes
new file mode 100644
index 0000000..e2ad7a6
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/jakarta/security/main/hashes
@@ -0,0 +1,4 @@
+jakarta-security-3.0.3.Final.jar
+3015a11699567458e8ae02e81c7bab75194500ec
+module.xml
+aac6694c41017d67fbc8a51469fc77a4ad5aa6c0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/manager/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/manager/main/hashes
new file mode 100644
index 0000000..05f1be1
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/security/manager/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+f0525400b0de129037e1ff7fbc44f4fc06befced
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/service/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/service/main/hashes
new file mode 100644
index 0000000..f3f506f
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/service/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+4d7d5407a686be983db0f9650a043bb10eee4943
+wildfly-service-26.0.0.Beta5.jar
+7c5eea38af5650cecc0a984879d0aeeb3f2373be
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/subsystem/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/subsystem/main/hashes
new file mode 100644
index 0000000..cc8f1f3
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/subsystem/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+0a66d7dca00dd62775055ed5e4a37f0f2f5c2650
+wildfly-subsystem-26.0.0.Beta5.jar
+500c8525f286bef9a8615b3dcbf2ed1d4db51d0b
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/transaction/client/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/transaction/client/main/hashes
new file mode 100644
index 0000000..92d556c
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/transaction/client/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+3461bc12b9848d701fb03443278f55e9996962e3
+wildfly-transaction-client-3.0.5.Final.jar
+e681c364c237ddb2a7778edd5e75741f496884b5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/hashes
new file mode 100644
index 0000000..0bb7a10
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+b9280afc76d41dfad5d5b52110417b8af7fde19f
+unstable-api-annotation-classpath-indexer-1.0.0.Final.jar
+e2c7d575725ea7d92e11a9c57cceafe0e4fb716d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/xerial/snappy/snappy-java/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/xerial/snappy/snappy-java/main/hashes
new file mode 100644
index 0000000..90bb608
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/xerial/snappy/snappy-java/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+08fa75e537f80c82b7a804015801e30e84684e5c
+snappy-java-1.1.10.5.jar
+ac605269f3598506196e469f1fb0d7ed5c55059e
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/org/yaml/snakeyaml/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/org/yaml/snakeyaml/main/hashes
new file mode 100644
index 0000000..a7dcd73
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/org/yaml/snakeyaml/main/hashes
@@ -0,0 +1,4 @@
+module.xml
+6a305f8d00e9a9ec1c6b94e43d7c5b1cdaf206fb
+snakeyaml-2.2.jar
+3af797a25458550a16bf89acc8e4ab2b7f2bfce0
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/software/amazon/awssdk/s3/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/software/amazon/awssdk/s3/main/hashes
new file mode 100644
index 0000000..4289f77
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/software/amazon/awssdk/s3/main/hashes
@@ -0,0 +1,42 @@
+annotations-2.20.126.jar
+c2f8e7f3b83252ef291d2eb669b05351b8f3a191
+apache-client-2.20.126.jar
+842573057a5aeee50efed9ff50a25ed778d99f2f
+arns-2.20.126.jar
+e5d7a9f499950f04c4c1b56f01fb2cd801486970
+auth-2.20.126.jar
+f8b01d18f238ce2dd770c1378b417f61ddedc512
+aws-core-2.20.126.jar
+16fdc5eef5fa7b89b0d8d8f11b37c55456043a3e
+aws-query-protocol-2.20.126.jar
+235e5f6953c67632f16f836986788d54cfabaefa
+aws-xml-protocol-2.20.126.jar
+543096847209b0bcffd99975052f6aea451410d5
+crt-core-2.20.126.jar
+0b15baebc79bd95aa135696f1e06f8029097b68a
+endpoints-spi-2.20.126.jar
+8ab8ff7af8c330bb9ff5661ed661749f3ba98bee
+eventstream-1.0.1.jar
+6ff8649dffc5190366ada897ba8525a836297784
+http-client-spi-2.20.126.jar
+dc373cb92465cd3040263830fc8b37bd55774c9d
+json-utils-2.20.126.jar
+7404e479fba0f605ce01d465f097cba05128d218
+metrics-spi-2.20.126.jar
+f0a8777fe6129c54e7a9ee911992cf30cf27662a
+module.xml
+03cd15f5e0852d7dbd313ee6e7f9464b2d42ce3b
+profiles-2.20.126.jar
+7d164a516e04366d48d167595e22cdc248254a66
+protocol-core-2.20.126.jar
+587f854140c4b17592c702cb6051b669d0a2db39
+regions-2.20.126.jar
+6968ddea7fd3e9ffdd5890159b629b715a278725
+s3-2.20.126.jar
+2fdd53f6d5496ccab995a1d06d03bbda6925383e
+sdk-core-2.20.126.jar
+5792d6b96857ff464f5aed717c1a5b8c602e2efa
+third-party-jackson-core-2.20.126.jar
+07297b42ebb54fe40151b1356cd4897bfb5426a6
+utils-2.20.126.jar
+f9de49594245f42ec3f387127e8eaebc58793eda
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/sun/jdk/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/sun/jdk/main/hashes
new file mode 100644
index 0000000..b3ccc29
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/sun/jdk/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+27ef57157b096efbcc1704409b0f5204a5f68ea5
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/sun/jdk/main/service-loader-resources/META-INF/services/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/sun/jdk/main/service-loader-resources/META-INF/services/hashes
new file mode 100644
index 0000000..87971f9
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/sun/jdk/main/service-loader-resources/META-INF/services/hashes
@@ -0,0 +1,2 @@
+java.sql.Driver
+048e68b46e91a1de92747a5ebc10337f38c67b2d
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/sun/scripting/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/sun/scripting/main/hashes
new file mode 100644
index 0000000..5c6eaff
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/sun/scripting/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+efe07db37ee29aafdcef596ebce2cadecdaf5bdd
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/sun/scripting/main/service-loader-resources/META-INF/services/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/sun/scripting/main/service-loader-resources/META-INF/services/hashes
new file mode 100644
index 0000000..8a5a6a0
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/sun/scripting/main/service-loader-resources/META-INF/services/hashes
@@ -0,0 +1,2 @@
+javax.script.ScriptEngineFactory
+5e2ea3d1320745455b21a0d1569530e813e0dd3a
diff --git a/wildfly/.galleon/hashes/modules/system/layers/base/wildflyee/api/main/hashes b/wildfly/.galleon/hashes/modules/system/layers/base/wildflyee/api/main/hashes
new file mode 100644
index 0000000..6259dfe
--- /dev/null
+++ b/wildfly/.galleon/hashes/modules/system/layers/base/wildflyee/api/main/hashes
@@ -0,0 +1,2 @@
+module.xml
+a9af7e32df474d084fa8463ca35d96ede2e3f91f
diff --git a/wildfly/.galleon/hashes/standalone/configuration/hashes b/wildfly/.galleon/hashes/standalone/configuration/hashes
new file mode 100644
index 0000000..c6f66b6
--- /dev/null
+++ b/wildfly/.galleon/hashes/standalone/configuration/hashes
@@ -0,0 +1,24 @@
+application-roles.properties
+08e3509b8425e361dfaa92418c0d82d4cf4eaf3b
+application-users.properties
+5af67f3c3ada4a5bd7bfc4a655ef268b8a6a0c03
+logging.properties
+2a42ff3aab0e9e4992fbff05b480506cffdfeab6
+mgmt-groups.properties
+8a5ca3eeb904c2b6f2bc60f12e7cefed4b5d09b0
+mgmt-users.properties
+0907c9ae55715f1f236f1d720d28c0f3e3052e41
+standalone-full-ha.xml
+07391a3c1aba7dfb335d30824ea5c9dbe13d703e
+standalone-full.xml
+f45f422cecfe643a480df70efdfef169b64eceb0
+standalone-ha.xml
+f96f5aaf43cb2cb631f4adcd40d2d5bcd360244e
+standalone-load-balancer.xml
+0bbf0c64cfc342f38f69aa25e2eed3610df35286
+standalone-microprofile-ha.xml
+7c5617d975ea3d2b14cc6a0a948fc3a9c5e78706
+standalone-microprofile.xml
+e31fcfa18fdbbc26b7083c30ef0481c77639600a
+standalone.xml
+e22686344db0bfcb98a86d95d3411475064b4041
diff --git a/wildfly/.galleon/hashes/standalone/deployments/hashes b/wildfly/.galleon/hashes/standalone/deployments/hashes
new file mode 100644
index 0000000..7c56801
--- /dev/null
+++ b/wildfly/.galleon/hashes/standalone/deployments/hashes
@@ -0,0 +1,2 @@
+README.txt
+a7259d2618d2af661d4b76935c45fd207b925f21
diff --git a/wildfly/.galleon/hashes/welcome-content/hashes b/wildfly/.galleon/hashes/welcome-content/hashes
new file mode 100644
index 0000000..55c4f04
--- /dev/null
+++ b/wildfly/.galleon/hashes/welcome-content/hashes
@@ -0,0 +1,18 @@
+bkg.gif
+6ef31a796ccba9bf19ba17e1b4952be60ee214cb
+favicon.ico
+76c7ba4925c6d7559ffe2155f9f90e8050401cbb
+index.html
+68aa4c59af00397e5f493d44cf5349bf70c82a14
+index_noconsole.html
+c6655d86d2a36a41e1bbf350fd8763a81f0e086a
+jbosscommunity_logo_hori_white.png
+8908bc70a714e842d83bbae45c856e8fd58541b4
+noconsole.html
+cc5ef8c5d468a7ef0ba44462bb811cc11aad31fc
+noredirect.html
+ab9406be6619d4485caa07b0529fd1e8012a5868
+wildfly.css
+f6ea5fba0b896c4f423ed784fbeb12e61e2285ea
+wildfly_logo.png
+813b3483141970b7a9bd1fc6bbccd3806093546e
diff --git a/wildfly/.galleon/provisioned.xml b/wildfly/.galleon/provisioned.xml
new file mode 100644
index 0000000..2026cb6
--- /dev/null
+++ b/wildfly/.galleon/provisioned.xml
@@ -0,0 +1,23629 @@
+<?xml version="1.0" ?>
+
+<installation xmlns="urn:jboss:galleon:provisioned-state:3.0">
+    <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+        <packages>
+            <package name="docs.examples.configs"/>
+            <package name="appclient"/>
+            <package name="bin.jdrtools"/>
+            <package name="bin.wstools"/>
+            <package name="bin.appclient"/>
+            <package name="bin.common"/>
+            <package name="core-tools"/>
+            <package name="tools"/>
+            <package name="bin"/>
+            <package name="docs.schema"/>
+            <package name="docs.examples"/>
+            <package name="docs.licenses"/>
+            <package name="docs.contrib"/>
+            <package name="docs"/>
+            <package name="org.wildfly._internal.unstable-api-annotation-index"/>
+            <package name="org.wildfly.unstable.annotation.api.indexer"/>
+            <package name="org.wildfly.security.manager"/>
+            <package name="org.wildfly.embedded"/>
+            <package name="org.fusesource.jansi"/>
+            <package name="org.aesh"/>
+            <package name="org.jboss.as.cli"/>
+            <package name="org.wildfly.installation-manager.api"/>
+            <package name="org.jboss.as.management-client-content"/>
+            <package name="org.jboss.as.host-controller"/>
+            <package name="org.wildfly.installation-manager"/>
+            <package name="org.wildfly.extension.core-management-client"/>
+            <package name="org.jboss.stdio"/>
+            <package name="javax.interceptor.api"/>
+            <package name="jakarta.interceptor.api"/>
+            <package name="org.jboss.invocation"/>
+            <package name="org.jboss.classfilewriter"/>
+            <package name="org.jboss.as.process-controller"/>
+            <package name="org.jboss.as.platform-mbean"/>
+            <package name="org.wildfly.io.spi"/>
+            <package name="org.jboss.as.network"/>
+            <package name="org.jboss.as.remoting"/>
+            <package name="org.jboss.as.jmx"/>
+            <package name="org.jboss.as.domain-management"/>
+            <package name="org.jboss.as.domain-http-interface"/>
+            <package name="org.jboss.vfs"/>
+            <package name="org.jboss.as.deployment-repository"/>
+            <package name="org.wildfly.security.elytron-web.undertow-server"/>
+            <package name="io.undertow.core"/>
+            <package name="org.jboss.as.server"/>
+            <package name="org.yaml.snakeyaml"/>
+            <package name="org.wildfly.service"/>
+            <package name="org.projectodd.vdx"/>
+            <package name="org.jboss.staxmapper"/>
+            <package name="org.jboss.msc"/>
+            <package name="org.jboss.as.version"/>
+            <package name="org.jboss.as.core-security"/>
+            <package name="org.jboss.dmr"/>
+            <package name="org.jboss.xnio.nio"/>
+            <package name="org.jboss.xnio"/>
+            <package name="org.jboss.marshalling.river"/>
+            <package name="org.jboss.marshalling"/>
+            <package name="org.jboss.remoting"/>
+            <package name="org.jboss.as.protocol"/>
+            <package name="org.wildfly.security.jakarta.authorization"/>
+            <package name="javax.security.auth.message.api"/>
+            <package name="jakarta.security.auth.message.api"/>
+            <package name="org.wildfly.security.jakarta.authentication"/>
+            <package name="org.slf4j.impl"/>
+            <package name="org.slf4j"/>
+            <package name="org.bouncycastle.bcpkix"/>
+            <package name="org.bouncycastle.bcutil"/>
+            <package name="org.bouncycastle.bcprov"/>
+            <package name="org.bouncycastle.bcpg"/>
+            <package name="org.apache.sshd"/>
+            <package name="org.jboss.threads"/>
+            <package name="javax.json.api"/>
+            <package name="org.eclipse.parsson"/>
+            <package name="jakarta.json.api"/>
+            <package name="org.wildfly.security.elytron-base"/>
+            <package name="org.wildfly.client.config"/>
+            <package name="org.wildfly.security.elytron-private"/>
+            <package name="internal.javax.json.api.ee8"/>
+            <package name="org.jboss.logmanager"/>
+            <package name="org.jboss.logging"/>
+            <package name="org.wildfly.common"/>
+            <package name="org.jboss.as.controller-client"/>
+            <package name="org.jboss.as.controller"/>
+            <package name="org.jboss.jandex"/>
+            <package name="io.smallrye.jandex"/>
+            <package name="org.wildfly.extension.core-management"/>
+            <package name="org.wildfly.security.elytron"/>
+            <package name="javax.security.jacc.api"/>
+            <package name="jakarta.security.jacc.api"/>
+            <package name="org.wildfly.extension.elytron"/>
+            <package name="org.jboss.remoting-jmx"/>
+            <package name="org.jboss.as.domain-http-error-context"/>
+            <package name="org.jboss.as.patching"/>
+            <package name="org.jboss.as.patching.cli"/>
+            <package name="org.jboss.metadata.web"/>
+            <package name="org.jboss.as.web-common"/>
+            <package name="org.jboss.common-beans"/>
+            <package name="org.wildfly.security.elytron-web.undertow-server-servlet"/>
+            <package name="org.wildfly.extension.io"/>
+            <package name="org.jboss.metadata.ear"/>
+            <package name="org.jboss.metadata.common"/>
+            <package name="org.glassfish.javax.enterprise.concurrent"/>
+            <package name="org.glassfish.jakarta.enterprise.concurrent"/>
+            <package name="javax.enterprise.concurrent.api"/>
+            <package name="jakarta.enterprise.concurrent.api"/>
+            <package name="org.jboss.as.ee"/>
+            <package name="org.wildfly.extension.request-controller"/>
+            <package name="org.wildfly.clustering.web.container"/>
+            <package name="org.wildfly.subsystem"/>
+            <package name="org.wildfly.clustering.service"/>
+            <package name="org.wildfly.clustering.context"/>
+            <package name="org.jboss.jboss-transaction-spi"/>
+            <package name="javax.resource.api"/>
+            <package name="jakarta.resource.api"/>
+            <package name="org.wildfly.transaction.client"/>
+            <package name="org.jboss.remote-naming"/>
+            <package name="org.wildfly.naming-client"/>
+            <package name="org.wildfly.discovery"/>
+            <package name="javax.ejb.api"/>
+            <package name="jakarta.ejb.api"/>
+            <package name="javax.transaction.api"/>
+            <package name="javax.enterprise.api"/>
+            <package name="javax.inject.api"/>
+            <package name="jakarta.inject.api"/>
+            <package name="jakarta.enterprise.api"/>
+            <package name="jakarta.transaction.api"/>
+            <package name="org.jboss.ejb-client"/>
+            <package name="org.wildfly.http-client.common"/>
+            <package name="org.wildfly.http-client.naming"/>
+            <package name="org.jboss.as.naming"/>
+            <package name="org.jboss.as.clustering.common"/>
+            <package name="javax.websocket.api"/>
+            <package name="jakarta.websocket.api"/>
+            <package name="io.undertow.websocket"/>
+            <package name="org.eclipse.jdt.ecj"/>
+            <package name="io.undertow.jsp"/>
+            <package name="javax.servlet.jstl.api"/>
+            <package name="jakarta.servlet.jstl.api"/>
+            <package name="javax.servlet.jsp.api"/>
+            <package name="org.glassfish.jakarta.el"/>
+            <package name="javax.el.api"/>
+            <package name="jakarta.el.api"/>
+            <package name="org.glassfish.expressly"/>
+            <package name="jakarta.servlet.jsp.api"/>
+            <package name="javax.servlet.api"/>
+            <package name="jakarta.servlet.api"/>
+            <package name="javax.annotation.api"/>
+            <package name="jakarta.annotation.api"/>
+            <package name="io.undertow.servlet"/>
+            <package name="org.wildfly.extension.undertow"/>
+            <package name="javaee.api"/>
+            <package name="wildflyee.api"/>
+            <package name="org.jboss.logging.commons.logging"/>
+            <package name="org.apache.commons.logging"/>
+            <package name="org.apache.httpcomponents.core"/>
+            <package name="com.googlecode.javaewah"/>
+            <package name="org.eclipse.jgit"/>
+            <package name="javax.xml.bind.api"/>
+            <package name="com.sun.xml.bind"/>
+            <package name="org.glassfish.jaxb"/>
+            <package name="org.eclipse.angus.activation"/>
+            <package name="javax.activation.api"/>
+            <package name="jakarta.activation.api"/>
+            <package name="jakarta.xml.bind.api"/>
+            <package name="org.wildfly.naming"/>
+            <package name="org.glassfish.javax.el"/>
+            <package name="javax.json.bind.api"/>
+            <package name="jakarta.json.bind.api"/>
+            <package name="org.eclipse.yasson"/>
+            <package name="org.jboss.as.deployment-scanner"/>
+            <package name="org.wildfly.extension.elytron.jaas-realm"/>
+            <package name="org.wildfly.openssl"/>
+            <package name="org.jboss.logmanager.log4j2"/>
+            <package name="org.apache.logging.log4j.api"/>
+            <package name="org.jboss.logging.jul-to-slf4j-stub"/>
+            <package name="org.jboss.as.logging"/>
+            <package name="org.wildfly.extension.security.manager"/>
+            <package name="org.jboss.as.domain-add-user"/>
+            <package name="org.apache.commons.cli"/>
+            <package name="org.apache.commons.lang3"/>
+            <package name="org.wildfly.security.elytron-tool"/>
+            <package name="org.wildfly.clustering.server"/>
+            <package name="org.wildfly.clustering.singleton.server"/>
+            <package name="org.wildfly.clustering.singleton.compat"/>
+            <package name="org.wildfly.clustering.singleton"/>
+            <package name="org.wildfly.clustering.singleton.api"/>
+            <package name="org.wildfly.extension.clustering.singleton"/>
+            <package name="org.wildfly.clustering.server.infinispan"/>
+            <package name="org.wildfly.clustering.jgroups.api"/>
+            <package name="org.wildfly.clustering.jgroups.spi"/>
+            <package name="org.wildfly.clustering.infinispan.embedded.service"/>
+            <package name="org.wildfly.clustering.cache.infinispan.embedded"/>
+            <package name="org.infinispan.protostream.types"/>
+            <package name="org.infinispan"/>
+            <package name="org.infinispan.core"/>
+            <package name="org.wildfly.extension.clustering.server"/>
+            <package name="org.wildfly.clustering.server.service"/>
+            <package name="org.wildfly.clustering.cache.infinispan.common"/>
+            <package name="net.jcip"/>
+            <package name="org.wildfly.clustering.cache.spi"/>
+            <package name="org.wildfly.clustering.server.spi"/>
+            <package name="org.wildfly.clustering.server.local"/>
+            <package name="org.wildfly.clustering.marshalling.protostream"/>
+            <package name="org.jgroups.kubernetes"/>
+            <package name="com.fasterxml.jackson.core.jackson-core"/>
+            <package name="com.microsoft.azure.storage"/>
+            <package name="org.jgroups.azure"/>
+            <package name="org.jgroups"/>
+            <package name="com.squareup.protoparser"/>
+            <package name="org.infinispan.protostream"/>
+            <package name="org.reactivestreams"/>
+            <package name="io.reactivex.rxjava3.rxjava"/>
+            <package name="com.github.ben-manes.caffeine"/>
+            <package name="org.infinispan.commons"/>
+            <package name="org.wildfly.clustering.server.jgroups"/>
+            <package name="org.wildfly.clustering.server.api"/>
+            <package name="org.wildfly.clustering.marshalling.spi"/>
+            <package name="org.wildfly.clustering.marshalling.api"/>
+            <package name="org.wildfly.clustering.marshalling.jboss"/>
+            <package name="org.jboss.ironjacamar.jdbcadapters"/>
+            <package name="org.jboss.ironjacamar.impl"/>
+            <package name="org.jboss.ironjacamar.api"/>
+            <package name="org.wildfly.http-client.transaction"/>
+            <package name="org.jboss.metadata.ejb"/>
+            <package name="org.wildfly.iiop-openjdk"/>
+            <package name="javax.rmi.api"/>
+            <package name="org.jboss.iiop-client"/>
+            <package name="org.jboss.jts.integration"/>
+            <package name="javax.orb.api"/>
+            <package name="org.omg.api"/>
+            <package name="org.jboss.jts"/>
+            <package name="org.jboss.as.transactions"/>
+            <package name="org.jboss.as.threads"/>
+            <package name="org.joda.time"/>
+            <package name="org.jboss.weld.spi"/>
+            <package name="org.jboss.weld.api"/>
+            <package name="org.jboss.weld.core"/>
+            <package name="javax.persistence.api"/>
+            <package name="jakarta.persistence.api"/>
+            <package name="com.fasterxml.classmate"/>
+            <package name="org.hibernate.validator"/>
+            <package name="javax.validation.api"/>
+            <package name="jakarta.validation.api"/>
+            <package name="org.jboss.as.connector"/>
+            <package name="com.fasterxml.jackson.core.jackson-annotations"/>
+            <package name="com.fasterxml.jackson.core.jackson-databind"/>
+            <package name="com.fasterxml.jackson.datatype.jackson-datatype-jsr310"/>
+            <package name="org.jboss.resteasy.resteasy-jaxb-provider"/>
+            <package name="org.apache.commons.io"/>
+            <package name="org.apache.james.mime4j"/>
+            <package name="javax.ws.rs.api"/>
+            <package name="com.ibm.async.asyncutil"/>
+            <package name="org.jboss.resteasy.resteasy-core"/>
+            <package name="org.jboss.resteasy.resteasy-core-spi"/>
+            <package name="org.jboss.resteasy.resteasy-client-api"/>
+            <package name="org.apache.httpcomponents"/>
+            <package name="org.apache.commons.codec"/>
+            <package name="org.jboss.resteasy.resteasy-client"/>
+            <package name="jakarta.ws.rs.api"/>
+            <package name="javax.mail.api"/>
+            <package name="org.eclipse.angus.mail"/>
+            <package name="jakarta.mail.api"/>
+            <package name="org.jboss.resteasy.resteasy-multipart-provider"/>
+            <package name="com.fasterxml.jackson.datatype.jackson-datatype-jdk8"/>
+            <package name="org.jboss.resteasy.resteasy-cdi"/>
+            <package name="org.jboss.resteasy.resteasy-validator-provider"/>
+            <package name="org.jboss.resteasy.resteasy-atom-provider"/>
+            <package name="org.jboss.resteasy.resteasy-jsapi"/>
+            <package name="com.google.guava.failureaccess"/>
+            <package name="com.google.guava"/>
+            <package name="com.github.fge.btf"/>
+            <package name="com.github.fge.msg-simple"/>
+            <package name="com.github.fge.jackson-coreutils"/>
+            <package name="com.github.fge.json-patch"/>
+            <package name="com.fasterxml.jackson.jaxrs.jackson-jaxrs-json-provider"/>
+            <package name="com.fasterxml.jackson.jakarta.jackson-jakarta-json-provider"/>
+            <package name="org.jboss.resteasy.resteasy-jackson2-provider"/>
+            <package name="org.jboss.resteasy.resteasy-jaxrs"/>
+            <package name="org.jboss.resteasy.resteasy-spring"/>
+            <package name="org.jboss.resteasy.resteasy-tracing-api"/>
+            <package name="org.jboss.resteasy.resteasy-json-p-provider"/>
+            <package name="org.jboss.resteasy.resteasy-json-binding-provider"/>
+            <package name="org.bouncycastle.bcmail"/>
+            <package name="org.jboss.resteasy.resteasy-crypto"/>
+            <package name="org.jboss.as.jaxrs"/>
+            <package name="org.wildfly.extension.bean-validation"/>
+            <package name="org.jboss.ws.cxf.jbossws-cxf-client"/>
+            <package name="org.jboss.xts"/>
+            <package name="org.jboss.ws.cxf.jbossws-cxf-server"/>
+            <package name="org.jboss.ws.cxf.jbossws-cxf-transports-udp"/>
+            <package name="org.jboss.ws.jaxws-undertow-httpspi"/>
+            <package name="org.jboss.ws.cxf.jbossws-cxf-transports-undertow"/>
+            <package name="org.apache.cxf.services-sts"/>
+            <package name="org.apache.cxf.ws-security"/>
+            <package name="com.sun.xml.fastinfoset"/>
+            <package name="org.apache.cxf"/>
+            <package name="org.codehaus.woodstox"/>
+            <package name="org.opensaml"/>
+            <package name="org.apache.santuario.xmlsec"/>
+            <package name="org.jasypt"/>
+            <package name="com.sun.xml.messaging.saaj"/>
+            <package name="org.apache.ws.security"/>
+            <package name="org.apache.ws.xmlschema"/>
+            <package name="org.apache.xml-resolver"/>
+            <package name="org.apache.velocity"/>
+            <package name="org.apache.neethi"/>
+            <package name="org.apache.cxf.impl"/>
+            <package name="org.jboss.ws.cxf.jbossws-cxf-factories"/>
+            <package name="org.apache.commons.collections"/>
+            <package name="org.apache.commons.beanutils"/>
+            <package name="org.jboss.jaxbintros"/>
+            <package name="org.jboss.ws.common"/>
+            <package name="org.wildfly.http-client.ejb"/>
+            <package name="org.wildfly.clustering.ejb.spi"/>
+            <package name="org.jboss.ejb3"/>
+            <package name="javax.jms.api"/>
+            <package name="jakarta.jms.api"/>
+            <package name="org.jboss.as.ejb3"/>
+            <package name="org.jboss.as.webservices"/>
+            <package name="org.jboss.ws.spi"/>
+            <package name="org.jboss.ws.jaxws-client"/>
+            <package name="org.jboss.ws.api"/>
+            <package name="javax.jws.api"/>
+            <package name="javax.xml.ws.api"/>
+            <package name="javax.xml.soap.api"/>
+            <package name="jakarta.xml.soap.api"/>
+            <package name="jakarta.xml.ws.api"/>
+            <package name="javax.wsdl4j.api"/>
+            <package name="asm.asm"/>
+            <package name="org.jboss.as.webservices.server.integration"/>
+            <package name="org.jboss.as.weld.common"/>
+            <package name="org.jboss.as.weld.spi"/>
+            <package name="org.jboss.as.weld.webservices"/>
+            <package name="org.hibernate.validator.cdi"/>
+            <package name="org.jboss.as.jpa.spi"/>
+            <package name="org.jboss.as.jpa"/>
+            <package name="org.jboss.as.weld.jpa"/>
+            <package name="org.jboss.as.weld.beanvalidation"/>
+            <package name="org.jboss.as.weld.ejb"/>
+            <package name="org.jboss.as.weld.transactions"/>
+            <package name="org.jboss.as.weld"/>
+            <package name="org.hibernate.search.orm"/>
+            <package name="org.hibernate.search.jipijapa-hibernatesearch"/>
+            <package name="org.hibernate.envers"/>
+            <package name="net.bytebuddy"/>
+            <package name="org.hibernate.infinispan"/>
+            <package name="org.infinispan.hibernate-cache"/>
+            <package name="org.hibernate.jipijapa-hibernate6"/>
+            <package name="org.antlr"/>
+            <package name="org.hibernate"/>
+            <package name="org.hibernate.commons-annotations"/>
+            <package name="org.hibernate.search.mapper.pojo"/>
+            <package name="org.hibernate.search.engine"/>
+            <package name="org.hibernate.search.mapper.orm"/>
+            <package name="org.wildfly.clustering.infinispan.client.service"/>
+            <package name="org.wildfly.clustering.infinispan.client.api"/>
+            <package name="org.infinispan.cachestore.remote"/>
+            <package name="org.infinispan.objectfilter"/>
+            <package name="org.infinispan.query.dsl"/>
+            <package name="org.infinispan.query.client"/>
+            <package name="io.netty.netty-codec-dns"/>
+            <package name="io.netty.netty-resolver-dns"/>
+            <package name="io.netty.netty-handler"/>
+            <package name="io.netty.netty-codec"/>
+            <package name="org.infinispan.client.hotrod"/>
+            <package name="org.infinispan.persistence.remote"/>
+            <package name="org.infinispan.persistence.jdbc"/>
+            <package name="io.netty.netty-transport-native-kqueue"/>
+            <package name="io.netty.netty-transport-native-epoll"/>
+            <package name="io.netty.netty-resolver"/>
+            <package name="io.netty.netty-transport"/>
+            <package name="io.netty.netty-buffer"/>
+            <package name="io.netty.netty-transport-native-unix-common"/>
+            <package name="io.netty.netty-common"/>
+            <package name="org.jboss.as.clustering.infinispan"/>
+            <package name="com.nimbusds.nimbus-jose-jwt"/>
+            <package name="javax.security.enterprise.api"/>
+            <package name="jakarta.security.enterprise.api"/>
+            <package name="org.glassfish.soteria"/>
+            <package name="org.wildfly.security.jakarta.security"/>
+            <package name="org.wildfly.extension.ee-security"/>
+            <package name="org.wildfly.extension.metrics"/>
+            <package name="org.wildfly.extension.health"/>
+            <package name="com.h2database.h2"/>
+            <package name="org.bitbucket.jose4j"/>
+            <package name="org.wildfly.security.elytron-jose-util"/>
+            <package name="org.wildfly.security.elytron-jose-jwk"/>
+            <package name="org.wildfly.security.elytron-http-oidc"/>
+            <package name="org.wildfly.extension.elytron-oidc-client"/>
+            <package name="org.wildfly.extension.discovery"/>
+            <package name="org.jboss.as.clustering.ejb3.infinispan"/>
+            <package name="org.wildfly.clustering.ejb.infinispan"/>
+            <package name="org.wildfly.clustering.ejb.client"/>
+            <package name="org.wildfly.clustering.ejb.cache"/>
+            <package name="org.wildfly.extension.clustering.ejb"/>
+            <package name="org.apache.activemq.artemis.service-extensions"/>
+            <package name="org.apache.activemq.artemis.ra"/>
+            <package name="de.dentrassi.crypto.pem-keystore"/>
+            <package name="org.apache.activemq.artemis.commons"/>
+            <package name="org.apache.activemq.artemis.client"/>
+            <package name="io.netty.netty-codec-http"/>
+            <package name="io.netty.netty-codec-socks"/>
+            <package name="io.netty.netty-handler-proxy"/>
+            <package name="org.wildfly.extension.messaging-activemq.injection"/>
+            <package name="org.wildfly.extension.messaging-activemq"/>
+            <package name="org.wildfly.clustering.web.service"/>
+            <package name="org.wildfly.clustering.session.spi"/>
+            <package name="org.wildfly.clustering.session.spec.spi"/>
+            <package name="org.wildfly.clustering.session.spec.servlet"/>
+            <package name="org.wildfly.clustering.web.undertow"/>
+            <package name="org.wildfly.clustering.weld.web"/>
+            <package name="org.wildfly.clustering.weld.ejb"/>
+            <package name="org.wildfly.clustering.weld.core"/>
+            <package name="org.wildfly.clustering.web.api"/>
+            <package name="org.wildfly.clustering.web.hotrod"/>
+            <package name="org.wildfly.clustering.session.infinispan.remote"/>
+            <package name="org.wildfly.clustering.web.infinispan"/>
+            <package name="org.wildfly.clustering.session.infinispan.embedded"/>
+            <package name="org.wildfly.clustering.session.cache"/>
+            <package name="org.wildfly.clustering.faces.api"/>
+            <package name="org.wildfly.clustering.faces.mojarra"/>
+            <package name="org.wildfly.clustering.el.expressly"/>
+            <package name="org.wildfly.clustering.cache.infinispan.remote"/>
+            <package name="javax.faces.api"/>
+            <package name="jakarta.faces.impl"/>
+            <package name="jakarta.faces.api"/>
+            <package name="org.jboss.as.jsf"/>
+            <package name="org.wildfly.extension.clustering.web"/>
+            <package name="org.jboss.as.jdr"/>
+            <package name="org.jboss.as.jsf-injection"/>
+            <package name="org.jboss.ws.saaj-impl"/>
+            <package name="org.jboss.ws.cxf.sts"/>
+            <package name="gnu.getopt"/>
+            <package name="org.jboss.ws.tools.common"/>
+            <package name="org.jboss.ws.tools.wsconsume"/>
+            <package name="org.jboss.ws.tools.wsprovide"/>
+            <package name="org.jboss.as.pojo"/>
+            <package name="org.jboss.as.mail"/>
+            <package name="org.jboss.as.system-jmx"/>
+            <package name="org.jboss.as.sar"/>
+            <package name="org.jberet.jberet-core"/>
+            <package name="javax.batch.api"/>
+            <package name="jakarta.batch.api"/>
+            <package name="org.wildfly.extension.batch.jberet"/>
+            <package name="com.carrotsearch.hppc"/>
+            <package name="org.apache.lucene"/>
+            <package name="org.hibernate.search.backend.lucene"/>
+            <package name="com.google.code.gson"/>
+            <package name="org.elasticsearch.client.rest-client"/>
+            <package name="org.hibernate.search.backend.elasticsearch"/>
+            <package name="org.jboss.as.console"/>
+            <package name="org.jctools"/>
+            <package name="org.apache.activemq.artemis.journal"/>
+            <package name="org.apache.activemq.artemis"/>
+            <package name="org.jboss.xnio.netty.netty-xnio-transport"/>
+            <package name="welcome-content"/>
+            <package name="org.jboss.as.clustering.jgroups"/>
+            <package name="org.wildfly.mod_cluster.undertow"/>
+            <package name="org.jboss.mod_cluster.load.spi"/>
+            <package name="org.jboss.mod_cluster.core"/>
+            <package name="org.jboss.mod_cluster.container.spi"/>
+            <package name="org.wildfly.extension.mod_cluster"/>
+            <package name="org.jboss.as.modcluster"/>
+            <package name="product.conf"/>
+            <package name="org.infinispan.counter"/>
+            <package name="org.keycloak.keycloak-adapter-subsystem"/>
+            <package name="org.jboss.as.appclient"/>
+            <package name="org.wildfly.bootable-jar"/>
+            <package name="org.wildfly.security.jakarta.client.webservices"/>
+            <package name="org.infinispan.lock"/>
+            <package name="org.infinispan.query"/>
+            <package name="sun.jdk"/>
+            <package name="org.apache.activemq.artemis.protocol.hornetq"/>
+            <package name="org.hornetq.client"/>
+            <package name="org.wildfly.extension.picketlink"/>
+            <package name="org.eclipse.persistence"/>
+            <package name="org.jboss.as.security"/>
+            <package name="org.wildfly.security.jakarta.client.resteasy"/>
+            <package name="org.jboss.as.jsr77"/>
+            <package name="org.jboss.metadata.appclient"/>
+            <package name="org.jboss.resteasy.resteasy-rxjava2"/>
+            <package name="org.infinispan.cdi.embedded"/>
+            <package name="org.infinispan.query.core"/>
+            <package name="sun.scripting"/>
+            <package name="javax.xml.stream.api"/>
+            <package name="org.jboss.as.clustering.web.infinispan"/>
+            <package name="org.wildfly.security.http.sfbasic"/>
+            <package name="org.infinispan.cdi.common"/>
+            <package name="org.infinispan.cdi.remote"/>
+            <package name="org.apache.activemq.artemis.protocol.stomp"/>
+            <package name="org.jboss.genericjms"/>
+            <package name="org.apache.activemq.artemis.protocol.amqp"/>
+            <package name="io.agroal"/>
+            <package name="org.wildfly.extension.datasources-agroal"/>
+            <package name="org.wildfly.event.logger"/>
+            <package name="software.amazon.awssdk.s3"/>
+            <package name="org.jgroups.aws"/>
+            <package name="ibm.jdk"/>
+            <package name="javax.api"/>
+            <package name="org.jboss.narayana.rts"/>
+            <package name="org.wildfly.extension.rts"/>
+            <package name="org.jboss.as.xts"/>
+            <package name="org.bouncycastle"/>
+            <package name="org.jboss.as.standalone"/>
+            <package name="javax.sql.api"/>
+            <package name="modules.all"/>
+            <package name="io.reactivex.rxjava2.rxjava"/>
+            <package name="com.fasterxml.jackson.dataformat.jackson-dataformat-yaml"/>
+            <package name="org.apache.qpid.proton"/>
+            <package name="banner"/>
+            <package name="standalone"/>
+            <package name="bin.standalone"/>
+            <package name="core.misc.common"/>
+            <package name="copyright.txt"/>
+            <package name="README.txt"/>
+            <package name="LICENSE.txt"/>
+            <package name="servlet.misc.common"/>
+            <package name="misc.common"/>
+            <package name="core.misc.standalone"/>
+            <package name="servlet.misc.standalone"/>
+            <package name="misc.standalone"/>
+            <package name="cleanup.standalone.config.history.dir"/>
+            <package name="cleanup.standalone.log.dir"/>
+            <package name="cleanup.standalone.data.dir"/>
+            <package name="cleanup.standalone.tmp.vfs"/>
+            <package name="unstable-api-annotation-index.wildfly-ee-feature-pack"/>
+            <package name="domain"/>
+            <package name="bin.domain"/>
+            <package name="core.misc.domain"/>
+            <package name="servlet.misc.domain"/>
+            <package name="misc.domain"/>
+            <package name="cleanup.domain.config.history.dir"/>
+            <package name="cleanup.domain.servers.dir"/>
+            <package name="cleanup.domain.log.dir"/>
+            <package name="cleanup.domain.data.dir"/>
+        </packages>
+    </feature-pack>
+    <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+        <packages>
+            <package name="io.smallrye.common.function"/>
+            <package name="io.smallrye.common.expression"/>
+            <package name="io.smallrye.common.classloader"/>
+            <package name="io.smallrye.common.constraint"/>
+            <package name="org.eclipse.microprofile.config.api"/>
+            <package name="io.smallrye.config"/>
+            <package name="org.wildfly.extension.microprofile.config-smallrye"/>
+            <package name="org.eclipse.microprofile.jwt.auth.api"/>
+            <package name="io.smallrye.jwt"/>
+            <package name="org.wildfly.security.elytron-jwt"/>
+            <package name="org.wildfly.extension.microprofile.jwt-smallrye"/>
+            <package name="docs.schema"/>
+            <package name="docs.licenses"/>
+            <package name="docs"/>
+            <package name="docs.examples"/>
+            <package name="docs.licenses.merge"/>
+            <package name="org.jboss.resteasy.microprofile.config"/>
+            <package name="io.vertx.client"/>
+            <package name="org.wildfly.reactive.mutiny.reactive-streams-operators.cdi-provider"/>
+            <package name="org.wildfly.extension.micrometer"/>
+            <package name="org.wildfly.extension.microprofile.reactive-streams-operators-smallrye"/>
+            <package name="org.eclipse.microprofile.restclient"/>
+            <package name="org.jboss.resteasy.resteasy-client-microprofile"/>
+            <package name="org.jboss.as.product"/>
+            <package name="org.eclipse.krazo.resteasy"/>
+            <package name="jakarta.mvc.api"/>
+            <package name="org.eclipse.krazo.core"/>
+            <package name="org.wildfly.extension.mvc-krazo"/>
+            <package name="org.wildfly.reactive.messaging.amqp"/>
+            <package name="io.smallrye.reactive.messaging.connector.amqp"/>
+            <package name="org.wildfly.extension.microprofile.telemetry-api"/>
+            <package name="org.wildfly.extension.microprofile.telemetry"/>
+            <package name="io.smallrye.health"/>
+            <package name="org.wildfly.extension.microprofile.health-smallrye"/>
+            <package name="org.eclipse.microprofile.health.api"/>
+            <package name="org.jboss.narayana.rts.lra-coordinator"/>
+            <package name="org.wildfly.extension.microprofile.lra-coordinator"/>
+            <package name="org.wildfly.extension.microprofile.reactive-messaging-smallrye"/>
+            <package name="org.wildfly.extension.microprofile.metrics-smallrye"/>
+            <package name="io.smallrye.reactive.mutiny.reactive-streams-operators"/>
+            <package name="io.smallrye.reactive.messaging.connector"/>
+            <package name="io.smallrye.common.vertx-context"/>
+            <package name="io.smallrye.reactive.messaging"/>
+            <package name="io.smallrye.reactive.messaging.connector.kafka"/>
+            <package name="org.wildfly.extension.microprofile.openapi-smallrye"/>
+            <package name="org.wildfly.extension.opentelemetry"/>
+            <package name="io.vertx.client.kafka"/>
+            <package name="io.smallrye.reactive.mutiny.vertx-kafka-client"/>
+            <package name="io.smallrye.reactive.mutiny.zero"/>
+            <package name="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+            <package name="org.eclipse.microprofile.openapi.api"/>
+            <package name="io.smallrye.openapi"/>
+            <package name="io.smallrye.reactive.messaging.connector.kafka.api"/>
+            <package name="io.vertx.proton"/>
+            <package name="io.vertx.client.amqp"/>
+            <package name="io.smallrye.reactive.mutiny.vertx-runtime"/>
+            <package name="io.smallrye.reactive.mutiny.vertx-core"/>
+            <package name="io.smallrye.reactive.mutiny.vertx-amqp-client"/>
+            <package name="io.smallrye.reactive.mutiny"/>
+            <package name="org.eclipse.microprofile.reactive-messaging.api"/>
+            <package name="org.xerial.snappy.snappy-java"/>
+            <package name="org.lz4.lz4-java"/>
+            <package name="com.github.luben.zstd-jni"/>
+            <package name="org.apache.kafka.client"/>
+            <package name="org.wildfly.reactive.messaging.kafka"/>
+            <package name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+            <package name="org.eclipse.microprofile.reactive-streams-operators.core"/>
+            <package name="org.jboss.narayana.rts.lra-service-base"/>
+            <package name="org.jboss.narayana.rts.lra-participant"/>
+            <package name="org.eclipse.microprofile.lra.api"/>
+            <package name="org.wildfly.extension.microprofile.lra-participant"/>
+            <package name="org.wildfly.extension.microprofile.opentracing-smallrye"/>
+            <package name="io.smallrye.reactive.mutiny.zero-flow-adapters"/>
+            <package name="org.wildfly.reactive.dep.jts"/>
+            <package name="org.wildfly.reactive.messaging.config"/>
+            <package name="org.wildfly.reactive.messaging.common"/>
+            <package name="org.eclipse.microprofile.fault-tolerance.api"/>
+            <package name="io.smallrye.reactive.converters.api"/>
+            <package name="io.smallrye.common.annotation"/>
+            <package name="io.smallrye.fault-tolerance"/>
+            <package name="org.wildfly.microprofile.fault-tolerance-smallrye.deployment"/>
+            <package name="io.opentelemetry.proto"/>
+            <package name="org.wildfly.extension.opentelemetry-api"/>
+            <package name="io.grpc"/>
+            <package name="com.google.protobuf"/>
+            <package name="io.vertx.grpc-common"/>
+            <package name="io.vertx.grpc-client"/>
+            <package name="io.netty.netty-codec-http2"/>
+            <package name="io.vertx.core"/>
+            <package name="io.opentelemetry.sdk"/>
+            <package name="io.opentelemetry.exporter"/>
+            <package name="io.smallrye.opentelemetry"/>
+            <package name="io.opentelemetry.semconv"/>
+            <package name="io.opentelemetry.instrumentation.api"/>
+            <package name="io.opentelemetry.instrumentation.annotations"/>
+            <package name="io.opentelemetry.context"/>
+            <package name="io.opentelemetry.api.events"/>
+            <package name="io.opentelemetry.api"/>
+            <package name="io.opentelemetry.otlp"/>
+            <package name="io.micrometer"/>
+            <package name="org.wildfly.micrometer.deployment"/>
+            <package name="modules.all"/>
+            <package name="docs.examples.configs"/>
+            <package name="unstable-api-annotation-index.wildfly-galleon-pack"/>
+        </packages>
+    </feature-pack>
+    <config name="standalone-microprofile-ha.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="naming"/>
+            <layer model="standalone" name="jsonb"/>
+            <layer model="standalone" name="ee-integration"/>
+            <layer model="standalone" name="ee-concurrency"/>
+            <layer model="standalone" name="ee"/>
+            <layer model="standalone" name="deployment-scanner"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow"/>
+            <layer model="standalone" name="servlet"/>
+            <layer model="standalone" name="web-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="jmx"/>
+            <layer model="standalone" name="remoting"/>
+            <layer model="standalone" name="jmx-remoting"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="core-management"/>
+            <layer model="standalone" name="request-controller"/>
+            <layer model="standalone" name="security-manager"/>
+            <layer model="standalone" name="core-server"/>
+            <layer model="standalone" name="core-tools"/>
+            <layer model="standalone" name="transactions"/>
+            <layer model="standalone" name="datasources"/>
+            <layer model="standalone" name="datasources-web-server"/>
+            <layer model="standalone" name="jaxrs-core"/>
+            <layer model="standalone" name="jaxrs"/>
+            <layer model="standalone" name="cdi"/>
+            <layer model="standalone" name="bean-validation"/>
+            <layer model="standalone" name="jaxrs-server"/>
+            <layer model="standalone" name="ee-security"/>
+            <layer model="standalone" name="resource-adapters"/>
+            <layer model="standalone" name="messaging-activemq"/>
+            <layer model="standalone" name="jms-activemq"/>
+            <layer model="standalone" name="metrics"/>
+            <layer model="standalone" name="health"/>
+            <layer model="standalone" name="microprofile-config"/>
+            <layer model="standalone" name="opentelemetry"/>
+            <layer model="standalone" name="microprofile-telemetry"/>
+            <layer model="standalone" name="microprofile-health"/>
+            <layer model="standalone" name="observability"/>
+            <layer model="standalone" name="cloud-server"/>
+            <layer model="standalone" name="h2-driver"/>
+            <layer model="standalone" name="h2-datasource"/>
+            <layer model="standalone" name="h2-default-datasource"/>
+            <layer model="standalone" name="microprofile-fault-tolerance"/>
+            <layer model="standalone" name="microprofile-jwt"/>
+            <layer model="standalone" name="microprofile-openapi"/>
+            <layer model="standalone" name="microprofile-rest-client"/>
+            <layer model="standalone" name="jpa-distributed"/>
+            <layer model="standalone" name="web-clustering"/>
+            <layer model="standalone" name="elytron-oidc-client"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=private">
+                    <param name="interface" value="private"/>
+                    <param name="inet-address" value="${jboss.bind.address.private:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.opentelemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.opentelemetry"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.telemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.telemetry"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.health-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.health-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.fault-tolerance-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.openapi-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.openapi-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner:subsystem=deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner.scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner.scanner:scanner=default,subsystem=deployment-scanner">
+                    <param name="scanner" value="default"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="path" value="deployments"/>
+                    <param name="scan-interval" value="5000"/>
+                    <param name="relative-to" value="jboss.server.base.dir"/>
+                    <param name="runtime-failure-causes-rollback" value="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-mping">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="multicast-port" value="45700"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-tcp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="7600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-tcp-fd">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="57600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-udp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="port" value="55200"/>
+                    <param name="multicast-port" value="45688"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-udp-fd">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="54200"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="setting" value="http-invoker"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="jsp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="websockets"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq:subsystem=messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.metrics">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.metrics:subsystem=metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="metrics"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                    <param name="exposed-subsystems" value="[*]"/>
+                    <param name="prefix" value="${wildfly.metrics.prefix:wildfly}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.health">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.health:subsystem=health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="health"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.opentelemetry">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.opentelemetry:subsystem=opentelemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="opentelemetry"/>
+                    <param name="extension" value="org.wildfly.extension.opentelemetry"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-telemetry">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-telemetry:subsystem=microprofile-telemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-telemetry"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.telemetry"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-health-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-health-smallrye:subsystem=microprofile-health-smallrye">
+                    <param name="extension" value="org.wildfly.extension.microprofile.health-smallrye"/>
+                    <param name="empty-startup-checks-status" value="${env.MP_HEALTH_EMPTY_STARTUP_CHECKS_STATUS:UP}"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-health-smallrye"/>
+                    <param name="empty-liveness-checks-status" value="${env.MP_HEALTH_EMPTY_LIVENESS_CHECKS_STATUS:UP}"/>
+                    <param name="empty-readiness-checks-status" value="${env.MP_HEALTH_EMPTY_READINESS_CHECKS_STATUS:UP}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-fault-tolerance-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-fault-tolerance-smallrye:subsystem=microprofile-fault-tolerance-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-fault-tolerance-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-openapi-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-openapi-smallrye:subsystem=microprofile-openapi-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-openapi-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.openapi-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups:subsystem=jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="default-channel" value="ee"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=udp">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.channel">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.channel:channel=ee,subsystem=jgroups">
+                    <param name="channel" value="ee"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="cluster" value="ejb"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=tcp">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=tcp,transport=TCP">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="transport" value="TCP"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=RED">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.MPING">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.MPING:subsystem=jgroups,stack=tcp,protocol=MPING">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MPING"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MERGE3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=tcp,protocol=FD_SOCK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FD_ALL3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=VERIFY_SUSPECT2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.NAKACK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UNICAST3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.STABLE">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.GMS">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FRAG4">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=udp,transport=UDP">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="transport" value="UDP"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=RED">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=PING">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="PING"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MERGE3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=udp,protocol=FD_SOCK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FD_ALL3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=VERIFY_SUSPECT2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.NAKACK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UNICAST3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.STABLE">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.GMS">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FRAG4">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=hibernate,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.memory.heap:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.session.infinispan.embedded]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=web,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=web,distributed-cache=dist,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=sso">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=routing">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=web,subsystem=infinispan,component=locking,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=web,subsystem=infinispan,component=transaction,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=web,subsystem=infinispan,component=expiration,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=web,subsystem=infinispan,store=file,distributed-cache=dist">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.locking:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=locking">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=transaction">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=routing,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.infinispan:subsystem=distributable-web,routing=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="infinispan"/>
+                    <param name="cache" value="routing"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.primary-owner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.primary-owner:subsystem=distributable-web,infinispan-session-management=default,affinity=primary-owner">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="primary-owner"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron-oidc-client">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron-oidc-client:subsystem=elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron-oidc-client"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="domain.xml" model="domain">
+        <props>
+            <prop name="--empty-domain-config" value=""/>
+            <prop name="--remove-existing-domain-config" value=""/>
+            <prop name="--empty-host-config" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--remove-existing-host-config" value=""/>
+        </props>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="domain.interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.interface:interface=management">
+                    <param name="interface" value="management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.interface:interface=public">
+                    <param name="interface" value="public"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.interface:interface=unsecure">
+                    <param name="interface" value="unsecure"/>
+                    <param name="inet-address" value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.interface:interface=private">
+                    <param name="interface" value="private"/>
+                    <param name="inet-address" value="${jboss.bind.address.private:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="profile">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}profile:profile=default">
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}profile:profile=ha">
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}profile:profile=full">
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}profile:profile=full-ha">
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}profile:profile=load-balancer">
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.batch.jberet">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ejb3">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.modcluster">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.singleton">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.iiop-openjdk">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                </feature>
+            </spec>
+            <spec name="domain.system-property">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.system-property:system-property=java.net.preferIPv4Stack">
+                    <param name="value" value="true"/>
+                    <param name="system-property" value="java.net.preferIPv4Stack"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="domain.host-exclude">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly23.0">
+                    <param name="host-release" value="WildFly23.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.clustering.ejb&quot;, &quot;org.wildfly.extension.elytron-oidc-client&quot;, &quot;org.wildfly.extension.opentelemetry&quot;, &quot;org.wildfly.extension.micrometer&quot;, &quot;org.wildfly.extension.microprofile.lra-participant&quot;, &quot;org.wildfly.extension.microprofile.lra-coordinator&quot;, &quot;org.wildfly.extension.microprofile.telemetry&quot;, &quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly23.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly24.0">
+                    <param name="host-release" value="WildFly24.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.clustering.ejb&quot;, &quot;org.wildfly.extension.elytron-oidc-client&quot;, &quot;org.wildfly.extension.opentelemetry&quot;, &quot;org.wildfly.extension.micrometer&quot;, &quot;org.wildfly.extension.microprofile.lra-participant&quot;, &quot;org.wildfly.extension.microprofile.lra-coordinator&quot;, &quot;org.wildfly.extension.microprofile.telemetry&quot;, &quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly24.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly25.0">
+                    <param name="host-release" value="WildFly25.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.clustering.ejb&quot;, &quot;org.wildfly.extension.micrometer&quot;, &quot;org.wildfly.extension.microprofile.lra-participant&quot;, &quot;org.wildfly.extension.microprofile.lra-coordinator&quot;, &quot;org.wildfly.extension.microprofile.telemetry&quot;, &quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly25.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly26.0">
+                    <param name="host-release" value="WildFly26.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.clustering.ejb&quot;, &quot;org.wildfly.extension.micrometer&quot;, &quot;org.wildfly.extension.microprofile.lra-participant&quot;, &quot;org.wildfly.extension.microprofile.lra-coordinator&quot;, &quot;org.wildfly.extension.microprofile.telemetry&quot;, &quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly26.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly27.0">
+                    <param name="host-release" value="WildFly27.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.micrometer&quot;, &quot;org.wildfly.extension.microprofile.lra-participant&quot;, &quot;org.wildfly.extension.microprofile.lra-coordinator&quot;, &quot;org.wildfly.extension.microprofile.telemetry&quot;, &quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly27.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly28.0">
+                    <param name="host-release" value="WildFly28.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly28.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly29.0">
+                    <param name="host-release" value="WildFly29.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly29.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly30.0">
+                    <param name="host-release" value="WildFly30.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly30.0"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.host-exclude:host-exclude=WildFly31.0">
+                    <param name="host-release" value="WildFly31.0"/>
+                    <param name="excluded-extensions" value="[&quot;org.wildfly.extension.mvc-krazo&quot;]"/>
+                    <param name="host-exclude" value="WildFly31.0"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=standard-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group:socket-binding-group=ha-sockets">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=modcluster">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="socket-binding" value="modcluster"/>
+                    <param name="multicast-address" value="${jboss.modcluster.multicast.address:224.0.1.105}"/>
+                    <param name="multicast-port" value="23364"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=jgroups-mping">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="multicast-port" value="45700"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=jgroups-tcp">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="7600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=jgroups-tcp-fd">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="57600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=jgroups-udp">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="port" value="55200"/>
+                    <param name="multicast-port" value="45688"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=jgroups-udp-fd">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="54200"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=ha-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=ha-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="ha-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group:socket-binding-group=full-sockets">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=iiop">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3528"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=iiop-ssl">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="socket-binding" value="iiop-ssl"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3529"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=full-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group:socket-binding-group=full-ha-sockets">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=modcluster">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="modcluster"/>
+                    <param name="multicast-address" value="${jboss.modcluster.multicast.address:224.0.1.105}"/>
+                    <param name="multicast-port" value="23364"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=jgroups-mping">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="multicast-port" value="45700"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=jgroups-tcp">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="7600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=jgroups-tcp-fd">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="57600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=jgroups-udp">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="port" value="55200"/>
+                    <param name="multicast-port" value="45688"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=jgroups-udp-fd">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="54200"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=iiop">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3528"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=iiop-ssl">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="socket-binding" value="iiop-ssl"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3529"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=full-ha-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=full-ha-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group:socket-binding-group=load-balancer-sockets">
+                    <param name="socket-binding-group" value="load-balancer-sockets"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="domain.socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=load-balancer-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="load-balancer-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=load-balancer-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="load-balancer-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=load-balancer-sockets,socket-binding=mcmp-management">
+                    <param name="socket-binding-group" value="load-balancer-sockets"/>
+                    <param name="socket-binding" value="mcmp-management"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="${jboss.mcmp.port:8090}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.socket-binding-group.socket-binding:socket-binding-group=load-balancer-sockets,socket-binding=modcluster">
+                    <param name="socket-binding-group" value="load-balancer-sockets"/>
+                    <param name="socket-binding" value="modcluster"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.modcluster.multicast.address:224.0.1.105}"/>
+                    <param name="multicast-port" value="23364"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN,profile=default">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN,profile=default">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE,profile=default">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna,profile=default">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema,profile=default">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration,profile=default">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config,profile=default">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi,profile=default">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,profile=default,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[FILE]"/>
+                    <param name="profile" value="default"/>
+                    <param name="root-logger" value="ROOT"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN,profile=ha">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN,profile=ha">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE,profile=ha">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna,profile=ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema,profile=ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration,profile=ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config,profile=ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi,profile=ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,profile=ha,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[FILE]"/>
+                    <param name="profile" value="ha"/>
+                    <param name="root-logger" value="ROOT"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN,profile=full">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN,profile=full">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE,profile=full">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna,profile=full">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema,profile=full">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration,profile=full">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config,profile=full">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi,profile=full">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,profile=full,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[FILE]"/>
+                    <param name="profile" value="full"/>
+                    <param name="root-logger" value="ROOT"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN,profile=full-ha">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN,profile=full-ha">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE,profile=full-ha">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna,profile=full-ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema,profile=full-ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration,profile=full-ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config,profile=full-ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi,profile=full-ha">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,profile=full-ha,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[FILE]"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="root-logger" value="ROOT"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging,profile=load-balancer">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN,profile=load-balancer">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN,profile=load-balancer">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE,profile=load-balancer">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="load-balancer"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna,profile=load-balancer">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema,profile=load-balancer">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration,profile=load-balancer">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config,profile=load-balancer">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi,profile=load-balancer">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,profile=load-balancer,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[FILE]"/>
+                    <param name="profile" value="load-balancer"/>
+                    <param name="root-logger" value="ROOT"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="profile" value="default"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="profile" value="default"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron,profile=default">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="default"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron,profile=default">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron,profile=default">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron,profile=default">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="profile" value="default"/>
+                    <param name="roles" value="[SuperUser]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron,profile=default">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron,profile=default">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron,profile=default">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron,profile=default">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS,profile=default">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM,profile=default">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron,profile=default">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,profile=default,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="profile" value="default"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="profile" value="ha"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="profile" value="ha"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron,profile=ha">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="ha"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron,profile=ha">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron,profile=ha">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron,profile=ha">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="profile" value="ha"/>
+                    <param name="roles" value="[SuperUser]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron,profile=ha">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron,profile=ha">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron,profile=ha">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron,profile=ha">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS,profile=ha">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM,profile=ha">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron,profile=ha">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,profile=ha,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="profile" value="ha"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="profile" value="full"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="profile" value="full"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron,profile=full">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="full"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron,profile=full">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron,profile=full">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron,profile=full">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="profile" value="full"/>
+                    <param name="roles" value="[SuperUser]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron,profile=full">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron,profile=full">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron,profile=full">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron,profile=full">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS,profile=full">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM,profile=full">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron,profile=full">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,profile=full,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="profile" value="full"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron,profile=full-ha">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron,profile=full-ha">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron,profile=full-ha">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron,profile=full-ha">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="roles" value="[SuperUser]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron,profile=full-ha">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron,profile=full-ha">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron,profile=full-ha">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron,profile=full-ha">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS,profile=full-ha">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM,profile=full-ha">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron,profile=full-ha">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,profile=full-ha,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager,profile=default">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager,profile=ha">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager,profile=full">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager,profile=full-ha">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io,profile=default">
+                    <param name="subsystem" value="io"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io,profile=ha">
+                    <param name="subsystem" value="io"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io,profile=full">
+                    <param name="subsystem" value="io"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io,profile=full-ha">
+                    <param name="subsystem" value="io"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io,profile=load-balancer">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io,profile=load-balancer">
+                    <param name="subsystem" value="io"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting,profile=default">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting,profile=ha">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting,profile=full">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting,profile=full-ha">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming,profile=default">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming,profile=ha">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming,profile=full">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming,profile=full-ha">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default,profile=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default,profile=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee,profile=default">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee,profile=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings,profile=default">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default,profile=ha">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default,profile=ha">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee,profile=ha">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee,profile=ha">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings,profile=ha">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default,profile=full">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default,profile=full">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee,profile=full">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee,profile=full">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings,profile=full">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                    <param name="jms-connection-factory" value="java:jboss/DefaultJMSConnectionFactory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default,profile=full-ha">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default,profile=full-ha">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee,profile=full-ha">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee,profile=full-ha">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings,profile=full-ha">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                    <param name="jms-connection-factory" value="java:jboss/DefaultJMSConnectionFactory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow,profile=default">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="default"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server,profile=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow,profile=default">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default,profile=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default,profile=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow,profile=default">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter,profile=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler,profile=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default,profile=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,file=welcome-content,configuration=handler,profile=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/,profile=default">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,profile=default,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="profile" value="default"/>
+                    <param name="setting" value="http-invoker"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,profile=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="setting" value="jsp"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,profile=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="setting" value="websockets"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https,profile=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow,profile=default">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow,profile=ha">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="ha"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server,profile=ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow,profile=ha">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default,profile=ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default,profile=ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow,profile=ha">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter,profile=ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler,profile=ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default,profile=ha">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,file=welcome-content,configuration=handler,profile=ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/,profile=ha">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,profile=ha,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="profile" value="ha"/>
+                    <param name="setting" value="http-invoker"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,profile=ha,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="setting" value="jsp"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,profile=ha,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="setting" value="websockets"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https,profile=ha">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.ajp-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.ajp-listener:server=default-server,subsystem=undertow,ajp-listener=ajp,profile=ha">
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="socket-binding" value="ajp"/>
+                    <param name="ajp-listener" value="ajp"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow,profile=ha">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow,profile=full">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="full"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server,profile=full">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow,profile=full">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default,profile=full">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default,profile=full">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow,profile=full">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter,profile=full">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler,profile=full">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default,profile=full">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,file=welcome-content,configuration=handler,profile=full">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/,profile=full">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,profile=full,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="profile" value="full"/>
+                    <param name="setting" value="http-invoker"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,profile=full,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="setting" value="jsp"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,profile=full,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="setting" value="websockets"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https,profile=full">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow,profile=full">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow,profile=full-ha">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server,profile=full-ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow,profile=full-ha">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default,profile=full-ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default,profile=full-ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow,profile=full-ha">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter,profile=full-ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler,profile=full-ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default,profile=full-ha">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,file=welcome-content,configuration=handler,profile=full-ha">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/,profile=full-ha">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,profile=full-ha,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="setting" value="http-invoker"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,profile=full-ha,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="setting" value="jsp"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,profile=full-ha,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="setting" value="websockets"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https,profile=full-ha">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.ajp-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.ajp-listener:server=default-server,subsystem=undertow,ajp-listener=ajp,profile=full-ha">
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="socket-binding" value="ajp"/>
+                    <param name="ajp-listener" value="ajp"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow,profile=full-ha">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow,profile=load-balancer">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="load-balancer"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server,profile=load-balancer">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow,profile=load-balancer">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default,profile=load-balancer">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default,profile=load-balancer">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow,profile=load-balancer">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter,profile=load-balancer">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler,profile=load-balancer">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default,profile=load-balancer">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="load-balancer"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=management,profile=load-balancer">
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="management"/>
+                    <param name="socket-binding" value="mcmp-management"/>
+                    <param name="profile" value="load-balancer"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.filter-ref">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.filter-ref:host=default-host,server=default-server,subsystem=undertow,filter-ref=load-balancer,profile=load-balancer">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="filter-ref" value="load-balancer"/>
+                    <param name="profile" value="load-balancer"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter.mod-cluster">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter.mod-cluster:subsystem=undertow,mod-cluster=load-balancer,configuration=filter,profile=load-balancer">
+                    <param name="management-socket-binding" value="mcmp-management"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="advertise-socket-binding" value="modcluster"/>
+                    <param name="profile" value="load-balancer"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="max-retries" value="3"/>
+                    <param name="mod-cluster" value="load-balancer"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions,profile=default">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="default"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions,profile=default">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions,profile=ha">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="ha"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions,profile=ha">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions,profile=full">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="full"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions,profile=full">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions,profile=full-ha">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions,profile=full-ha">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups:subsystem=jgroups,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="default-channel" value="ee"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=udp,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.channel">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.channel:channel=ee,subsystem=jgroups,profile=ha">
+                    <param name="channel" value="ee"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="cluster" value="ejb"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=tcp,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=tcp,transport=TCP,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="transport" value="TCP"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=RED,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.MPING">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.MPING:subsystem=jgroups,stack=tcp,protocol=MPING,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MPING"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MERGE3,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=tcp,protocol=FD_SOCK2,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FD_ALL3,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=VERIFY_SUSPECT2,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.NAKACK2,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UNICAST3,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.STABLE,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.GMS,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UFC,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MFC,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FRAG4,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=udp,transport=UDP,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="transport" value="UDP"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=RED,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=PING,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="PING"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MERGE3,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=udp,protocol=FD_SOCK2,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FD_ALL3,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=VERIFY_SUSPECT2,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.NAKACK2,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UNICAST3,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.STABLE,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.GMS,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UFC,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MFC,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FRAG4,profile=ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups:subsystem=jgroups,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="default-channel" value="ee"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=udp,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.channel">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.channel:channel=ee,subsystem=jgroups,profile=full-ha">
+                    <param name="channel" value="ee"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="cluster" value="ejb"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=tcp,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=tcp,transport=TCP,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="transport" value="TCP"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=RED,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.MPING">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.MPING:subsystem=jgroups,stack=tcp,protocol=MPING,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MPING"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MERGE3,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=tcp,protocol=FD_SOCK2,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FD_ALL3,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=VERIFY_SUSPECT2,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.NAKACK2,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UNICAST3,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.STABLE,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.GMS,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UFC,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MFC,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FRAG4,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=udp,transport=UDP,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="transport" value="UDP"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=RED,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=PING,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="PING"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MERGE3,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=udp,protocol=FD_SOCK2,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FD_ALL3,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=VERIFY_SUSPECT2,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.NAKACK2,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UNICAST3,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.STABLE,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.GMS,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UFC,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MFC,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FRAG4,profile=full-ha">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan,profile=default">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="default"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=passivation,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=persistent,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.web.infinispan]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=passivation,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=sso,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=server,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="default"/>
+                    <param name="modules" value="[org.wildfly.clustering.singleton.server]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=server,local-cache=default,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="server"/>
+                    <param name="local-cache" value="default"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=server,local-cache=default,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="server"/>
+                    <param name="local-cache" value="default"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=passivation,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=web,local-cache=passivation,subsystem=infinispan,store=file,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=sso,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=passivation,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=passivation,subsystem=infinispan,store=file,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=locking,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=transaction,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=persistent,subsystem=infinispan,store=file,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="store" value="file"/>
+                    <param name="preload" value="true"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file,profile=default">
+                    <param name="profile" value="default"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=entity,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=entity,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=entity,subsystem=infinispan,memory=heap,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration,profile=default">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan,profile=ha">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="ha"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=ejb,subsystem=infinispan,transport=jgroups,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,subsystem=infinispan,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,subsystem=infinispan,distributed-cache=persistent,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=server,subsystem=infinispan,profile=ha">
+                    <param name="aliases" value="[singleton, cluster]"/>
+                    <param name="profile" value="ha"/>
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="default"/>
+                    <param name="modules" value="[org.wildfly.clustering.singleton.server]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=server,subsystem=infinispan,transport=jgroups,profile=ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=server,subsystem=infinispan,replicated-cache=default,profile=ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=server,subsystem=infinispan,replicated-cache=default,component=transaction,profile=ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=server,subsystem=infinispan,replicated-cache=default,component=expiration,profile=ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.session.infinispan.embedded]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=web,subsystem=infinispan,transport=jgroups,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=web,subsystem=infinispan,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=web,subsystem=infinispan,component=locking,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=web,subsystem=infinispan,component=transaction,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=web,subsystem=infinispan,component=expiration,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=web,subsystem=infinispan,store=file,distributed-cache=dist,profile=ha">
+                    <param name="profile" value="ha"/>
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=sso,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.locking:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=locking,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=transaction,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=expiration,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=routing,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=routing,component=expiration,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=dist,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=dist,profile=ha">
+                    <param name="profile" value="ha"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings,component=expiration,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=persistent,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=persistent,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=persistent,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=persistent,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file,profile=ha">
+                    <param name="profile" value="ha"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=hibernate,subsystem=infinispan,transport=jgroups,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,component=expiration,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,component=expiration,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.memory.heap:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,memory=heap,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration,profile=ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan,profile=full">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="full"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=passivation,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=persistent,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.web.infinispan]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=passivation,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=sso,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=server,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="default"/>
+                    <param name="modules" value="[org.wildfly.clustering.singleton.server]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=server,local-cache=default,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="server"/>
+                    <param name="local-cache" value="default"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=server,local-cache=default,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="server"/>
+                    <param name="local-cache" value="default"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=passivation,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=web,local-cache=passivation,subsystem=infinispan,store=file,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=sso,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=passivation,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=passivation,subsystem=infinispan,store=file,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=locking,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=transaction,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=persistent,subsystem=infinispan,store=file,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="store" value="file"/>
+                    <param name="preload" value="true"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file,profile=full">
+                    <param name="profile" value="full"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=entity,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=entity,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=entity,subsystem=infinispan,memory=heap,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration,profile=full">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan,profile=full-ha">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=ejb,subsystem=infinispan,transport=jgroups,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,subsystem=infinispan,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,subsystem=infinispan,distributed-cache=persistent,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=server,subsystem=infinispan,profile=full-ha">
+                    <param name="aliases" value="[singleton, cluster]"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="default"/>
+                    <param name="modules" value="[org.wildfly.clustering.singleton.server]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=server,subsystem=infinispan,transport=jgroups,profile=full-ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=server,subsystem=infinispan,replicated-cache=default,profile=full-ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=server,subsystem=infinispan,replicated-cache=default,component=transaction,profile=full-ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=server,subsystem=infinispan,replicated-cache=default,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.session.infinispan.embedded]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=web,subsystem=infinispan,transport=jgroups,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=web,subsystem=infinispan,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=web,subsystem=infinispan,component=locking,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=web,subsystem=infinispan,component=transaction,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=web,subsystem=infinispan,component=expiration,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=web,subsystem=infinispan,store=file,distributed-cache=dist,profile=full-ha">
+                    <param name="profile" value="full-ha"/>
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=sso,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.locking:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=locking,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=transaction,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=routing,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=routing,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=dist,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=dist,profile=full-ha">
+                    <param name="profile" value="full-ha"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=persistent,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=persistent,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=persistent,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=persistent,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file,profile=full-ha">
+                    <param name="profile" value="full-ha"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=hibernate,subsystem=infinispan,transport=jgroups,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="lock-timeout" value="60000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.memory.heap:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,memory=heap,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration,profile=full-ha">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.local:client-mappings-registry=local,subsystem=distributable-ejb,profile=default">
+                    <param name="client-mappings-registry" value="local"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="passivation"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient,profile=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.infinispan:client-mappings-registry=infinispan,subsystem=distributable-ejb,profile=ha">
+                    <param name="client-mappings-registry" value="infinispan"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="client-mappings"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient,profile=ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.local:client-mappings-registry=local,subsystem=distributable-ejb,profile=full">
+                    <param name="client-mappings-registry" value="local"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="passivation"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient,profile=full">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.infinispan:client-mappings-registry=infinispan,subsystem=distributable-ejb,profile=full-ha">
+                    <param name="client-mappings-registry" value="infinispan"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="client-mappings"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient,profile=full-ha">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.discovery">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                    <param name="profile" value="default"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory,profile=default">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch,profile=default">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch,profile=default">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                    <param name="profile" value="ha"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory,profile=ha">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch,profile=ha">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch,profile=ha">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                    <param name="profile" value="full"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory,profile=full">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch,profile=full">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch,profile=full">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory,profile=full-ha">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch,profile=full-ha">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch,profile=full-ha">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation,profile=default">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation,profile=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager,profile=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default,profile=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,workmanager=default,short-running-threads=default,profile=default">
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,workmanager=default,short-running-threads=default,profile=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default,profile=default">
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default,profile=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default,profile=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation,profile=ha">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation,profile=ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager,profile=ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default,profile=ha">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,workmanager=default,short-running-threads=default,profile=ha">
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,workmanager=default,short-running-threads=default,profile=ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default,profile=ha">
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default,profile=ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default,profile=ha">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation,profile=full">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation,profile=full">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager,profile=full">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default,profile=full">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,workmanager=default,short-running-threads=default,profile=full">
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,workmanager=default,short-running-threads=default,profile=full">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default,profile=full">
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default,profile=full">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default,profile=full">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation,profile=full-ha">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation,profile=full-ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager,profile=full-ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default,profile=full-ha">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,workmanager=default,short-running-threads=default,profile=full-ha">
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,workmanager=default,short-running-threads=default,profile=full-ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default,profile=full-ha">
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default,profile=full-ha">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default,profile=full-ha">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources,profile=default">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="profile" value="default"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources,profile=default">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="default"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources,profile=ha">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="profile" value="ha"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources,profile=ha">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="ha"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources,profile=full">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="profile" value="full"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources,profile=full">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="full"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources,profile=full-ha">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources,profile=full-ha">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3,profile=default">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="default"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="default-sfsb-cache" value="simple"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3,profile=default">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3,profile=default">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="default"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3,profile=default">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="default"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-data-store" value="default-file-store"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,file-data-store=default-file-store,service=timer-service,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default,profile=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3,profile=default">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3,profile=ha">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="default-sfsb-cache" value="distributable"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3,profile=ha">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3,profile=ha">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="ha"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3,profile=ha">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="ha"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service,profile=ha">
+                    <param name="default-persistent-timer-management" value="persistent"/>
+                    <param name="default-transient-timer-management" value="transient"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="ha"/>
+                    <param name="subsystem" value="ejb3"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,file-data-store=default-file-store,service=timer-service,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default,profile=ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3,profile=ha">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3,profile=full">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="default-sfsb-cache" value="simple"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="default-mdb-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                    <param name="default-resource-adapter-name" value="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3,profile=full">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3,profile=full">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="full"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3,profile=full">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="full"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-data-store" value="default-file-store"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,file-data-store=default-file-store,service=timer-service,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default,profile=full">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3,profile=full">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.iiop">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.iiop:subsystem=ejb3,service=iiop,profile=full">
+                    <param name="use-qualified-name" value="false"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="iiop"/>
+                    <param name="enable-by-default" value="false"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3,profile=full-ha">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="default-sfsb-cache" value="distributable"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="default-mdb-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                    <param name="default-resource-adapter-name" value="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3,profile=full-ha">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3,profile=full-ha">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3,profile=full-ha">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service,profile=full-ha">
+                    <param name="default-persistent-timer-management" value="persistent"/>
+                    <param name="default-transient-timer-management" value="transient"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="ejb3"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,file-data-store=default-file-store,service=timer-service,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default,profile=full-ha">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3,profile=full-ha">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.iiop">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.iiop:subsystem=ejb3,service=iiop,profile=full-ha">
+                    <param name="use-qualified-name" value="false"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="iiop"/>
+                    <param name="enable-by-default" value="false"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jsf">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jdr">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.pojo">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.sar">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default,profile=default">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="default"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default,profile=default">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default,profile=ha">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="ha"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default,profile=ha">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default,profile=full">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="full"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default,profile=full">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default,profile=full-ha">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default,profile=full-ha">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices,profile=default">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config,profile=default">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=default">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=default">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config,profile=default">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices,profile=ha">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config,profile=ha">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=ha">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=ha">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config,profile=ha">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices,profile=full">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config,profile=full">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=full">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=full">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config,profile=full">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices,profile=full-ha">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config,profile=full-ha">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=full-ha">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config,profile=full-ha">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config,profile=full-ha">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web,profile=default">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="profile" value="default"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.local:subsystem=distributable-web,routing=local,profile=default">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="local"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,profile=default,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default,profile=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.local:subsystem=distributable-web,infinispan-session-management=default,affinity=local,profile=default">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="local"/>
+                    <param name="profile" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web,profile=ha">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="profile" value="ha"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.infinispan:subsystem=distributable-web,routing=infinispan,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="infinispan"/>
+                    <param name="cache" value="routing"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,profile=ha,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default,profile=ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.primary-owner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.primary-owner:subsystem=distributable-web,infinispan-session-management=default,affinity=primary-owner,profile=ha">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="primary-owner"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web,profile=full">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="profile" value="full"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.local:subsystem=distributable-web,routing=local,profile=full">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="local"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,profile=full,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default,profile=full">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.local:subsystem=distributable-web,infinispan-session-management=default,affinity=local,profile=full">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="local"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web,profile=full-ha">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.infinispan:subsystem=distributable-web,routing=infinispan,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="infinispan"/>
+                    <param name="cache" value="routing"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,profile=full-ha,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default,profile=full-ha">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.primary-owner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.primary-owner:subsystem=distributable-web,infinispan-session-management=default,affinity=primary-owner,profile=full-ha">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="primary-owner"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye,profile=default">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="default"/>
+                </feature>
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.modcluster">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster:subsystem=modcluster,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy:subsystem=modcluster,proxy=default,profile=ha">
+                    <param name="listener" value="ajp"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="proxy" value="default"/>
+                    <param name="advertise-socket" value="modcluster"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic:load-provider=dynamic,proxy=default,subsystem=modcluster,profile=ha">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic.load-metric">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic.load-metric:load-provider=dynamic,proxy=default,subsystem=modcluster,load-metric=cpu,profile=ha">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="load-metric" value="cpu"/>
+                    <param name="type" value="cpu"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster:subsystem=modcluster,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy:subsystem=modcluster,proxy=default,profile=full-ha">
+                    <param name="listener" value="ajp"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="proxy" value="default"/>
+                    <param name="advertise-socket" value="modcluster"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic:load-provider=dynamic,proxy=default,subsystem=modcluster,profile=full-ha">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic.load-metric">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic.load-metric:load-provider=dynamic,proxy=default,subsystem=modcluster,load-metric=cpu,profile=full-ha">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="load-metric" value="cpu"/>
+                    <param name="type" value="cpu"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton:subsystem=singleton,profile=ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="default" value="default"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy:singleton-policy=default,subsystem=singleton,profile=ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy.election-policy.simple">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy.election-policy.simple:subsystem=singleton,singleton-policy=default,election-policy=simple,profile=ha">
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="election-policy" value="simple"/>
+                    <param name="profile" value="ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton:subsystem=singleton,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="default" value="default"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy:singleton-policy=default,subsystem=singleton,profile=full-ha">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy.election-policy.simple">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy.election-policy.simple:subsystem=singleton,singleton-policy=default,election-policy=simple,profile=full-ha">
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="election-policy" value="simple"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.iiop-openjdk">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.iiop-openjdk:subsystem=iiop-openjdk,profile=full">
+                    <param name="security" value="elytron"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="server-requires-ssl" value="false"/>
+                    <param name="profile" value="full"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="iiop-openjdk"/>
+                    <param name="client-requires-ssl" value="false"/>
+                    <param name="transactions" value="spec"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.iiop-openjdk:subsystem=iiop-openjdk,profile=full-ha">
+                    <param name="security" value="elytron"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="server-requires-ssl" value="false"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="iiop-openjdk"/>
+                    <param name="client-requires-ssl" value="false"/>
+                    <param name="transactions" value="spec"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq:subsystem=messaging-activemq,profile=full">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server:subsystem=messaging-activemq,server=default,profile=full">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="statistics-enabled" value="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="profile" value="full"/>
+                    <param name="elytron-domain" value="ApplicationDomain"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector,server=default,subsystem=messaging-activemq,profile=full">
+                    <param name="http-connector" value="http-connector"/>
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="endpoint" value="http-acceptor"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector-throughput,server=default,subsystem=messaging-activemq,profile=full">
+                    <param name="http-connector" value="http-connector-throughput"/>
+                    <param name="server" value="default"/>
+                    <param name="endpoint" value="http-acceptor-throughput"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="params" value="{batch-delay=50}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-connector:subsystem=messaging-activemq,server=default,in-vm-connector=in-vm,profile=full">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-connector" value="in-vm"/>
+                    <param name="profile" value="full"/>
+                    <param name="server-id" value="0"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=InVmConnectionFactory,profile=full">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="entries" value="[java:/ConnectionFactory]"/>
+                    <param name="connection-factory" value="InVmConnectionFactory"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=RemoteConnectionFactory,profile=full">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connectors" value="[http-connector]"/>
+                    <param name="entries" value="[java:jboss/exported/jms/RemoteConnectionFactory]"/>
+                    <param name="connection-factory" value="RemoteConnectionFactory"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor,profile=full">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor"/>
+                    <param name="profile" value="full"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor-throughput,profile=full">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor-throughput"/>
+                    <param name="params" value="{batch-delay=50,direct-deliver=false}"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-acceptor:subsystem=messaging-activemq,server=default,in-vm-acceptor=in-vm,profile=full">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-acceptor" value="in-vm"/>
+                    <param name="profile" value="full"/>
+                    <param name="server-id" value="0"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jms-queue">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,profile=full,jms-queue=ExpiryQueue">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/ExpiryQueue]"/>
+                    <param name="profile" value="full"/>
+                    <param name="jms-queue" value="ExpiryQueue"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,profile=full,jms-queue=DLQ">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/DLQ]"/>
+                    <param name="profile" value="full"/>
+                    <param name="jms-queue" value="DLQ"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.pooled-connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.pooled-connection-factory:pooled-connection-factory=activemq-ra,subsystem=messaging-activemq,server=default,profile=full">
+                    <param name="pooled-connection-factory" value="activemq-ra"/>
+                    <param name="server" value="default"/>
+                    <param name="entries" value="[java:/JmsXA, java:jboss/DefaultJMSConnectionFactory]"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="profile" value="full"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="transaction" value="xa"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting:security-setting=#,subsystem=messaging-activemq,server=default,profile=full">
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting.role">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting.role:security-setting=#,server=default,subsystem=messaging-activemq,role=guest,profile=full">
+                    <param name="server" value="default"/>
+                    <param name="role" value="guest"/>
+                    <param name="delete-non-durable-queue" value="true"/>
+                    <param name="profile" value="full"/>
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="consume" value="true"/>
+                    <param name="create-non-durable-queue" value="true"/>
+                    <param name="send" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.address-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.address-setting:server=default,subsystem=messaging-activemq,address-setting=#,profile=full">
+                    <param name="expiry-address" value="jms.queue.ExpiryQueue"/>
+                    <param name="server" value="default"/>
+                    <param name="dead-letter-address" value="jms.queue.DLQ"/>
+                    <param name="max-size-bytes" value="10485760"/>
+                    <param name="message-counter-history-day-limit" value="10"/>
+                    <param name="profile" value="full"/>
+                    <param name="page-size-bytes" value="2097152"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="address-setting" value="#"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq:subsystem=messaging-activemq,profile=full-ha">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server:subsystem=messaging-activemq,server=default,profile=full-ha">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="statistics-enabled" value="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="elytron-domain" value="ApplicationDomain"/>
+                    <param name="cluster-password" value="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector,server=default,subsystem=messaging-activemq,profile=full-ha">
+                    <param name="http-connector" value="http-connector"/>
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="endpoint" value="http-acceptor"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector-throughput,server=default,subsystem=messaging-activemq,profile=full-ha">
+                    <param name="http-connector" value="http-connector-throughput"/>
+                    <param name="server" value="default"/>
+                    <param name="endpoint" value="http-acceptor-throughput"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="params" value="{batch-delay=50}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-connector:subsystem=messaging-activemq,server=default,in-vm-connector=in-vm,profile=full-ha">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-connector" value="in-vm"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="server-id" value="0"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=InVmConnectionFactory,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="entries" value="[java:/ConnectionFactory]"/>
+                    <param name="connection-factory" value="InVmConnectionFactory"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=RemoteConnectionFactory,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="connectors" value="[http-connector]"/>
+                    <param name="entries" value="[java:jboss/exported/jms/RemoteConnectionFactory]"/>
+                    <param name="connection-factory" value="RemoteConnectionFactory"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="ha" value="true"/>
+                    <param name="reconnect-attempts" value="-1"/>
+                    <param name="block-on-acknowledge" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor-throughput,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor-throughput"/>
+                    <param name="params" value="{batch-delay=50,direct-deliver=false}"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-acceptor:subsystem=messaging-activemq,server=default,in-vm-acceptor=in-vm,profile=full-ha">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-acceptor" value="in-vm"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="server-id" value="0"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jms-queue">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,profile=full-ha,jms-queue=ExpiryQueue">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/ExpiryQueue]"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="jms-queue" value="ExpiryQueue"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,profile=full-ha,jms-queue=DLQ">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/DLQ]"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="jms-queue" value="DLQ"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.pooled-connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.pooled-connection-factory:pooled-connection-factory=activemq-ra,subsystem=messaging-activemq,server=default,profile=full-ha">
+                    <param name="pooled-connection-factory" value="activemq-ra"/>
+                    <param name="server" value="default"/>
+                    <param name="entries" value="[java:/JmsXA, java:jboss/DefaultJMSConnectionFactory]"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="transaction" value="xa"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting:security-setting=#,subsystem=messaging-activemq,server=default,profile=full-ha">
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting.role">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting.role:security-setting=#,server=default,subsystem=messaging-activemq,role=guest,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="role" value="guest"/>
+                    <param name="delete-non-durable-queue" value="true"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="consume" value="true"/>
+                    <param name="create-non-durable-queue" value="true"/>
+                    <param name="send" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.address-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.address-setting:server=default,subsystem=messaging-activemq,address-setting=#,profile=full-ha">
+                    <param name="expiry-address" value="jms.queue.ExpiryQueue"/>
+                    <param name="server" value="default"/>
+                    <param name="dead-letter-address" value="jms.queue.DLQ"/>
+                    <param name="max-size-bytes" value="10485760"/>
+                    <param name="message-counter-history-day-limit" value="10"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="page-size-bytes" value="2097152"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="redistribution-delay" value="1000"/>
+                    <param name="address-setting" value="#"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jgroups-broadcast-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jgroups-broadcast-group:server=default,subsystem=messaging-activemq,jgroups-broadcast-group=bg-group1,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="jgroups-cluster" value="activemq-cluster"/>
+                    <param name="jgroups-broadcast-group" value="bg-group1"/>
+                    <param name="connectors" value="[http-connector]"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jgroups-discovery-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jgroups-discovery-group:server=default,subsystem=messaging-activemq,jgroups-discovery-group=dg-group1,profile=full-ha">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="jgroups-cluster" value="activemq-cluster"/>
+                    <param name="jgroups-discovery-group" value="dg-group1"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.cluster-connection">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.cluster-connection:server=default,subsystem=messaging-activemq,cluster-connection=my-cluster,profile=full-ha">
+                    <param name="discovery-group" value="dg-group1"/>
+                    <param name="server" value="default"/>
+                    <param name="cluster-connection" value="my-cluster"/>
+                    <param name="cluster-connection-address" value="jms"/>
+                    <param name="profile" value="full-ha"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connector-name" value="http-connector"/>
+                </feature>
+            </spec>
+            <spec name="domain.server-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.server-group:server-group=main-server-group">
+                    <param name="socket-binding-group" value="full-sockets"/>
+                    <param name="server-group" value="main-server-group"/>
+                    <param name="profile" value="full"/>
+                </feature>
+            </spec>
+            <spec name="domain.server-group.jvm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.server-group.jvm:jvm=default,server-group=main-server-group">
+                    <param name="jvm" value="default"/>
+                    <param name="server-group" value="main-server-group"/>
+                    <param name="max-heap-size" value="512m"/>
+                    <param name="heap-size" value="64m"/>
+                </feature>
+            </spec>
+            <spec name="domain.server-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.server-group:server-group=other-server-group">
+                    <param name="socket-binding-group" value="full-ha-sockets"/>
+                    <param name="server-group" value="other-server-group"/>
+                    <param name="profile" value="full-ha"/>
+                </feature>
+            </spec>
+            <spec name="domain.server-group.jvm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}domain.server-group.jvm:jvm=default,server-group=other-server-group">
+                    <param name="jvm" value="default"/>
+                    <param name="server-group" value="other-server-group"/>
+                    <param name="max-heap-size" value="512m"/>
+                    <param name="heap-size" value="64m"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="host-secondary.xml" model="host">
+        <props>
+            <prop name="--domain-config" value="domain.xml"/>
+            <prop name="--empty-host-config" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--remove-existing-host-config" value=""/>
+        </props>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host:host=secondary">
+                    <param name="host" value="secondary"/>
+                    <param name="persist-name" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:host=secondary,core-service=management">
+                    <param name="host" value="secondary"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:host=secondary,core-service=management,access=audit">
+                    <param name="host" value="secondary"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:host=secondary,access=audit,json-formatter=json-formatter,core-service=management">
+                    <param name="host" value="secondary"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:host=secondary,file-handler=host-file,access=audit,core-service=management">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.domain.data.dir"/>
+                    <param name="host" value="secondary"/>
+                    <param name="file-handler" value="host-file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:host=secondary,file-handler=server-file,access=audit,core-service=management">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="secondary"/>
+                    <param name="file-handler" value="server-file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:host=secondary,access=audit,core-service=management,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="secondary"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:host=secondary,handler=host-file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="secondary"/>
+                    <param name="handler" value="host-file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="host.domain-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.domain-controller:host=secondary">
+                    <param name="host" value="secondary"/>
+                    <param name="remote" value="{}"/>
+                </feature>
+            </spec>
+            <spec name="host.interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.interface:interface=management,host=secondary">
+                    <param name="interface" value="management"/>
+                    <param name="host" value="secondary"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.interface:interface=public,host=secondary">
+                    <param name="interface" value="public"/>
+                    <param name="host" value="secondary"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=secondary,extension=org.wildfly.extension.core-management">
+                    <param name="host" value="secondary"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=secondary,extension=org.wildfly.extension.elytron">
+                    <param name="host" value="secondary"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=secondary,extension=org.jboss.as.jmx">
+                    <param name="host" value="secondary"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:host=secondary,subsystem=elytron">
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="register-jaspi-factory" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:host=secondary,subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:host=secondary,subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:host=secondary,subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:host=secondary,identity-realm=local,subsystem=elytron">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:host=secondary,file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.domain.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="secondary"/>
+                    <param name="format" value="JSON"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:host=secondary,subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:host=secondary,subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,host=secondary,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:host=secondary,subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:host=secondary,subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:host=secondary,subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="host" value="secondary"/>
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:host=secondary,configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="host" value="secondary"/>
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.domain.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:host=secondary,subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:host=secondary,subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:host=secondary,subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,host=secondary,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,host=secondary,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,host=secondary,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:host=secondary,sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:host=secondary,http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.access.audit.server-logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.access.audit.server-logger.audit-log:server-logger=audit-log,host=secondary,access=audit,core-service=management">
+                    <param name="server-logger" value="audit-log"/>
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="host" value="secondary"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.access.audit.server-logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.access.audit.server-logger.audit-log.handler:host=secondary,server-logger=audit-log,handler=server-file,access=audit,core-service=management">
+                    <param name="host" value="secondary"/>
+                    <param name="server-logger" value="audit-log"/>
+                    <param name="handler" value="server-file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.discovery-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.discovery-options:host=secondary,core-service=discovery-options">
+                    <param name="host" value="secondary"/>
+                    <param name="core-service" value="discovery-options"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.discovery-options.static-discovery">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.discovery-options.static-discovery:host=secondary,static-discovery=primary,core-service=discovery-options">
+                    <param name="host" value="secondary"/>
+                    <param name="static-discovery" value="primary"/>
+                    <param name="protocol" value="${jboss.domain.primary.protocol:remote+http}"/>
+                    <param name="host-feature" value="${jboss.domain.primary.address}"/>
+                    <param name="port" value="${jboss.domain.primary.port:9990}"/>
+                    <param name="core-service" value="discovery-options"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.management-interface.http-interface:host=secondary,core-service=management,management-interface=http-interface">
+                    <param name="host" value="secondary"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.management-interface.http-interface.http-upgrade:host=secondary,core-service=management,management-interface=http-interface">
+                    <param name="host" value="secondary"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:host=secondary,subsystem=core-management">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:host=secondary,subsystem=jmx">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:host=secondary,subsystem=jmx,expose-model=expression">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:host=secondary,subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:host=secondary,subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="secondary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="host.server-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config:host=secondary,server-config=server-one">
+                    <param name="host" value="secondary"/>
+                    <param name="server-config" value="server-one"/>
+                    <param name="group" value="main-server-group"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config:host=secondary,server-config=server-two">
+                    <param name="host" value="secondary"/>
+                    <param name="socket-binding-port-offset" value="150"/>
+                    <param name="server-config" value="server-two"/>
+                    <param name="group" value="other-server-group"/>
+                </feature>
+            </spec>
+            <spec name="host.jvm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.jvm:jvm=default,host=secondary">
+                    <param name="jvm" value="default"/>
+                    <param name="host" value="secondary"/>
+                    <param name="jvm-options" value="[&quot;-server&quot;, &quot;-XX:MetaspaceSize=96m&quot;, &quot;-XX:MaxMetaspaceSize=256m&quot;]"/>
+                    <param name="max-heap-size" value="256m"/>
+                    <param name="heap-size" value="64m"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="standalone.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="naming"/>
+            <layer model="standalone" name="jsonb"/>
+            <layer model="standalone" name="ee-integration"/>
+            <layer model="standalone" name="ee-concurrency"/>
+            <layer model="standalone" name="ee"/>
+            <layer model="standalone" name="deployment-scanner"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow"/>
+            <layer model="standalone" name="servlet"/>
+            <layer model="standalone" name="web-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="jmx"/>
+            <layer model="standalone" name="remoting"/>
+            <layer model="standalone" name="jmx-remoting"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="core-management"/>
+            <layer model="standalone" name="request-controller"/>
+            <layer model="standalone" name="security-manager"/>
+            <layer model="standalone" name="core-server"/>
+            <layer model="standalone" name="core-tools"/>
+            <layer model="standalone" name="transactions"/>
+            <layer model="standalone" name="datasources"/>
+            <layer model="standalone" name="datasources-web-server"/>
+            <layer model="standalone" name="jaxrs-core"/>
+            <layer model="standalone" name="jaxrs"/>
+            <layer model="standalone" name="cdi"/>
+            <layer model="standalone" name="bean-validation"/>
+            <layer model="standalone" name="jpa"/>
+            <layer model="standalone" name="jaxrs-server"/>
+            <layer model="standalone" name="ee-security"/>
+            <layer model="standalone" name="metrics"/>
+            <layer model="standalone" name="health"/>
+            <layer model="standalone" name="h2-driver"/>
+            <layer model="standalone" name="h2-datasource"/>
+            <layer model="standalone" name="h2-default-datasource"/>
+            <layer model="standalone" name="elytron-oidc-client"/>
+            <layer model="standalone" name="ejb-local-cache"/>
+            <layer model="standalone" name="ejb-lite"/>
+            <layer model="standalone" name="resource-adapters"/>
+            <layer model="standalone" name="ejb"/>
+            <layer model="standalone" name="ejb-http-invoker"/>
+            <layer model="standalone" name="web-passivation"/>
+            <layer model="standalone" name="undertow-https"/>
+            <layer model="standalone" name="jdr"/>
+            <layer model="standalone" name="jsf"/>
+            <layer model="standalone" name="webservices"/>
+            <layer model="standalone" name="pojo"/>
+            <layer model="standalone" name="mail"/>
+            <layer model="standalone" name="sar"/>
+            <layer model="standalone" name="batch-jberet"/>
+            <layer model="standalone" name="hibernate-search"/>
+            <layer model="standalone" name="web-console"/>
+            <layer model="standalone" name="microprofile-config"/>
+            <layer model="standalone" name="microprofile-jwt"/>
+            <layer model="standalone" name="internal-standalone-profile"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ejb3">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.batch.jberet">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner:subsystem=deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner.scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner.scanner:scanner=default,subsystem=deployment-scanner">
+                    <param name="scanner" value="default"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="path" value="deployments"/>
+                    <param name="scan-interval" value="5000"/>
+                    <param name="relative-to" value="jboss.server.base.dir"/>
+                    <param name="runtime-failure-causes-rollback" value="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="setting" value="http-invoker"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="jsp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="websockets"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,configuration=handler,file=welcome-content">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=entity,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=entity,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=entity,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=passivation,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=persistent,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=passivation,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=passivation,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=locking">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=transaction">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=persistent,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="store" value="file"/>
+                    <param name="preload" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.web.infinispan]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=passivation,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=sso,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=passivation,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=web,local-cache=passivation,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=sso,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.metrics">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.metrics:subsystem=metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="metrics"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                    <param name="exposed-subsystems" value="[*]"/>
+                    <param name="prefix" value="${wildfly.metrics.prefix:wildfly}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.health">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.health:subsystem=health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="health"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron-oidc-client">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron-oidc-client:subsystem=elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron-oidc-client"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="default-sfsb-cache" value="simple"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3">
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-data-store" value="default-file-store"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,service=timer-service,file-data-store=default-file-store">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.local:client-mappings-registry=local,subsystem=distributable-ejb">
+                    <param name="client-mappings-registry" value="local"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="passivation"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.discovery">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.local:subsystem=distributable-web,routing=local">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.local:subsystem=distributable-web,infinispan-session-management=default,affinity=local">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jdr">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jsf">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.pojo">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=standard-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.sar">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="standalone-ha.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="naming"/>
+            <layer model="standalone" name="jsonb"/>
+            <layer model="standalone" name="ee-integration"/>
+            <layer model="standalone" name="ee-concurrency"/>
+            <layer model="standalone" name="ee"/>
+            <layer model="standalone" name="deployment-scanner"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow"/>
+            <layer model="standalone" name="servlet"/>
+            <layer model="standalone" name="web-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="jmx"/>
+            <layer model="standalone" name="remoting"/>
+            <layer model="standalone" name="jmx-remoting"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="core-management"/>
+            <layer model="standalone" name="request-controller"/>
+            <layer model="standalone" name="security-manager"/>
+            <layer model="standalone" name="core-server"/>
+            <layer model="standalone" name="core-tools"/>
+            <layer model="standalone" name="transactions"/>
+            <layer model="standalone" name="datasources"/>
+            <layer model="standalone" name="datasources-web-server"/>
+            <layer model="standalone" name="jaxrs-core"/>
+            <layer model="standalone" name="jaxrs"/>
+            <layer model="standalone" name="cdi"/>
+            <layer model="standalone" name="bean-validation"/>
+            <layer model="standalone" name="jaxrs-server"/>
+            <layer model="standalone" name="ee-security"/>
+            <layer model="standalone" name="metrics"/>
+            <layer model="standalone" name="health"/>
+            <layer model="standalone" name="h2-driver"/>
+            <layer model="standalone" name="h2-datasource"/>
+            <layer model="standalone" name="h2-default-datasource"/>
+            <layer model="standalone" name="elytron-oidc-client"/>
+            <layer model="standalone" name="ejb-lite"/>
+            <layer model="standalone" name="resource-adapters"/>
+            <layer model="standalone" name="ejb"/>
+            <layer model="standalone" name="ejb-http-invoker"/>
+            <layer model="standalone" name="undertow-https"/>
+            <layer model="standalone" name="jdr"/>
+            <layer model="standalone" name="jsf"/>
+            <layer model="standalone" name="webservices"/>
+            <layer model="standalone" name="pojo"/>
+            <layer model="standalone" name="mail"/>
+            <layer model="standalone" name="sar"/>
+            <layer model="standalone" name="batch-jberet"/>
+            <layer model="standalone" name="hibernate-search"/>
+            <layer model="standalone" name="web-console"/>
+            <layer model="standalone" name="microprofile-config"/>
+            <layer model="standalone" name="microprofile-jwt"/>
+            <layer model="standalone" name="internal-standalone-profile"/>
+            <layer model="standalone" name="jpa-distributed"/>
+            <layer model="standalone" name="ejb-dist-cache"/>
+            <layer model="standalone" name="web-clustering"/>
+            <layer model="standalone" name="mod_cluster"/>
+            <layer model="standalone" name="singleton-ha"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=private">
+                    <param name="interface" value="private"/>
+                    <param name="inet-address" value="${jboss.bind.address.private:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ejb3">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.batch.jberet">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.modcluster">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.singleton">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner:subsystem=deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner.scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner.scanner:scanner=default,subsystem=deployment-scanner">
+                    <param name="scanner" value="default"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="path" value="deployments"/>
+                    <param name="scan-interval" value="5000"/>
+                    <param name="relative-to" value="jboss.server.base.dir"/>
+                    <param name="runtime-failure-causes-rollback" value="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-mping">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="multicast-port" value="45700"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-tcp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="7600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-tcp-fd">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="57600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-udp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="port" value="55200"/>
+                    <param name="multicast-port" value="45688"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-udp-fd">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="54200"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=modcluster">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="modcluster"/>
+                    <param name="multicast-address" value="${jboss.modcluster.multicast.address:224.0.1.105}"/>
+                    <param name="multicast-port" value="23364"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="setting" value="http-invoker"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="jsp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="websockets"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.ajp-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.ajp-listener:server=default-server,subsystem=undertow,ajp-listener=ajp">
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="socket-binding" value="ajp"/>
+                    <param name="ajp-listener" value="ajp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,configuration=handler,file=welcome-content">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.metrics">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.metrics:subsystem=metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="metrics"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                    <param name="exposed-subsystems" value="[*]"/>
+                    <param name="prefix" value="${wildfly.metrics.prefix:wildfly}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.health">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.health:subsystem=health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="health"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron-oidc-client">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron-oidc-client:subsystem=elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron-oidc-client"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.discovery">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups:subsystem=jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="default-channel" value="ee"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=udp">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.channel">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.channel:channel=ee,subsystem=jgroups">
+                    <param name="channel" value="ee"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="cluster" value="ejb"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=tcp">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=tcp,transport=TCP">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="transport" value="TCP"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=RED">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.MPING">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.MPING:subsystem=jgroups,stack=tcp,protocol=MPING">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MPING"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MERGE3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=tcp,protocol=FD_SOCK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FD_ALL3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=VERIFY_SUSPECT2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.NAKACK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UNICAST3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.STABLE">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.GMS">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FRAG4">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=udp,transport=UDP">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="transport" value="UDP"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=RED">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=PING">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="PING"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MERGE3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=udp,protocol=FD_SOCK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FD_ALL3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=VERIFY_SUSPECT2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.NAKACK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UNICAST3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.STABLE">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.GMS">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FRAG4">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=ejb,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,distributed-cache=dist,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,distributed-cache=persistent,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=hibernate,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.memory.heap:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=dist">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=dist">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=dist">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=dist">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.session.infinispan.embedded]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=web,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=web,distributed-cache=dist,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=sso">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=routing">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=web,subsystem=infinispan,component=locking,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=web,subsystem=infinispan,component=transaction,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=web,subsystem=infinispan,component=expiration,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=web,subsystem=infinispan,store=file,distributed-cache=dist">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.locking:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=locking">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=transaction">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=routing,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=server,subsystem=infinispan">
+                    <param name="aliases" value="[singleton, cluster]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="default"/>
+                    <param name="modules" value="[org.wildfly.clustering.singleton.server]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=server,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=server,subsystem=infinispan,replicated-cache=default">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=server,subsystem=infinispan,replicated-cache=default,component=transaction">
+                    <param name="cache-container" value="server"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=server,subsystem=infinispan,replicated-cache=default,component=expiration">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.infinispan:client-mappings-registry=infinispan,subsystem=distributable-ejb">
+                    <param name="client-mappings-registry" value="infinispan"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="client-mappings"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-sfsb-cache" value="distributable"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3">
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service">
+                    <param name="default-persistent-timer-management" value="persistent"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-transient-timer-management" value="transient"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,service=timer-service,file-data-store=default-file-store">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jdr">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jsf">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.pojo">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=standard-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.sar">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.infinispan:subsystem=distributable-web,routing=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="infinispan"/>
+                    <param name="cache" value="routing"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.primary-owner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.primary-owner:subsystem=distributable-web,infinispan-session-management=default,affinity=primary-owner">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="primary-owner"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster:subsystem=modcluster">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy:subsystem=modcluster,proxy=default">
+                    <param name="listener" value="ajp"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="proxy" value="default"/>
+                    <param name="advertise-socket" value="modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic:load-provider=dynamic,proxy=default,subsystem=modcluster">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic.load-metric">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic.load-metric:load-provider=dynamic,proxy=default,subsystem=modcluster,load-metric=cpu">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="load-metric" value="cpu"/>
+                    <param name="type" value="cpu"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton:subsystem=singleton">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="default" value="default"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy:singleton-policy=default,subsystem=singleton">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy.election-policy.simple">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy.election-policy.simple:singleton-policy=default,election-policy=simple,subsystem=singleton">
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="election-policy" value="simple"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="standalone-load-balancer.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow-load-balancer"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=private">
+                    <param name="interface" value="private"/>
+                    <param name="inet-address" value="${jboss.bind.address.private:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=mcmp-management">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="mcmp-management"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="${jboss.mcmp.port:8090}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=modcluster">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="modcluster"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.modcluster.multicast.address:224.0.1.105}"/>
+                    <param name="multicast-port" value="23364"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=management">
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="management"/>
+                    <param name="socket-binding" value="mcmp-management"/>
+                    <param name="enable-http2" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.filter-ref">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.filter-ref:host=default-host,server=default-server,subsystem=undertow,filter-ref=load-balancer">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="filter-ref" value="load-balancer"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter.mod-cluster">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter.mod-cluster:mod-cluster=load-balancer,subsystem=undertow,configuration=filter">
+                    <param name="management-socket-binding" value="mcmp-management"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="advertise-socket-binding" value="modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="max-retries" value="3"/>
+                    <param name="mod-cluster" value="load-balancer"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="standalone-full-ha.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="naming"/>
+            <layer model="standalone" name="jsonb"/>
+            <layer model="standalone" name="ee-integration"/>
+            <layer model="standalone" name="ee-concurrency"/>
+            <layer model="standalone" name="ee"/>
+            <layer model="standalone" name="deployment-scanner"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow"/>
+            <layer model="standalone" name="servlet"/>
+            <layer model="standalone" name="web-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="jmx"/>
+            <layer model="standalone" name="remoting"/>
+            <layer model="standalone" name="jmx-remoting"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="core-management"/>
+            <layer model="standalone" name="request-controller"/>
+            <layer model="standalone" name="security-manager"/>
+            <layer model="standalone" name="core-server"/>
+            <layer model="standalone" name="core-tools"/>
+            <layer model="standalone" name="transactions"/>
+            <layer model="standalone" name="datasources"/>
+            <layer model="standalone" name="datasources-web-server"/>
+            <layer model="standalone" name="jaxrs-core"/>
+            <layer model="standalone" name="jaxrs"/>
+            <layer model="standalone" name="cdi"/>
+            <layer model="standalone" name="bean-validation"/>
+            <layer model="standalone" name="jaxrs-server"/>
+            <layer model="standalone" name="ee-security"/>
+            <layer model="standalone" name="metrics"/>
+            <layer model="standalone" name="health"/>
+            <layer model="standalone" name="h2-driver"/>
+            <layer model="standalone" name="h2-datasource"/>
+            <layer model="standalone" name="h2-default-datasource"/>
+            <layer model="standalone" name="elytron-oidc-client"/>
+            <layer model="standalone" name="ejb-lite"/>
+            <layer model="standalone" name="resource-adapters"/>
+            <layer model="standalone" name="messaging-activemq"/>
+            <layer model="standalone" name="ejb"/>
+            <layer model="standalone" name="ejb-http-invoker"/>
+            <layer model="standalone" name="undertow-https"/>
+            <layer model="standalone" name="jdr"/>
+            <layer model="standalone" name="jsf"/>
+            <layer model="standalone" name="webservices"/>
+            <layer model="standalone" name="pojo"/>
+            <layer model="standalone" name="mail"/>
+            <layer model="standalone" name="sar"/>
+            <layer model="standalone" name="batch-jberet"/>
+            <layer model="standalone" name="hibernate-search"/>
+            <layer model="standalone" name="web-console"/>
+            <layer model="standalone" name="microprofile-config"/>
+            <layer model="standalone" name="microprofile-jwt"/>
+            <layer model="standalone" name="internal-standalone-profile"/>
+            <layer model="standalone" name="iiop-openjdk"/>
+            <layer model="standalone" name="embedded-activemq"/>
+            <layer model="standalone" name="internal-standalone-full-profile"/>
+            <layer model="standalone" name="jpa-distributed"/>
+            <layer model="standalone" name="ejb-dist-cache"/>
+            <layer model="standalone" name="web-clustering"/>
+            <layer model="standalone" name="mod_cluster"/>
+            <layer model="standalone" name="singleton-ha"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=unsecure">
+                    <param name="interface" value="unsecure"/>
+                    <param name="inet-address" value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=private">
+                    <param name="interface" value="private"/>
+                    <param name="inet-address" value="${jboss.bind.address.private:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ejb3">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.batch.jberet">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.iiop-openjdk">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.modcluster">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.singleton">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                    <param name="jms-connection-factory" value="java:jboss/DefaultJMSConnectionFactory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner:subsystem=deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner.scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner.scanner:scanner=default,subsystem=deployment-scanner">
+                    <param name="scanner" value="default"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="path" value="deployments"/>
+                    <param name="scan-interval" value="5000"/>
+                    <param name="relative-to" value="jboss.server.base.dir"/>
+                    <param name="runtime-failure-causes-rollback" value="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=iiop">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3528"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=iiop-ssl">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="iiop-ssl"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3529"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-mping">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="multicast-port" value="45700"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-tcp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="7600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-tcp-fd">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="57600"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-udp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="interface" value="private"/>
+                    <param name="multicast-address" value="${jboss.default.multicast.address:230.0.0.4}"/>
+                    <param name="port" value="55200"/>
+                    <param name="multicast-port" value="45688"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=jgroups-udp-fd">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="interface" value="private"/>
+                    <param name="port" value="54200"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=modcluster">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="modcluster"/>
+                    <param name="multicast-address" value="${jboss.modcluster.multicast.address:224.0.1.105}"/>
+                    <param name="multicast-port" value="23364"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="setting" value="http-invoker"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="jsp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="websockets"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.ajp-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.ajp-listener:server=default-server,subsystem=undertow,ajp-listener=ajp">
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="socket-binding" value="ajp"/>
+                    <param name="ajp-listener" value="ajp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,configuration=handler,file=welcome-content">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.metrics">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.metrics:subsystem=metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="metrics"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                    <param name="exposed-subsystems" value="[*]"/>
+                    <param name="prefix" value="${wildfly.metrics.prefix:wildfly}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.health">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.health:subsystem=health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="health"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron-oidc-client">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron-oidc-client:subsystem=elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron-oidc-client"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.discovery">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups:subsystem=jgroups">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="default-channel" value="ee"/>
+                    <param name="extension" value="org.jboss.as.clustering.jgroups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=udp">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.channel">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.channel:channel=ee,subsystem=jgroups">
+                    <param name="channel" value="ee"/>
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="cluster" value="ejb"/>
+                    <param name="stack" value="udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack:subsystem=jgroups,stack=tcp">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=tcp,transport=TCP">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="transport" value="TCP"/>
+                    <param name="socket-binding" value="jgroups-tcp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=RED">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.MPING">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.MPING:subsystem=jgroups,stack=tcp,protocol=MPING">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MPING"/>
+                    <param name="socket-binding" value="jgroups-mping"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MERGE3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=tcp,protocol=FD_SOCK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-tcp-fd"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FD_ALL3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=VERIFY_SUSPECT2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.NAKACK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UNICAST3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.STABLE">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=pbcast.GMS">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=UFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=MFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=tcp,protocol=FRAG4">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="tcp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.transport">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.transport:subsystem=jgroups,stack=udp,transport=UDP">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="transport" value="UDP"/>
+                    <param name="socket-binding" value="jgroups-udp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=RED">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="RED"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=PING">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="PING"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MERGE3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MERGE3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol.FD_SOCK2">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol.FD_SOCK2:subsystem=jgroups,stack=udp,protocol=FD_SOCK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_SOCK2"/>
+                    <param name="socket-binding" value="jgroups-udp-fd"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jgroups.stack.protocol">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FD_ALL3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FD_ALL3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=VERIFY_SUSPECT2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="VERIFY_SUSPECT2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.NAKACK2">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.NAKACK2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UNICAST3">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UNICAST3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.STABLE">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.STABLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=pbcast.GMS">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="pbcast.GMS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=UFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="UFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=MFC">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="MFC"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jgroups.stack.protocol:subsystem=jgroups,stack=udp,protocol=FRAG4">
+                    <param name="subsystem" value="jgroups"/>
+                    <param name="stack" value="udp"/>
+                    <param name="protocol" value="FRAG4"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=ejb,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,distributed-cache=dist,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=ejb,distributed-cache=persistent,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=hibernate,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,replicated-cache=timestamps,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="timestamps"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.component.expiration:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.invalidation-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.invalidation-cache.memory.heap:cache-container=hibernate,subsystem=infinispan,invalidation-cache=entity,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="invalidation-cache" value="entity"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=dist">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=dist">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=dist">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=dist">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=ejb,subsystem=infinispan,replicated-cache=client-mappings,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="client-mappings"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=ejb,subsystem=infinispan,component=locking,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=ejb,subsystem=infinispan,component=transaction,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=ejb,subsystem=infinispan,component=expiration,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=ejb,subsystem=infinispan,store=file,distributed-cache=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="dist"/>
+                    <param name="modules" value="[org.wildfly.clustering.session.infinispan.embedded]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=web,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache:cache-container=web,distributed-cache=dist,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=sso">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=web,subsystem=infinispan,replicated-cache=routing">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.locking:cache-container=web,subsystem=infinispan,component=locking,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.transaction:cache-container=web,subsystem=infinispan,component=transaction,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.component.expiration:cache-container=web,subsystem=infinispan,component=expiration,distributed-cache=dist">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="distributed-cache" value="dist"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.distributed-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.distributed-cache.store.file:cache-container=web,subsystem=infinispan,store=file,distributed-cache=dist">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="distributed-cache" value="dist"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.locking:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=locking">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=transaction">
+                    <param name="cache-container" value="web"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=sso,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="sso"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=web,subsystem=infinispan,replicated-cache=routing,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="routing"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=server,subsystem=infinispan">
+                    <param name="aliases" value="[singleton, cluster]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="default"/>
+                    <param name="modules" value="[org.wildfly.clustering.singleton.server]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.transport.jgroups">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.transport.jgroups:cache-container=server,subsystem=infinispan,transport=jgroups">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="transport" value="jgroups"/>
+                    <param name="lock-timeout" value="60000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache:cache-container=server,subsystem=infinispan,replicated-cache=default">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.transaction:cache-container=server,subsystem=infinispan,replicated-cache=default,component=transaction">
+                    <param name="cache-container" value="server"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.replicated-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.replicated-cache.component.expiration:cache-container=server,subsystem=infinispan,replicated-cache=default,component=expiration">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="replicated-cache" value="default"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.infinispan:client-mappings-registry=infinispan,subsystem=distributable-ejb">
+                    <param name="client-mappings-registry" value="infinispan"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="client-mappings"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-sfsb-cache" value="distributable"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="default-mdb-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                    <param name="default-resource-adapter-name" value="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3">
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service">
+                    <param name="default-persistent-timer-management" value="persistent"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-transient-timer-management" value="transient"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,service=timer-service,file-data-store=default-file-store">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.iiop">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.iiop:subsystem=ejb3,service=iiop">
+                    <param name="use-qualified-name" value="false"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="iiop"/>
+                    <param name="enable-by-default" value="false"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq:subsystem=messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server:subsystem=messaging-activemq,server=default">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="statistics-enabled" value="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="elytron-domain" value="ApplicationDomain"/>
+                    <param name="cluster-password" value="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector,server=default,subsystem=messaging-activemq">
+                    <param name="http-connector" value="http-connector"/>
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="endpoint" value="http-acceptor"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector-throughput,server=default,subsystem=messaging-activemq">
+                    <param name="http-connector" value="http-connector-throughput"/>
+                    <param name="server" value="default"/>
+                    <param name="endpoint" value="http-acceptor-throughput"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="params" value="{batch-delay=50}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-connector:subsystem=messaging-activemq,server=default,in-vm-connector=in-vm">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-connector" value="in-vm"/>
+                    <param name="server-id" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=InVmConnectionFactory">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="entries" value="[java:/ConnectionFactory]"/>
+                    <param name="connection-factory" value="InVmConnectionFactory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=RemoteConnectionFactory">
+                    <param name="server" value="default"/>
+                    <param name="connectors" value="[http-connector]"/>
+                    <param name="entries" value="[java:jboss/exported/jms/RemoteConnectionFactory]"/>
+                    <param name="connection-factory" value="RemoteConnectionFactory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="ha" value="true"/>
+                    <param name="reconnect-attempts" value="-1"/>
+                    <param name="block-on-acknowledge" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor-throughput">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor-throughput"/>
+                    <param name="params" value="{batch-delay=50,direct-deliver=false}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-acceptor:subsystem=messaging-activemq,server=default,in-vm-acceptor=in-vm">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-acceptor" value="in-vm"/>
+                    <param name="server-id" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jms-queue">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,jms-queue=ExpiryQueue">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/ExpiryQueue]"/>
+                    <param name="jms-queue" value="ExpiryQueue"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,jms-queue=DLQ">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/DLQ]"/>
+                    <param name="jms-queue" value="DLQ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.pooled-connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.pooled-connection-factory:pooled-connection-factory=activemq-ra,subsystem=messaging-activemq,server=default">
+                    <param name="pooled-connection-factory" value="activemq-ra"/>
+                    <param name="server" value="default"/>
+                    <param name="entries" value="[java:/JmsXA, java:jboss/DefaultJMSConnectionFactory]"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="transaction" value="xa"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting:security-setting=#,subsystem=messaging-activemq,server=default">
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting.role">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting.role:security-setting=#,server=default,subsystem=messaging-activemq,role=guest">
+                    <param name="server" value="default"/>
+                    <param name="role" value="guest"/>
+                    <param name="delete-non-durable-queue" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="consume" value="true"/>
+                    <param name="create-non-durable-queue" value="true"/>
+                    <param name="send" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.address-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.address-setting:server=default,subsystem=messaging-activemq,address-setting=#">
+                    <param name="expiry-address" value="jms.queue.ExpiryQueue"/>
+                    <param name="server" value="default"/>
+                    <param name="dead-letter-address" value="jms.queue.DLQ"/>
+                    <param name="max-size-bytes" value="10485760"/>
+                    <param name="message-counter-history-day-limit" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="page-size-bytes" value="2097152"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="redistribution-delay" value="1000"/>
+                    <param name="address-setting" value="#"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jgroups-broadcast-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jgroups-broadcast-group:server=default,subsystem=messaging-activemq,jgroups-broadcast-group=bg-group1">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="jgroups-cluster" value="activemq-cluster"/>
+                    <param name="jgroups-broadcast-group" value="bg-group1"/>
+                    <param name="connectors" value="[http-connector]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jgroups-discovery-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jgroups-discovery-group:jgroups-discovery-group=dg-group1,server=default,subsystem=messaging-activemq">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="jgroups-cluster" value="activemq-cluster"/>
+                    <param name="jgroups-discovery-group" value="dg-group1"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.cluster-connection">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.cluster-connection:server=default,subsystem=messaging-activemq,cluster-connection=my-cluster">
+                    <param name="discovery-group" value="dg-group1"/>
+                    <param name="server" value="default"/>
+                    <param name="cluster-connection" value="my-cluster"/>
+                    <param name="cluster-connection-address" value="jms"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connector-name" value="http-connector"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jdr">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jsf">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.pojo">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=standard-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.sar">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.iiop-openjdk">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.iiop-openjdk:subsystem=iiop-openjdk">
+                    <param name="security" value="elytron"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="server-requires-ssl" value="false"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="iiop-openjdk"/>
+                    <param name="client-requires-ssl" value="false"/>
+                    <param name="transactions" value="spec"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.infinispan:subsystem=distributable-web,routing=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="infinispan"/>
+                    <param name="cache" value="routing"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.primary-owner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.primary-owner:subsystem=distributable-web,infinispan-session-management=default,affinity=primary-owner">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="primary-owner"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster:subsystem=modcluster">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="extension" value="org.jboss.as.modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy:subsystem=modcluster,proxy=default">
+                    <param name="listener" value="ajp"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="proxy" value="default"/>
+                    <param name="advertise-socket" value="modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic:load-provider=dynamic,proxy=default,subsystem=modcluster">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.modcluster.proxy.load-provider.dynamic.load-metric">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.modcluster.proxy.load-provider.dynamic.load-metric:load-provider=dynamic,proxy=default,subsystem=modcluster,load-metric=cpu">
+                    <param name="load-provider" value="dynamic"/>
+                    <param name="proxy" value="default"/>
+                    <param name="subsystem" value="modcluster"/>
+                    <param name="load-metric" value="cpu"/>
+                    <param name="type" value="cpu"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton:subsystem=singleton">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="default" value="default"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.singleton"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy:singleton-policy=default,subsystem=singleton">
+                    <param name="cache-container" value="server"/>
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.singleton.singleton-policy.election-policy.simple">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.singleton.singleton-policy.election-policy.simple:singleton-policy=default,election-policy=simple,subsystem=singleton">
+                    <param name="subsystem" value="singleton"/>
+                    <param name="singleton-policy" value="default"/>
+                    <param name="election-policy" value="simple"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="standalone-full.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="naming"/>
+            <layer model="standalone" name="jsonb"/>
+            <layer model="standalone" name="ee-integration"/>
+            <layer model="standalone" name="ee-concurrency"/>
+            <layer model="standalone" name="ee"/>
+            <layer model="standalone" name="deployment-scanner"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow"/>
+            <layer model="standalone" name="servlet"/>
+            <layer model="standalone" name="web-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="jmx"/>
+            <layer model="standalone" name="remoting"/>
+            <layer model="standalone" name="jmx-remoting"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="core-management"/>
+            <layer model="standalone" name="request-controller"/>
+            <layer model="standalone" name="security-manager"/>
+            <layer model="standalone" name="core-server"/>
+            <layer model="standalone" name="core-tools"/>
+            <layer model="standalone" name="transactions"/>
+            <layer model="standalone" name="datasources"/>
+            <layer model="standalone" name="datasources-web-server"/>
+            <layer model="standalone" name="jaxrs-core"/>
+            <layer model="standalone" name="jaxrs"/>
+            <layer model="standalone" name="cdi"/>
+            <layer model="standalone" name="bean-validation"/>
+            <layer model="standalone" name="jpa"/>
+            <layer model="standalone" name="jaxrs-server"/>
+            <layer model="standalone" name="ee-security"/>
+            <layer model="standalone" name="metrics"/>
+            <layer model="standalone" name="health"/>
+            <layer model="standalone" name="h2-driver"/>
+            <layer model="standalone" name="h2-datasource"/>
+            <layer model="standalone" name="h2-default-datasource"/>
+            <layer model="standalone" name="elytron-oidc-client"/>
+            <layer model="standalone" name="ejb-local-cache"/>
+            <layer model="standalone" name="ejb-lite"/>
+            <layer model="standalone" name="resource-adapters"/>
+            <layer model="standalone" name="messaging-activemq"/>
+            <layer model="standalone" name="ejb"/>
+            <layer model="standalone" name="ejb-http-invoker"/>
+            <layer model="standalone" name="web-passivation"/>
+            <layer model="standalone" name="undertow-https"/>
+            <layer model="standalone" name="jdr"/>
+            <layer model="standalone" name="jsf"/>
+            <layer model="standalone" name="webservices"/>
+            <layer model="standalone" name="pojo"/>
+            <layer model="standalone" name="mail"/>
+            <layer model="standalone" name="sar"/>
+            <layer model="standalone" name="batch-jberet"/>
+            <layer model="standalone" name="hibernate-search"/>
+            <layer model="standalone" name="web-console"/>
+            <layer model="standalone" name="microprofile-config"/>
+            <layer model="standalone" name="microprofile-jwt"/>
+            <layer model="standalone" name="internal-standalone-profile"/>
+            <layer model="standalone" name="iiop-openjdk"/>
+            <layer model="standalone" name="embedded-activemq"/>
+            <layer model="standalone" name="internal-standalone-full-profile"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=unsecure">
+                    <param name="interface" value="unsecure"/>
+                    <param name="inet-address" value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ejb3">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.batch.jberet">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.iiop-openjdk">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.jboss.ejb-client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.jboss.ejb.client.RemoteEJBPermission"/>
+                </feature>
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="target-name" value="*"/>
+                    <param name="class-name" value="org.wildfly.extension.batch.jberet.deployment.BatchPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming.service.remote-naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming.service.remote-naming:subsystem=naming,service=remote-naming">
+                    <param name="subsystem" value="naming"/>
+                    <param name="service" value="remote-naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                    <param name="jms-connection-factory" value="java:jboss/DefaultJMSConnectionFactory"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner:subsystem=deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner.scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner.scanner:scanner=default,subsystem=deployment-scanner">
+                    <param name="scanner" value="default"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="path" value="deployments"/>
+                    <param name="scan-interval" value="5000"/>
+                    <param name="relative-to" value="jboss.server.base.dir"/>
+                    <param name="runtime-failure-causes-rollback" value="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=iiop">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3528"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=iiop-ssl">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="iiop-ssl"/>
+                    <param name="interface" value="unsecure"/>
+                    <param name="port" value="3529"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="setting" value="http-invoker"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="jsp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="websockets"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler.file:subsystem=undertow,configuration=handler,file=welcome-content">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="path" value="${jboss.home.dir}/welcome-content"/>
+                    <param name="file" value="welcome-content"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.location">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.location:host=default-host,subsystem=undertow,server=default-server,location=/">
+                    <param name="host" value="default-host"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="handler" value="welcome-content"/>
+                    <param name="location" value="/"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=entity,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=entity,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=entity,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=ejb,subsystem=infinispan">
+                    <param name="aliases" value="[sfsb]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.ejb.infinispan]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=passivation,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=persistent,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=ejb,local-cache=transient,subsystem=infinispan">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=passivation,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=passivation,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=locking">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=transaction">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=persistent,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=persistent,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="persistent"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="store" value="file"/>
+                    <param name="preload" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.locking">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.locking:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=locking">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="locking"/>
+                    <param name="isolation" value="REPEATABLE_READ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.transaction">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.transaction:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=transaction">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="mode" value="BATCH"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="transaction"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=ejb,local-cache=transient,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=ejb,local-cache=transient,subsystem=infinispan,store=file">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="cache-container" value="ejb"/>
+                    <param name="local-cache" value="transient"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="purge" value="true"/>
+                    <param name="store" value="file"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.web.infinispan]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=passivation,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=sso,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=passivation,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=web,local-cache=passivation,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=sso,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.metrics">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.metrics:subsystem=metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="metrics"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                    <param name="exposed-subsystems" value="[*]"/>
+                    <param name="prefix" value="${wildfly.metrics.prefix:wildfly}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.health">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.health:subsystem=health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="health"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron-oidc-client">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron-oidc-client:subsystem=elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron-oidc-client"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3:subsystem=ejb3">
+                    <param name="default-stateful-bean-access-timeout" value="5000"/>
+                    <param name="extension" value="org.jboss.as.ejb3"/>
+                    <param name="default-missing-method-permissions-deny-access" value="true"/>
+                    <param name="default-sfsb-passivation-disabled-cache" value="simple"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-security-domain" value="other"/>
+                    <param name="default-sfsb-cache" value="simple"/>
+                    <param name="statistics-enabled" value="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="default-slsb-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="log-system-exceptions" value="true"/>
+                    <param name="default-mdb-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="default-singleton-bean-access-timeout" value="5000"/>
+                    <param name="default-resource-adapter-name" value="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.application-security-domain:application-security-domain=other,subsystem=ejb3">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=slsb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="slsb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-worker-pools"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.simple-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.simple-cache:simple-cache=simple,subsystem=ejb3">
+                    <param name="simple-cache" value="simple"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.distributable-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.distributable-cache:distributable-cache=distributable,subsystem=ejb3">
+                    <param name="distributable-cache" value="distributable"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.async">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.async:subsystem=ejb3,service=async">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="async"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.thread-pool.keepalive-time:subsystem=ejb3,thread-pool=default">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="thread-pool" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="60"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service:subsystem=ejb3,service=timer-service">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="default-data-store" value="default-file-store"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.timer-service.file-data-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.timer-service.file-data-store:subsystem=ejb3,service=timer-service,file-data-store=default-file-store">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="path" value="timer-service-data"/>
+                    <param name="file-data-store" value="default-file-store"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="service" value="timer-service"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.strict-max-bean-instance-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.strict-max-bean-instance-pool:strict-max-bean-instance-pool=mdb-strict-max-pool,subsystem=ejb3">
+                    <param name="strict-max-bean-instance-pool" value="mdb-strict-max-pool"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="derive-size" value="from-cpu-count"/>
+                    <param name="timeout" value="5"/>
+                    <param name="timeout-unit" value="MINUTES"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote:subsystem=ejb3,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="connectors" value="[http-remoting-connector]"/>
+                    <param name="service" value="remote"/>
+                    <param name="thread-pool-name" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.remote.channel-creation-options">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.remote.channel-creation-options:subsystem=ejb3,channel-creation-options=MAX_OUTBOUND_MESSAGES,service=remote">
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="channel-creation-options" value="MAX_OUTBOUND_MESSAGES"/>
+                    <param name="type" value="remoting"/>
+                    <param name="value" value="1234"/>
+                    <param name="service" value="remote"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ejb3.service.iiop">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ejb3.service.iiop:subsystem=ejb3,service=iiop">
+                    <param name="use-qualified-name" value="false"/>
+                    <param name="subsystem" value="ejb3"/>
+                    <param name="service" value="iiop"/>
+                    <param name="enable-by-default" value="false"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb:subsystem=distributable-ejb">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.ejb"/>
+                    <param name="default-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.client-mappings-registry.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.client-mappings-registry.local:client-mappings-registry=local,subsystem=distributable-ejb">
+                    <param name="client-mappings-registry" value="local"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-bean-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-bean-management:subsystem=distributable-ejb,infinispan-bean-management=default">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="max-active-beans" value="10000"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="passivation"/>
+                    <param name="infinispan-bean-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-ejb.infinispan-timer-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=persistent">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="persistent"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="persistent"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-ejb.infinispan-timer-management:subsystem=distributable-ejb,infinispan-timer-management=transient">
+                    <param name="cache-container" value="ejb"/>
+                    <param name="subsystem" value="distributable-ejb"/>
+                    <param name="cache" value="transient"/>
+                    <param name="max-active-timers" value="10000"/>
+                    <param name="infinispan-timer-management" value="transient"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.discovery">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.discovery:subsystem=discovery">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="discovery"/>
+                    <param name="extension" value="org.wildfly.extension.discovery"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq:subsystem=messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server:subsystem=messaging-activemq,server=default">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="statistics-enabled" value="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="elytron-domain" value="ApplicationDomain"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector,server=default,subsystem=messaging-activemq">
+                    <param name="http-connector" value="http-connector"/>
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="endpoint" value="http-acceptor"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-connector:http-connector=http-connector-throughput,server=default,subsystem=messaging-activemq">
+                    <param name="http-connector" value="http-connector-throughput"/>
+                    <param name="server" value="default"/>
+                    <param name="endpoint" value="http-acceptor-throughput"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="params" value="{batch-delay=50}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-connector:subsystem=messaging-activemq,server=default,in-vm-connector=in-vm">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-connector" value="in-vm"/>
+                    <param name="server-id" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=InVmConnectionFactory">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="entries" value="[java:/ConnectionFactory]"/>
+                    <param name="connection-factory" value="InVmConnectionFactory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.connection-factory:server=default,subsystem=messaging-activemq,connection-factory=RemoteConnectionFactory">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="connectors" value="[http-connector]"/>
+                    <param name="entries" value="[java:jboss/exported/jms/RemoteConnectionFactory]"/>
+                    <param name="connection-factory" value="RemoteConnectionFactory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.http-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.http-acceptor:server=default,subsystem=messaging-activemq,http-acceptor=http-acceptor-throughput">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="http-acceptor" value="http-acceptor-throughput"/>
+                    <param name="params" value="{batch-delay=50,direct-deliver=false}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.in-vm-acceptor">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.in-vm-acceptor:subsystem=messaging-activemq,server=default,in-vm-acceptor=in-vm">
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="params" value="{buffer-pooling=false}"/>
+                    <param name="in-vm-acceptor" value="in-vm"/>
+                    <param name="server-id" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.jms-queue">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,jms-queue=ExpiryQueue">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/ExpiryQueue]"/>
+                    <param name="jms-queue" value="ExpiryQueue"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.jms-queue:server=default,subsystem=messaging-activemq,jms-queue=DLQ">
+                    <param name="server" value="default"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="entries" value="[java:/jms/queue/DLQ]"/>
+                    <param name="jms-queue" value="DLQ"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.pooled-connection-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.pooled-connection-factory:pooled-connection-factory=activemq-ra,subsystem=messaging-activemq,server=default">
+                    <param name="pooled-connection-factory" value="activemq-ra"/>
+                    <param name="server" value="default"/>
+                    <param name="entries" value="[java:/JmsXA, java:jboss/DefaultJMSConnectionFactory]"/>
+                    <param name="connectors" value="[in-vm]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="transaction" value="xa"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting:security-setting=#,subsystem=messaging-activemq,server=default">
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="server" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.security-setting.role">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.security-setting.role:security-setting=#,server=default,subsystem=messaging-activemq,role=guest">
+                    <param name="server" value="default"/>
+                    <param name="role" value="guest"/>
+                    <param name="delete-non-durable-queue" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="security-setting" value="#"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="consume" value="true"/>
+                    <param name="create-non-durable-queue" value="true"/>
+                    <param name="send" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq.server.address-setting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq.server.address-setting:server=default,subsystem=messaging-activemq,address-setting=#">
+                    <param name="expiry-address" value="jms.queue.ExpiryQueue"/>
+                    <param name="server" value="default"/>
+                    <param name="dead-letter-address" value="jms.queue.DLQ"/>
+                    <param name="max-size-bytes" value="10485760"/>
+                    <param name="message-counter-history-day-limit" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="page-size-bytes" value="2097152"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="address-setting" value="#"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.local:subsystem=distributable-web,routing=local">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.local:subsystem=distributable-web,infinispan-session-management=default,affinity=local">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jdr">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jdr:subsystem=jdr">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jdr"/>
+                    <param name="extension" value="org.jboss.as.jdr"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jsf">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jsf:subsystem=jsf">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jsf"/>
+                    <param name="extension" value="org.jboss.as.jsf"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices:subsystem=webservices">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="extension" value="org.jboss.as.webservices"/>
+                    <param name="statistics-enabled" value="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="wsdl-host" value="${jboss.bind.address:127.0.0.1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.client-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.client-config:client-config=Standard-Client-Config,subsystem=webservices">
+                    <param name="client-config" value="Standard-Client-Config"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Standard-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Standard-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config:subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="subsystem" value="webservices"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain:pre-handler-chain=recording-handlers,subsystem=webservices,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="protocol-bindings" value="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.webservices.endpoint-config.pre-handler-chain.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.webservices.endpoint-config.pre-handler-chain.handler:pre-handler-chain=recording-handlers,subsystem=webservices,handler=RecordingHandler,endpoint-config=Recording-Endpoint-Config">
+                    <param name="pre-handler-chain" value="recording-handlers"/>
+                    <param name="subsystem" value="webservices"/>
+                    <param name="handler" value="RecordingHandler"/>
+                    <param name="class" value="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    <param name="endpoint-config" value="Recording-Endpoint-Config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.pojo">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.pojo:subsystem=pojo">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="pojo"/>
+                    <param name="extension" value="org.jboss.as.pojo"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.remote-destination-outbound-socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.remote-destination-outbound-socket-binding:socket-binding-group=standard-sockets,remote-destination-outbound-socket-binding=mail-smtp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="host" value="${jboss.mail.server.host:localhost}"/>
+                    <param name="remote-destination-outbound-socket-binding" value="mail-smtp"/>
+                    <param name="port" value="${jboss.mail.server.port:25}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail:subsystem=mail">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="extension" value="org.jboss.as.mail"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session:subsystem=mail,mail-session=default">
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="jndi-name" value="java:jboss/mail/Default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.mail.mail-session.server.smtp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.mail.mail-session.server.smtp:server=smtp,subsystem=mail,mail-session=default">
+                    <param name="outbound-socket-binding-ref" value="mail-smtp"/>
+                    <param name="server" value="smtp"/>
+                    <param name="subsystem" value="mail"/>
+                    <param name="mail-session" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.sar">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.sar:subsystem=sar">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="sar"/>
+                    <param name="extension" value="org.jboss.as.sar"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet:subsystem=batch-jberet">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="extension" value="org.wildfly.extension.batch.jberet"/>
+                    <param name="default-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="default-thread-pool" value="batch"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.in-memory-job-repository">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.in-memory-job-repository:subsystem=batch-jberet,in-memory-job-repository=in-memory">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="in-memory-job-repository" value="in-memory"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="max-threads" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.batch-jberet.thread-pool.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.batch-jberet.thread-pool.keepalive-time:subsystem=batch-jberet,thread-pool=batch">
+                    <param name="subsystem" value="batch-jberet"/>
+                    <param name="thread-pool" value="batch"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="time" value="30"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.iiop-openjdk">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.iiop-openjdk:subsystem=iiop-openjdk">
+                    <param name="security" value="elytron"/>
+                    <param name="extension" value="org.wildfly.iiop-openjdk"/>
+                    <param name="socket-binding" value="iiop"/>
+                    <param name="server-requires-ssl" value="false"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="iiop-openjdk"/>
+                    <param name="client-requires-ssl" value="false"/>
+                    <param name="transactions" value="spec"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="host.xml" model="host">
+        <props>
+            <prop name="--domain-config" value="domain.xml"/>
+            <prop name="--empty-host-config" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--remove-existing-host-config" value=""/>
+        </props>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host:host=primary">
+                    <param name="host" value="primary"/>
+                    <param name="persist-name" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:host=primary,core-service=management">
+                    <param name="host" value="primary"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:host=primary,core-service=management,access=audit">
+                    <param name="host" value="primary"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:host=primary,access=audit,json-formatter=json-formatter,core-service=management">
+                    <param name="host" value="primary"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:host=primary,file-handler=host-file,access=audit,core-service=management">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.domain.data.dir"/>
+                    <param name="host" value="primary"/>
+                    <param name="file-handler" value="host-file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:host=primary,file-handler=server-file,access=audit,core-service=management">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="primary"/>
+                    <param name="file-handler" value="server-file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:host=primary,access=audit,core-service=management,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="primary"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:host=primary,handler=host-file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="primary"/>
+                    <param name="handler" value="host-file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="host.interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.interface:interface=management,host=primary">
+                    <param name="interface" value="management"/>
+                    <param name="host" value="primary"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.interface:interface=public,host=primary">
+                    <param name="interface" value="public"/>
+                    <param name="host" value="primary"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=primary,extension=org.wildfly.extension.core-management">
+                    <param name="host" value="primary"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=primary,extension=org.wildfly.extension.elytron">
+                    <param name="host" value="primary"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=primary,extension=org.jboss.as.jmx">
+                    <param name="host" value="primary"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:host=primary,subsystem=elytron">
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="register-jaspi-factory" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:host=primary,subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:host=primary,subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:host=primary,subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:host=primary,identity-realm=local,subsystem=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:host=primary,file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.domain.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="format" value="JSON"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:host=primary,subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:host=primary,subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,host=primary,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:host=primary,subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:host=primary,subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:host=primary,subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:host=primary,configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.domain.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:host=primary,subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:host=primary,subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:host=primary,subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,host=primary,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,host=primary,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,host=primary,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:host=primary,sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:host=primary,http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.access.audit.server-logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.access.audit.server-logger.audit-log:server-logger=audit-log,host=primary,access=audit,core-service=management">
+                    <param name="server-logger" value="audit-log"/>
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="host" value="primary"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.access.audit.server-logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.access.audit.server-logger.audit-log.handler:host=primary,server-logger=audit-log,handler=server-file,access=audit,core-service=management">
+                    <param name="host" value="primary"/>
+                    <param name="server-logger" value="audit-log"/>
+                    <param name="handler" value="server-file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.management-interface.http-interface:host=primary,core-service=management,management-interface=http-interface">
+                    <param name="host" value="primary"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.management-interface.http-interface.http-upgrade:host=primary,core-service=management,management-interface=http-interface">
+                    <param name="host" value="primary"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:host=primary,subsystem=core-management">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:host=primary,subsystem=jmx">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:host=primary,subsystem=jmx,expose-model=expression">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:host=primary,subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:host=primary,subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="host.jvm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.jvm:jvm=default,host=primary">
+                    <param name="jvm" value="default"/>
+                    <param name="host" value="primary"/>
+                    <param name="jvm-options" value="[&quot;-server&quot;, &quot;-XX:MetaspaceSize=96m&quot;, &quot;-XX:MaxMetaspaceSize=256m&quot;]"/>
+                    <param name="max-heap-size" value="256m"/>
+                    <param name="heap-size" value="64m"/>
+                </feature>
+            </spec>
+            <spec name="host.server-config">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config:host=primary,server-config=server-one">
+                    <param name="host" value="primary"/>
+                    <param name="server-config" value="server-one"/>
+                    <param name="group" value="main-server-group"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config:host=primary,server-config=server-two">
+                    <param name="host" value="primary"/>
+                    <param name="socket-binding-port-offset" value="150"/>
+                    <param name="server-config" value="server-two"/>
+                    <param name="group" value="main-server-group"/>
+                    <param name="auto-start" value="true"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config:host=primary,server-config=server-three">
+                    <param name="host" value="primary"/>
+                    <param name="socket-binding-port-offset" value="250"/>
+                    <param name="server-config" value="server-three"/>
+                    <param name="group" value="other-server-group"/>
+                    <param name="auto-start" value="false"/>
+                </feature>
+            </spec>
+            <spec name="host.server-config.jvm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config.jvm:jvm=default,host=primary,server-config=server-two">
+                    <param name="jvm" value="default"/>
+                    <param name="host" value="primary"/>
+                    <param name="server-config" value="server-two"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.server-config.jvm:jvm=default,host=primary,server-config=server-three">
+                    <param name="jvm" value="default"/>
+                    <param name="host" value="primary"/>
+                    <param name="server-config" value="server-three"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="host-primary.xml" model="host">
+        <props>
+            <prop name="--domain-config" value="domain.xml"/>
+            <prop name="--empty-host-config" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--remove-existing-host-config" value=""/>
+        </props>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host:host=primary">
+                    <param name="host" value="primary"/>
+                    <param name="persist-name" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:host=primary,core-service=management">
+                    <param name="host" value="primary"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:host=primary,core-service=management,access=audit">
+                    <param name="host" value="primary"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:host=primary,access=audit,json-formatter=json-formatter,core-service=management">
+                    <param name="host" value="primary"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:host=primary,file-handler=host-file,access=audit,core-service=management">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.domain.data.dir"/>
+                    <param name="host" value="primary"/>
+                    <param name="file-handler" value="host-file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:host=primary,file-handler=server-file,access=audit,core-service=management">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="primary"/>
+                    <param name="file-handler" value="server-file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:host=primary,access=audit,core-service=management,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="primary"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:host=primary,handler=host-file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="primary"/>
+                    <param name="handler" value="host-file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="host.interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.interface:interface=management,host=primary">
+                    <param name="interface" value="management"/>
+                    <param name="host" value="primary"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=primary,extension=org.wildfly.extension.core-management">
+                    <param name="host" value="primary"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=primary,extension=org.wildfly.extension.elytron">
+                    <param name="host" value="primary"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:host=primary,extension=org.jboss.as.jmx">
+                    <param name="host" value="primary"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:host=primary,subsystem=elytron">
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="register-jaspi-factory" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:host=primary,subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:host=primary,subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:host=primary,subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:host=primary,identity-realm=local,subsystem=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:host=primary,file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.domain.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="format" value="JSON"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:host=primary,subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:host=primary,subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,host=primary,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:host=primary,subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:host=primary,subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:host=primary,subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:host=primary,configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="host" value="primary"/>
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.domain.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:host=primary,subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:host=primary,subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:host=primary,subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,host=primary,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.domain.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,host=primary,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.domain.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,host=primary,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:host=primary,sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:host=primary,http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.access.audit.server-logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.access.audit.server-logger.audit-log:server-logger=audit-log,host=primary,access=audit,core-service=management">
+                    <param name="server-logger" value="audit-log"/>
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="host" value="primary"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.access.audit.server-logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.access.audit.server-logger.audit-log.handler:host=primary,server-logger=audit-log,handler=server-file,access=audit,core-service=management">
+                    <param name="host" value="primary"/>
+                    <param name="server-logger" value="audit-log"/>
+                    <param name="handler" value="server-file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.management-interface.http-interface:host=primary,core-service=management,management-interface=http-interface">
+                    <param name="host" value="primary"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="host.core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.core-service.management.management-interface.http-interface.http-upgrade:host=primary,core-service=management,management-interface=http-interface">
+                    <param name="host" value="primary"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:host=primary,subsystem=core-management">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:host=primary,subsystem=jmx">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:host=primary,subsystem=jmx,expose-model=expression">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:host=primary,subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:host=primary,subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="primary"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="host.jvm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}host.jvm:jvm=default,host=primary">
+                    <param name="jvm" value="default"/>
+                    <param name="host" value="primary"/>
+                    <param name="jvm-options" value="[&quot;-server&quot;, &quot;-XX:MetaspaceSize=96m&quot;, &quot;-XX:MaxMetaspaceSize=256m&quot;]"/>
+                    <param name="max-heap-size" value="256m"/>
+                    <param name="heap-size" value="64m"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+    <config name="standalone-microprofile.xml" model="standalone">
+        <props>
+            <prop name="--internal-empty-config" value=""/>
+            <prop name="--admin-only" value=""/>
+            <prop name="config.branch-is-batch" value="true"/>
+            <prop name="config.merge-independent-branches" value="true"/>
+            <prop name="--internal-remove-config" value=""/>
+        </props>
+        <layers>
+            <layer model="standalone" name="git-history"/>
+            <layer model="standalone" name="base-server"/>
+            <layer model="standalone" name="naming"/>
+            <layer model="standalone" name="jsonb"/>
+            <layer model="standalone" name="ee-integration"/>
+            <layer model="standalone" name="ee-concurrency"/>
+            <layer model="standalone" name="ee"/>
+            <layer model="standalone" name="deployment-scanner"/>
+            <layer model="standalone" name="io"/>
+            <layer model="standalone" name="undertow"/>
+            <layer model="standalone" name="servlet"/>
+            <layer model="standalone" name="web-server"/>
+            <layer model="standalone" name="elytron"/>
+            <layer model="standalone" name="management"/>
+            <layer model="standalone" name="jmx"/>
+            <layer model="standalone" name="remoting"/>
+            <layer model="standalone" name="jmx-remoting"/>
+            <layer model="standalone" name="logging"/>
+            <layer model="standalone" name="core-management"/>
+            <layer model="standalone" name="request-controller"/>
+            <layer model="standalone" name="security-manager"/>
+            <layer model="standalone" name="core-server"/>
+            <layer model="standalone" name="core-tools"/>
+            <layer model="standalone" name="transactions"/>
+            <layer model="standalone" name="datasources"/>
+            <layer model="standalone" name="datasources-web-server"/>
+            <layer model="standalone" name="jaxrs-core"/>
+            <layer model="standalone" name="jaxrs"/>
+            <layer model="standalone" name="cdi"/>
+            <layer model="standalone" name="bean-validation"/>
+            <layer model="standalone" name="jpa"/>
+            <layer model="standalone" name="jaxrs-server"/>
+            <layer model="standalone" name="ee-security"/>
+            <layer model="standalone" name="resource-adapters"/>
+            <layer model="standalone" name="messaging-activemq"/>
+            <layer model="standalone" name="jms-activemq"/>
+            <layer model="standalone" name="metrics"/>
+            <layer model="standalone" name="health"/>
+            <layer model="standalone" name="microprofile-config"/>
+            <layer model="standalone" name="opentelemetry"/>
+            <layer model="standalone" name="microprofile-telemetry"/>
+            <layer model="standalone" name="microprofile-health"/>
+            <layer model="standalone" name="observability"/>
+            <layer model="standalone" name="cloud-server"/>
+            <layer model="standalone" name="h2-driver"/>
+            <layer model="standalone" name="h2-datasource"/>
+            <layer model="standalone" name="h2-default-datasource"/>
+            <layer model="standalone" name="microprofile-fault-tolerance"/>
+            <layer model="standalone" name="microprofile-jwt"/>
+            <layer model="standalone" name="microprofile-openapi"/>
+            <layer model="standalone" name="microprofile-rest-client"/>
+            <layer model="standalone" name="elytron-oidc-client"/>
+        </layers>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="server-root">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}server-root:server-root=/">
+                    <param name="server-root" value="/"/>
+                </feature>
+            </spec>
+            <spec name="interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=public">
+                    <param name="interface" value="public"/>
+                    <param name="inet-address" value="${jboss.bind.address:127.0.0.1}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}interface:interface=management">
+                    <param name="interface" value="management"/>
+                    <param name="inet-address" value="${jboss.bind.address.management:127.0.0.1}"/>
+                </feature>
+            </spec>
+            <spec name="extension">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.undertow">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.security.manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.transactions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.connector">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.jboss.as.clustering.infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.opentelemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.opentelemetry"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.telemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.telemetry"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.health-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.health-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.fault-tolerance-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.microprofile.openapi-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.openapi-smallrye"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}extension:extension=org.wildfly.extension.clustering.web">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group:socket-binding-group=standard-sockets">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port-offset" value="${jboss.socket.binding.port-offset:0}"/>
+                    <param name="default-interface" value="public"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.naming">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.naming:subsystem=naming">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="naming"/>
+                    <param name="extension" value="org.jboss.as.naming"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee:subsystem=ee">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="spec-descriptor-property-replacement" value="false"/>
+                    <param name="extension" value="org.jboss.as.ee"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.context-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.context-service:subsystem=ee,context-service=default">
+                    <param name="subsystem" value="ee"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-executor-service:subsystem=ee,managed-executor-service=default">
+                    <param name="keepalive-time" value="5000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="managed-executor-service" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/executor/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-scheduled-executor-service">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-scheduled-executor-service:managed-scheduled-executor-service=default,subsystem=ee">
+                    <param name="keepalive-time" value="3000"/>
+                    <param name="hung-task-termination-period" value="0"/>
+                    <param name="context-service" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="default"/>
+                    <param name="hung-task-threshold" value="60000"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.managed-thread-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.managed-thread-factory:managed-thread-factory=default,subsystem=ee">
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-thread-factory" value="default"/>
+                    <param name="context-service" value="default"/>
+                    <param name="jndi-name" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee.service.default-bindings">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee.service.default-bindings:subsystem=ee,service=default-bindings">
+                    <param name="managed-thread-factory" value="java:jboss/ee/concurrency/factory/default"/>
+                    <param name="context-service" value="java:jboss/ee/concurrency/context/default"/>
+                    <param name="managed-executor-service" value="java:jboss/ee/concurrency/executor/default"/>
+                    <param name="service" value="default-bindings"/>
+                    <param name="datasource" value="java:jboss/datasources/ExampleDS"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee"/>
+                    <param name="managed-scheduled-executor-service" value="java:jboss/ee/concurrency/scheduler/default"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner:subsystem=deployment-scanner">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="extension" value="org.jboss.as.deployment-scanner"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.deployment-scanner.scanner">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.deployment-scanner.scanner:scanner=default,subsystem=deployment-scanner">
+                    <param name="scanner" value="default"/>
+                    <param name="subsystem" value="deployment-scanner"/>
+                    <param name="path" value="deployments"/>
+                    <param name="scan-interval" value="5000"/>
+                    <param name="relative-to" value="jboss.server.base.dir"/>
+                    <param name="runtime-failure-causes-rollback" value="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io:subsystem=io">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="extension" value="org.wildfly.extension.io"/>
+                    <param name="default-worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.io.worker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.io.worker:worker=default,subsystem=io">
+                    <param name="worker" value="default"/>
+                    <param name="subsystem" value="io"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="socket-binding-group.socket-binding">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=ajp">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.ajp.port:8009}"/>
+                    <param name="socket-binding" value="ajp"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.http.port:8080}"/>
+                    <param name="socket-binding" value="http"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="${jboss.https.port:8443}"/>
+                    <param name="socket-binding" value="https"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-http">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.http.port:9990}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=management-https">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="socket-binding" value="management-https"/>
+                    <param name="interface" value="management"/>
+                    <param name="port" value="${jboss.management.https.port:9993}"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-recovery-environment">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4712"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}socket-binding-group.socket-binding:socket-binding-group=standard-sockets,socket-binding=txn-status-manager">
+                    <param name="socket-binding-group" value="standard-sockets"/>
+                    <param name="port" value="4713"/>
+                    <param name="socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron:subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="disallowed-providers" value="[OracleUcrypto]"/>
+                    <param name="final-providers" value="combined-providers"/>
+                    <param name="extension" value="org.wildfly.extension.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-loader">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="elytron"/>
+                    <param name="module" value="org.wildfly.security.elytron"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-loader:subsystem=elytron,provider-loader=openssl">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-loader" value="openssl"/>
+                    <param name="module" value="org.wildfly.openssl"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.aggregate-providers">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.aggregate-providers:subsystem=elytron,aggregate-providers=combined-providers">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="aggregate-providers" value="combined-providers"/>
+                    <param name="providers" value="[elytron, openssl]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-http-server-mechanism-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-http-server-mechanism-factory:subsystem=elytron,provider-http-server-mechanism-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-permission-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-permission-mapper:simple-permission-mapper=default-permission-mapper,subsystem=elytron">
+                    <param name="simple-permission-mapper" value="default-permission-mapper"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-mappings" value="[{principals=[anonymous],permission-sets=[permission-set=default-permissions]},{match-all=true,permission-sets=[permission-set=login-permission,permission-set=default-permissions]}]"/>
+                    <param name="mapping-mode" value="first"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ApplicationDomain,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="realms" value="[{realm=ApplicationRealm,role-decoder=groups-to-roles},{realm=local}]"/>
+                    <param name="default-realm" value="ApplicationRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=application-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=BASIC,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.identity-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.identity-realm:identity-realm=local,subsystem=elytron">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="identity-realm" value="local"/>
+                    <param name="identity" value="$local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.file-audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.file-audit-log:file-audit-log=local-audit,subsystem=elytron">
+                    <param name="path" value="audit.log"/>
+                    <param name="relative-to" value="jboss.server.log.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="format" value="JSON"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="file-audit-log" value="local-audit"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-realm-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-realm-mapper:subsystem=elytron,constant-realm-mapper=local">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-realm-mapper" value="local"/>
+                    <param name="realm-name" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.simple-role-decoder">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.simple-role-decoder:subsystem=elytron,simple-role-decoder=groups-to-roles">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="simple-role-decoder" value="groups-to-roles"/>
+                    <param name="attribute" value="groups"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.provider-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.provider-sasl-server-factory:subsystem=elytron,provider-sasl-server-factory=global">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="provider-sasl-server-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.mechanism-provider-filtering-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.mechanism-provider-filtering-sasl-server-factory:subsystem=elytron,mechanism-provider-filtering-sasl-server-factory=elytron">
+                    <param name="sasl-server-factory" value="global"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-provider-filtering-sasl-server-factory" value="elytron"/>
+                    <param name="filters" value="[{provider-name=WildFlyElytron}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.configurable-sasl-server-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.configurable-sasl-server-factory:configurable-sasl-server-factory=configured,subsystem=elytron">
+                    <param name="sasl-server-factory" value="elytron"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="configurable-sasl-server-factory" value="configured"/>
+                    <param name="properties" value="{wildfly.sasl.local-user.default-user=&quot;\$local&quot;,wildfly.sasl.local-user.challenge-path=&quot;${jboss.server.temp.dir}/auth&quot;}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.constant-role-mapper">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.constant-role-mapper:subsystem=elytron,constant-role-mapper=super-user-mapper">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="constant-role-mapper" value="super-user-mapper"/>
+                    <param name="roles" value="[SuperUser]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=login-permission">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="login-permission"/>
+                    <param name="permissions" value="[class-name=org.wildfly.security.auth.permission.LoginPermission]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.permission-set:subsystem=elytron,permission-set=default-permissions">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="permissions" value="[]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=application-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ApplicationRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ApplicationRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ApplicationRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="application-roles.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=application-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ApplicationRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-store:subsystem=elytron,key-store=applicationKS">
+                    <param name="path" value="application.keystore"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                    <param name="type" value="JKS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.key-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.key-manager:subsystem=elytron,key-manager=applicationKM">
+                    <param name="generate-self-signed-certificate-host" value="localhost"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="key-store" value="applicationKS"/>
+                    <param name="credential-reference" value="{clear-text=password}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.server-ssl-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.server-ssl-context:subsystem=elytron,server-ssl-context=applicationSSC">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="server-ssl-context" value="applicationSSC"/>
+                    <param name="key-manager" value="applicationKM"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="users-properties" value="{path=mgmt-users.properties,relative-to=jboss.server.config.dir,digest-realm-name=ManagementRealm}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.properties-realm.groups-properties">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.properties-realm.groups-properties:properties-realm=ManagementRealm,subsystem=elytron">
+                    <param name="properties-realm" value="ManagementRealm"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="path" value="mgmt-groups.properties"/>
+                    <param name="relative-to" value="jboss.server.config.dir"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.security-domain:security-domain=ManagementDomain,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="realms" value="[{realm=ManagementRealm,role-decoder=groups-to-roles},{realm=local,role-mapper=super-user-mapper}]"/>
+                    <param name="default-realm" value="ManagementRealm"/>
+                    <param name="permission-mapper" value="default-permission-mapper"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.sasl-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.sasl-authentication-factory:sasl-authentication-factory=management-sasl-authentication,subsystem=elytron">
+                    <param name="sasl-server-factory" value="configured"/>
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=JBOSS-LOCAL-USER,realm-mapper=local},{mechanism-name=DIGEST-MD5,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.http-authentication-factory">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.http-authentication-factory:http-authentication-factory=management-http-authentication,subsystem=elytron">
+                    <param name="security-domain" value="ManagementDomain"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="http-server-mechanism-factory" value="global"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="mechanism-configurations" value="[{mechanism-name=DIGEST,mechanism-realm-configurations=[{realm-name=ManagementRealm}]}]"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.policy">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron.policy:subsystem=elytron,policy=jacc">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="policy" value="jacc"/>
+                    <param name="jacc-policy" value="{}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.elytron.permission-set.permissions">
+                <feature>
+                    <param name="permission-set" value="default-permissions"/>
+                    <param name="module" value="org.wildfly.transaction.client"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron"/>
+                    <param name="class-name" value="org.wildfly.transaction.client.RemoteTransactionPermission"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow:subsystem=undertow">
+                    <param name="extension" value="org.wildfly.extension.undertow"/>
+                    <param name="default-virtual-host" value="default-host"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="default-servlet-container" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="default-server" value="default-server"/>
+                    <param name="statistics-enabled" value="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server:subsystem=undertow,server=default-server">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="server" value="default-server"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host:host=default-host,server=default-server,subsystem=undertow">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="alias" value="[localhost]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container:subsystem=undertow,servlet-container=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.buffer-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.buffer-cache:subsystem=undertow,buffer-cache=default">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="buffer-cache" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.byte-buffer-pool">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.byte-buffer-pool:byte-buffer-pool=default,subsystem=undertow">
+                    <param name="byte-buffer-pool" value="default"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.filter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.filter:subsystem=undertow,configuration=filter">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="filter"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.configuration.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.configuration.handler:subsystem=undertow,configuration=handler">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="configuration" value="handler"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.http-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.http-listener:server=default-server,subsystem=undertow,http-listener=default">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="http"/>
+                    <param name="redirect-socket" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-listener" value="default"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.host.setting.http-invoker">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.host.setting.http-invoker:host=default-host,server=default-server,subsystem=undertow,setting=http-invoker">
+                    <param name="host" value="default-host"/>
+                    <param name="server" value="default-server"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="http-authentication-factory" value="application-http-authentication"/>
+                    <param name="setting" value="http-invoker"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.jsp">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.jsp:subsystem=undertow,servlet-container=default,setting=jsp">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="jsp"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.servlet-container.setting.websockets">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.servlet-container.setting.websockets:subsystem=undertow,servlet-container=default,setting=websockets">
+                    <param name="subsystem" value="undertow"/>
+                    <param name="servlet-container" value="default"/>
+                    <param name="setting" value="websockets"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.application-security-domain">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.application-security-domain:application-security-domain=other,subsystem=undertow">
+                    <param name="application-security-domain" value="other"/>
+                    <param name="security-domain" value="ApplicationDomain"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.undertow.server.https-listener">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.undertow.server.https-listener:subsystem=undertow,server=default-server,https-listener=https">
+                    <param name="server" value="default-server"/>
+                    <param name="socket-binding" value="https"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="undertow"/>
+                    <param name="ssl-context" value="applicationSSC"/>
+                    <param name="https-listener" value="https"/>
+                    <param name="enable-http2" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management:core-service=management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization:core-service=management,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="provider" value="simple"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping:core-service=management,role-mapping=SuperUser,access=authorization">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="authorization"/>
+                    <param name="core-service" value="management"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.authorization.role-mapping.include">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.authorization.role-mapping.include:include=user-$local,access=authorization,role-mapping=SuperUser,core-service=management">
+                    <param name="include" value="user-$local"/>
+                    <param name="access" value="authorization"/>
+                    <param name="role-mapping" value="SuperUser"/>
+                    <param name="name" value="$local"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="type" value="USER"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface:core-service=management,management-interface=http-interface">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="http-authentication-factory" value="management-http-authentication"/>
+                    <param name="socket-binding" value="management-http"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.management-interface.http-interface.http-upgrade">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.management-interface.http-interface.http-upgrade:core-service=management,management-interface=http-interface">
+                    <param name="sasl-authentication-factory" value="management-sasl-authentication"/>
+                    <param name="core-service" value="management"/>
+                    <param name="management-interface" value="http-interface"/>
+                    <param name="enabled" value="true"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit:core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="access" value="audit"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.json-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.json-formatter:json-formatter=json-formatter,core-service=management,access=audit">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="access" value="audit"/>
+                    <param name="json-formatter" value="json-formatter"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.file-handler:file-handler=file,core-service=management,access=audit">
+                    <param name="formatter" value="json-formatter"/>
+                    <param name="path" value="audit-log.log"/>
+                    <param name="access" value="audit"/>
+                    <param name="relative-to" value="jboss.server.data.dir"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="file-handler" value="file"/>
+                    <param name="core-service" value="management"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log:core-service=management,access=audit,logger=audit-log">
+                    <param name="access" value="audit"/>
+                    <param name="log-read-only" value="false"/>
+                    <param name="log-boot" value="true"/>
+                    <param name="logger" value="audit-log"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="core-service" value="management"/>
+                    <param name="enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="core-service.management.access.audit.logger.audit-log.handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}core-service.management.access.audit.logger.audit-log.handler:handler=file,access=audit,core-service=management,logger=audit-log">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="handler" value="file"/>
+                    <param name="access" value="audit"/>
+                    <param name="core-service" value="management"/>
+                    <param name="logger" value="audit-log"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx:subsystem=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="extension" value="org.jboss.as.jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.expression">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.expression:subsystem=jmx,expose-model=expression">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="expression"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.expose-model.resolved">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.expose-model.resolved:subsystem=jmx,expose-model=resolved">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="expose-model" value="resolved"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jmx.remoting-connector.jmx">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jmx.remoting-connector.jmx:subsystem=jmx,remoting-connector=jmx">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jmx"/>
+                    <param name="remoting-connector" value="jmx"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting:subsystem=remoting">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="extension" value="org.jboss.as.remoting"/>
+                    <param name="worker" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.remoting.http-connector">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.remoting.http-connector:http-connector=http-remoting-connector,subsystem=remoting">
+                    <param name="http-connector" value="http-remoting-connector"/>
+                    <param name="connector-ref" value="default"/>
+                    <param name="subsystem" value="remoting"/>
+                    <param name="sasl-authentication-factory" value="application-sasl-authentication"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging:subsystem=logging">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="extension" value="org.jboss.as.logging"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.pattern-formatter">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=PATTERN">
+                    <param name="pattern" value="&quot;%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.pattern-formatter:subsystem=logging,pattern-formatter=COLOR-PATTERN">
+                    <param name="pattern" value="&quot;%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n&quot;"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="pattern-formatter" value="COLOR-PATTERN"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.console-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.console-handler:subsystem=logging,console-handler=CONSOLE">
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="COLOR-PATTERN"/>
+                    <param name="level" value="INFO"/>
+                    <param name="console-handler" value="CONSOLE"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.periodic-rotating-file-handler">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.periodic-rotating-file-handler:subsystem=logging,periodic-rotating-file-handler=FILE">
+                    <param name="autoflush" value="true"/>
+                    <param name="periodic-rotating-file-handler" value="FILE"/>
+                    <param name="file" value="{relative-to=jboss.server.log.dir,path=server.log}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="logging"/>
+                    <param name="named-formatter" value="PATTERN"/>
+                    <param name="suffix" value=".yyyy-MM-dd"/>
+                    <param name="append" value="true"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.logger">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.arjuna">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.arjuna"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=com.networknt.schema">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="com.networknt.schema"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=io.jaegertracing.Configuration">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="io.jaegertracing.Configuration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=org.jboss.as.config">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="DEBUG"/>
+                    <param name="logger" value="org.jboss.as.config"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.logger:subsystem=logging,logger=sun.rmi">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="WARN"/>
+                    <param name="logger" value="sun.rmi"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.logging.root-logger.ROOT">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.logging.root-logger.ROOT:subsystem=logging,root-logger=ROOT">
+                    <param name="subsystem" value="logging"/>
+                    <param name="level" value="INFO"/>
+                    <param name="handlers" value="[CONSOLE, FILE]"/>
+                    <param name="root-logger" value="ROOT"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.core-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.core-management:subsystem=core-management">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="core-management"/>
+                    <param name="extension" value="org.wildfly.extension.core-management"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.request-controller">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.request-controller:subsystem=request-controller">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="request-controller"/>
+                    <param name="extension" value="org.wildfly.extension.request-controller"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager:subsystem=security-manager">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="extension" value="org.wildfly.extension.security.manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.security-manager.deployment-permissions.default">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.security-manager.deployment-permissions.default:deployment-permissions=default,subsystem=security-manager">
+                    <param name="deployment-permissions" value="default"/>
+                    <param name="subsystem" value="security-manager"/>
+                    <param name="maximum-permissions" value="[{class=java.security.AllPermission}]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions:subsystem=transactions">
+                    <param name="extension" value="org.jboss.as.transactions"/>
+                    <param name="socket-binding" value="txn-recovery-environment"/>
+                    <param name="node-identifier" value="${jboss.tx.node.id:1}"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="object-store-path" value="tx-object-store"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="process-id-uuid" value="true"/>
+                    <param name="object-store-relative-to" value="jboss.server.data.dir"/>
+                    <param name="statistics-enabled" value="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="status-socket-binding" value="txn-status-manager"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.transactions.log-store.log-store">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.transactions.log-store.log-store:log-store=log-store,subsystem=transactions">
+                    <param name="log-store" value="log-store"/>
+                    <param name="subsystem" value="transactions"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca:subsystem=jca">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.archive-validation.archive-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.archive-validation.archive-validation:subsystem=jca,archive-validation=archive-validation">
+                    <param name="fail-on-warn" value="false"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="archive-validation" value="archive-validation"/>
+                    <param name="fail-on-error" value="true"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bean-validation.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bean-validation.bean-validation:subsystem=jca,bean-validation=bean-validation">
+                    <param name="subsystem" value="jca"/>
+                    <param name="bean-validation" value="bean-validation"/>
+                    <param name="enabled" value="true"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.cached-connection-manager.cached-connection-manager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.cached-connection-manager.cached-connection-manager:subsystem=jca,cached-connection-manager=cached-connection-manager">
+                    <param name="subsystem" value="jca"/>
+                    <param name="install" value="true"/>
+                    <param name="cached-connection-manager" value="cached-connection-manager"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager:subsystem=jca,workmanager=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.short-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.short-running-threads.keepalive-time:subsystem=jca,short-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="short-running-threads" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="max-threads" value="50"/>
+                    <param name="core-threads" value="50"/>
+                    <param name="queue-length" value="50"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.workmanager.long-running-threads.keepalive-time">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.workmanager.long-running-threads.keepalive-time:subsystem=jca,long-running-threads=default,workmanager=default">
+                    <param name="subsystem" value="jca"/>
+                    <param name="long-running-threads" value="default"/>
+                    <param name="unit" value="SECONDS"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="time" value="10"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jca.bootstrap-context">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jca.bootstrap-context:subsystem=jca,bootstrap-context=default">
+                    <param name="name" value="default"/>
+                    <param name="subsystem" value="jca"/>
+                    <param name="bootstrap-context" value="default"/>
+                    <param name="workmanager" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources:subsystem=datasources">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.jdbc-driver">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.jdbc-driver:jdbc-driver=h2,subsystem=datasources">
+                    <param name="subsystem" value="datasources"/>
+                    <param name="driver-name" value="h2"/>
+                    <param name="driver-xa-datasource-class-name" value="org.h2.jdbcx.JdbcDataSource"/>
+                    <param name="jdbc-driver" value="h2"/>
+                    <param name="driver-module-name" value="com.h2database.h2"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.datasources.data-source">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.datasources.data-source:data-source=ExampleDS,subsystem=datasources">
+                    <param name="driver-name" value="h2"/>
+                    <param name="password" value="sa"/>
+                    <param name="use-java-context" value="true"/>
+                    <param name="connection-url" value="&quot;jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}&quot;"/>
+                    <param name="user-name" value="sa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                    <param name="data-source" value="ExampleDS"/>
+                    <param name="subsystem" value="datasources"/>
+                    <param name="statistics-enabled" value="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <param name="enabled" value="true"/>
+                    <param name="jndi-name" value="java:jboss/datasources/ExampleDS"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jaxrs">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jaxrs:subsystem=jaxrs">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jaxrs"/>
+                    <param name="extension" value="org.jboss.as.jaxrs"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.weld">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.weld:subsystem=weld">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="weld"/>
+                    <param name="extension" value="org.jboss.as.weld"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.bean-validation">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.bean-validation:subsystem=bean-validation">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="bean-validation"/>
+                    <param name="extension" value="org.wildfly.extension.bean-validation"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.jpa">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.jpa:subsystem=jpa">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="jpa"/>
+                    <param name="default-extended-persistence-inheritance" value="DEEP"/>
+                    <param name="extension" value="org.jboss.as.jpa"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan:subsystem=infinispan">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="extension" value="org.jboss.as.clustering.infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=hibernate,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="JBOSS"/>
+                    <param name="modules" value="[org.infinispan.hibernate-cache]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=entity,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=entity,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=entity,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="entity"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=local-query,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="max-idle" value="100000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.memory.heap">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.memory.heap:cache-container=hibernate,local-cache=local-query,subsystem=infinispan,memory=heap">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="local-query"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="memory" value="heap"/>
+                    <param name="size" value="10000"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=timestamps,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="timestamps"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=hibernate,local-cache=pending-puts,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="hibernate"/>
+                    <param name="local-cache" value="pending-puts"/>
+                    <param name="max-idle" value="60000"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container:cache-container=web,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="marshaller" value="PROTOSTREAM"/>
+                    <param name="default-cache" value="passivation"/>
+                    <param name="modules" value="[org.wildfly.clustering.web.infinispan]"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=passivation,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache:cache-container=web,local-cache=sso,subsystem=infinispan">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=passivation,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.store.file">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.store.file:cache-container=web,local-cache=passivation,subsystem=infinispan,store=file">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="passivation"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="passivation" value="true"/>
+                    <param name="store" value="file"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.infinispan.cache-container.local-cache.component.expiration">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.infinispan.cache-container.local-cache.component.expiration:cache-container=web,local-cache=sso,subsystem=infinispan,component=expiration">
+                    <param name="cache-container" value="web"/>
+                    <param name="local-cache" value="sso"/>
+                    <param name="subsystem" value="infinispan"/>
+                    <param name="component" value="expiration"/>
+                    <param name="interval" value="0"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.ee-security">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.ee-security:subsystem=ee-security">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="ee-security"/>
+                    <param name="extension" value="org.wildfly.extension.ee-security"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.resource-adapters">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.resource-adapters:subsystem=resource-adapters">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="resource-adapters"/>
+                    <param name="extension" value="org.jboss.as.connector"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.messaging-activemq">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.messaging-activemq:subsystem=messaging-activemq">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="messaging-activemq"/>
+                    <param name="extension" value="org.wildfly.extension.messaging-activemq"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.metrics">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.metrics:subsystem=metrics">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="metrics"/>
+                    <param name="extension" value="org.wildfly.extension.metrics"/>
+                    <param name="exposed-subsystems" value="[*]"/>
+                    <param name="prefix" value="${wildfly.metrics.prefix:wildfly}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.health">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.health:subsystem=health">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="health"/>
+                    <param name="extension" value="org.wildfly.extension.health"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.microprofile-config-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-config-smallrye:subsystem=microprofile-config-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-config-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.config-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.opentelemetry">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.opentelemetry:subsystem=opentelemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="opentelemetry"/>
+                    <param name="extension" value="org.wildfly.extension.opentelemetry"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-telemetry">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-telemetry:subsystem=microprofile-telemetry">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-telemetry"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.telemetry"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-health-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-health-smallrye:subsystem=microprofile-health-smallrye">
+                    <param name="extension" value="org.wildfly.extension.microprofile.health-smallrye"/>
+                    <param name="empty-startup-checks-status" value="${env.MP_HEALTH_EMPTY_STARTUP_CHECKS_STATUS:UP}"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-health-smallrye"/>
+                    <param name="empty-liveness-checks-status" value="${env.MP_HEALTH_EMPTY_LIVENESS_CHECKS_STATUS:UP}"/>
+                    <param name="empty-readiness-checks-status" value="${env.MP_HEALTH_EMPTY_READINESS_CHECKS_STATUS:UP}"/>
+                    <param name="security-enabled" value="false"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-fault-tolerance-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-fault-tolerance-smallrye:subsystem=microprofile-fault-tolerance-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-fault-tolerance-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-jwt-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-jwt-smallrye:subsystem=microprofile-jwt-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-jwt-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.jwt-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.microprofile-openapi-smallrye">
+                <feature id="{wildfly@maven(org.jboss.universe:community-universe)}subsystem.microprofile-openapi-smallrye:subsystem=microprofile-openapi-smallrye">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="microprofile-openapi-smallrye"/>
+                    <param name="extension" value="org.wildfly.extension.microprofile.openapi-smallrye"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <spec name="subsystem.elytron-oidc-client">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.elytron-oidc-client:subsystem=elytron-oidc-client">
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="elytron-oidc-client"/>
+                    <param name="extension" value="org.wildfly.extension.elytron-oidc-client"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web:subsystem=distributable-web">
+                    <param name="default-session-management" value="default"/>
+                    <param name="host" value="GLN_UNDEFINED"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="extension" value="org.wildfly.extension.clustering.web"/>
+                    <param name="default-single-sign-on-management" value="default"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.routing.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.routing.local:subsystem=distributable-web,routing=local">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="routing" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management:subsystem=distributable-web,infinispan-session-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="granularity" value="SESSION"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-single-sign-on-management">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-single-sign-on-management:subsystem=distributable-web,infinispan-single-sign-on-management=default">
+                    <param name="cache-container" value="web"/>
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-single-sign-on-management" value="default"/>
+                    <param name="cache" value="sso"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+            <spec name="subsystem.distributable-web.infinispan-session-management.affinity.local">
+                <feature id="{wildfly-ee@maven(org.jboss.universe:community-universe)}subsystem.distributable-web.infinispan-session-management.affinity.local:subsystem=distributable-web,infinispan-session-management=default,affinity=local">
+                    <param name="subsystem" value="distributable-web"/>
+                    <param name="infinispan-session-management" value="default"/>
+                    <param name="affinity" value="local"/>
+                    <param name="profile" value="GLN_UNDEFINED"/>
+                </feature>
+            </spec>
+        </feature-pack>
+    </config>
+</installation>
\ No newline at end of file
diff --git a/wildfly/.galleon/provisioning.xml b/wildfly/.galleon/provisioning.xml
new file mode 100644
index 0000000..6ea2f73
--- /dev/null
+++ b/wildfly/.galleon/provisioning.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" ?>
+
+<installation xmlns="urn:jboss:galleon:provisioning:3.0">
+    <transitive>
+        <feature-pack location="wildfly-ee@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+            <packages>
+                <include name="docs.examples.configs"/>
+            </packages>
+        </feature-pack>
+    </transitive>
+    <feature-pack location="wildfly@maven(org.jboss.universe:community-universe):current#34.0.0.Beta1">
+        <packages>
+            <include name="docs.examples.configs"/>
+        </packages>
+    </feature-pack>
+    <options>
+        <option name="jboss-fork-embedded" value="true"/>
+    </options>
+</installation>
\ No newline at end of file
diff --git a/wildfly/LICENSE.txt b/wildfly/LICENSE.txt
new file mode 100644
index 0000000..f49a4e1
--- /dev/null
+++ b/wildfly/LICENSE.txt
@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
\ No newline at end of file
diff --git a/wildfly/README.txt b/wildfly/README.txt
new file mode 100644
index 0000000..b168a5f
--- /dev/null
+++ b/wildfly/README.txt
@@ -0,0 +1,78 @@
+Welcome to WildFly (formerly known as JBoss Application Server)
+http://www.wildfly.org/
+
+Go to the above link for documentation, and additional downloads.
+
+Also, once WildFly is started you can go to http://localhost:8080/
+for additional information.
+
+
+Key Features
+------------
+* Jakarta EE support
+* MicroProfile support
+* Fast Startup
+* Small Footprint
+* Modular Design
+* Unified Configuration and Management
+* Distributed Domain Management
+
+Release Notes
+-------------
+You can obtain release notes here:
+
+http://wildfly.org/releases
+
+Getting Started
+---------------
+WildFly requires JDK 11 or later. For information regarding installation
+of the JDK, see http://www.oracle.com/technetwork/java/index.html
+
+WildFly has two modes of operation: Standalone and Domain. For more
+information regarding these modes, please refer to the documentation 
+available on the WildFly documentation site:
+
+http://docs.wildfly.org
+
+
+Starting a Standalone Server
+----------------------------
+A WildFly standalone server runs a single instance.
+
+<JBOSS_HOME>/bin/standalone.sh      (Unix / Linux)
+
+<JBOSS_HOME>\bin\standalone.bat     (Windows)
+
+
+Starting a Managed Domain
+-------------------------
+A WildFly managed domain allows you to control and configure multiple instances,
+potentially across several physical (or virtual) machines. The default 
+configuration includes a domain controller and a single server group with three 
+servers (two of which start automatically), all running on the localhost.
+
+<JBOSS_HOME>/bin/domain.sh      (Unix / Linux)
+
+<JBOSS_HOME>\bin\domain.bat     (Windows)
+ 
+
+Accessing the Web Console
+-------------------------
+Once the server has started you can access the landing page:
+
+http://localhost:8080/
+
+This page includes links to online documentation, quick start guides, forums 
+and the administration console.
+
+
+Stopping the Server
+-------------------
+A WildFly server can be stopped by pressing Ctrl-C on the command line.
+If the server is running in a background process, the server can be stopped
+using the JBoss CLI:
+
+<JBOSS_HOME>/bin/jboss-cli.sh --connect --command=shutdown      (Unix / Linux)
+
+<JBOSS_HOME>\bin\jboss-cli.bat --connect --command=shutdown     (Windows)
+
diff --git a/wildfly/appclient/configuration/appclient.xml b/wildfly/appclient/configuration/appclient.xml
new file mode 100644
index 0000000..c6426e0
--- /dev/null
+++ b/wildfly/appclient/configuration/appclient.xml
@@ -0,0 +1,169 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<server xmlns="urn:jboss:domain:20.0">
+
+    <extensions>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:7.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="appclient.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%E%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0" />
+        <subsystem xmlns="urn:jboss:domain:datasources:5.0">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE</connection-url>
+                    <driver>h2</driver>
+		    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:4.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <jboss-descriptor-property-replacement>true</jboss-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default" use-transaction-setup-provider="true"/>
+                </context-services>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-threshold="60000" core-threads="5" max-threads="25" keepalive-time="5000" />
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-threshold="60000" core-threads="2" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default"
+                              datasource="java:jboss/datasources/ExampleDS"
+                              managed-executor-service="java:jboss/ee/concurrency/executor/default"
+                              managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default"
+                              managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ejb3:5.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:17.0" final-providers="elytron" disallowed-providers="OracleUcrypto">
+            <providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+            </providers>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:2.1">
+            <orb socket-binding="iiop"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jca:5.0">
+            <archive-validation enabled="false" />
+            <bean-validation enabled="true" />
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-datasource=""/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0"/>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:15.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:5.0">
+            <core-environment>
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment default-timeout="300"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <wsdl-port>8080</wsdl-port>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+
+    <interfaces>
+        <interface name="public">
+           <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+
+    <socket-binding-group name="standard-sockets" default-interface="public">
+        <socket-binding name="iiop" port="3628"/>
+        <socket-binding name="iiop-ssl" port="3629"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+    </socket-binding-group>
+
+</server>
diff --git a/wildfly/appclient/configuration/logging.properties b/wildfly/appclient/configuration/logging.properties
new file mode 100644
index 0000000..6f8274f
--- /dev/null
+++ b/wildfly/appclient/configuration/logging.properties
@@ -0,0 +1,42 @@
+#
+# Copyright The WildFly Authors
+# SPDX-License-Identifier: Apache-2.0
+#
+
+# Additional loggers to configure (the root logger is always configured)
+loggers=jacorb,com.arjuna,jacorb.config,sun.rmi
+
+logger.level=INFO
+logger.handlers=CONSOLE,FILE
+
+logger.com.arjuna.level=WARN
+logger.com.arjuna.useParentHandlers=true
+
+logger.sun.rmi.level=WARN
+logger.sun.rmi.useParentHandlers=true
+
+handler.CONSOLE=org.jboss.logmanager.handlers.ConsoleHandler
+handler.CONSOLE.level=INFO
+handler.CONSOLE.formatter=CONSOLE
+handler.CONSOLE.properties=autoFlush,target
+handler.CONSOLE.autoFlush=true
+handler.CONSOLE.target=SYSTEM_OUT
+
+handler.FILE=org.jboss.logmanager.handlers.PeriodicRotatingFileHandler
+handler.FILE.level=INFO
+handler.FILE.formatter=FILE
+handler.FILE.properties=autoFlush,append,fileName,suffix
+handler.FILE.constructorProperties=fileName,append
+handler.FILE.autoFlush=true
+handler.FILE.append=true
+handler.FILE.fileName=${org.jboss.boot.log.file:boot.log}
+handler.FILE.suffix=.yyyy-MM-dd
+
+formatter.CONSOLE=org.jboss.logmanager.formatters.PatternFormatter
+formatter.CONSOLE.properties=pattern
+formatter.CONSOLE.pattern=%K{level}%d{HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%E%n
+
+formatter.FILE=org.jboss.logmanager.formatters.PatternFormatter
+formatter.FILE.properties=pattern
+formatter.FILE.constructorProperties=pattern
+formatter.FILE.pattern=%d{yyyy-MM-dd HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%E%n
diff --git a/wildfly/copyright.txt b/wildfly/copyright.txt
new file mode 100644
index 0000000..beb1a20
--- /dev/null
+++ b/wildfly/copyright.txt
@@ -0,0 +1,519 @@
+Aaron Ogburn <aogburn@redhat.com>
+Adam Kovari <akovari@redhat.com>
+Adam Krajcik <akrajcik@redhat.com>
+Akram <akram@free.fr>
+Aleksandar Kostadinov <akostadi@redhat.com>
+Ales Justin <ales.justin@gmail.com>
+Alessio Soldano <alessio.soldano@jboss.com>
+Alessio Soldano <asoldano@redhat.com>
+Alexander Yerenkow <yerenkow@gmail.com>
+Alexey <alex@jboss.org>
+Alexey Loubyansky <alex@jboss.org>
+Alexey Loubyansky <loubyansky@gmail.com>
+Alexey Loubyansky <olubyans@redhat.com>
+Alexey Loubyansky <olubyans@tstudio.(none)>
+Alexey Makhmutov <makhmutov@netcracker.com>
+Alexis Hassler <alexis@sewatech.org>
+Amos Feng <zfeng@redhat.com>
+Andrej Golovnin <andrej.golovnin@googlemail.com>
+Andrew Dinn <adinn@redhat.com>
+Andrew Lee Rubinger <alr@alrubinger.com>
+Andrew Lee Rubinger <alr@jboss.org>
+André Dietisheim <adietish@redhat.com>
+Andy Taylor <ataylor@redhat.com>
+Anil Saldhana <Anil.Saldhana@jboss.com>
+Anil Saldhana <anil.saldhana@jboss.com>
+Antti Laisi <alaisi@iki.fi>
+Ashley Abdel-Sayed <aabdelsa@redhat.com>
+Aslak Knutsen <aslak@redhat.com>
+Aurel Pintea <apintea@redhat.com>
+Bartosz Baranowski <bbaranow@redhat.com>
+Bartosz Spyrko-Smietanko <bspyrkos@redhat.com>
+Benjamin Thompson <bjt@rabidquill.com>
+Bernard Tison <bernard.tison@gmail.com>
+Bernd Eckenfels <bernd-2012@eckenfels.net>
+Bernd Eckenfels <bernd@eckenfels.net>
+Bill Burke <bburke@redhat.com>
+Bob McWhirter <bob@mcwhirter.org>
+Brad Maxwell <bmaxwell@redhat.com>
+Brandon Gaisford <bgaisford@punagroup.com>
+Brent Douglas <brent.n.douglas@gmail.com>
+Brian Stansberry <brian.stansberry@jboss.com>
+Brian Stansberry <brian.stansberry@redhat.com>
+Brian Stansberry <bstansberry@jboss.com>
+Bruno Litman <blitman@egov.com>
+Bryan Brouckaert <info@egelke.net>
+Carlo de Wolf <carlo@nerdnet.nl>
+Carlo de Wolf <cdewolf@redhat.com>
+Chao Wang <chaowan@redhat.com>
+ChaoWang <chaowan@redhat.com>
+Cheng Fang <2079251+chengfang@users.noreply.github.com>
+Cheng Fang <cfang@redhat.com>
+Chris Laprun <metacosm@gmail.com>
+Chris Lowe <chris.lowe.uk@gmail.com>
+Claudio Miranda <claudio@claudius.com.br>
+Clebert Suconic <clebertsuconic@apache.org>
+Dan Allen <dan.j.allen@gmail.com>
+Danesh Mondegarian <dmondega@redhat.com>
+Daniel Bevenius <daniel.bevenius@redpill-linpro.com>
+Daniel Cihak <dcihak@redhat.com>
+Daniel Sachse <sachsedaniel@gmail.com>
+Daniel Straub <ds@ctrlaltdel.de>
+Daniel Šimko <dsimko@redhat.com>
+Darran Lofthouse <darran.lofthouse@jboss.com>
+Dave Stahl <dstahl@redhat.com>
+David Bosschaert <david.bosschaert@gmail.com>
+David Lloyd <david@wraith.home.flurg.com>
+David M. Lloyd <david.lloyd@redhat.com>
+David M. Lloyd <dmlloyd@flurg.com>
+David Salter <david.salter@outlook.com>
+David Santos <dawuid@gmail.com>
+Dennis Reed <dereed@redhat.com>
+Derek Horton <dehort@redhat.com>
+Dimitris Andreadis <dandread@redhat.com>
+Dimitris Andreadis <dimitris@jboss.org>
+Dimitris Andreadis <dimitris@redhat.com>
+Dmitrii Tikhomirov <dtikhomi@redhat.com>
+Dmitriy Sukharev <sukharevd@gmail.com>
+Dominic Cleal <dcleal@redhat.com>
+Dominik Pospisil <dpospisi@redhat.com>
+Dustin Kut <dcheung@redhat.com>
+Dustin Kut Moy Cheung <dcheung@redhat.com>
+Eduardo Martins <emartins.redhat@gmail.com>
+Eduardo Martins <emartins@redhat.com>
+Eduardo Sant'Ana da Silva <eduardo.santanadasilva@gmail.com>
+Eduardo Sant´Ana da Silva <eduardo.santanadasilva@gmail.com>
+Edward Wertz <ewertz@redhat.com>
+Emanuel Muckenhuber <emuckenh@redhat.com>
+Emmanuel Hugonnet <ehsavoie@users.noreply.github.com>
+Emmanuel Hugonnet <ehugonne@redhat.com>
+Emmanuel Hugonnet <emmanuel.hugonnet+gitkraken@gmail.com>
+Emmanuel Hugonnet <emmanuel.hugonnet@gmail.com>
+Emmanuel Hugonnet <emmanuel.hugonnet@silverpeas.com>
+Enrique Gonzalez Martinez <egonzale@egonzale.remote.csb>
+Enrique Gonzalez Martinez <egonzale@redhat.com>
+Erhard Siegl <esiegl@devjava.localdomain>
+Farah Juma <fjuma@redhat.com>
+Fernando Nasser <fnasser@redhat.com>
+Fernando Ribeiro <fernando.ribeiro@upic.com.br>
+Filip Bogyai <fbogyai@redhat.com>
+Filipe <filipepferraz@gmail.com>
+Filippe Spolti <fspolti@redhat.com>
+Firstname Lastname <ike.braun@googlemail.com>
+Flavia <frainone@redhat.com>
+Flavia Rainone <flavia.rainone@jboss.com>
+Flavia Rainone <frainone@redhat.com>
+Flemming Harms <fharms@Doctor-Who.(none)>
+Flemming Harms <flemming.harms@gmail.com>
+Frank Langelage <Frank Langelage>
+Frank Langelage <Frank.Langelage@osnanet.de>
+Frank Langelage <frank.langelage@osnanet.de>
+G. Ann Campbell <ann.campbell@sonarsource.com>
+Gail Badner <gbadner@redhat.com>
+Galder Zamarreño <galder@zamarreno.com>
+George Gastaldi <gegastaldi@gmail.com>
+Gonthim <ewertz@redhat.com>
+Guillaume Grossetie <g.grossetie@gmail.com>
+Guillaume Smet <guillaume.smet@gmail.com>
+Gunnar Morling <gunnar.morling@googlemail.com>
+Gytis Trikleris <gytis@redhat.com>
+Gytis Trikleris <gytist@gmail.com>
+Harald Pehl <harald.pehl@gmail.com>
+Hardy Ferentschik <hardy@ferentschik.de>
+Hardy Ferentschik <hardy@hibernate.org>
+Hayk Hovsepyan <hhovsepy@redhat.com>
+Heiko Braun <ike.braun@googlemail.com>
+Heiko W. Rupp <hwr@pilhuhn.de>
+Hisanobu Okuda <hisanobu.okuda@gmail.com>
+Honza Brázdil <jbrazdil@redhat.com>
+Howard Gao <hgao@redhat.com>
+Hoyt Summers Pittman <secondsun@gmail.com>
+Hynek Mlnarik <hmlnarik@redhat.com>
+Hynek Svabek <hsvabek@redhat.com>
+Ilia Vassilev <ivassile@redhat.com>
+Ingo Weiss <ingo@hoffmann.cx>
+Ingo Weiss <ingo@redhat.com>
+Ivan Straka <istraka@redhat.com>
+Ivo Studensky <istudens@redhat.com>
+JF Denise <jdenise@redhat.com>
+Jaikiran <jaikiran.pai@gmail.com>
+Jaikiran Pai <jaikiran.pai@gmail.com>
+Jakub Cechacek <jcechace@redhat.com>
+James Livingston <jlivings@redhat.com>
+James Netherton <jamesnetherton@gmail.com>
+James Perkins <jperkins@redhat.com>
+James Perkins <jrperkinsjr@gmail.com>
+James R. Perkins <jperkins@redhat.com>
+Jan Bliznak <jbliznak@redhat.com>
+Jan Kalina <jkalina@redhat.com>
+Jan Kasik <jkasik@redhat.com>
+Jan Lanik <jlanik@jnotes.redhat>
+Jan Lanik <jlanik@redhat.com>
+Jan Martiska <jmartisk@redhat.com>
+Jan Stourac <jstourac@redhat.com>
+Jan Tymel <jtymel@dhcp-4-212.brq.redhat.com>
+Jan Tymel <jtymel@redhat.com>
+Jan-Willem Gmelig Meyling <jan-willem@youngmediaexperts.nl>
+Jason T. Greene <jason.greene@redhat.com>
+Jason T. Greene <jason@stacksmash.com>
+Jason Tedor <jason@tedor.me>
+Jay SenSharma <joy.sensharma@gmail.com>
+Jay SenSharma <jsensharma@dhcp223-76.pnq.redhat.com>
+Jean-Francois Denise <jfdenise@gmail.com>
+Jean-Frederic Clere <jfclere@gmail.com>
+Jean-Frederic Clere <jfclere@jfcpc.(none)>
+Jeff Mesnil <jmesnil@gmail.com>
+Jeff Mesnil <jmesnil@redhat.com>
+Jeff Zhang <jeff.zhang@jboss.org>
+Jeremy Whiting <jwhiting@redhat.com>
+Jesper Pedersen <jesper.pedersen@jboss.org>
+Jesper Pedersen <jesper.pedersen@redhat.com>
+Jesse Jaggars <jhjaggars@gmail.com>
+Jesse Jaggars <jjaggars@redhat.com>
+Jesse Sightler <jesse.sightler@gmail.com>
+Jesse Sightler <jsightle@redhat.com>
+Jim Cheesman <jim.cheesman.work@gmail.com>
+Jim Ma <ema@redhat.com>
+Jiri Bilek <jbilek@redhat.com>
+JiriOndrusek <jondruse@redhat.com>
+Joakim Olsson <joakim@unbound.se>
+Joe Wertz <ewertz@redhat.com>
+Joerg Baesner <jbaesner@redhat.com>
+John Bailey <baileyje@gmail.com>
+John E. Bailey <baileyje@gmail.com>
+John E. Bailey <jbailey@redhat.com>
+John O'Hara <johara@redhat.com>
+John O'Hara <johnaohara80@gmail.com>
+Jonathan Halliday <jonathan.halliday@redhat.com>
+Jonathan Pearlin <jdp.grails.dev@gmail.com>
+Jorge Solorzano <jorsol@gmail.com>
+Josef Cacek <josef.cacek@gmail.com>
+Josh Kinlaw <jkinlaw@redhat.com>
+Jozef Hartinger <jharting@redhat.com>
+Juan Hernandez <juan.hernandez@redhat.com>
+Juergen Zimmermann <Juergen.Zimmermann (at) HS-Karlsruhe.de>
+Juraci Paixão Kröhling <juraci@kroehling.de>
+Justin Bertram <jbertram@redhat.com>
+Justin Cook <jucook@redhat.com>
+Kabir Khan <kkhan@redhat.com>
+Karel Piwko <kpiwko@redhat.com>
+Karl Pietrzak <kpietrzak@mimeya.com>
+Katka Novotna <kanovotn@redhat.com>
+Ken Wills <ken@zaptillion.net>
+Kirill Paliy <kirill.paliy@gmail.com>
+Krzysztof Rzymkowski <rzymek@gmail.com>
+Kurt Stam <kurt.stam@gmail.com>
+Kurt Stam <kurt@osconsulting.org>
+Kyle Lape <kyle.lape@redhat.com>
+Ladislav Thon <ladicek@gmail.com>
+Ladislav Thon <lthon@redhat.com>
+Libor Krzyžanek <libor@krzyzanek.com>
+Lin Gao <aoingl@gmail.com>
+Lin Gao <lgao@redhat.com>
+Luka <luka@evriala.net>
+Luka Furlan <luka@evriala.net>
+Lukas Krejci <lkrejci@redhat.com>
+Maas van den Berg <maasvdberg@gmail.com>
+Madhumita Sadhukhan <madhumita.sadhukhan@gmail.com>
+Maksim Karavaev <maxoid@mail.ru>
+Manuel Fehlhammer <fehlhammer@gmx.de>
+Marcel Šebek <sebek@ttc.cz>
+Marcus Moyses <marcus.moyses@gmail.com>
+Marcus Moyses <mmoyses@redhat.com>
+Marek Goldmann <marek.goldmann@gmail.com>
+Marek Goldmann <mgoldman@redhat.com>
+Marek Kopecky <mkopecky@redhat.com>
+Marek Marusic <marek.marusic@gmail.com>
+Marek Novotný <hotmana76@gmail.com>
+Marek Schmidt <maschmid@redhat.com>
+Marius Bogoevici <marius.bogoevici@gmail.com>
+Mark Torres <mtorres@reliancefirstcapital.com>
+Marko Luksa <marko.luksa@gmail.com>
+Marko Strukelj <marko.strukelj@gmail.com>
+Markus Gaisbauer <markus.gaisbauer@gmail.com>
+Martin <martinschaef@gmail.com>
+Martin Choma <mchoma@192.168.0.103>
+Martin Choma <mchoma@ibm-p8-kvm-08-fsp.mgmt.lab.eng.rdu2.redhat.com>
+Martin Choma <mchoma@localhost.localdomain>
+Martin Choma <mchoma@redhat.com>
+Martin Gencur <mgencur@redhat.com>
+Martin Kouba <mkouba@redhat.com>
+Martin Mazanek <mmazanek@redhat.com>
+Martin Mazanek <nekdozjam@gmail.com>
+Martin Minar <mminar@redhat.com>
+Martin Simka <msimka@redhat.com>
+Masafumi Miura <mmiura@redhat.com>
+Matej Briskar <mbriskar@redhat.com>
+Matej Novotny <manovotn@redhat.com>
+Mathieu Lachance <mathieu@mathieulachance.com>
+Matthew King <king12813@gmail.com>
+Matthias Berndt <mb.systemtrap@gmail.com>
+Matthieu Brouillard <matthieu.brouillard@agfa.com>
+Mattias Nilsson Grip <mattias.nilsson.grip@redpill-linpro.com>
+Matus Abaffy <maabaffy@redhat.com>
+Matus Madzin <mmadzin@redhat.com>
+Max Rydahl Andersen <max@jboss.org>
+Maxim Karavaev <karavaev@magenta-technology.ru>
+Michael Bannister <github@michaelbannister.co.uk>
+Michael Edgar <michael@xlate.io>
+Michael Levin <kinnetica@gmail.com>
+Michael Musgrove <mmusgrov@redhat.com>
+Michal Jurc <mjurc@redhat.com>
+Michal Karm Babacek <karm@redhat.com>
+Michal Petrov <mpetrov@redhat.com>
+Michal Vinkler <mvinkler@redhat.com>
+Mike Dobozy <dobozysaurus@gmail.com>
+Mike M. Clark <miclark@redhat.com>
+Miroslav Novak <mnovak@redhat.com>
+Mladen Turk <mturk@redhat.com>
+Moulali Shikalwadi <mshikalw@mshikalw.pnq.csb>
+MrEasy <mreasy@gmx.net>
+Navin Surtani <nsurtani@redhat.com>
+Nikoleta Ziakova <nziakova@redhat.com>
+Norito Agetsuma <norito.agetsuma@gmail.com>
+ORDTesters <ordtesters@gmail.com>
+Oleg Kulikov <oleg.kulikoff@gmail.com>
+Ondra Chaloupka <ochaloup@redhat.com>
+OndraZizka <zizka@seznam.cz>
+Ondrej Chaloupka <ochaloup@redhat.com>
+Ondrej Kotek <okotek@redhat.com>
+Ondrej Lukas <olukas@redhat.com>
+Ondrej Zizka <ozizka@redhat.com>
+Ondrej Zizka <zizka@seznam.cz>
+Osamu Nagano <onagano@redhat.com>
+Oved Ourfali <ovedo@redhat.com>
+Panagiotis Sotiropoulos <psotirop@redhat.com>
+Patrick Reinhart <patrick.reinhart@bison-group.com>
+Paul Ferraro <paul.ferraro@redhat.com>
+Paul Ferraro <paul@T520.(none)>
+Paul Gier <pgier@redhat.com>
+Paul Robinson <paul.robinson@redhat.com>
+Paul Robinson <paul@Pauls-MacBook-Air.local>
+Pavel Janoušek <pjanouse@redhat.com>
+Pavel Jelinek <pjelinek@redhat.com>
+Pedro Igor <pedroigor@gmail.com>
+Pedro Igor <pigor.craveiro@gmail.com>
+Pelisse Romain <belaran@redhat.com>
+Pete Muir <pmuir@bleepbleep.org.uk>
+Peter Mačkay <pmackay@redhat.com>
+Peter Palaga <ppalaga@redhat.com>
+Peter Skopek <pskopek@redhat.com>
+Peter Weldon <peter.weldon@null.net>
+Petr Adamec <padamec@redhat.com>
+Petr Jurak <pjurak@redhat.com>
+Petr Kremensky <pkremens@redhat.com>
+Petr Sakař <psakar@redhat.com>
+Philippe Marschall <philippe.marschall@gmail.com>
+Pieter Bos <pieter.bos@nedap.com>
+Pëtr Andreev <petrandreev@aol.com>
+R Searls <rsearls@redhat.com>
+Radim Hatlapatka <rhatlapa@redhat.com>
+Radoslav Husar <radosoft@gmail.com>
+Radoslav Husar <rhusar@syrah.local>
+Radovan STANCEL <rstancel@redhat.com>
+Radovan Stancel <rstancel@redhat.com>
+Rafał Osiecki <metempsychoza@wp.pl>
+Rainer Schamm <rschamm@rogueware.org>
+Ralf Battenfeld <ralf.battenfeld@bluewin.ch>
+Remy Maucherat <rmaucher@redhat.com>
+Ricardo Arguello <ricardo.arguello@gmail.com>
+Riccardo Pasquini <rick@myPenguin.site>
+Richard Achmatowicz <rachmato@redhat.com>
+Richard Achmatowicz <rachmatowicz@jboss.com>
+Richard Janík <rjanik@redhat.com>
+Richard Opalka <opalka.richard@gmail.com>
+Richard Opalka <ropalka@redhat.com>
+Richard Opálka <opalka.richard@gmail.com>
+Rico Neubauer <r.neubauer@seeburger.de>
+Rob Stryker <rob@oxbeef.net>
+Robert Panzer <Robert.Panzer@wincor-nixdorf.com>
+Robert Reimann <robert.reimann@googlemail.com>
+Roberto Oliveira <rguimara@redhat.com>
+Romain PELISSE <belaran@gmail.com>
+Romain Pelisse <belaran@gmail.com>
+Romain Pelisse <belaran@redhat.com>
+Ron Sigal <rsigal@redhat.com>
+Rostislav Svoboda <rsvoboda@redhat.com>
+Ruben Romero Montes <rromerom@redhat.com>
+Ryan Emerson <remerson@redhat.com>
+Rémy Maucherat <remm@ws.remm.hd.free.fr>
+Rémy Maucherat <rmaucher@redhat.com>
+Sande Gilda <sgilda@redhat.com>
+Sanne Grinovero <sanne@hibernate.org>
+Scott M Stark <scott.stark@jboss.org>
+Scott M Stark <starksm64@gmail.com>
+Scott Marlow <scott.marlow@gmail.com>
+Scott Marlow <smarlow@redhat.com>
+Sean Flanigan <sflaniga@redhat.com>
+Sebastian Laskawiec <sebastian.laskawiec@payu.pl>
+Seth Miller <innerverse@gmail.com>
+Shailendra Kumar Singh <shailendra14k@gmail.com>
+Shay Matasaro <smatasar@redhat.com>
+Shelly McGowan <smcgowan@redhat.com>
+Siamak Sadeghianfar <ssadeghi@redhat.com>
+Simon Strom <simon.strom@gmail.com>
+Simone Gotti <simone.gotti@gmail.com>
+Skye Book <skye.book@gmail.com>
+Slobodan Lazarevski <slobodanl@gmail.com>
+Sriram <sri.kmb@gmail.com>
+Stan Silvert <ssilvert@jboss.com>
+Stan Silvert <ssilvert@redhat.com>
+Stefan Fleiter <stefan.fleiter@web.de>
+Stefan Guilhen <sguilhen@redhat.com>
+Stefan Miklosovic <smikloso@redhat.com>
+Stefano Maestri <maeste@legolas.(none)>
+Stefano Maestri <stefano.maestri@ironjacamar.org>
+Stefano Maestri <stefano.maestri@javalinux.it>
+Stefano Maestri <stefano.maestri@redhat.com>
+Stephen Coy <steve.coy@me.com>
+Steve Ebersole <steve@hibernate.org>
+Stian Thorgersen <stian@redhat.com>
+Stoty <stoty@stoty.hu>
+Strong Liu <stliu@hibernate.org>
+Stuart Douglas <stuart.w.douglas@gmail.com>
+Stuart Douglas <stuart@Stuarts-MacBook-Pro.local>
+Stuart Douglas <stuart@stuart-thinkpad.localdomain>
+Ståle W. Pedersen <stalep@gmail.com>
+Sultan Zhantemirov <szhantem@redhat.com>
+Takayoshi Kimura <tkimura@redhat.com>
+Takayuki Konishi <tkonishi@redhat.com>
+Teresa Miyar <tmiyar@Teresas-MacBook-Pro.local>
+Thomas Diesler <thomas.diesler@jboss.com>
+Tobias Stadler <ts.stadler@gmx.de>
+Toby Crawley <toby@tcrawley.org>
+Tom Fonteyne <tom.fonteyne@redhat.com>
+Tom Jenkinson <tom.jenkinson@redhat.com>
+Tomas Hofman <thofman@redhat.com>
+Tomas Remes <tremes@redhat.com>
+Tomas Terem <tterem@redhat.com>
+Tomasz Adamski <tadamski@redhat.com>
+Tomasz Adamski <tomasz.adamski@outlook.com>
+Tomaz Cerar <tomaz.cerar@gmail.com>
+Tomaz Cerar <tomaz@fedora.localdomain>
+Tomek Adamski <tomek@tomek-desktop.(none)>
+Tomek adamski <tadamski@localhost.localdomain>
+Tommaso Borgato <35226256+tommaso-borgato@users.noreply.github.com>
+Tommy Tynja <tommy.tynja@diabol.se>
+Tommy Tynjä <tommy.tynja@diabol.se>
+Torben Jaeger <torben@jit-central.com>
+Tristan Tarrant <ttarrant@redhat.com>
+Viacheslav Kabanovich <scabanovich@exadel.com>
+Ville Skyttä <ville.skytta@iki.fi>
+Viral Gohel <vrlgohel87@gmail.com>
+Vladimir Dosoudil <dosoudil@redhat.com>
+Vladimir Rastseluev <vrastsel@redhat.com>
+Vojtech Juranek <vjuranek@redhat.com>
+Wang Chao <wangc@dhcp-128-40.nay.redhat.com>
+Weinan Li <l.weinan@gmail.com>
+Weinan Li <weli@redhat.com>
+Weston M. Price <wprice@redhat.com>
+Weston Price <wmprice@gethsemane.local>
+Weston Price <wmprice@redhat.com>
+William Collishaw <williamcollishaw@hotmail.co.uk>
+William DeCoste <bdecoste@william-decostes-macbook-pro-2.local>
+Winfried Wasser <winfried.wasser@kapsch.net>
+Wolf-Dieter Fink <wfink@redhat.com>
+Yaguo Zhou <zhouyaguo@gmail.com>
+Yeray Borges <yborgess@redhat.com>
+Yoann Rodière <yoann@hibernate.org>
+Zbyněk Roubalík <zroubali@redhat.com>
+alexVengrovsk <ovengrovsk@i.ua>
+andreitretyakov <tretyakov.andrei.a@gmail.com>
+andrigtmiller <andy.miller@jboss.com>
+asoldano <alessio.soldano@jboss.com>
+baranowb <baranowb@gmail.com>
+barreiro <lbbbarreiro@gmail.com>
+bayern39 <jardenchen@163.com>
+bayern39 <mchen@redhat.com>
+bbodnar <barnabas.bodnar@ser.de>
+blue61 <ktnagel@gmx.de>
+bmaxwell <bmaxwell@redhat.com>
+bstansberry@jboss.com <brian.stansberry@redhat.com>
+bstansberry@jboss.com <bstansberry@jboss.com>
+carmeloaprile <carmeloaprile@gmail.com>
+clebert suconic <clebert.suconic@gmail.com>
+daniel <ds@ctrlaltdel.de>
+dcihak <dcihak@dhcp-10-40-5-88.brq.redhat.com>
+dcihak <dcihak@redhat.com>
+dds <dmitry.durkin@gmail.com>
+dfj <david.jorm@gmail.com>
+dvilkola <dvilkola@redhat.com>
+ecki <bernd@eckenfels.net>
+emmartins <emartins@redhat.com>
+fharms <fharms@black-pearl>
+fharms <flemming.harms@gmail.com>
+filipepferraz <filipepferraz@gmail.com>
+flemming.harms@gmail.com <flemming.harms@gmail.com>
+fmarchio <francesco@fedora.redhat.com>
+frickeo <olaf.fricke@faulbaum.net>
+gytis <gytis@redhat.com>
+ivassile <ivassile@redhat.com>
+jaikiran <jaikiran.pai@gmail.com>
+jbertram <jbertram@redhat.com>
+jcibik <jcibik@redhat.com>
+jfclere <jfclere@gmail.com>
+jimma <ema@apache.org>
+jimma <ema@redhat.com>
+jimma <mail2jimma@gmail.com>
+jlanik <jlanik@redhat.com>
+joe <ewertz@redhat.com>
+jolee <jolee@redhat.com>
+jorsef <jorsef@jorsef.jp>
+jvdvTechno <jeroen.van.der.vegt@technolution.eu>
+kabir <kkhan@redhat.com>
+kanovotn <kanovotn@redhat.com>
+karavaev <karavaev@magenta-technology.ru>
+khermano <khermano@redhat.com>
+kudrevatykh <alexander@kudrevatykh.com>
+kurobako <wyyyrd@gmail.com>
+londonjbug <london.jbug.demo@gmail.com>
+maasvdberg <maasvdberg@gmail.com>
+maeste <stefano.maestri@ironjacamar.org>
+maximilienw <m.wiktorowski@free.fr>
+mgencur@redhat.com <mgencur@redhat.com>
+mich <orthodox.mich@gmail.com>
+michael <michael@localhost.localdomain>
+mjurc <mjurc@redhat.com>
+mmatloka <mmatloka@gmail.com>
+mmoyses <marcus.moyses@gmail.com>
+mmoyses <mmoyses@redhat.com>
+mmusgrov <mmusgrov@redhat.com>
+mnovak <mnovak@redhat.com>
+mw92.park <mw92.park@samsung.com>
+navssurtani <nsurtani@redhat.com>
+new23d <email@unknown.com>
+ochaloup <ochaloup@redhat.com>
+okremer <ori.kremer+github@gmail.com>
+panossot <psotirop@redhat.com>
+pedroigor <pigor.craveiro@gmail.com>
+pferraro <paul.ferraro@redhat.com>
+pjanouse <pjanouse@redhat.com>
+psharam <parsharm@redhat.com>
+pskopek <pskopek@redhat.com>
+rachmatowicz <rachmato@redhat.com>
+rchakrab <rchakrab@redhat.com>
+remm <rmaucher@redhat.com>
+rmartinc <rmartinc@redhat.com>
+rnetuka <rnetuka@redhat.com>
+rsearls <rsearls@ibm-p8-kvm-05-fsp.mgmt.pnr.lab.eng.rdu2.redhat.com>
+rsearls <rsearls@localhost.localdomain>
+rsearls <rsearls@redhat.com>
+sdirbach <sascha.dirbach@endless-webservices.de>
+smarlow <smarlow@redhat.com>
+spolti <filippespolti@gmail.com>
+spriadka <spriadka@github.com>
+starksm <scott.stark@jboss.com>
+stoty <stoty@users.noreply.github.com>
+timpeeters <tim.peeters@me.com>
+tmiyar <tmiyargi@redhat.com>
+tommaso-borgato <tborgato@redhat.com>
+ttarrant <ttarrant@redhat.com>
+unknown <avoka@.(none)>
+unknown <dimitris@.(none)>
+vkamble60 <vkamble@redhat.com>
+vpakan <vpakan@redhat.com>
+weli <weli@tower.(none)>
+wmprice <wmprice@redhat.com>
+wojtask9 <wojtask9.kde@gmail.com>
+xstefank <mjolnir122@gmail.com>
+xstefank <xstefank122@gmail.com>
diff --git a/wildfly/docs/contrib/scripts/README.md b/wildfly/docs/contrib/scripts/README.md
new file mode 100644
index 0000000..145f52b
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/README.md
@@ -0,0 +1,42 @@
+User contributed init scripts
+=============================
+
+```
+ ____      ____  _       _______     ____  _____  _____  ____  _____   ______    _  
+|_  _|    |_  _|/ \     |_   __ \   |_   \|_   _||_   _||_   \|_   _|.' ___  |  | | 
+  \ \  /\  / / / _ \      | |__) |    |   \ | |    | |    |   \ | | / .'   \_|  | | 
+   \ \/  \/ / / ___ \     |  __ /     | |\ \| |    | |    | |\ \| | | |   ____  | | 
+    \  /\  /_/ /   \ \_  _| |  \ \_  _| |_\   |_  _| |_  _| |_\   |_\ `.___]  | |_| 
+     \/  \/|____| |____||____| |___||_____|\____||_____||_____|\____|`._____.'  (_) 
+
+```
+
+In this folder you can find user contributed scripts & services for running WildFly as a service on various operating systems.
+
+This scripts are user contributions and are here as example and/or reference.  
+
+init.d
+------
+
+System V init.d scripts.
+
++ `wildfly-init-redhat.sh` for RHEL/CentOS 6.* and below
++ `wildfly-init-debian.sh` for Debian based distributions that do not use Systemd
+
+Both scripts use `wildfly.conf` as reference configuration file and expect that file is present in proper location.
+
+Selected script should be copied and renamed to proper directory before usage.
+
+systemd
+-------
+
+Systemd scripts for Linux distributions that use systemd. Use this script for RHEL 7 and above.
+
+See systemd/README on how to use it.
+
+service
+-------
+
+Windows service files, to enable installing wildfly as service on Windows.
+
+See service.bat on how to use it.
diff --git a/wildfly/docs/contrib/scripts/init.d/wildfly-init-debian.sh b/wildfly/docs/contrib/scripts/init.d/wildfly-init-debian.sh
new file mode 100755
index 0000000..30bc0d3
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/init.d/wildfly-init-debian.sh
@@ -0,0 +1,307 @@
+#!/bin/sh
+#
+# /etc/init.d/wildfly -- startup script for WildFly
+#
+# Written by Jorge Solorzano
+#
+### BEGIN INIT INFO
+# Provides:             wildfly
+# Required-Start:       $remote_fs $network
+# Required-Stop:        $remote_fs $network
+# Should-Start:         $named
+# Should-Stop:          $named
+# Default-Start:        2 3 4 5
+# Default-Stop:         0 1 6
+# Short-Description:    WildFly Application Server
+# Description:          WildFly startup/shutdown script
+### END INIT INFO
+
+NAME=$(readlink -f "${0}" | xargs basename)
+DESC="WildFly Application Server"
+DEFAULT="/etc/default/$NAME"
+
+# Check privileges
+if [ "$(id -u)" -ne 0 ]; then
+	echo "You need root privileges to run this script"
+	exit 1
+fi
+
+# Make sure wildfly is started with system locale
+if [ -r /etc/default/locale ]; then
+	. /etc/default/locale
+	export LANG
+fi
+
+# Source function library.
+. /lib/lsb/init-functions
+
+if [ -r /etc/default/rcS ]; then
+	. /etc/default/rcS
+fi
+
+# Overwrite settings from default file
+if [ -f "$DEFAULT" ]; then
+	. "$DEFAULT"
+fi
+
+# Location of JDK
+if [ -n "$JAVA_HOME" ]; then
+	export JAVA_HOME
+fi
+
+# Setup the JVM
+if [ -z "$JAVA" ]; then
+	if [ -n "$JAVA_HOME" ]; then
+		JAVA="$JAVA_HOME/bin/java"
+	else
+		JAVA="java"
+	fi
+fi
+
+# Location of wildfly
+if [ -z "$JBOSS_HOME" ]; then
+	JBOSS_HOME="/opt/$NAME"
+fi
+export JBOSS_HOME
+
+# Check if wildfly is installed
+if [ ! -f "$JBOSS_HOME/jboss-modules.jar" ]; then
+	log_failure_msg "$NAME is not installed in \"$JBOSS_HOME\""
+	exit 1
+fi
+
+# Run as wildfly user
+# Example of user creation for Debian based:
+# adduser --system --group --no-create-home --home $JBOSS_HOME --disabled-login wildfly
+if [ -z "$JBOSS_USER" ]; then
+	JBOSS_USER=wildfly
+fi
+
+# Check wildfly user
+if ! id $JBOSS_USER > /dev/null 2>&1 || [ -z "$JBOSS_USER" ]; then
+	log_failure_msg "User \"$JBOSS_USER\" does not exist..."
+	exit 1
+fi
+
+# Check owner of JBOSS_HOME
+if [ ! "$(stat -L -c "%U" "$JBOSS_HOME")" = $JBOSS_USER ]; then
+	log_failure_msg "The user \"$JBOSS_USER\" is not owner of \"$JBOSS_HOME\""
+	exit 1
+fi
+
+# Startup mode of wildfly
+if [ -z "$JBOSS_MODE" ]; then
+	JBOSS_MODE=standalone
+fi
+
+if [ -z "$JBOSS_BASE_DIR" ]; then
+         JBOSS_BASE_DIR="$JBOSS_HOME/$JBOSS_MODE"
+fi
+JBOSS_OPTS="$JBOSS_OPTS -Djboss.server.base.dir=$JBOSS_BASE_DIR"
+
+JBOSS_MARKERFILE=$JBOSS_BASE_DIR/tmp/startup-marker
+
+# Startup mode script
+if [ "$JBOSS_MODE" = "standalone" ]; then
+	JBOSS_SCRIPT="$JBOSS_HOME/bin/standalone.sh"
+	if [ -z "$JBOSS_CONFIG" ]; then
+		JBOSS_CONFIG=standalone.xml
+	fi
+else
+	JBOSS_SCRIPT="$JBOSS_HOME/bin/domain.sh"
+	if [ -z "$JBOSS_DOMAIN_CONFIG" ]; then
+		JBOSS_DOMAIN_CONFIG=domain.xml
+	fi
+	if [ -z "$JBOSS_HOST_CONFIG" ]; then
+		JBOSS_HOST_CONFIG=host.xml
+	fi
+fi
+
+# Check startup file
+if [ ! -x "$JBOSS_SCRIPT" ]; then
+	log_failure_msg "$JBOSS_SCRIPT is not an executable!"
+	exit 1
+fi
+
+# Check cli file
+JBOSS_CLI="$JBOSS_HOME/bin/jboss-cli.sh"
+if [ ! -x "$JBOSS_CLI" ]; then
+	log_failure_msg "$JBOSS_CLI is not an executable!"
+	exit 1
+fi
+
+# The amount of time to wait for startup
+if [ -z "$STARTUP_WAIT" ]; then
+	STARTUP_WAIT=30
+fi
+
+# The amount of time to wait for shutdown
+if [ -z "$SHUTDOWN_WAIT" ]; then
+	SHUTDOWN_WAIT=30
+fi
+
+# Location to keep the console log
+if [ -z "$JBOSS_CONSOLE_LOG" ]; then
+	JBOSS_CONSOLE_LOG="/var/log/$NAME/console.log"
+fi
+export JBOSS_CONSOLE_LOG
+
+# Location to set the pid file
+JBOSS_PIDFILE="/var/run/wildfly/$NAME.pid"
+export JBOSS_PIDFILE
+
+# Launch wildfly in background
+LAUNCH_JBOSS_IN_BACKGROUND=1
+export LAUNCH_JBOSS_IN_BACKGROUND
+
+# Helper function to check status of wildfly service
+check_status() {
+	pidofproc -p "$JBOSS_PIDFILE" "$JAVA" >/dev/null 2>&1
+}
+
+case "$1" in
+ start)
+	log_daemon_msg "Starting $DESC" "$NAME"
+	check_status
+	status_start=$?
+	if [ $status_start -eq 3 ]; then
+		mkdir -p "$(dirname "$JBOSS_PIDFILE")"
+		mkdir -p "$(dirname "$JBOSS_CONSOLE_LOG")"
+		chown $JBOSS_USER "$(dirname "$JBOSS_PIDFILE")" || true
+		cat /dev/null > "$JBOSS_CONSOLE_LOG"
+		currenttime=$(date +%s%N | cut -b1-13)
+
+		if [ "$JBOSS_MODE" = "standalone" ]; then
+			start-stop-daemon --start --user "$JBOSS_USER" \
+			--chuid "$JBOSS_USER" --chdir "$JBOSS_HOME" --pidfile "$JBOSS_PIDFILE" \
+			--exec "$JBOSS_SCRIPT" -- -c $JBOSS_CONFIG "$JBOSS_OPTS" >> "$JBOSS_CONSOLE_LOG" 2>&1 &
+		else
+			start-stop-daemon --start --user "$JBOSS_USER" \
+			--chuid "$JBOSS_USER" --chdir "$JBOSS_HOME" --pidfile "$JBOSS_PIDFILE" \
+			--exec "$JBOSS_SCRIPT" -- --domain-config=$JBOSS_DOMAIN_CONFIG \
+			--host-config=$JBOSS_HOST_CONFIG "$JBOSS_OPTS" >> "$JBOSS_CONSOLE_LOG" 2>&1 &
+		fi
+
+		count=0
+		until [ $count -gt $STARTUP_WAIT ]
+		do
+			sleep 1
+			count=$((count + 1));
+			if [ -f "$JBOSS_MARKERFILE" ]; then
+				markerfiletimestamp=$(grep -o '[0-9]*' "$JBOSS_MARKERFILE") > /dev/null
+				if [ "$markerfiletimestamp" -gt "$currenttime" ] ; then
+					if ! grep -i 'success:' "$JBOSS_MARKERFILE" > /dev/null; then
+						log_end_msg 0
+						exit 0
+					fi
+					if ! grep -i 'error:' "$JBOSS_MARKERFILE" > /dev/null; then
+						log_end_msg 255
+						log_warning_msg "$DESC started with errors, please see server log for details."
+						exit 0
+					fi
+				fi
+			fi
+		done
+
+		if check_status; then
+			log_end_msg 255
+			log_warning_msg "$DESC hasn't started within the timeout allowed."
+			exit 0
+		else
+			log_end_msg 1
+			log_failure_msg "$DESC failed to start within the timeout allowed."
+			exit 1
+		fi
+
+	elif [ $status_start -eq 1 ]; then
+		log_failure_msg "$DESC is not running but the pid file exists"
+		exit 1
+	elif [ $status_start -eq 0 ]; then
+		log_success_msg "$DESC (already running)"
+	fi
+ ;;
+ stop)
+	check_status
+	status_stop=$?
+	if [ $status_stop -eq 0 ]; then
+		read -r kpid < "$JBOSS_PIDFILE"
+		log_daemon_msg "Stopping $DESC" "$NAME"
+
+		children_pids=$(pgrep -P "$kpid")
+
+		start-stop-daemon --stop --quiet --pidfile "$JBOSS_PIDFILE" \
+		--user "$JBOSS_USER" --retry=TERM/$SHUTDOWN_WAIT/KILL/5 \
+		>/dev/null 2>&1
+
+		if [ $? -eq 2 ]; then
+			log_failure_msg "$DESC can't be stopped"
+			exit 1
+		fi
+
+		for child in $children_pids; do
+			/bin/kill -9 "$child" >/dev/null 2>&1
+		done
+
+		log_end_msg 0
+	elif [ $status_stop -eq 1 ]; then
+		log_action_msg "$DESC is not running but the pid file exists, cleaning up"
+		rm -f "$JBOSS_PIDFILE"
+	elif [ $status_stop -eq 3 ]; then
+		log_action_msg "$DESC is not running"
+	fi
+ ;;
+ restart)
+	check_status
+	status_restart=$?
+	if [ $status_restart -eq 0 ]; then
+		$0 stop
+	fi
+	$0 start
+ ;;
+ reload|force-reload)
+	check_status
+	status_reload=$?
+	if [ $status_reload -eq 0 ]; then
+		log_daemon_msg "Reloading $DESC config" "$NAME"
+
+		if [ "$JBOSS_MODE" = "standalone" ]; then
+			RELOAD_CMD=":reload"; else
+			RELOAD_CMD=":reload-servers"; fi
+
+		
+
+		if ! start-stop-daemon --start --chuid "$JBOSS_USER" \
+		--exec "$JBOSS_CLI" -- --connect --command=$RELOAD_CMD >/dev/null 2>&1; then
+			log_end_msg 0
+		else
+			log_end_msg 1
+		fi
+	else
+		log_failure_msg "$DESC is not running"
+	fi
+ ;;
+ status)
+	check_status
+	status=$?
+	if [ $status -eq 0 ]; then
+		read -r pid < "$JBOSS_PIDFILE"
+		log_action_msg "$DESC is running with pid $pid"
+		exit 0
+	elif [ $status -eq 1 ]; then
+		log_action_msg "$DESC is not running and the pid file exists"
+		exit 1
+	elif [ $status -eq 3 ]; then
+		log_action_msg "$DESC is not running"
+		exit 3
+	else
+		log_action_msg "Unable to determine $NAME status"
+		exit 4
+	fi
+ ;;
+ *)
+ log_action_msg "Usage: $0 {start|stop|restart|reload|force-reload|status}"
+ exit 2
+ ;;
+esac
+
+exit 0
diff --git a/wildfly/docs/contrib/scripts/init.d/wildfly-init-redhat.sh b/wildfly/docs/contrib/scripts/init.d/wildfly-init-redhat.sh
new file mode 100755
index 0000000..1c8ae4c
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/init.d/wildfly-init-redhat.sh
@@ -0,0 +1,270 @@
+#!/bin/sh
+#
+# WildFly control script
+#
+# chkconfig: 2345 80 20
+# description: WildFly startup/shutdown script
+#
+### BEGIN INIT INFO
+# Provides:             wildfly
+# Required-Start:       $remote_fs $network
+# Required-Stop:        $remote_fs $network
+# Should-Start:         $named
+# Should-Stop:          $named
+# Default-Start:        2 3 4 5
+# Default-Stop:         0 1 6
+# Short-Description:    WildFly Application Server
+# Description:          WildFly startup/shutdown script
+### END INIT INFO
+
+# Source function library.
+. /etc/init.d/functions
+
+NAME=$(readlink -f "${0}" | xargs basename)
+
+# Check privileges
+if [ "$(id -u)" -ne 0 ]; then
+	echo "You need root privileges to run this script"
+	exit 1
+fi
+
+# Load wildfly init.d configuration.
+if [ -z "$JBOSS_CONF" ]; then
+	JBOSS_CONF="/etc/default/${NAME}"
+fi
+
+# Set defaults.
+if [ -f "$JBOSS_CONF" ]; then
+	. "$JBOSS_CONF"
+fi
+
+# Location of JDK
+if [ -n "$JAVA_HOME" ]; then
+	export JAVA_HOME
+fi
+
+# Setup the JVM
+if [ -z "$JAVA" ]; then
+	if [ -n "$JAVA_HOME" ]; then
+		JAVA="$JAVA_HOME/bin/java"
+	else
+		JAVA="java"
+	fi
+fi
+
+# Location of wildfly
+if [ -z "$JBOSS_HOME" ]; then
+	JBOSS_HOME="/opt/${NAME}"
+fi
+export JBOSS_HOME
+
+# Check if wildfly is installed
+if [ ! -f "$JBOSS_HOME/jboss-modules.jar" ]; then
+	echo "$NAME is not installed in \"$JBOSS_HOME\""
+	exit 1
+fi
+
+# Run as wildfly user
+if [ -z "$JBOSS_USER" ]; then
+	JBOSS_USER=wildfly
+fi
+
+# Check wildfly user
+if ! id $JBOSS_USER > /dev/null 2>&1 || [ -z "$JBOSS_USER" ]; then
+	echo "User \"$JBOSS_USER\" does not exist..."
+	exit 1
+fi
+
+# Check owner of JBOSS_HOME
+if [ ! "$(stat -L -c "%U" "$JBOSS_HOME")" = $JBOSS_USER ]; then
+	echo "The user \"$JBOSS_USER\" is not owner of \"$(readlink -f "$JBOSS_HOME")\""
+	echo "Try: chown -R $JBOSS_USER:$JBOSS_USER \"$(readlink -f "$JBOSS_HOME")\""
+	exit 1
+fi
+
+# Location to set the pid file
+if [ -z "$JBOSS_PIDFILE" ]; then
+	JBOSS_PIDFILE=/var/run/wildfly/${NAME}.pid
+fi
+export JBOSS_PIDFILE
+
+# Location to set the lock file
+if [ -z "$JBOSS_LOCKFILE" ]; then
+	JBOSS_LOCKFILE=/var/lock/subsys/${NAME}
+fi
+
+# Location to keep the console log
+if [ -z "$JBOSS_CONSOLE_LOG" ]; then
+	JBOSS_CONSOLE_LOG=/var/log/${NAME}/console.log
+fi
+
+# The amount of time to wait for startup
+if [ -z "$STARTUP_WAIT" ]; then
+	STARTUP_WAIT=30
+fi
+
+# The amount of time to wait for shutdown
+if [ -z "$SHUTDOWN_WAIT" ]; then
+	SHUTDOWN_WAIT=30
+fi
+
+# Startup mode of wildfly
+if [ -z "$JBOSS_MODE" ]; then
+	JBOSS_MODE=standalone
+fi
+
+if [ -z "$JBOSS_BASE_DIR" ]; then
+         JBOSS_BASE_DIR="$JBOSS_HOME/$JBOSS_MODE"
+fi
+JBOSS_OPTS="$JBOSS_OPTS -Djboss.server.base.dir=$JBOSS_BASE_DIR"
+
+JBOSS_MARKERFILE=$JBOSS_BASE_DIR/tmp/startup-marker
+
+# Startup mode script
+if [ "$JBOSS_MODE" = "standalone" ]; then
+	JBOSS_SCRIPT=$JBOSS_HOME/bin/standalone.sh
+	if [ -z "$JBOSS_CONFIG" ]; then
+		JBOSS_CONFIG=standalone.xml
+	fi
+else
+	JBOSS_SCRIPT=$JBOSS_HOME/bin/domain.sh
+	if [ -z "$JBOSS_DOMAIN_CONFIG" ]; then
+		JBOSS_DOMAIN_CONFIG=domain.xml
+	fi
+	if [ -z "$JBOSS_HOST_CONFIG" ]; then
+		JBOSS_HOST_CONFIG=host.xml
+	fi
+fi
+
+# Helper function to check status of wildfly service
+check_status() {
+	status -p "$JBOSS_PIDFILE" -l "$(basename "$JBOSS_LOCKFILE")" "$NAME" >/dev/null 2>&1
+}
+
+start() {
+	printf "%s\n" $"Starting $NAME: "
+	check_status
+	status_start=$?
+	if [ $status_start -eq 3 ]; then
+		mkdir -p "$(dirname "$JBOSS_PIDFILE")"
+		mkdir -p "$(dirname "$JBOSS_CONSOLE_LOG")"
+		chown $JBOSS_USER "$(dirname "$JBOSS_PIDFILE")" || true
+		cat /dev/null > "$JBOSS_CONSOLE_LOG"
+		currenttime=$(date +%s%N | cut -b1-13)
+
+		if [ "$JBOSS_MODE" = "standalone" ]; then
+			cd "$JBOSS_HOME" >/dev/null 2>&1 || exit
+			daemon --user=$JBOSS_USER --pidfile="$JBOSS_PIDFILE" LAUNCH_JBOSS_IN_BACKGROUND=1 JBOSS_PIDFILE="$JBOSS_PIDFILE" "$JBOSS_SCRIPT -c $JBOSS_CONFIG $JBOSS_OPTS &" >> "$JBOSS_CONSOLE_LOG" 2>&1
+			cd - >/dev/null 2>&1 || exit
+		else
+			cd "$JBOSS_HOME" >/dev/null 2>&1 || exit
+			daemon --user=$JBOSS_USER --pidfile="$JBOSS_PIDFILE" LAUNCH_JBOSS_IN_BACKGROUND=1 JBOSS_PIDFILE="$JBOSS_PIDFILE" "$JBOSS_SCRIPT --domain-config=$JBOSS_DOMAIN_CONFIG --host-config=$JBOSS_HOST_CONFIG $JBOSS_OPTS &" >> "$JBOSS_CONSOLE_LOG" 2>&1
+			cd - >/dev/null 2>&1 || exit
+		fi
+
+		count=0
+		until [ $count -gt $STARTUP_WAIT ]
+		do
+			sleep 1
+			count=$($count+1);
+			if [ -f "$JBOSS_MARKERFILE" ]; then
+				markerfiletimestamp=$(grep -o '[0-9]\+' "$JBOSS_MARKERFILE") > /dev/null
+				if [ "$markerfiletimestamp" -gt "$currenttime" ] ; then
+					if ! grep -i 'success:' "$JBOSS_MARKERFILE" > /dev/null; then
+						success
+						echo
+						touch "$JBOSS_LOCKFILE"
+						exit 0
+					fi
+					
+					if ! grep -i 'error:' "$JBOSS_MARKERFILE" > /dev/null; then
+						warning
+						echo
+						echo "$NAME started with errors, please see server log for details."
+						touch "$JBOSS_LOCKFILE"
+						exit 0
+					fi
+				fi
+			fi
+		done
+
+		if check_status; then
+			warning
+			echo
+			echo "$NAME hasn't started within the timeout allowed."
+			touch "$JBOSS_LOCKFILE"
+			exit 0
+		else
+			failure
+			echo
+			echo "$NAME failed to start within the timeout allowed."
+			exit 1
+		fi
+
+	else
+		echo
+		$0 status
+	fi
+}
+
+stop() {
+	printf "%s\n" $"Shutting down $NAME: "
+	check_status
+	status_stop=$?
+	if [ $status_stop -eq 0 ]; then
+		count=0;
+		if [ -f "$JBOSS_PIDFILE" ]; then
+			read -r kpid < "$JBOSS_PIDFILE"
+			kwait=$($SHUTDOWN_WAIT)
+
+			# Try issuing SIGTERM
+			su -s /bin/sh -c "kill -15 $kpid" $JBOSS_USER
+			until [ "$(pgrep --pid "$kpid" 2> /dev/null | grep -c "$kpid" 2> /dev/null)" -eq '0' ] || [ $count -gt "$kwait" ]
+				do
+				sleep 1
+				count=$($count+1);
+			done
+
+			if [ "$count" -gt "$kwait" ]; then
+				if ! su -s /bin/sh -c "kill -9 $kpid" $JBOSS_USER 2> /dev/null; then
+				        failure
+				        exit 1
+				fi
+			fi
+		fi
+		success
+	elif [ $status_stop -eq 1 ]; then
+		echo
+		printf "%s\n" "$NAME dead but pid file exists, cleaning up"
+	elif [ $status_stop -eq 2 ]; then
+		echo
+		printf "%s\n" "$NAME dead but subsys locked, cleaning up"
+	elif [ $status_stop -eq 3 ]; then
+		echo
+		printf "%s\n" $"$NAME is already stopped"
+	fi
+	rm -f "$JBOSS_PIDFILE"
+	rm -f "$JBOSS_LOCKFILE"
+	echo
+}
+
+case "$1" in
+	start)
+		start
+		;;
+	stop)
+		stop
+		;;
+	restart)
+		$0 stop
+		$0 start
+		;;
+	status)
+		status -p "$JBOSS_PIDFILE" -l "$(basename "$JBOSS_LOCKFILE")" "$NAME"
+		;;
+	*)
+		## If no parameters are given, print which are avaiable.
+		echo "Usage: $0 {start|stop|restart|status}"
+		exit 1
+		;;
+esac
diff --git a/wildfly/docs/contrib/scripts/init.d/wildfly.conf b/wildfly/docs/contrib/scripts/init.d/wildfly.conf
new file mode 100644
index 0000000..158c238
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/init.d/wildfly.conf
@@ -0,0 +1,36 @@
+#################################################
+# General configuration for the init.d scripts, #
+# not necessarily for WildFly itself.           #
+# default location: /etc/default/wildfly        #
+#################################################
+
+## Location of JDK
+# JAVA_HOME="/usr/lib/jvm/default-java"
+
+## Location of WildFly
+# JBOSS_HOME="/opt/wildfly"
+
+## The username who should own the process.
+# JBOSS_USER=wildfly
+
+## The mode WildFly should start, standalone or domain
+# JBOSS_MODE=standalone
+
+## Configuration for standalone mode
+# JBOSS_CONFIG=standalone.xml
+
+## Configuration for domain mode
+# JBOSS_DOMAIN_CONFIG=domain.xml
+# JBOSS_HOST_CONFIG=host-primary.xml
+
+## The amount of time to wait for startup
+# STARTUP_WAIT=60
+
+## The amount of time to wait for shutdown
+# SHUTDOWN_WAIT=60
+
+## Location to keep the console log
+# JBOSS_CONSOLE_LOG="/var/log/wildfly/console.log"
+
+## Additionals args to include in startup
+# JBOSS_OPTS="--admin-only -b 127.0.0.1"
diff --git a/wildfly/docs/contrib/scripts/service/amd64/wildfly-service.exe b/wildfly/docs/contrib/scripts/service/amd64/wildfly-service.exe
new file mode 100644
index 0000000..186bd9c
Binary files /dev/null and b/wildfly/docs/contrib/scripts/service/amd64/wildfly-service.exe differ
diff --git a/wildfly/docs/contrib/scripts/service/service.bat b/wildfly/docs/contrib/scripts/service/service.bat
new file mode 100644
index 0000000..bd6d85a
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/service/service.bat
@@ -0,0 +1,565 @@
+@echo off
+
+REM -------------------------------------------------------------------------
+REM  WildFly Service Script for Windows
+REM    It has to reside in %JBOSS_HOME%\bin
+REM    It is expecting that prunsrv.exe reside in:
+REM      %JBOSS_HOME%\bin\service\
+REM Easiest way to make it work is to copy whole "service" directory to %JBOSS_HOME%\bin
+REM
+REM  v9 2016-02-16 customize for WildFly, fix working on paths with spaces (Tomaz Cerar)
+REM  v8 2016-01-20 customize for EAP 7 (Petr Sakar)
+REM  v7 2014-07-09 added /logpath /startup /config /hostconfig /base /debug
+REM                      simplified/corrected use of quotes
+REM
+REM  v6 was shipped with EAP 6.2.0 and supports all previous versions of 6.x as well.
+REM  v6 2013-08-21 added /name /desc
+REM                added /serviceuser /servicepass
+REM                extended directory checking for versions and locations
+REM                extended checking on option usage
+REM  v5	2013-06-10 adapted for EAP 6.1.0
+REM  v4	2012-10-03 Small changes to properly handles spaces in LogPath, StartPath,
+REM                and StopPath (George Rypysc)
+REM  v3	2012-09-14 fixed service log path
+REM                cmd line options for controller,domain host, loglevel,
+REM		   username,password
+REM  v2	2012-09-05 NOPAUSE support
+REM  v1	2012-08-20 initial edit
+REM
+REM Author: Tom Fonteyne (unless noted above)
+REM ========================================================
+setlocal EnableExtensions EnableDelayedExpansion
+
+set DEBUG=0
+if "%DEBUG%" == "1" (
+	echo "Debug info enabled"
+	echo on
+)
+
+set "DIRNAME=%~dp0%"
+if "%DEBUG%" == "1" (
+	echo DIRNAME "%DIRNAME%x"
+)
+
+if exist "%DIRNAME%..\jboss-modules.jar" (
+  REM we are in JBOSS_HOME/bin
+  set "WE=%DIRNAME%..\"
+  goto :WE_FOUND
+) else if exist "%DIRNAME%..\..\jboss-modules.jar" (
+  REM we are in bin\service in a WildFly installation
+  set "WE=%DIRNAME%..\..\"
+  goto :WE_FOUND
+) else if exist "%DIRNAME%..\..\..\jboss-modules.jar" (
+  REM we are in sbin in a 6.0.x installation
+  set "WE=%DIRNAME%..\..\..\"
+  goto :WE_FOUND
+) else (
+  REM we should be in sbin in 6.1 and up
+  set "WE=%DIRNAME%..\..\..\..\..\..\"
+)
+
+if "%DEBUG%" == "1" (
+	echo WE was not found, using "%WE%"
+)
+
+:WE_FOUND
+if "%DEBUG%" == "1" (
+	echo WE "%WE%"
+)
+pushd "%WE%"
+set "RESOLVED_JBOSS_HOME=%CD%"
+popd
+set WE=
+set DIRNAME=
+if "x%JBOSS_HOME%" == "x" (
+  set "JBOSS_HOME=%RESOLVED_JBOSS_HOME%"
+)
+
+pushd "%JBOSS_HOME%"
+set "SANITIZED_JBOSS_HOME=%CD%"
+popd
+
+if "%DEBUG%" == "1" (
+	echo SANITIZED_JBOSS_HOME="%SANITIZED_JBOSS_HOME%"
+	echo RESOLVED_JBOSS_HOME="%RESOLVED_JBOSS_HOME%"
+	echo JBOSS_HOME="%JBOSS_HOME%"
+)
+
+if not "%RESOLVED_JBOSS_HOME%x" == "%SANITIZED_JBOSS_HOME%x" (
+    echo WARNING JBOSS_HOME may be pointing to a different installation - unpredictable results may occur.
+    goto cmdEnd
+)
+
+rem Find jboss-modules.jar to check JBOSS_HOME
+if not exist "%JBOSS_HOME%\jboss-modules.jar" (
+  echo Could not locate "%JBOSS_HOME%\jboss-modules.jar"
+  goto cmdEnd
+)
+
+set PRUNSRV=
+if "%PROCESSOR_ARCHITECTURE%"=="AMD64" (
+  echo Using the X86-64bit version of prunsrv
+  set PRUNSRV="%JBOSS_HOME%\bin\service\amd64\wildfly-service"
+) else (
+  echo Using the X86-32bit version of prunsrv
+  set PRUNSRV="%JBOSS_HOME%\bin\service\wildfly-service"
+)
+
+if "%DEBUG%" == "1" (
+	echo PRUNSRV %PRUNSRV%
+)
+
+echo(
+
+rem defaults
+set SHORTNAME=WildFly
+set DISPLAYNAME=WildFly
+rem NO quotes around the description here !
+set DESCRIPTION=WildFly Application Server
+set CONTROLLER=localhost:9990
+set DC_HOST=primary
+set IS_DOMAIN=false
+set LOGLEVEL=INFO
+set ENV_VARS=
+set LOGPATH=
+set JBOSSUSER=
+set JBOSSPASS=
+set PROPERTIES_PATH=
+set SERVICE_USER=
+set SERVICE_PASS=
+set STARTUP_MODE=manual
+set ISDEBUG=
+set CONFIG=
+set HOSTCONFIG=host.xml
+set BASE=
+
+set COMMAND=%1
+shift
+if /I "%COMMAND%" == "install"   goto cmdInstall
+if /I "%COMMAND%" == "uninstall" goto cmdUninstall
+if /I "%COMMAND%" == "start"     goto cmdStart
+if /I "%COMMAND%" == "stop"      goto cmdStop
+if /I "%COMMAND%" == "restart"   goto cmdRestart
+
+echo ERROR: invalid command
+
+:cmdUsage
+echo WildFly Service Script for Windows
+echo Usage:
+echo(
+echo   service install ^<options^>  , where the options are:
+echo(
+echo     /startup                    : Set the service to auto start
+echo                                 Not specifying sets the service to manual
+echo(
+echo     /jbossuser ^<username^>     : JBoss username to use for the shutdown command.
+echo(
+echo     /jbosspass ^<password^>     : Password for /jbossuser
+echo(
+echo     /controller ^<host:port^>   : The host:port of the management interface.
+echo                                 default: %CONTROLLER%
+echo(
+echo     /host [^<domainhost^>]      : Indicates that domain mode is to be used,
+echo                                 with an optional domain/host controller name.
+echo                                 default: %DC_HOST%
+echo                                 Not specifying /host will install JBoss in
+echo                                 standalone mode.
+echo(
+echo Options to use when multiple services or different accounts are needed:
+echo(
+echo     /name ^<servicename^>       : The name of the service
+echo                                 default: %SHORTNAME%
+echo(
+echo     /display ^<displayname^>    : The display name of the service, use double
+echo                                 quotes to allow spaces.
+echo                                 Maximum 256 characters.
+echo                                 default: %DISPLAYNAME%
+echo(
+echo     /desc ^<description^>       : The description of the service, use double
+echo                                 quotes to allow spaces.
+echo                                 Maximum 1024 characters.
+echo                                 default: %DESCRIPTION%
+echo(
+echo     /serviceuser ^<username^>   : Specifies the name of the account under which
+echo                                 the service should run.
+echo                                 Use an account name in the form of
+echo                                 DomainName\UserName
+echo                                 default: not used, the service runs as
+echo                                 Local System Account.
+echo(
+echo     /servicepass ^<password^>   : password for /serviceuser
+echo(
+echo Advanced options:
+echo(
+echo     /config ^<xmlfile^>         : The server-config to use
+echo                                 default: standalone.xml / domain.xml
+echo(
+echo     /hostconfig ^<xmlfile^>     : domain mode only, the host config to use
+echo                                 default: host.xml
+echo(
+echo     /base ^<directory^>         : The base directory for server/domain content
+echo                                 Must be specified as a fully qualified path
+echo                                 default: %JBOSS_HOME%\standalone or
+echo                                          %JBOSS_HOME%\domain
+echo(
+echo     /environment ^<env^>        : List of key=value pairs that will be provided
+echo                                 to the service as environment variables.
+echo                                 Pairs are separated by either the # or ; character.
+echo                                 If a # or ; appears in a key or value,
+echo                                 wrap it in single quotes.
+echo                                 default: none
+echo(
+echo     /loglevel ^<level^>         : The log level for the service:  Error, Info,
+echo                                 Warn or Debug ^(Case insensitive^)
+echo                                 default: %LOGLEVEL%
+echo(
+echo     /logpath ^<path^>           : Path of the log
+echo                                 default depends on domain or standalone mode
+echo                                 /base applies when /logpath is not set.
+echo                                   %JBOSS_HOME%\domain\log
+echo                                   %JBOSS_HOME%\standalone\log
+echo(
+echo     /properties ^<path^>        : Path of the properties file to pass to the
+echo                                 process for use as system properties.
+echo                                 default none
+echo(
+echo     /debug                      : run the service install in debug mode
+echo(
+echo Other commands:
+echo(
+echo   service uninstall [/name ^<servicename^>]
+echo   service start [/name ^<servicename^>]
+echo   service stop [/name ^<servicename^>]
+echo   service restart [/name ^<servicename^>]
+echo(
+echo     /name  ^<servicename^>      : Name of the service: should not contain spaces
+echo                                 default: %SHORTNAME%
+echo(
+goto endBatch
+
+:cmdInstall
+
+:LoopArgs
+if "%~1" == "" goto doInstall
+
+if /I "%~1"== "/debug" (
+  set ISDEBUG=true
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/startup" (
+  set STARTUP_MODE=auto
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/config" (
+  CALL :setRequiredValue CONFIG "%~2" "You need to specify a config name"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/hostconfig" (
+  CALL :setRequiredValue HOSTCONFIG "%~2" "You need to specify a host-config name"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/base" (
+  CALL :setRequiredValue BASE "%~2" "You need to specify a base directory name"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/controller" (
+  CALL :setRequiredValue CONTROLLER "%~2" "The management interface should be specified in the format host:port, example:  127.0.0.1:9999"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/name" (
+  CALL :setRequiredValue SHORTNAME "%~2" "You need to specify a service name"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/display" (
+  CALL :setRequiredValue DISPLAYNAME "%~2" "You need to specify a service display name, maximum of 256 characters"
+  shift
+  shift
+  goto LoopArgs
+)
+
+if /I "%~1"== "/desc" (
+  CALL :setRequiredValue DESCRIPTION "%~2" "You need to specify a description, maximum of 1024 characters"
+  shift
+  shift
+  goto LoopArgs
+)
+
+if /I "%~1"== "/environment" (
+  CALL :setRequiredValue ENV_VARS "%~2" "You need to specify a list of environment variables"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/jbossuser" (
+  CALL :setRequiredValue JBOSSUSER "%~2" "You need to specify a username"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/jbosspass" (
+  CALL :setRequiredValue JBOSSPASS "%~2" "You need to specify a password for /jbosspass"
+
+  for %%C in (^^^^ ^^^( ^^^) ^^^> ^^^< ^^^& ^^^|) do (
+    if not "!JBOSSPASS:%%C=!"=="!JBOSSPASS!" set IS_SANITIZED=true
+    set "JBOSSPASS=!JBOSSPASS:%%C=^^%%C!"
+  )
+  if not "!IS_SANITIZED!" == "true" (
+    for %%C in (^^ ^( ^) ^> ^< ^& ^|) do (
+      set "JBOSSPASS=!JBOSSPASS:%%C=^^^%%C!"
+    )
+  )
+
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/serviceuser" (
+  CALL :setRequiredValue SERVICE_USER "%~2" "You need to specify a username in the format DOMAIN\USER, or .\USER for the local domain"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/servicepass" (
+  CALL :setRequiredValue SERVICE_PASS "%~2" "You need to specify a password for /servicepass"
+  shift
+  shift
+  goto LoopArgs
+)
+rem the hostname is optional
+if /I "%~1"== "/host" (
+  set IS_DOMAIN=true
+  if not "%~2"=="" (
+    set T=%~2
+    if not "!T:~0,1!"=="/" (
+      set DC_HOST=%~2
+      shift
+    )
+  )
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/loglevel" (
+  if /I not "%~2"=="Error" if /I not "%~2"=="Info" if /I not "%~2"=="Warn" if /I not "%~2"=="Debug" (
+    echo ERROR: /loglevel must be set to Error, Info, Warn or Debug ^(Case insensitive^)
+    goto endBatch
+  )
+  set LOGLEVEL=%~2
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/logpath" (
+  CALL :setRequiredValue LOGPATH "%~2" "You need to specify a path for the service log"
+  shift
+  shift
+  goto LoopArgs
+)
+if /I "%~1"== "/properties" (
+  CALL :setRequiredValue PROPERTIES_PATH "%~2" "You need to specify the path to a properties file"
+  shift
+  shift
+  goto LoopArgs
+)
+echo ERROR: Unrecognised option: %1
+echo(
+goto cmdUsage
+
+rem Set variable named by %1 to the value of %2 if it is valid, or echo error msg %3
+:setRequiredValue
+  set "%~1="
+  if not "%~2"=="" (
+    set T=%~2
+    if not "!T:~0,1!"=="/" (
+      set "%~1=%~2"
+	)
+  )
+  if "!%~1!" == "" (
+    echo ERROR: %~3
+    goto endBatch
+  )
+rem return to wherever we were called
+EXIT /B 0
+
+:doInstall
+set CREDENTIALS=
+if not "%JBOSSUSER%" == "" (
+  if "%JBOSSPASS%" == "" (
+    echo When specifying a user, you need to specify the password
+    goto endBatch
+  )
+  set "CREDENTIALS=--user=%JBOSSUSER% --password='!JBOSSPASS!'"
+)
+
+set "RUNAS=--ServiceUser=LocalSystem"
+if not "%SERVICE_USER%" == "" (
+  if "%SERVICE_PASS%" == "" (
+    echo When specifying a user, you need to specify the password
+    goto endBatch
+  )
+  set RUNAS=--ServiceUser="%SERVICE_USER%" --ServicePassword="%SERVICE_PASS%"
+)
+
+if "%STDOUT%"=="" set STDOUT=auto
+if "%STDERR%"=="" set STDERR=auto
+
+if "%START_PATH%"=="" set START_PATH="%JBOSS_HOME%\bin"
+if "%STOP_PATH%"=="" set STOP_PATH="%JBOSS_HOME%\bin"
+
+if "%STOP_SCRIPT%"=="" set STOP_SCRIPT=jboss-cli.bat
+
+if /I "%IS_DOMAIN%" == "true" (
+  if "%BASE%"=="" set "BASE=%JBOSS_HOME%\domain"
+  if "%CONFIG%"=="" set CONFIG=domain.xml
+  if "%START_SCRIPT%"=="" set START_SCRIPT=domain.bat
+  set STARTPARAM="/c#set#NOPAUSE=Y#&&#!START_SCRIPT!#-Djboss.domain.base.dir=!BASE!#--domain-config=!CONFIG!#--host-config=!HOSTCONFIG!"
+  set STOPPARAM="/c set NOPAUSE=Y && %STOP_SCRIPT% --controller=%CONTROLLER% --connect !CREDENTIALS! --command=/host=!DC_HOST!:shutdown"
+) else (
+  if "%BASE%"=="" set "BASE=%JBOSS_HOME%\standalone"
+  if "%CONFIG%"=="" set CONFIG=standalone.xml
+  if "%START_SCRIPT%"=="" set START_SCRIPT=standalone.bat
+  if "%PROPERTIES_PATH%"=="" (
+    set "PROPS_PARAM="
+  ) else (
+    set "PROPS_PARAM=#--properties=%PROPERTIES_PATH%"
+  )
+  set STARTPARAM="/c#set#NOPAUSE=Y#&&#!START_SCRIPT!#-Djboss.server.base.dir=!BASE!#--server-config=!CONFIG!!PROPS_PARAM!"
+  set STOPPARAM="/c set NOPAUSE=Y && !STOP_SCRIPT! --controller=%CONTROLLER% --connect !CREDENTIALS! --command=:shutdown"
+)
+
+if "%LOGPATH%"=="" set LOGPATH="!BASE!\log"
+
+if not exist "%BASE%" (
+  echo The base directory does not exist: "%BASE%"
+  goto endBatch
+)
+
+if not exist "%BASE%\configuration\%CONFIG%" (
+  echo The configuration does not exist: "%BASE%\configuration\%CONFIG%"
+  goto endBatch
+)
+
+if /I "%ISDEBUG%" == "true" (
+  echo JBOSS_HOME="%JBOSS_HOME%"
+  echo RUNAS=!RUNAS!
+  echo SHORTNAME="%SHORTNAME%"
+  echo DISPLAYNAME="%DISPLAYNAME%"
+  echo DESCRIPTION="%DESCRIPTION%"
+  echo STARTPARAM=%STARTPARAM%
+  echo STOPPARAM=%STOPPARAM%
+  echo LOGLEVEL=%LOGLEVEL%
+  echo LOGPATH=%LOGPATH%
+  echo CREDENTIALS=%CREDENTIALS%
+  echo BASE="%BASE%"
+  echo CONFIG="%CONFIG%"
+  echo START_SCRIPT=%START_SCRIPT%
+  echo START_PATH=%START_PATH%
+  echo STOP_SCRIPT=%STOP_SCRIPT%
+  echo STOP_PATH=%STOP_PATH%
+  echo STDOUT="%STDOUT%"
+  echo STDERR="%STDERR%"
+)
+if /I "%ISDEBUG%" == "true" (
+  @echo on
+)
+
+@rem quotes around the "%DESCRIPTION%" and "%DISPLAYNAME" but nowhere else
+echo %PRUNSRV% install %SHORTNAME% !RUNAS! --DisplayName="%DISPLAYNAME%" --Description="%DESCRIPTION%"  ++Environment=%ENV_VARS% --LogLevel=%LOGLEVEL% --LogPath=%LOGPATH% --LogPrefix=service --StdOutput=%STDOUT% --StdError=%STDERR% --StartMode=exe --Startup=%STARTUP_MODE% --StartImage=cmd.exe --StartPath=%START_PATH% ++StartParams=%STARTPARAM% --StopMode=exe --StopImage=cmd.exe --StopPath=%STOP_PATH%  ++StopParams=!STOPPARAM!
+%PRUNSRV% install %SHORTNAME% !RUNAS! --DisplayName="%DISPLAYNAME%" --Description="%DESCRIPTION%"  ++Environment=%ENV_VARS% --LogLevel=%LOGLEVEL% --LogPath=%LOGPATH% --LogPrefix=service --StdOutput=%STDOUT% --StdError=%STDERR% --StartMode=exe --Startup=%STARTUP_MODE% --StartImage=cmd.exe --StartPath=%START_PATH% ++StartParams=%STARTPARAM% --StopMode=exe --StopImage=cmd.exe --StopPath=%STOP_PATH%  ++StopParams=!STOPPARAM!
+
+@if /I "%ISDEBUG%" == "true" (
+  @echo off
+)
+
+if errorlevel 8 (
+  echo ERROR: The service %SHORTNAME% already exists
+  goto endBatch
+)
+if errorlevel 0 (
+  echo Service %SHORTNAME% installed
+  goto endBatch
+)
+goto cmdEnd
+
+
+REM the other commands take a /name parameter - if there is no ^<servicename^> passed as second parameter,
+REM we silently ignore this and use the default SHORTNAME
+
+:cmdUninstall
+if /I "%~1"=="/name" (
+  if not "%~2"=="" (
+    set SHORTNAME="%~2"
+  )
+)
+%PRUNSRV% stop %SHORTNAME%
+if errorlevel 0 (
+  %PRUNSRV% delete %SHORTNAME%
+  if errorlevel 0 (
+    echo Service %SHORTNAME% uninstalled
+  )
+) else (
+  echo Unable to stop the service %SHORTNAME%
+)
+goto cmdEnd
+
+:cmdStart
+if /I "%~1"=="/name" (
+  if not "%~2"=="" (
+    set SHORTNAME="%~2"
+  )
+)
+%PRUNSRV% start %SHORTNAME%
+echo Service %SHORTNAME% starting...
+goto cmdEnd
+
+:cmdStop
+if /I "%~1"=="/name" (
+  if not "%~2"=="" (
+    set SHORTNAME="%~2"
+  )
+)
+%PRUNSRV% stop %SHORTNAME%
+echo Service %SHORTNAME% stopping...
+goto cmdEnd
+
+:cmdRestart
+if /I "%~1"=="/name" (
+  if not "%~2"=="" (
+    set SHORTNAME="%~2"
+  )
+)
+%PRUNSRV% stop %SHORTNAME%
+echo Service %SHORTNAME% stopping...
+if "%errorlevel%" == "0" (
+  %PRUNSRV% start %SHORTNAME%
+  echo Service %SHORTNAME% starting...
+) else (
+  echo Unable to stop the service %SHORTNAME%
+)
+goto cmdEnd
+
+
+:cmdEnd
+REM if there is a need to add other error messages, make sure to list higher numbers first !
+if errorlevel 2 (
+  echo ERROR: Failed to load service %SHORTNAME% configuration
+  goto endBatch
+)
+if errorlevel 0 (
+  goto endBatch
+)
+echo "Unforseen error=%errorlevel%"
+
+rem nothing below, exit
+:endBatch
diff --git a/wildfly/docs/contrib/scripts/service/wildfly-mgr.exe b/wildfly/docs/contrib/scripts/service/wildfly-mgr.exe
new file mode 100644
index 0000000..94efbaa
Binary files /dev/null and b/wildfly/docs/contrib/scripts/service/wildfly-mgr.exe differ
diff --git a/wildfly/docs/contrib/scripts/service/wildfly-service.exe b/wildfly/docs/contrib/scripts/service/wildfly-service.exe
new file mode 100644
index 0000000..eb72039
Binary files /dev/null and b/wildfly/docs/contrib/scripts/service/wildfly-service.exe differ
diff --git a/wildfly/docs/contrib/scripts/systemd/README b/wildfly/docs/contrib/scripts/systemd/README
new file mode 100644
index 0000000..761f137
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/systemd/README
@@ -0,0 +1,25 @@
+= How to configure WildFly as a systemd service
+
+== Create a wildfly user
+
+    # groupadd -r wildfly
+    # useradd -r -g wildfly -d /opt/wildfly -s /sbin/nologin wildfly
+
+== Install WildFly
+
+    # tar xvzf wildfly-10.0.0.Final.tar.gz -C /opt
+    # ln -s /opt/wildfly-10.0.0.Final /opt/wildfly
+    # chown -R wildfly:wildfly /opt/wildfly
+
+== Configure systemd
+
+    # mkdir /etc/wildfly
+    # cp wildfly.conf /etc/wildfly/
+    # cp wildfly.service /etc/systemd/system/
+    # cp launch.sh /opt/wildfly/bin/
+    # chmod +x /opt/wildfly/bin/launch.sh
+
+== Start and enable
+
+    # systemctl start wildfly.service
+    # systemctl enable wildfly.service
diff --git a/wildfly/docs/contrib/scripts/systemd/launch.sh b/wildfly/docs/contrib/scripts/systemd/launch.sh
new file mode 100755
index 0000000..a9ea3b5
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/systemd/launch.sh
@@ -0,0 +1,11 @@
+#!/bin/bash
+
+if [ "x$WILDFLY_HOME" = "x" ]; then
+    WILDFLY_HOME="/opt/wildfly"
+fi
+
+if [[ "$1" == "domain" ]]; then
+    $WILDFLY_HOME/bin/domain.sh -c $2 -b $3
+else
+    $WILDFLY_HOME/bin/standalone.sh -c $2 -b $3
+fi
diff --git a/wildfly/docs/contrib/scripts/systemd/wildfly.conf b/wildfly/docs/contrib/scripts/systemd/wildfly.conf
new file mode 100644
index 0000000..4ff3293
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/systemd/wildfly.conf
@@ -0,0 +1,8 @@
+# The configuration you want to run
+WILDFLY_CONFIG=standalone.xml
+
+# The mode you want to run
+WILDFLY_MODE=standalone
+
+# The address to bind to
+WILDFLY_BIND=0.0.0.0
diff --git a/wildfly/docs/contrib/scripts/systemd/wildfly.service b/wildfly/docs/contrib/scripts/systemd/wildfly.service
new file mode 100644
index 0000000..c4c5b73
--- /dev/null
+++ b/wildfly/docs/contrib/scripts/systemd/wildfly.service
@@ -0,0 +1,16 @@
+[Unit]
+Description=The WildFly Application Server
+After=syslog.target network.target
+Before=httpd.service
+
+[Service]
+Environment=LAUNCH_JBOSS_IN_BACKGROUND=1
+EnvironmentFile=-/etc/wildfly/wildfly.conf
+User=wildfly
+LimitNOFILE=102642
+PIDFile=/run/wildfly/wildfly.pid
+ExecStart=/opt/wildfly/bin/launch.sh $WILDFLY_MODE $WILDFLY_CONFIG $WILDFLY_BIND
+StandardOutput=null
+
+[Install]
+WantedBy=multi-user.target
diff --git a/wildfly/docs/examples/configs/domain-ec2.xml b/wildfly/docs/examples/configs/domain-ec2.xml
new file mode 100644
index 0000000..05d8ee3
--- /dev/null
+++ b/wildfly/docs/examples/configs/domain-ec2.xml
@@ -0,0 +1,2068 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<domain xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <system-properties>
+        <property name="java.net.preferIPv4Stack" value="true"/>
+    </system-properties>
+    <management>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profiles>
+        <profile name="default">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+                <local-client-mappings-registry/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <local-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <local-routing/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store preload="true"/>
+                    </local-cache>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="sso">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.singleton.server">
+                    <local-cache name="default">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <local-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="ha">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+                <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <primary-owner-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <infinispan-routing cache-container="web" cache="routing"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                    <replicated-cache name="client-mappings">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                    <distributed-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="default">
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="sso">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <replicated-cache name="routing">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                    <invalidation-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </invalidation-cache>
+                    <replicated-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+                <channels default="ee">
+                    <channel name="ee" stack="udp" cluster="ejb"/>
+                </channels>
+                <stacks>
+                    <stack name="udp">
+                        <transport type="UDP" socket-binding="jgroups-udp"/>
+                        <protocol type="RED"/>
+                        <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                            <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                            <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                        </protocol>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                    <stack name="tcp">
+                        <transport type="TCP" socket-binding="jgroups-tcp"/>
+                        <protocol type="RED"/>
+                        <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                            <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                            <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                        </protocol>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                </stacks>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+                <proxy name="default" advertise="false" listener="ajp" proxies="">
+                    <dynamic-load-provider>
+                        <load-metric type="cpu"/>
+                    </dynamic-load-provider>
+                </proxy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+                <singleton-policies default="default">
+                    <singleton-policy name="default" cache-container="server">
+                        <simple-election-policy/>
+                    </singleton-policy>
+                </singleton-policies>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <ajp-listener name="ajp" socket-binding="ajp"/>
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="full">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+                <local-client-mappings-registry/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <local-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <local-routing/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <mdb>
+                    <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                    <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+                </mdb>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <iiop enable-by-default="false" use-qualified-name="false"/>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+                <orb socket-binding="iiop"/>
+                <initializers security="elytron" transactions="spec"/>
+                <security server-requires-ssl="false" client-requires-ssl="false"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store preload="true"/>
+                    </local-cache>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="sso">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.singleton.server">
+                    <local-cache name="default">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <local-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+                <server name="default">
+                    <security elytron-domain="ApplicationDomain"/>
+                    <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <security-setting name="#">
+                        <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                    </security-setting>
+                    <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10"/>
+                    <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                    <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                        <param name="batch-delay" value="50"/>
+                    </http-connector>
+                    <in-vm-connector name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-connector>
+                    <http-acceptor name="http-acceptor" http-listener="default"/>
+                    <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                        <param name="batch-delay" value="50"/>
+                        <param name="direct-deliver" value="false"/>
+                    </http-acceptor>
+                    <in-vm-acceptor name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-acceptor>
+                    <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                    <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                    <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                    <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector"/>
+                    <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+                </server>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="full-ha">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+                <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <primary-owner-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <infinispan-routing cache-container="web" cache="routing"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <mdb>
+                    <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                    <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+                </mdb>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <iiop enable-by-default="false" use-qualified-name="false"/>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+                <orb socket-binding="iiop"/>
+                <initializers security="elytron" transactions="spec"/>
+                <security server-requires-ssl="false" client-requires-ssl="false"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                    <replicated-cache name="client-mappings">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                    <distributed-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="default">
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="sso">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <replicated-cache name="routing">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                    <invalidation-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </invalidation-cache>
+                    <replicated-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+                <channels default="ee">
+                    <channel name="ee" stack="udp" cluster="ejb"/>
+                </channels>
+                <stacks>
+                    <stack name="udp">
+                        <transport type="UDP" socket-binding="jgroups-udp"/>
+                        <protocol type="RED"/>
+                        <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                            <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                            <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                        </protocol>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                    <stack name="tcp">
+                        <transport type="TCP" socket-binding="jgroups-tcp"/>
+                        <protocol type="RED"/>
+                        <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                            <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                            <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                        </protocol>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                </stacks>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+                <server name="default">
+                    <security elytron-domain="ApplicationDomain"/>
+                    <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                    <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <security-setting name="#">
+                        <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                    </security-setting>
+                    <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10" redistribution-delay="1000"/>
+                    <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                    <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                        <param name="batch-delay" value="50"/>
+                    </http-connector>
+                    <in-vm-connector name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-connector>
+                    <http-acceptor name="http-acceptor" http-listener="default"/>
+                    <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                        <param name="batch-delay" value="50"/>
+                        <param name="direct-deliver" value="false"/>
+                    </http-acceptor>
+                    <in-vm-acceptor name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-acceptor>
+                    <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                    <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                    <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                    <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                    <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                    <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                    <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector" ha="true" block-on-acknowledge="true" reconnect-attempts="-1"/>
+                    <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+                </server>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+                <proxy name="default" advertise="false" listener="ajp" proxies="">
+                    <dynamic-load-provider>
+                        <load-metric type="cpu"/>
+                    </dynamic-load-provider>
+                </proxy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+                <singleton-policies default="default">
+                    <singleton-policy name="default" cache-container="server">
+                        <simple-election-policy/>
+                    </singleton-policy>
+                </singleton-policies>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <ajp-listener name="ajp" socket-binding="ajp"/>
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="load-balancer">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <http-listener name="management" socket-binding="mcmp-management" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <filter-ref name="load-balancer"/>
+                    </host>
+                </server>
+                <servlet-container name="default"/>
+                <filters>
+                    <mod-cluster name="load-balancer" management-socket-binding="mcmp-management" advertise-socket-binding="modcluster" enable-http2="true" max-retries="3">
+                        <single-affinity/>
+                    </mod-cluster>
+                </filters>
+            </subsystem>
+        </profile>
+    </profiles>
+    <interfaces>
+        <interface name="management"/>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public"/>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-groups>
+        <socket-binding-group name="standard-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="ha-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+            <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+            <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+            <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+            <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+            <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="full-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="iiop" interface="unsecure" port="3528"/>
+            <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="full-ha-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="iiop" interface="unsecure" port="3528"/>
+            <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+            <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+            <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+            <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+            <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+            <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+            <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="load-balancer-sockets" default-interface="public">
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="mcmp-management" interface="private" port="${jboss.mcmp.port:8090}"/>
+            <socket-binding name="modcluster" interface="private" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        </socket-binding-group>
+    </socket-binding-groups>
+    <server-groups>
+        <server-group name="main-server-group" profile="full">
+            <jvm name="default">
+                <heap size="64m" max-size="512m"/>
+            </jvm>
+            <socket-binding-group ref="full-sockets"/>
+        </server-group>
+        <server-group name="other-server-group" profile="full-ha">
+            <jvm name="default">
+                <heap size="64m" max-size="512m"/>
+            </jvm>
+            <socket-binding-group ref="full-ha-sockets"/>
+        </server-group>
+    </server-groups>
+    <host-excludes>
+        <host-exclude name="WildFly23.0">
+            <host-release id="WildFly23.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.elytron-oidc-client"/>
+                <extension module="org.wildfly.extension.opentelemetry"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly24.0">
+            <host-release id="WildFly24.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.elytron-oidc-client"/>
+                <extension module="org.wildfly.extension.opentelemetry"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly25.0">
+            <host-release id="WildFly25.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly26.0">
+            <host-release id="WildFly26.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly27.0">
+            <host-release id="WildFly27.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+            </excluded-extensions>
+        </host-exclude>
+    </host-excludes>
+</domain>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-activemq-colocated.xml b/wildfly/docs/examples/configs/standalone-activemq-colocated.xml
new file mode 100644
index 0000000..4fcf5b9
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-activemq-colocated.xml
@@ -0,0 +1,629 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="PING"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <socket-protocol type="MPING" socket-binding="jgroups-mping"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default" persistence-enabled="true">
+                <security elytron-domain="ApplicationDomain"/>
+                <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                <journal type="ASYNCIO" file-size="102400" min-files="2"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <shared-store-primary/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <in-vm-connector name="in-vm" server-id="0"/>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <in-vm-acceptor name="in-vm" server-id="0"/>
+                <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <jms-queue name="testQueue" entries="queue/test java:jboss/exported/jms/queue/test"/>
+                <jms-topic name="testTopic" entries="topic/test java:jboss/exported/jms/topic/test"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+            <server name="backuper-server" persistence-enabled="true">
+                <security elytron-domain="ApplicationDomain"/>
+                <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                <journal type="ASYNCIO" file-size="102400" min-files="2"/>
+                <shared-store-secondary/>
+                <bindings-directory path="activemq-backup/bindings"/>
+                <journal-directory path="activemq-backup/journal"/>
+                <large-messages-directory path="activemq-backup/largemessages"/>
+                <paging-directory path="activemq-backup/paging"/>
+                <http-connector name="http-connector-backup" socket-binding="http" endpoint="http-acceptor-backup"/>
+                <http-acceptor name="http-acceptor-backup" http-listener="default"/>
+                <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector-backup"/>
+                <jgroups-discovery-group name="dg-group2" jgroups-cluster="activemq-cluster"/>
+                <cluster-connection name="my-cluster" address="jms" connector-name="http-connector-backup" discovery-group="dg-group2"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-azure-full-ha.xml b/wildfly/docs/examples/configs/standalone-azure-full-ha.xml
new file mode 100644
index 0000000..497595c
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-azure-full-ha.xml
@@ -0,0 +1,669 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="azure.AZURE_PING">
+                        <property name="storage_account_name">${jboss.jgroups.azure_ping.storage_account_name}</property>
+                        <property name="storage_access_key">${jboss.jgroups.azure_ping.storage_access_key}</property>
+                        <property name="container">${jboss.jgroups.azure_ping.container}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <protocol type="azure.AZURE_PING">
+                        <property name="storage_account_name">${jboss.jgroups.azure_ping.storage_account_name}</property>
+                        <property name="storage_access_key">${jboss.jgroups.azure_ping.storage_access_key}</property>
+                        <property name="container">${jboss.jgroups.azure_ping.container}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10" redistribution-delay="1000"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector" ha="true" block-on-acknowledge="true" reconnect-attempts="-1"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise="false" listener="ajp" proxies="">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-azure-ha.xml b/wildfly/docs/examples/configs/standalone-azure-ha.xml
new file mode 100644
index 0000000..7d263a1
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-azure-ha.xml
@@ -0,0 +1,616 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="azure.AZURE_PING">
+                        <property name="storage_account_name">${jboss.jgroups.azure_ping.storage_account_name}</property>
+                        <property name="storage_access_key">${jboss.jgroups.azure_ping.storage_access_key}</property>
+                        <property name="container">${jboss.jgroups.azure_ping.container}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <protocol type="azure.AZURE_PING">
+                        <property name="storage_account_name">${jboss.jgroups.azure_ping.storage_account_name}</property>
+                        <property name="storage_access_key">${jboss.jgroups.azure_ping.storage_access_key}</property>
+                        <property name="container">${jboss.jgroups.azure_ping.container}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise="false" listener="ajp" proxies="">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-core-microprofile.xml b/wildfly/docs/examples/configs/standalone-core-microprofile.xml
new file mode 100644
index 0000000..dbcb58d
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-core-microprofile.xml
@@ -0,0 +1,317 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.health-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.openapi-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.telemetry"/>
+        <extension module="org.wildfly.extension.opentelemetry"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-fault-tolerance-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-health-smallrye:3.0" security-enabled="false" empty-liveness-checks-status="${env.MP_HEALTH_EMPTY_LIVENESS_CHECKS_STATUS:UP}" empty-readiness-checks-status="${env.MP_HEALTH_EMPTY_READINESS_CHECKS_STATUS:UP}" empty-startup-checks-status="${env.MP_HEALTH_EMPTY_STARTUP_CHECKS_STATUS:UP}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-openapi-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-telemetry:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0"/>
+        <subsystem xmlns="urn:wildfly:opentelemetry:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-core.xml b/wildfly/docs/examples/configs/standalone-core.xml
new file mode 100644
index 0000000..2695f0b
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-core.xml
@@ -0,0 +1,281 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-ec2-full-ha.xml b/wildfly/docs/examples/configs/standalone-ec2-full-ha.xml
new file mode 100644
index 0000000..fc562c8
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-ec2-full-ha.xml
@@ -0,0 +1,667 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                        <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                        <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                        <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                        <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10" redistribution-delay="1000"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector" ha="true" block-on-acknowledge="true" reconnect-attempts="-1"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise="false" listener="ajp" proxies="">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-ec2-ha.xml b/wildfly/docs/examples/configs/standalone-ec2-ha.xml
new file mode 100644
index 0000000..a504345
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-ec2-ha.xml
@@ -0,0 +1,614 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                        <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                        <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.aws.S3_PING" module="org.jgroups.aws">
+                        <property name="region_name">${jboss.jgroups.aws.s3_ping.region_name}</property>
+                        <property name="bucket_name">${jboss.jgroups.aws.s3_ping.bucket_name}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise="false" listener="ajp" proxies="">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-genericjms.xml b/wildfly/docs/examples/configs/standalone-genericjms.xml
new file mode 100644
index 0000000..a864b09
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-genericjms.xml
@@ -0,0 +1,554 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1">
+            <resource-adapters>
+                <resource-adapter id="generic-jms-ra.rar">
+                    <module slot="main" id="org.jboss.genericjms"/>
+                    <transaction-support>NoTransaction</transaction-support>
+                    <connection-definitions>
+                        <connection-definition class-name="org.jboss.resource.adapter.jms.JmsManagedConnectionFactory" jndi-name="${genericjms.cf.jndi-name}" pool-name="${genericjms.cf.pool-name}">
+                            <config-property name="JndiParameters">java.naming.factory.initial=${genericjms.cf.jndi.contextfactory};java.naming.provider.url=${genericjms.cf.jndi.url}</config-property>
+                            <config-property name="ConnectionFactory">${genericjms.cf.jndi.lookup}</config-property>
+                            <security>
+                                <application/>
+                            </security>
+                        </connection-definition>
+                    </connection-definitions>
+                </resource-adapter>
+            </resource-adapters>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-gossip-full-ha.xml b/wildfly/docs/examples/configs/standalone-gossip-full-ha.xml
new file mode 100644
index 0000000..7a8b3ad
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-gossip-full-ha.xml
@@ -0,0 +1,667 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.TCPGOSSIP">
+                        <property name="initial_hosts">${jboss.jgroups.gossip.initial_hosts}</property>
+                        <property name="num_initial_members">${jboss.jgroups.gossip.num_initial_members}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.TCPGOSSIP">
+                        <property name="initial_hosts">${jboss.jgroups.gossip.initial_hosts}</property>
+                        <property name="num_initial_members">${jboss.jgroups.gossip.num_initial_members}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10" redistribution-delay="1000"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector" ha="true" block-on-acknowledge="true" reconnect-attempts="-1"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise="false" listener="ajp" proxies="">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-gossip-ha.xml b/wildfly/docs/examples/configs/standalone-gossip-ha.xml
new file mode 100644
index 0000000..03e2b13
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-gossip-ha.xml
@@ -0,0 +1,616 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.TCPGOSSIP">
+                        <property name="initial_hosts">${jboss.jgroups.gossip.initial_hosts}</property>
+                        <property name="num_initial_members">${jboss.jgroups.gossip.num_initial_members}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <protocol type="org.jgroups.protocols.TCPGOSSIP">
+                        <property name="initial_hosts">${jboss.jgroups.gossip.initial_hosts}</property>
+                        <property name="num_initial_members">${jboss.jgroups.gossip.num_initial_members}</property>
+                    </protocol>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise="false" listener="ajp" proxies="">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-jts.xml b/wildfly/docs/examples/configs/standalone-jts.xml
new file mode 100644
index 0000000..fc6f573
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-jts.xml
@@ -0,0 +1,534 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            <jts/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-minimalistic.xml b/wildfly/docs/examples/configs/standalone-minimalistic.xml
new file mode 100644
index 0000000..03f06fd
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-minimalistic.xml
@@ -0,0 +1,165 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.wildfly.extension.elytron"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication" console-enabled="false">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+        </subsystem>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-rts.xml b/wildfly/docs/examples/configs/standalone-rts.xml
new file mode 100644
index 0000000..c95d6c1
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-rts.xml
@@ -0,0 +1,573 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.rts"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:rts:1.0">
+            <servlet server="default-server" host="default-host" socket-binding="http"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/configs/standalone-xts.xml b/wildfly/docs/examples/configs/standalone-xts.xml
new file mode 100644
index 0000000..7b215f2
--- /dev/null
+++ b/wildfly/docs/examples/configs/standalone-xts.xml
@@ -0,0 +1,561 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.jboss.as.xts"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        <subsystem xmlns="urn:jboss:domain:xts:3.0">
+            <host name="default-host"/>
+            <xts-environment url="http://${jboss.bind.address:127.0.0.1}:8080/ws-c11/ActivationService"/>
+            <default-context-propagation enabled="true"/>
+        </subsystem>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/docs/examples/enable-microprofile.cli b/wildfly/docs/examples/enable-microprofile.cli
new file mode 100644
index 0000000..6369557
--- /dev/null
+++ b/wildfly/docs/examples/enable-microprofile.cli
@@ -0,0 +1,87 @@
+# This CLI script allows to enable Microprofile for the standalone configurations.
+# By default, standalone.xml is updated.
+# Run it from JBOSS_HOME as:
+# bin/jboss-cli.sh --file=docs/examples/enable-microprofile.cli [-Dconfig=<standalone-full.xml|standalone-ha.xml|standalone-full-ha.xml>]
+
+embed-server --server-config=${config:standalone.xml}
+
+if (outcome != success) of /subsystem=metrics:read-resource
+  /extension=org.wildfly.extension.metrics:add
+  /subsystem=metrics:add
+else
+  echo INFO: wildfly-metrics already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=health:read-resource
+  /extension=org.wildfly.extension.health:add
+  /subsystem=health:add
+else
+  echo INFO: wildfly-health already in configuration, subsystem not added.
+end-if
+
+if (outcome == success) of /subsystem=iiop-openjdk:read-resource
+  /subsystem=iiop-openjdk:write-attribute(name=security, value=elytron)
+else 
+  echo INFO: iiop-openjdk not present, skipping update to use Elytron
+end-if
+
+if (outcome == success) of /subsystem=messaging-activemq/server=default:read-resource
+  /subsystem=messaging-activemq/server=default:write-attribute(name=elytron-domain, value=ApplicationDomain)
+else 
+  echo INFO: messaging-activemq not present, skipping update to use Elytron
+end-if
+
+echo INFO: Adding microprofile subsystems.
+
+if (outcome != success) of /subsystem=microprofile-config-smallrye:read-resource
+  /extension=org.wildfly.extension.microprofile.config-smallrye:add
+  /subsystem=microprofile-config-smallrye:add
+else
+  echo INFO: microprofile-config-smallrye already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=microprofile-fault-tolerance-smallrye:read-resource
+  /extension=org.wildfly.extension.microprofile.fault-tolerance-smallrye:add
+  /subsystem=microprofile-fault-tolerance-smallrye:add
+else
+  echo INFO: microprofile-fault-tolerance-smallrye already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=microprofile-health-smallrye:read-resource
+  /extension=org.wildfly.extension.microprofile.health-smallrye:add
+  /subsystem=microprofile-health-smallrye:add(security-enabled=false, empty-liveness-checks-status="${env.MP_HEALTH_EMPTY_LIVENESS_CHECKS_STATUS:UP}", empty-readiness-checks-status="${env.MP_HEALTH_EMPTY_READINESS_CHECKS_STATUS:UP}", empty-startup-checks-status="${env.MP_HEALTH_EMPTY_STARTUP_CHECKS_STATUS:UP}")
+else
+  echo INFO: microprofile-health-smallrye already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=microprofile-jwt-smallrye:read-resource
+  /extension=org.wildfly.extension.microprofile.jwt-smallrye:add
+  /subsystem=microprofile-jwt-smallrye:add
+else
+  echo INFO: microprofile-jwt-smallrye already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=microprofile-openapi-smallrye:read-resource
+  /extension=org.wildfly.extension.microprofile.openapi-smallrye:add
+  /subsystem=microprofile-openapi-smallrye:add
+else
+  echo INFO: microprofile-openapi-smallrye already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=opentelemetry:read-resource
+  /extension=org.wildfly.extension.opentelemetry:add
+  /subsystem=opentelemetry:add
+else
+  echo INFO: opentelemetry already in configuration, subsystem not added.
+end-if
+
+if (outcome != success) of /subsystem=microprofile-telemetry:read-resource
+  /extension=org.wildfly.extension.microprofile.telemetry:add
+  /subsystem=microprofile-telemetry:add
+else
+  echo INFO: microprofile-telemetry already in configuration, subsystem not added.
+end-if
+
+echo INFO: Configuration done.
+
+stop-embedded-server
diff --git a/wildfly/docs/licenses/MIT_CONTRIBUTORS.txt b/wildfly/docs/licenses/MIT_CONTRIBUTORS.txt
new file mode 100644
index 0000000..2c5287b
--- /dev/null
+++ b/wildfly/docs/licenses/MIT_CONTRIBUTORS.txt
@@ -0,0 +1,137 @@
+MIT License Contributions
+
+
+The following authors have made contributions under the terms
+of the MIT License, a copy of which is available in this folder.
+
+Adrián Boimvaser
+Alexander Yerenkow
+Alexandro Sansan
+Alexey Makhmutov
+Andi Rustandi Djunaedi
+Andreit Retyakov
+Andrej Golovnin
+Antti Laisi
+Arcadiy Ivanov
+Ariel Küchler
+Barnabas Bodnar
+Benjamin J. Thompson
+Bernado Roubach
+Bernard Tison
+Bernd Eckenfels
+Bilal Soidik
+Boris Unckel
+Brandon Gaisford
+Brent Douglas
+Bruno Litman
+Bryan Brouckaert
+Carl Harris
+Carlos Alexandro Becker
+Carlos Guedes
+Carmelo Aprile
+Carter Kozak
+Christian Beikov
+Christoph Böhme
+Clara Fang
+Claudio Miranda
+Craig Ringer
+Daniel Straub
+Danil Arefyev
+Darryl Miles
+Dave Heath
+David Le Borgne
+David Salter
+Dmitriy Sukharev
+Dmitry Lisovsky
+Donovan Muller
+Eduardo Sant'Ana da Silva
+Enrique Gonzalez Martinez
+Eric van der Maarel
+Fabio Nascimento Brandao
+Felipe Saab
+Filipe Ferraz
+Filippe Spolti
+Flemming Harms
+Fragkiskos Chatziasimidis
+Frank Langelage
+Gregory Ramsperger
+Guillaume Grossetie
+Hana Kaspříková
+Harald Wellmann
+Harsha Ramesh
+Heinz Wilming
+Istvan Toth
+Jaikiran Pai
+Jan Stourac
+Jason Tedor
+Jens De Temmerman
+Jeroen van der Vegt
+Jim Cheesman
+Johan Björk
+Jonathan Leitschuh
+Jorge Solórzano
+Jose Vicente N. da Costa Junior
+Juan Manuel Cabrera
+Jurrie Overgoor
+Kohei Nozaki
+Konstantin Bulanov
+Krzysztof Rzymkowski
+kudrevatykh (GitHub id)
+Lionel Orellana
+Maas van den Berg
+Marcel Šebek
+Marcus (GitHub id marcus-nl)
+Marcus Klimstra
+Mark Paluch
+Markus Domdey
+Markus Gaisbauer
+Markus Lindström
+Matthew King
+Matthieu Brouillard
+Mattias Nilsson Grip
+Maxim Karavaev
+Michael Pellegrini
+Michael Reynolds
+Michael Wermeester
+Min-Wook Park
+Nick Williams
+Nicky Moelholm
+Nuno Godinho de Matos
+Oleksandr Vengrovskyi
+Ondřej Fibich
+OrDTesters
+Peter van Zettens
+Peter Weldon
+Philippe Marschall
+Pieter Bos
+Przemek Krol
+Rafał Osiecki
+Rainer Schamm
+ramsrib (GitHub id)
+randomnaja (GitHub id)
+Ricardo Arguello
+Rich DiCroce
+Rico Neubauer
+Robert Panzer
+Ryan Ralph
+Santos Zatarain Vera
+sdirbach (GitHub id)
+Sergei Egorov
+Seth Miller
+Simone Gotti
+Sławomir Wojtasiak
+Slobodan Lazarevski
+Stephen Coy
+Steve Moyer
+Teresa Miyar Gil
+The-Alchemist (GitHub id)
+Thomas Darimont
+Tobias Stadler
+Viacheslav Kabanovich
+Vidishab18 (GitHub id)
+Ville Skyttä
+Vlad Arkhipov
+Winfried Wasser
+Wisen Tanasa
+Yaguo Zhou
+Yeray Borges
\ No newline at end of file
diff --git a/wildfly/docs/licenses/apache license 2.0.txt b/wildfly/docs/licenses/apache license 2.0.txt
new file mode 100644
index 0000000..d645695
--- /dev/null
+++ b/wildfly/docs/licenses/apache license 2.0.txt	
@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.
diff --git a/wildfly/docs/licenses/bsd 2-clause simplified license.html b/wildfly/docs/licenses/bsd 2-clause simplified license.html
new file mode 100644
index 0000000..fa20f3f
--- /dev/null
+++ b/wildfly/docs/licenses/bsd 2-clause simplified license.html	
@@ -0,0 +1,645 @@
+<!DOCTYPE html>
+<!-- saved from url=(0044)https://opensource.org/license/BSD-2-Clause/ -->
+<html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+	
+	<meta name="viewport" content="width=device-width, initial-scale=1">
+	<link rel="profile" href="https://gmpg.org/xfn/11">
+
+	<title>The 2-Clause BSD License – Open Source Initiative</title>
+<meta name="robots" content="max-image-preview:large">
+<link rel="dns-prefetch" href="https://plausible.io/">
+<link rel="dns-prefetch" href="https://i0.wp.com/">
+<link rel="dns-prefetch" href="https://c0.wp.com/">
+<link rel="alternate" type="application/rss+xml" title="Open Source Initiative » Feed" href="https://opensource.org/feed/">
+<link rel="alternate" type="application/rss+xml" title="Open Source Initiative » Comments Feed" href="https://opensource.org/comments/feed/">
+<link rel="alternate" type="application/rss+xml" title="Open Source Initiative » The 2-Clause BSD License Comments Feed" href="https://opensource.org/license/bsd-2-clause/feed/">
+<script type="text/javascript" async="" id="gauges-tracker" data-site-id="62509736f88e3a22d8b40b5f" src="./The 2-Clause BSD License – Open Source Initiative_files/track.js"></script><script type="text/javascript">
+window._wpemojiSettings = {"baseUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/72x72\/","ext":".png","svgUrl":"https:\/\/s.w.org\/images\/core\/emoji\/14.0.0\/svg\/","svgExt":".svg","source":{"concatemoji":"https:\/\/opensource.org\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.1.1"}};
+/*! This file is auto-generated */
+!function(e,a,t){var n,r,o,i=a.createElement("canvas"),p=i.getContext&&i.getContext("2d");function s(e,t){var a=String.fromCharCode,e=(p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,e),0,0),i.toDataURL());return p.clearRect(0,0,i.width,i.height),p.fillText(a.apply(this,t),0,0),e===i.toDataURL()}function c(e){var t=a.createElement("script");t.src=e,t.defer=t.type="text/javascript",a.getElementsByTagName("head")[0].appendChild(t)}for(o=Array("flag","emoji"),t.supports={everything:!0,everythingExceptFlag:!0},r=0;r<o.length;r++)t.supports[o[r]]=function(e){if(p&&p.fillText)switch(p.textBaseline="top",p.font="600 32px Arial",e){case"flag":return s([127987,65039,8205,9895,65039],[127987,65039,8203,9895,65039])?!1:!s([55356,56826,55356,56819],[55356,56826,8203,55356,56819])&&!s([55356,57332,56128,56423,56128,56418,56128,56421,56128,56430,56128,56423,56128,56447],[55356,57332,8203,56128,56423,8203,56128,56418,8203,56128,56421,8203,56128,56430,8203,56128,56423,8203,56128,56447]);case"emoji":return!s([129777,127995,8205,129778,127999],[129777,127995,8203,129778,127999])}return!1}(o[r]),t.supports.everything=t.supports.everything&&t.supports[o[r]],"flag"!==o[r]&&(t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&t.supports[o[r]]);t.supports.everythingExceptFlag=t.supports.everythingExceptFlag&&!t.supports.flag,t.DOMReady=!1,t.readyCallback=function(){t.DOMReady=!0},t.supports.everything||(n=function(){t.readyCallback()},a.addEventListener?(a.addEventListener("DOMContentLoaded",n,!1),e.addEventListener("load",n,!1)):(e.attachEvent("onload",n),a.attachEvent("onreadystatechange",function(){"complete"===a.readyState&&t.readyCallback()})),(e=t.source||{}).concatemoji?c(e.concatemoji):e.wpemoji&&e.twemoji&&(c(e.twemoji),c(e.wpemoji)))}(window,document,window._wpemojiSettings);
+</script><script src="./The 2-Clause BSD License – Open Source Initiative_files/wp-emoji-release.min.js" type="text/javascript" defer=""></script>
+<style type="text/css">
+img.wp-smiley,
+img.emoji {
+	display: inline !important;
+	border: none !important;
+	box-shadow: none !important;
+	height: 1em !important;
+	width: 1em !important;
+	margin: 0 0.07em !important;
+	vertical-align: -0.1em !important;
+	background: none !important;
+	padding: 0 !important;
+}
+</style>
+	<style id="osi_font_faces-inline-css" type="text/css">
+/* vietnamese */
+@font-face {
+	font-family: 'Libre Franklin';
+	font-style: italic;
+	font-weight: 100 900;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/libre-franklin/libre-franklin-vietnamese-100-900-italic.woff2) format('woff2');
+	unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+
+/* latin-ext */
+@font-face {
+	font-family: 'Libre Franklin';
+	font-style: italic;
+	font-weight: 100 900;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/libre-franklin/libre-franklin-latin-ext-100-900-italic.woff2) format('woff2');
+	unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
+/* latin */
+@font-face {
+	font-family: 'Libre Franklin';
+	font-style: italic;
+	font-weight: 100 900;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/libre-franklin/libre-franklin-100-900-italic.woff2) format('woff2');
+	unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+/* vietnamese */
+@font-face {
+	font-family: 'Libre Franklin';
+	font-style: normal;
+	font-weight: 100 900;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/libre-franklin/libre-franklin-vietnamese-100-900.woff2) format('woff2');
+	unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+
+/* latin-ext */
+@font-face {
+	font-family: 'Libre Franklin';
+	font-style: normal;
+	font-weight: 100 900;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/libre-franklin/libre-franklin-latin-ext-100-900.woff2) format('woff2');
+	unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
+/* latin */
+@font-face {
+	font-family: 'Libre Franklin';
+	font-style: normal;
+	font-weight: 100 900;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/libre-franklin/libre-franklin-100-900.woff2) format('woff2');
+	unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}/* vietnamese */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: italic;
+	font-weight: 400;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-vietnamese-Regular-italic.woff2) format('woff2');
+	unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+
+/* latin-ext */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: italic;
+	font-weight: 400;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-latin-ext-Regular-italic.woff2) format('woff2');
+	unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
+/* latin */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: italic;
+	font-weight: 400;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-Regular-italic.woff2) format('woff2');
+	unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+/* vietnamese */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: italic;
+	font-weight: 700;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-vietnamese-Bold-italic.woff2) format('woff2');
+	unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+
+/* latin-ext */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: italic;
+	font-weight: 700;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-latin-ext-Bold-italic.woff2) format('woff2');
+	unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
+/* latin */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: italic;
+	font-weight: 700;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-Bold-italic.woff2) format('woff2');
+	unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+/* vietnamese */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: normal;
+	font-weight: 400;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-vietnamese-Regular.woff2) format('woff2');
+	unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+
+/* latin-ext */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: normal;
+	font-weight: 400;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-latin-ext-Regular.woff2) format('woff2');
+	unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
+/* latin */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: normal;
+	font-weight: 400;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-Regular.woff2) format('woff2');
+	unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+
+/* vietnamese */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: normal;
+	font-weight: 700;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-vietnamese-Bold.woff2) format('woff2');
+	unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+1EA0-1EF9, U+20AB;
+}
+
+/* latin-ext */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: normal;
+	font-weight: 700;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-latin-ext-Bold.woff2) format('woff2');
+	unicode-range: U+0100-024F, U+0259, U+1E00-1EFF, U+2020, U+20A0-20AB, U+20AD-20CF, U+2113, U+2C60-2C7F, U+A720-A7FF;
+}
+
+/* latin */
+@font-face {
+	font-family: 'Space Mono';
+	font-style: normal;
+	font-weight: 700;
+	font-display: swap;
+	src: url(https://149753425.v2.pressablecdn.com/wp-content/themes/osi/assets/fonts/space-mono/space-mono-Bold.woff2) format('woff2');
+	unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;
+}
+</style>
+<link rel="stylesheet" id="wp-block-library-css" href="./The 2-Clause BSD License – Open Source Initiative_files/style.css" type="text/css" media="all">
+<style id="wp-block-library-inline-css" type="text/css">
+.has-text-align-justify{text-align:justify;}
+</style>
+<link rel="stylesheet" id="mediaelement-css" href="./The 2-Clause BSD License – Open Source Initiative_files/mediaelementplayer-legacy.min.css" type="text/css" media="all">
+<link rel="stylesheet" id="wp-mediaelement-css" href="./The 2-Clause BSD License – Open Source Initiative_files/wp-mediaelement.min.css" type="text/css" media="all">
+<link rel="stylesheet" id="gctl-timeline-styles-css-css" href="./The 2-Clause BSD License – Open Source Initiative_files/blocks.style.build.css" type="text/css" media="all">
+<link rel="stylesheet" id="cltb_cp_timeline-cgb-style-css-css" href="./The 2-Clause BSD License – Open Source Initiative_files/blocks.style.build(1).css" type="text/css" media="all">
+<link rel="stylesheet" id="coblocks-frontend-css" href="./The 2-Clause BSD License – Open Source Initiative_files/style-coblocks-1.css" type="text/css" media="all">
+<style id="global-styles-inline-css" type="text/css">
+body{--wp--preset--shadow--natural: 0 .2rem .3rem 0 rgba(0,0,0, 0.3), 0 .5rem .6rem 0 rgba(0,0,0, 0.4);--wp--preset--shadow--sharp: .5rem .5rem 0 0 rgba(0,0,0, 0.4);--wp--preset--color--black: #000000;--wp--preset--color--cyan-bluish-gray: #abb8c3;--wp--preset--color--white: #ffffff;--wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--color--brand-color-1: #3Ea638;--wp--preset--color--brand-color-2: #FB923c;--wp--preset--color--brand-color-3: #ebc342;--wp--preset--color--brand-color-4: #e66d4c;--wp--preset--color--brand-color-5: #1c531d;--wp--preset--color--brand-links: #23881f;--wp--preset--color--brand-alert: #a11c2e;--wp--preset--color--neutral-white: #ffffff;--wp--preset--color--neutral-lightest: #f2f3f2;--wp--preset--color--neutral-light: #d2d2d2;--wp--preset--color--neutral-mid: #949494;--wp--preset--color--neutral-dark: #414042;--wp--preset--color--neutral-darkest: #000000;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,220,180) 0%,rgb(0,208,130) 100%);--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange: linear-gradient(135deg,rgba(252,185,0,1) 0%,rgba(255,105,0,1) 100%);--wp--preset--gradient--luminous-vivid-orange-to-vivid-red: linear-gradient(135deg,rgba(255,105,0,1) 0%,rgb(207,46,46) 100%);--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray: linear-gradient(135deg,rgb(238,238,238) 0%,rgb(169,184,195) 100%);--wp--preset--gradient--cool-to-warm-spectrum: linear-gradient(135deg,rgb(74,234,220) 0%,rgb(151,120,209) 20%,rgb(207,42,186) 40%,rgb(238,44,130) 60%,rgb(251,105,98) 80%,rgb(254,248,76) 100%);--wp--preset--gradient--blush-light-purple: linear-gradient(135deg,rgb(255,206,236) 0%,rgb(152,150,240) 100%);--wp--preset--gradient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--gradient--brand-color-1-gradient-darker: linear-gradient(135deg,#3Ea638 0%,#1f531c 100%);--wp--preset--gradient--brand-color-1-gradient-lighter: linear-gradient(135deg,#3Ea638 0%,#63ff59 100%);--wp--preset--gradient--brand-color-2-gradient-darker: linear-gradient(135deg,#FB923c 0%,#7d491e 100%);--wp--preset--gradient--brand-color-2-gradient-lighter: linear-gradient(135deg,#FB923c 0%,#ffe960 100%);--wp--preset--gradient--brand-color-3-gradient-darker: linear-gradient(135deg,#ebc342 0%,#756121 100%);--wp--preset--gradient--brand-color-3-gradient-lighter: linear-gradient(135deg,#ebc342 0%,#ffff69 100%);--wp--preset--gradient--brand-color-4-gradient-darker: linear-gradient(135deg,#e66d4c 0%,#733626 100%);--wp--preset--gradient--brand-color-4-gradient-lighter: linear-gradient(135deg,#e66d4c 0%,#ffae79 100%);--wp--preset--gradient--brand-color-5-gradient-darker: linear-gradient(135deg,#1c531d 0%,#0e290e 100%);--wp--preset--gradient--brand-color-5-gradient-lighter: linear-gradient(135deg,#1c531d 0%,#2c842e 100%);--wp--preset--gradient--brand-color-1-brand-color-2-gradient: linear-gradient(135deg,#3Ea638 0%,#FB923c 100%);--wp--preset--gradient--brand-color-1-brand-color-3-gradient: linear-gradient(135deg,#3Ea638 0%,#ebc342 100%);--wp--preset--gradient--brand-color-1-brand-color-4-gradient: linear-gradient(135deg,#3Ea638 0%,#e66d4c 100%);--wp--preset--gradient--brand-color-1-brand-color-5-gradient: linear-gradient(135deg,#3Ea638 0%,#1c531d 100%);--wp--preset--gradient--brand-color-2-brand-color-3-gradient: linear-gradient(135deg,#FB923c 0%,#ebc342 100%);--wp--preset--gradient--brand-color-2-brand-color-4-gradient: linear-gradient(135deg,#FB923c 0%,#e66d4c 100%);--wp--preset--gradient--brand-color-2-brand-color-5-gradient: linear-gradient(135deg,#FB923c 0%,#1c531d 100%);--wp--preset--gradient--brand-color-3-brand-color-4-gradient: linear-gradient(135deg,#ebc342 0%,#e66d4c 100%);--wp--preset--gradient--brand-color-3-brand-color-5-gradient: linear-gradient(135deg,#ebc342 0%,#1c531d 100%);--wp--preset--gradient--brand-color-4-brand-color-5-gradient: linear-gradient(135deg,#e66d4c 0%,#1c531d 100%);--wp--preset--duotone--dark-grayscale: url('#wp-duotone-dark-grayscale');--wp--preset--duotone--grayscale: url('#wp-duotone-grayscale');--wp--preset--duotone--purple-yellow: url('#wp-duotone-purple-yellow');--wp--preset--duotone--blue-red: url('#wp-duotone-blue-red');--wp--preset--duotone--midnight: url('#wp-duotone-midnight');--wp--preset--duotone--magenta-yellow: url('#wp-duotone-magenta-yellow');--wp--preset--duotone--purple-green: url('#wp-duotone-purple-green');--wp--preset--duotone--blue-orange: url('#wp-duotone-blue-orange');--wp--preset--font-size--small: clamp(14px, 0.875rem + ((1vw - 7.68px) * 0.24), 16px);--wp--preset--font-size--medium: clamp(22px, 1.375rem + ((1vw - 7.68px) * 0.24), 24px);--wp--preset--font-size--large: clamp(24px, 1.5rem + ((1vw - 7.68px) * 0.481), 28px);--wp--preset--font-size--x-large: clamp(28px, 1.75rem + ((1vw - 7.68px) * 2.404), 48px);--wp--preset--font-size--x-small: clamp(12px, 0.75rem + ((1vw - 7.68px) * 1), 12px);--wp--preset--font-size--normal: clamp(16px, 1rem + ((1vw - 7.68px) * 0.481), 20px);--wp--preset--font-size--xx-large: clamp(30px, 1.875rem + ((1vw - 7.68px) * 4.087), 64px);--wp--preset--font-family--system-font: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, Oxygen-Sans, Ubuntu, Cantarell, 'Helvetica Neue', sans-serif;--wp--preset--font-family--libre-franklin: 'Libre Franklin', sans-serif;--wp--preset--font-family--space-mono: 'Space Mono', monospace;--wp--preset--spacing--20: 0.44rem;--wp--preset--spacing--30: 0.67rem;--wp--preset--spacing--40: 1rem;--wp--preset--spacing--50: 1.5rem;--wp--preset--spacing--60: 2.25rem;--wp--preset--spacing--70: 3.38rem;--wp--preset--spacing--80: 5.06rem;--wp--custom--alignment--aligned-max-width: 50%;--wp--custom--animation--transition-duration: 0.3s;--wp--custom--animation--transition-type: all;--wp--custom--button--border--color: var(--wp--preset--color--brand-color-2);--wp--custom--button--border--color-secondary: var(--wp--preset--color--brand-color-1);--wp--custom--button--border--radius: 50px;--wp--custom--button--border--style: solid;--wp--custom--button--border--width: 2px;--wp--custom--button--color--background: var(--wp--preset--color--brand-color-2);--wp--custom--button--color--background-secondary: var(--wp--preset--color--brand-color-1);--wp--custom--button--color--text: var(--wp--preset--color--neutral-dark);--wp--custom--button--hover--color--text: var(--wp--custom--color--foreground);--wp--custom--button--hover--color--background: var(--wp--custom--color--background);--wp--custom--button--hover--border--color: var(--wp--custom--color--foreground);--wp--custom--button--spacing--padding--top: 1em;--wp--custom--button--spacing--padding--bottom: 1em;--wp--custom--button--spacing--padding--left: 1.75em;--wp--custom--button--spacing--padding--right: 1.75em;--wp--custom--button--typography--font-family: var(--wp--custom--typography--body--font-family);--wp--custom--button--typography--font-size: var(--wp--preset--font-size--normal);--wp--custom--button--typography--font-weight: 600;--wp--custom--button--typography--line-height: 1;--wp--custom--color--foreground: var(--wp--custom--typography--body--color);--wp--custom--color--background: var(--wp--preset--color--white);--wp--custom--color--primary: var(--wp--preset--color--brand-color-1);--wp--custom--color--secondary: var(--wp--preset--color--brand-color-2);--wp--custom--color--tertiary: var(--wp--preset--color--brand-color-3);--wp--custom--form--padding: 15px;--wp--custom--form--border--color: var(--wp--preset--color--neutral-dark);--wp--custom--form--border--radius: 0;--wp--custom--form--border--style: solid;--wp--custom--form--border--width: 1px;--wp--custom--form--checkbox--checked--content: "\2715";--wp--custom--form--checkbox--checked--font-size: var(--wp--preset--font-size--x-small);--wp--custom--form--checkbox--checked--position--left: 3px;--wp--custom--form--checkbox--checked--position--top: 3px;--wp--custom--form--checkbox--checked--sizing--height: 12px;--wp--custom--form--checkbox--checked--sizing--width: 12px;--wp--custom--form--checkbox--unchecked--content: "";--wp--custom--form--checkbox--unchecked--position--left: 0;--wp--custom--form--checkbox--unchecked--position--top: 0.2em;--wp--custom--form--checkbox--unchecked--sizing--height: 16px;--wp--custom--form--checkbox--unchecked--sizing--width: 16px;--wp--custom--form--color--active: var(--wp--preset--color--brand-alert);--wp--custom--form--color--background: var(--wp--preset--color--neutral-white);--wp--custom--form--color--box-shadow: none;--wp--custom--form--label--spacing--margin--bottom: var(--wp--custom--gap--baseline);--wp--custom--form--label--typography--color: var(--wp--preset--color--neutral-darkest);--wp--custom--form--label--typography--font-size: var(--wp--preset--font-size--small);--wp--custom--form--label--typography--font-family: var(--wp--custom--typography--subheading--font-family);--wp--custom--form--label--typography--font-weight: normal;--wp--custom--form--label--typography--letter-spacing: normal;--wp--custom--form--label--typography--text-transform: none;--wp--custom--form--typography--color: var(--wp--preset--color--neutral-darkest);--wp--custom--form--typography--font-size: var(--wp--preset--font-size--normal);--wp--custom--form--placeholder--color: var(--wp--preset--color--neutral-dark);--wp--custom--form--placeholder--font-size: var(--wp--preset--font-size--small);--wp--custom--form--placeholder--style: italic;--wp--custom--gallery--caption--font-size: var(--wp--preset--font-size--small);--wp--custom--typography--body--color: var(--wp--preset--color--neutral-darkest);--wp--custom--typography--body--font-family: var(--wp--preset--font-family--libre-franklin);--wp--custom--typography--body--font-weight: 400;--wp--custom--typography--body--font-weight-bold: 600;--wp--custom--typography--body--letter-space: 0;--wp--custom--typography--body--line-height: 1.6;--wp--custom--typography--body--margin: 20px;--wp--custom--typography--heading--color: var(--wp--preset--color--neutral-dark);--wp--custom--typography--heading--font-family: var(--wp--preset--font-family--libre-franklin);--wp--custom--typography--heading--font-weight: 600;--wp--custom--typography--heading--font-weight-bold: 800;--wp--custom--typography--heading--letter-space: 0;--wp--custom--typography--heading--line-height: 1.125;--wp--custom--typography--heading--margin: 20px;--wp--custom--typography--subheading--color: var(--wp--preset--color--neutral-darkest);--wp--custom--typography--subheading--font-family: var(--wp--preset--font-family--libre-franklin);--wp--custom--typography--subheading--font-weight: 600;--wp--custom--typography--subheading--font-weight-bold: 800;--wp--custom--typography--subheading--letter-space: 0;--wp--custom--typography--subheading--line-height: 1.125;--wp--custom--latest-posts--meta--color--text: var(--wp--custom--color--primary);--wp--custom--layout--content-size: 730px;--wp--custom--layout--wide-size: 1180px;--wp--custom--layout--narrow-size: 600px;--wp--custom--layout--post-size: 920px;--wp--custom--layout--sidebar-width-small: 80%;--wp--custom--layout--sidebar-width-mid: 60%;--wp--custom--gap--baseline: var(--wp--custom--spacing--small-padding);--wp--custom--gap--horizontal: min(var(--wp--custom--spacing--small-padding), 5vw);--wp--custom--gap--vertical: min(var(--wp--custom--spacing--small-padding), 5vw);--wp--custom--gap--horizontal-sm: var(--wp--custom--spacing--small-padding);--wp--custom--gap--horizontal-md: var(--wp--custom--spacing--mid-padding);--wp--custom--gap--horizontal-lg: var(--wp--custom--spacing--max-padding);--wp--custom--gap--vertical-sm: var(--wp--custom--spacing--small-padding);--wp--custom--navigation--submenu--border--color: transparent;--wp--custom--navigation--submenu--border--radius: var(--wp--custom--form--border--radius);--wp--custom--navigation--submenu--border--style: var(--wp--custom--form--border--style);--wp--custom--navigation--submenu--border--width: var(--wp--custom--form--border--width);--wp--custom--navigation--submenu--color--background: var(--wp--custom--color--primary);--wp--custom--navigation--submenu--color--text: var(--wp--custom--color--background);--wp--custom--page--title--font-size: var(--wp--preset--font-size--x-large);--wp--custom--page--title--margin: 1.5em;--wp--custom--paragraph--dropcap--margin: .1em .1em 0 0;--wp--custom--paragraph--dropcap--typography--font-size: 110px;--wp--custom--paragraph--dropcap--typography--font-weight: 400;--wp--custom--paragraph--link--typography--text-decoration: underline;--wp--custom--paragraph--link--hover--typography--text-decoration: none;--wp--custom--paragraph--link--focus--typography--text-decoration: none;--wp--custom--post-author--typography--font-weight: normal;--wp--custom--post-comment--typography--font-size: var(--wp--preset--font-size--normal);--wp--custom--post-comment--typography--line-height: var(--wp--custom--typography--body--line-height);--wp--custom--pullquote--citation--typography--font-size: var(--wp--preset--font-size--x-small);--wp--custom--pullquote--citation--typography--font-family: inherit;--wp--custom--pullquote--citation--typography--font-style: italic;--wp--custom--pullquote--citation--spacing--margin--top: var(--wp--custom--gap--vertical);--wp--custom--pullquote--typography--text-align: left;--wp--custom--pullquote--typography--font-size: var(--wp--preset--font-size--medium);--wp--custom--quote--citation--typography--font-size: var(--wp--preset--font-size--x-small);--wp--custom--quote--citation--typography--font-style: italic;--wp--custom--quote--citation--typography--font-weight: 400;--wp--custom--quote--typography--text-align: left;--wp--custom--quote--typography--font-size: var(--wp--preset--font-size--medium);--wp--custom--quote--typography--line-height: 1.4;--wp--custom--separator--opacity: 1;--wp--custom--separator--width: 150px;--wp--custom--spacing--small-padding: 16px;--wp--custom--spacing--mid-padding: 32px;--wp--custom--spacing--max-padding: 48px;--wp--custom--table--border--color: ;--wp--custom--table--border--width: 1px;--wp--custom--table--border--style: solid;--wp--custom--table--color--background: transparent;--wp--custom--table--header--border--color: ;--wp--custom--table--header--border--width: 2px;--wp--custom--table--header--color--background: red;--wp--custom--table--typography--font-size: var(--wp--preset--font-size--small);--wp--custom--table--typography--line-height: 1.4;--wp--custom--table--figcaption--typography--font-size: var(--wp--preset--font-size--x-small);--wp--custom--table--spacing--cell-padding: .25em;--wp--custom--video--caption--text-align: center;--wp--custom--video--caption--margin: var(--wp--custom--gap--vertical) auto;}body { margin: 0;--wp--style--global--content-size: var(--wp--custom--layout--content-size);--wp--style--global--wide-size: var(--wp--custom--layout--wide-size);}.wp-site-blocks > .alignleft { float: left; margin-right: 2em; }.wp-site-blocks > .alignright { float: right; margin-left: 2em; }.wp-site-blocks > .aligncenter { justify-content: center; margin-left: auto; margin-right: auto; }.wp-site-blocks > * { margin-block-start: 0; margin-block-end: 0; }.wp-site-blocks > * + * { margin-block-start: 24px; }body { --wp--style--block-gap: 24px; }body .is-layout-flow > *{margin-block-start: 0;margin-block-end: 0;}body .is-layout-flow > * + *{margin-block-start: 24px;margin-block-end: 0;}body .is-layout-constrained > *{margin-block-start: 0;margin-block-end: 0;}body .is-layout-constrained > * + *{margin-block-start: 24px;margin-block-end: 0;}body .is-layout-flex{gap: 24px;}body .is-layout-flow > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-flow > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-flow > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignleft{float: left;margin-inline-start: 0;margin-inline-end: 2em;}body .is-layout-constrained > .alignright{float: right;margin-inline-start: 2em;margin-inline-end: 0;}body .is-layout-constrained > .aligncenter{margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > :where(:not(.alignleft):not(.alignright):not(.alignfull)){max-width: var(--wp--style--global--content-size);margin-left: auto !important;margin-right: auto !important;}body .is-layout-constrained > .alignwide{max-width: var(--wp--style--global--wide-size);}body .is-layout-flex{display: flex;}body .is-layout-flex{flex-wrap: wrap;align-items: center;}body .is-layout-flex > *{margin: 0;}body{padding-top: 0px;padding-right: 0px;padding-bottom: 0px;padding-left: 0px;}a:where(:not(.wp-element-button)){text-decoration: underline;}.wp-element-button, .wp-block-button__link{background-color: #32373c;border-width: 0;color: #fff;font-family: inherit;font-size: inherit;line-height: inherit;padding: calc(0.667em + 2px) calc(1.333em + 2px);text-decoration: none;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !important;}.has-pale-pink-color{color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-color{color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-color{color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-color{color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-color{color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-color{color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-color{color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-color{color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-color{color: var(--wp--preset--color--vivid-purple) !important;}.has-brand-color-1-color{color: var(--wp--preset--color--brand-color-1) !important;}.has-brand-color-2-color{color: var(--wp--preset--color--brand-color-2) !important;}.has-brand-color-3-color{color: var(--wp--preset--color--brand-color-3) !important;}.has-brand-color-4-color{color: var(--wp--preset--color--brand-color-4) !important;}.has-brand-color-5-color{color: var(--wp--preset--color--brand-color-5) !important;}.has-brand-links-color{color: var(--wp--preset--color--brand-links) !important;}.has-brand-alert-color{color: var(--wp--preset--color--brand-alert) !important;}.has-neutral-white-color{color: var(--wp--preset--color--neutral-white) !important;}.has-neutral-lightest-color{color: var(--wp--preset--color--neutral-lightest) !important;}.has-neutral-light-color{color: var(--wp--preset--color--neutral-light) !important;}.has-neutral-mid-color{color: var(--wp--preset--color--neutral-mid) !important;}.has-neutral-dark-color{color: var(--wp--preset--color--neutral-dark) !important;}.has-neutral-darkest-color{color: var(--wp--preset--color--neutral-darkest) !important;}.has-black-background-color{background-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-background-color{background-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-background-color{background-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-background-color{background-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-background-color{background-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-background-color{background-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-background-color{background-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-background-color{background-color: var(--wp--preset--color--vivid-purple) !important;}.has-brand-color-1-background-color{background-color: var(--wp--preset--color--brand-color-1) !important;}.has-brand-color-2-background-color{background-color: var(--wp--preset--color--brand-color-2) !important;}.has-brand-color-3-background-color{background-color: var(--wp--preset--color--brand-color-3) !important;}.has-brand-color-4-background-color{background-color: var(--wp--preset--color--brand-color-4) !important;}.has-brand-color-5-background-color{background-color: var(--wp--preset--color--brand-color-5) !important;}.has-brand-links-background-color{background-color: var(--wp--preset--color--brand-links) !important;}.has-brand-alert-background-color{background-color: var(--wp--preset--color--brand-alert) !important;}.has-neutral-white-background-color{background-color: var(--wp--preset--color--neutral-white) !important;}.has-neutral-lightest-background-color{background-color: var(--wp--preset--color--neutral-lightest) !important;}.has-neutral-light-background-color{background-color: var(--wp--preset--color--neutral-light) !important;}.has-neutral-mid-background-color{background-color: var(--wp--preset--color--neutral-mid) !important;}.has-neutral-dark-background-color{background-color: var(--wp--preset--color--neutral-dark) !important;}.has-neutral-darkest-background-color{background-color: var(--wp--preset--color--neutral-darkest) !important;}.has-black-border-color{border-color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-border-color{border-color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-border-color{border-color: var(--wp--preset--color--white) !important;}.has-pale-pink-border-color{border-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-border-color{border-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-border-color{border-color: var(--wp--preset--color--luminous-vivid-orange) !important;}.has-luminous-vivid-amber-border-color{border-color: var(--wp--preset--color--luminous-vivid-amber) !important;}.has-light-green-cyan-border-color{border-color: var(--wp--preset--color--light-green-cyan) !important;}.has-vivid-green-cyan-border-color{border-color: var(--wp--preset--color--vivid-green-cyan) !important;}.has-pale-cyan-blue-border-color{border-color: var(--wp--preset--color--pale-cyan-blue) !important;}.has-vivid-cyan-blue-border-color{border-color: var(--wp--preset--color--vivid-cyan-blue) !important;}.has-vivid-purple-border-color{border-color: var(--wp--preset--color--vivid-purple) !important;}.has-brand-color-1-border-color{border-color: var(--wp--preset--color--brand-color-1) !important;}.has-brand-color-2-border-color{border-color: var(--wp--preset--color--brand-color-2) !important;}.has-brand-color-3-border-color{border-color: var(--wp--preset--color--brand-color-3) !important;}.has-brand-color-4-border-color{border-color: var(--wp--preset--color--brand-color-4) !important;}.has-brand-color-5-border-color{border-color: var(--wp--preset--color--brand-color-5) !important;}.has-brand-links-border-color{border-color: var(--wp--preset--color--brand-links) !important;}.has-brand-alert-border-color{border-color: var(--wp--preset--color--brand-alert) !important;}.has-neutral-white-border-color{border-color: var(--wp--preset--color--neutral-white) !important;}.has-neutral-lightest-border-color{border-color: var(--wp--preset--color--neutral-lightest) !important;}.has-neutral-light-border-color{border-color: var(--wp--preset--color--neutral-light) !important;}.has-neutral-mid-border-color{border-color: var(--wp--preset--color--neutral-mid) !important;}.has-neutral-dark-border-color{border-color: var(--wp--preset--color--neutral-dark) !important;}.has-neutral-darkest-border-color{border-color: var(--wp--preset--color--neutral-darkest) !important;}.has-vivid-cyan-blue-to-vivid-purple-gradient-background{background: var(--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple) !important;}.has-light-green-cyan-to-vivid-green-cyan-gradient-background{background: var(--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan) !important;}.has-luminous-vivid-amber-to-luminous-vivid-orange-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-amber-to-luminous-vivid-orange) !important;}.has-luminous-vivid-orange-to-vivid-red-gradient-background{background: var(--wp--preset--gradient--luminous-vivid-orange-to-vivid-red) !important;}.has-very-light-gray-to-cyan-bluish-gray-gradient-background{background: var(--wp--preset--gradient--very-light-gray-to-cyan-bluish-gray) !important;}.has-cool-to-warm-spectrum-gradient-background{background: var(--wp--preset--gradient--cool-to-warm-spectrum) !important;}.has-blush-light-purple-gradient-background{background: var(--wp--preset--gradient--blush-light-purple) !important;}.has-blush-bordeaux-gradient-background{background: var(--wp--preset--gradient--blush-bordeaux) !important;}.has-luminous-dusk-gradient-background{background: var(--wp--preset--gradient--luminous-dusk) !important;}.has-pale-ocean-gradient-background{background: var(--wp--preset--gradient--pale-ocean) !important;}.has-electric-grass-gradient-background{background: var(--wp--preset--gradient--electric-grass) !important;}.has-midnight-gradient-background{background: var(--wp--preset--gradient--midnight) !important;}.has-brand-color-1-gradient-darker-gradient-background{background: var(--wp--preset--gradient--brand-color-1-gradient-darker) !important;}.has-brand-color-1-gradient-lighter-gradient-background{background: var(--wp--preset--gradient--brand-color-1-gradient-lighter) !important;}.has-brand-color-2-gradient-darker-gradient-background{background: var(--wp--preset--gradient--brand-color-2-gradient-darker) !important;}.has-brand-color-2-gradient-lighter-gradient-background{background: var(--wp--preset--gradient--brand-color-2-gradient-lighter) !important;}.has-brand-color-3-gradient-darker-gradient-background{background: var(--wp--preset--gradient--brand-color-3-gradient-darker) !important;}.has-brand-color-3-gradient-lighter-gradient-background{background: var(--wp--preset--gradient--brand-color-3-gradient-lighter) !important;}.has-brand-color-4-gradient-darker-gradient-background{background: var(--wp--preset--gradient--brand-color-4-gradient-darker) !important;}.has-brand-color-4-gradient-lighter-gradient-background{background: var(--wp--preset--gradient--brand-color-4-gradient-lighter) !important;}.has-brand-color-5-gradient-darker-gradient-background{background: var(--wp--preset--gradient--brand-color-5-gradient-darker) !important;}.has-brand-color-5-gradient-lighter-gradient-background{background: var(--wp--preset--gradient--brand-color-5-gradient-lighter) !important;}.has-brand-color-1-brand-color-2-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-1-brand-color-2-gradient) !important;}.has-brand-color-1-brand-color-3-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-1-brand-color-3-gradient) !important;}.has-brand-color-1-brand-color-4-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-1-brand-color-4-gradient) !important;}.has-brand-color-1-brand-color-5-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-1-brand-color-5-gradient) !important;}.has-brand-color-2-brand-color-3-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-2-brand-color-3-gradient) !important;}.has-brand-color-2-brand-color-4-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-2-brand-color-4-gradient) !important;}.has-brand-color-2-brand-color-5-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-2-brand-color-5-gradient) !important;}.has-brand-color-3-brand-color-4-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-3-brand-color-4-gradient) !important;}.has-brand-color-3-brand-color-5-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-3-brand-color-5-gradient) !important;}.has-brand-color-4-brand-color-5-gradient-gradient-background{background: var(--wp--preset--gradient--brand-color-4-brand-color-5-gradient) !important;}.has-small-font-size{font-size: var(--wp--preset--font-size--small) !important;}.has-medium-font-size{font-size: var(--wp--preset--font-size--medium) !important;}.has-large-font-size{font-size: var(--wp--preset--font-size--large) !important;}.has-x-large-font-size{font-size: var(--wp--preset--font-size--x-large) !important;}.has-x-small-font-size{font-size: var(--wp--preset--font-size--x-small) !important;}.has-normal-font-size{font-size: var(--wp--preset--font-size--normal) !important;}.has-xx-large-font-size{font-size: var(--wp--preset--font-size--xx-large) !important;}.has-system-font-font-family{font-family: var(--wp--preset--font-family--system-font) !important;}.has-libre-franklin-font-family{font-family: var(--wp--preset--font-family--libre-franklin) !important;}.has-space-mono-font-family{font-family: var(--wp--preset--font-family--space-mono) !important;}
+.wp-block-pullquote{font-size: clamp(1.125em, 1.125rem + ((1vw - 0.48em) * 0.721), 1.5em);line-height: 1.6;}
+.wp-block-navigation a:where(:not(.wp-element-button)){color: inherit;}
+</style>
+<link rel="stylesheet" id="classic-theme-styles-css" href="./The 2-Clause BSD License – Open Source Initiative_files/classic.css" type="text/css" media="all">
+<link rel="stylesheet" id="dashicons-css" href="./The 2-Clause BSD License – Open Source Initiative_files/dashicons.min.css" type="text/css" media="all">
+<link rel="stylesheet" id="wp-components-css" href="./The 2-Clause BSD License – Open Source Initiative_files/style(1).css" type="text/css" media="all">
+<link rel="stylesheet" id="godaddy-styles-css" href="./The 2-Clause BSD License – Open Source Initiative_files/latest.css" type="text/css" media="all">
+<link rel="stylesheet" id="osi-style-css" href="./The 2-Clause BSD License – Open Source Initiative_files/style(2).css" type="text/css" media="all">
+<style id="osi-style-inline-css" type="text/css">
+:root{--wp--preset--color--brand-color-1:#3Ea638; --wp--preset--color--brand-color-1-darker:#2e7c2a; --wp--preset--color--brand-color-1-lighter:#4dcf46; --wp--preset--color--brand-color-2:#FB923c; --wp--preset--color--brand-color-2-darker:#bc6d2d; --wp--preset--color--brand-color-2-lighter:#ffb64b; --wp--preset--color--brand-color-3:#ebc342; --wp--preset--color--brand-color-3-darker:#b09231; --wp--preset--color--brand-color-3-lighter:#fff352; --wp--preset--color--brand-color-4:#e66d4c; --wp--preset--color--brand-color-4-darker:#ac5139; --wp--preset--color--brand-color-4-lighter:#ff885f; --wp--preset--color--brand-color-5:#1c531d; --wp--preset--color--brand-color-5-darker:#153e15; --wp--preset--color--brand-color-5-lighter:#236724; --wp--preset--color--brand-links:#23881f; --wp--preset--color--brand-links-darker:#1a6617; --wp--preset--color--brand-links-lighter:#2baa26; --wp--preset--color--brand-alert:#a11c2e; --wp--preset--color--brand-alert-darker:#781522; --wp--preset--color--brand-alert-lighter:#c92339; --wp--custom--color--brand-text:#000000; --wp--custom--color--brand-heading:#414042; --wp--custom--color--brand-subheading:#414042; --wp--preset--color--neutral-white:#ffffff; --wp--preset--color--neutral-lightest:#f2f3f2; --wp--preset--color--neutral-light:#d2d2d2; --wp--preset--color--neutral-mid:#949494; --wp--preset--color--neutral-dark:#414042; --wp--preset--color--neutral-darkest:#000000; }
+.has-brand-color-1-background-color{background-color:#3Ea638 !important;} .has-brand-color-1-color{color:#3Ea638 !important;} .has-brand-color-2-background-color{background-color:#FB923c !important;} .has-brand-color-2-color{color:#FB923c !important;} .has-brand-color-3-background-color{background-color:#ebc342 !important;} .has-brand-color-3-color{color:#ebc342 !important;} .has-brand-color-4-background-color{background-color:#e66d4c !important;} .has-brand-color-4-color{color:#e66d4c !important;} .has-brand-color-5-background-color{background-color:#1c531d !important;} .has-brand-color-5-color{color:#1c531d !important;} .has-brand-links-background-color{background-color:#23881f !important;} .has-brand-links-color{color:#23881f !important;} .has-brand-alert-background-color{background-color:#a11c2e !important;} .has-brand-alert-color{color:#a11c2e !important;} .has-brand-text-color{color:#000000 !important;} .has-brand-heading-color{color:#414042 !important;} .has-brand-subheading-color{color:#414042 !important;} .has-neutral-white-background-color{background-color:#ffffff !important;} .has-neutral-white-color{color:#ffffff !important;} .has-neutral-lightest-background-color{background-color:#f2f3f2 !important;} .has-neutral-lightest-color{color:#f2f3f2 !important;} .has-neutral-light-background-color{background-color:#d2d2d2 !important;} .has-neutral-light-color{color:#d2d2d2 !important;} .has-neutral-mid-background-color{background-color:#949494 !important;} .has-neutral-mid-color{color:#949494 !important;} .has-neutral-dark-background-color{background-color:#414042 !important;} .has-neutral-dark-color{color:#414042 !important;} .has-neutral-darkest-background-color{background-color:#000000 !important;} .has-neutral-darkest-color{color:#000000 !important;}
+:root{--wp--preset--gradient--brand-color-1-gradient-darker:linear-gradient(90deg,#3Ea638 0%,#1f531c 100%); --wp--preset--gradient--brand-color-1-gradient-lighter:linear-gradient(90deg,#3Ea638 0%,#63ff59 100%); --wp--preset--gradient--brand-color-1-brand-color-2-gradient:linear-gradient(90deg,#3Ea638 0%,#FB923c 100%); --wp--preset--gradient--brand-color-1-brand-color-3-gradient:linear-gradient(90deg,#3Ea638 0%,#ebc342 100%); --wp--preset--gradient--brand-color-1-brand-color-4-gradient:linear-gradient(90deg,#3Ea638 0%,#e66d4c 100%); --wp--preset--gradient--brand-color-1-brand-color-5-gradient:linear-gradient(90deg,#3Ea638 0%,#1c531d 100%); --wp--preset--gradient--brand-color-1-neutral-lightest-gradient:linear-gradient(90deg,#3Ea638 0%,#f4f2f4 100%); --wp--preset--gradient--brand-color-1-neutral-darkest-gradient:linear-gradient(90deg,#3Ea638 0%,#1e1e1e 100%); --wp--preset--gradient--brand-color-2-gradient-darker:linear-gradient(90deg,#FB923c 0%,#7d491e 100%); --wp--preset--gradient--brand-color-2-gradient-lighter:linear-gradient(90deg,#FB923c 0%,#ffe960 100%); --wp--preset--gradient--brand-color-2-brand-color-3-gradient:linear-gradient(90deg,#FB923c 0%,#ebc342 100%); --wp--preset--gradient--brand-color-2-brand-color-4-gradient:linear-gradient(90deg,#FB923c 0%,#e66d4c 100%); --wp--preset--gradient--brand-color-2-brand-color-5-gradient:linear-gradient(90deg,#FB923c 0%,#1c531d 100%); --wp--preset--gradient--brand-color-2-neutral-lightest-gradient:linear-gradient(90deg,#FB923c 0%,#f4f2f4 100%); --wp--preset--gradient--brand-color-2-neutral-darkest-gradient:linear-gradient(90deg,#FB923c 0%,#1e1e1e 100%); --wp--preset--gradient--brand-color-3-gradient-darker:linear-gradient(90deg,#ebc342 0%,#756121 100%); --wp--preset--gradient--brand-color-3-gradient-lighter:linear-gradient(90deg,#ebc342 0%,#ffff69 100%); --wp--preset--gradient--brand-color-3-brand-color-4-gradient:linear-gradient(90deg,#ebc342 0%,#e66d4c 100%); --wp--preset--gradient--brand-color-3-brand-color-5-gradient:linear-gradient(90deg,#ebc342 0%,#1c531d 100%); --wp--preset--gradient--brand-color-3-neutral-lightest-gradient:linear-gradient(90deg,#ebc342 0%,#f4f2f4 100%); --wp--preset--gradient--brand-color-3-neutral-darkest-gradient:linear-gradient(90deg,#ebc342 0%,#1e1e1e 100%); --wp--preset--gradient--brand-color-4-gradient-darker:linear-gradient(90deg,#e66d4c 0%,#733626 100%); --wp--preset--gradient--brand-color-4-gradient-lighter:linear-gradient(90deg,#e66d4c 0%,#ffae79 100%); --wp--preset--gradient--brand-color-4-brand-color-5-gradient:linear-gradient(90deg,#e66d4c 0%,#1c531d 100%); --wp--preset--gradient--brand-color-4-neutral-lightest-gradient:linear-gradient(90deg,#e66d4c 0%,#f4f2f4 100%); --wp--preset--gradient--brand-color-4-neutral-darkest-gradient:linear-gradient(90deg,#e66d4c 0%,#1e1e1e 100%); --wp--preset--gradient--brand-color-5-gradient-darker:linear-gradient(90deg,#1c531d 0%,#0e290e 100%); --wp--preset--gradient--brand-color-5-gradient-lighter:linear-gradient(90deg,#1c531d 0%,#2c842e 100%); --wp--preset--gradient--brand-color-5-neutral-lightest-gradient:linear-gradient(90deg,#1c531d 0%,#f4f2f4 100%); --wp--preset--gradient--brand-color-5-neutral-darkest-gradient:linear-gradient(90deg,#1c531d 0%,#1e1e1e 100%); --wp--preset--gradient--neutral-lightest-gradient-darker:linear-gradient(90deg,#f4f2f4 0%,#7a797a 100%); --wp--preset--gradient--neutral-lightest-gradient-lighter:linear-gradient(90deg,#f4f2f4 0%,#ffffff 100%); --wp--preset--gradient--neutral-lightest-neutral-darkest-gradient:linear-gradient(90deg,#f4f2f4 0%,#1e1e1e 100%); --wp--preset--gradient--neutral-darkest-gradient-darker:linear-gradient(90deg,#1e1e1e 0%,#0f0f0f 100%); --wp--preset--gradient--neutral-darkest-gradient-lighter:linear-gradient(90deg,#1e1e1e 0%,#303030 100%); }
+.has-brand-color-1-gradient-darker-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#1f531c 100%) !important;} .has-brand-color-1-gradient-lighter-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#63ff59 100%) !important;} .has-brand-color-1-brand-color-2-gradient-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#FB923c 100%) !important;} .has-brand-color-1-brand-color-3-gradient-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#ebc342 100%) !important;} .has-brand-color-1-brand-color-4-gradient-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#e66d4c 100%) !important;} .has-brand-color-1-brand-color-5-gradient-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#1c531d 100%) !important;} .has-brand-color-1-neutral-lightest-gradient-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#f4f2f4 100%) !important;} .has-brand-color-1-neutral-darkest-gradient-gradient-background{background:linear-gradient(90deg,#3Ea638 0%,#1e1e1e 100%) !important;} .has-brand-color-2-gradient-darker-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#7d491e 100%) !important;} .has-brand-color-2-gradient-lighter-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#ffe960 100%) !important;} .has-brand-color-2-brand-color-3-gradient-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#ebc342 100%) !important;} .has-brand-color-2-brand-color-4-gradient-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#e66d4c 100%) !important;} .has-brand-color-2-brand-color-5-gradient-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#1c531d 100%) !important;} .has-brand-color-2-neutral-lightest-gradient-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#f4f2f4 100%) !important;} .has-brand-color-2-neutral-darkest-gradient-gradient-background{background:linear-gradient(90deg,#FB923c 0%,#1e1e1e 100%) !important;} .has-brand-color-3-gradient-darker-gradient-background{background:linear-gradient(90deg,#ebc342 0%,#756121 100%) !important;} .has-brand-color-3-gradient-lighter-gradient-background{background:linear-gradient(90deg,#ebc342 0%,#ffff69 100%) !important;} .has-brand-color-3-brand-color-4-gradient-gradient-background{background:linear-gradient(90deg,#ebc342 0%,#e66d4c 100%) !important;} .has-brand-color-3-brand-color-5-gradient-gradient-background{background:linear-gradient(90deg,#ebc342 0%,#1c531d 100%) !important;} .has-brand-color-3-neutral-lightest-gradient-gradient-background{background:linear-gradient(90deg,#ebc342 0%,#f4f2f4 100%) !important;} .has-brand-color-3-neutral-darkest-gradient-gradient-background{background:linear-gradient(90deg,#ebc342 0%,#1e1e1e 100%) !important;} .has-brand-color-4-gradient-darker-gradient-background{background:linear-gradient(90deg,#e66d4c 0%,#733626 100%) !important;} .has-brand-color-4-gradient-lighter-gradient-background{background:linear-gradient(90deg,#e66d4c 0%,#ffae79 100%) !important;} .has-brand-color-4-brand-color-5-gradient-gradient-background{background:linear-gradient(90deg,#e66d4c 0%,#1c531d 100%) !important;} .has-brand-color-4-neutral-lightest-gradient-gradient-background{background:linear-gradient(90deg,#e66d4c 0%,#f4f2f4 100%) !important;} .has-brand-color-4-neutral-darkest-gradient-gradient-background{background:linear-gradient(90deg,#e66d4c 0%,#1e1e1e 100%) !important;} .has-brand-color-5-gradient-darker-gradient-background{background:linear-gradient(90deg,#1c531d 0%,#0e290e 100%) !important;} .has-brand-color-5-gradient-lighter-gradient-background{background:linear-gradient(90deg,#1c531d 0%,#2c842e 100%) !important;} .has-brand-color-5-neutral-lightest-gradient-gradient-background{background:linear-gradient(90deg,#1c531d 0%,#f4f2f4 100%) !important;} .has-brand-color-5-neutral-darkest-gradient-gradient-background{background:linear-gradient(90deg,#1c531d 0%,#1e1e1e 100%) !important;} .has-neutral-lightest-gradient-darker-gradient-background{background:linear-gradient(90deg,#f4f2f4 0%,#7a797a 100%) !important;} .has-neutral-lightest-gradient-lighter-gradient-background{background:linear-gradient(90deg,#f4f2f4 0%,#ffffff 100%) !important;} .has-neutral-lightest-neutral-darkest-gradient-gradient-background{background:linear-gradient(90deg,#f4f2f4 0%,#1e1e1e 100%) !important;} .has-neutral-darkest-gradient-darker-gradient-background{background:linear-gradient(90deg,#1e1e1e 0%,#0f0f0f 100%) !important;} .has-neutral-darkest-gradient-lighter-gradient-background{background:linear-gradient(90deg,#1e1e1e 0%,#303030 100%) !important;}
+:root{--wp--custom--color--brand-color-1-rgb:62, 166, 56; --wp--custom--color--brand-color-2-rgb:251, 146, 60; --wp--custom--color--brand-color-3-rgb:235, 195, 66; --wp--custom--color--brand-color-4-rgb:230, 109, 76; --wp--custom--color--brand-color-5-rgb:28, 83, 29; --wp--custom--color--neutral-white-rgb:255, 255, 255; --wp--custom--color--neutral-lightest-rgb:242, 243, 242; --wp--custom--color--neutral-light-rgb:210, 210, 210; --wp--custom--color--neutral-mid-rgb:148, 148, 148; --wp--custom--color--neutral-dark-rgb:65, 64, 66; --wp--custom--color--neutral-darkest-rgb:0, 0, 0; }
+
+.wp-block-cover { background-image:url()}
+</style>
+<link rel="stylesheet" id="genericons-css" href="./The 2-Clause BSD License – Open Source Initiative_files/genericons.css" type="text/css" media="all">
+<link rel="stylesheet" id="jetpack_css-css" href="./The 2-Clause BSD License – Open Source Initiative_files/jetpack.css" type="text/css" media="all">
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/regenerator-runtime.min.js" id="regenerator-runtime-js"></script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/inert-polyfill.min.js" id="wp-inert-polyfill-js"></script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/wp-polyfill.min.js" id="wp-polyfill-js"></script>
+<script type="text/javascript" id="jetpack-block-contact-form-js-extra">
+/* <![CDATA[ */
+var Jetpack_Block_Assets_Base_Url = {"url":"https:\/\/opensource.org\/wp-content\/plugins\/jetpack\/_inc\/blocks\/"};
+/* ]]> */
+</script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/view.js" id="jetpack-block-contact-form-js"></script>
+<script type="text/javascript" id="media-video-jwt-bridge-js-extra">
+/* <![CDATA[ */
+var videopressAjax = {"ajaxUrl":"https:\/\/opensource.org\/wp-admin\/admin-ajax.php","bridgeUrl":"https:\/\/opensource.org\/wp-content\/plugins\/jetpack\/jetpack_vendor\/automattic\/jetpack-videopress\/src\/..\/build\/lib\/token-bridge.js","post_id":"373"};
+/* ]]> */
+</script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/token-bridge.js" id="media-video-jwt-bridge-js"></script>
+<script type="text/javascript" async="" defer="" data-domain="opensource.org" data-api="https://plausible.io/api/event" src="./The 2-Clause BSD License – Open Source Initiative_files/plausible.outbound-links.js" id="plausible-analytics-js"></script>
+<script type="text/javascript" id="plausible-analytics-js-after">
+window.plausible = window.plausible || function() { (window.plausible.q = window.plausible.q || []).push(arguments) }
+</script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/jquery.min.js" id="jquery-core-js"></script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/jquery-migrate.min.js" id="jquery-migrate-js"></script>
+<link rel="https://api.w.org/" href="https://opensource.org/wp-json/"><link rel="alternate" type="application/json" href="https://opensource.org/wp-json/wp/v2/license/373"><link rel="EditURI" type="application/rsd+xml" title="RSD" href="https://opensource.org/xmlrpc.php?rsd">
+<link rel="wlwmanifest" type="application/wlwmanifest+xml" href="https://opensource.org/wp-includes/wlwmanifest.xml">
+
+<link rel="canonical" href="https://opensource.org/license/bsd-2-clause/">
+<link rel="shortlink" href="https://opensource.org/?p=373">
+<link rel="alternate" type="application/json+oembed" href="https://opensource.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fopensource.org%2Flicense%2Fbsd-2-clause%2F">
+<link rel="alternate" type="text/xml+oembed" href="https://opensource.org/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fopensource.org%2Flicense%2Fbsd-2-clause%2F&amp;format=xml">
+	<style>img#wpstats{display:none}</style>
+				<style type="text/css">
+					.site-title,
+			.site-description {
+				position: absolute;
+				clip: rect(1px, 1px, 1px, 1px);
+			}
+					</style>
+		
+<!-- Jetpack Open Graph Tags -->
+<meta property="og:type" content="article">
+<meta property="og:title" content="The 2-Clause BSD License">
+<meta property="og:url" content="https://opensource.org/license/bsd-2-clause/">
+<meta property="og:description" content="SPDX short identifier: BSD-2-Clause Note: This license has also been called the “Simplified BSD License” and the “FreeBSD License”. See also the 3-clause BSD License. Copyri…">
+<meta property="article:published_time" content="2006-10-31T04:56:16+00:00">
+<meta property="article:modified_time" content="2023-02-15T16:22:48+00:00">
+<meta property="og:site_name" content="Open Source Initiative">
+<meta property="og:image" content="https://i0.wp.com/opensource.org/wp-content/uploads/2006/07/OSI_Approved_License.png?fit=873%2C1200&amp;ssl=1">
+<meta property="og:image:width" content="873">
+<meta property="og:image:height" content="1200">
+<meta property="og:image:alt" content="OSI_Approved_License">
+<meta property="og:locale" content="en_US">
+<meta name="twitter:text:title" content="The 2-Clause BSD License">
+<meta name="twitter:image" content="https://i0.wp.com/opensource.org/wp-content/uploads/2006/07/OSI_Approved_License.png?fit=873%2C1200&amp;ssl=1&amp;w=640">
+<meta name="twitter:image:alt" content="OSI_Approved_License">
+<meta name="twitter:card" content="summary_large_image">
+
+<!-- End Jetpack Open Graph Tags -->
+<link rel="icon" href="https://i0.wp.com/opensource.org/wp-content/uploads/2023/01/cropped-cropped-OSI_Horizontal_Logo_0-e1674081292667.png?fit=32%2C32&amp;ssl=1" sizes="32x32">
+<link rel="icon" href="https://i0.wp.com/opensource.org/wp-content/uploads/2023/01/cropped-cropped-OSI_Horizontal_Logo_0-e1674081292667.png?fit=192%2C192&amp;ssl=1" sizes="192x192">
+<link rel="apple-touch-icon" href="https://i0.wp.com/opensource.org/wp-content/uploads/2023/01/cropped-cropped-OSI_Horizontal_Logo_0-e1674081292667.png?fit=180%2C180&amp;ssl=1">
+<meta name="msapplication-TileImage" content="https://i0.wp.com/opensource.org/wp-content/uploads/2023/01/cropped-cropped-OSI_Horizontal_Logo_0-e1674081292667.png?fit=270%2C270&amp;ssl=1">
+		<style type="text/css" id="wp-custom-css">
+			/* Carrie's design tweaks - 11.2.22 */
+
+.wp-block-coblocks-posts__content a {
+	line-height: 1.3em;
+}
+.wp-block-post-title {
+	margin-bottom: 1em;
+}
+.entry-content h2 {
+	font-size:2rem;
+	font-weight:700;
+	margin-top: 2em;
+} 
+.entry-content h3 {
+	color: #414042;
+	font-size:1.5rem;
+	font-weight: 700;
+	margin-top: 2em;
+}
+.wp-block-media-text__content h2, .wp-block-media-text__content h3 {
+	margin-top:0;
+}
+p {
+	margin-bottom: 1.5em;
+}
+ li {
+	 margin-bottom:1em;
+}
+blockquote > *, .wp-block-pullquote > *, .wp-block-quote > * {
+    font-style: italic;
+    font-size: 18px;
+    font-weight: 200;
+    line-height: 1.8rem;
+    margin: 2em 0 2rem 0!important;
+}
+
+/*to address centering a single post if there is only one */
+.wp-block-post-template.is-flex-container li {
+	margin: 0 auto;
+}
+
+/* Remove when the changes to prod are live 2-13-2023 */
+
+
+@media only screen and (min-width: 1200px) {
+	.header--blog-name img {
+	margin-top: -16px;
+	}
+		
+		.nav-main--menu > li:hover > ul, .nav-main--menu > li:focus > ul, .nav-main--menu li.tab-active > ul {
+			max-height: 800px;
+		}
+	
+}		</style>
+		</head>
+
+<body class="license-template-default single single-license postid-373 wp-custom-logo wp-embed-responsive">
+	<div class="wrapper" role="document">
+		<header id="masthead" class="site-header header-main header-main-small">
+			<a class="skip-link screen-reader-text" href="https://opensource.org/license/BSD-2-Clause/#content">Skip to content</a>
+			<div class="header--inner">
+				<div class="site-branding header--blog-name">
+					<a href="https://opensource.org/"><img class="header-logo" src="./The 2-Clause BSD License – Open Source Initiative_files/cropped-OSI-horizontal-large.png" alt="Open Source Initiative"></a>				</div><!-- .site-branding -->
+				<nav aria-label="Primary" id="site-navigation" class="nav-main" role="navigation">
+					<div class="menu-primary-menu-container"><ul id="menu-primary-menu" class="nav-main--menu nav-menu" aria-expanded="false"><li id="menu-item-2358" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2358"><a href="https://opensource.org/about/">About<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li id="menu-item-2372" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2372"><a href="https://opensource.org/board/">Board<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li id="menu-item-2551" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2551"><a href="https://opensource.org/about/board-of-directors/">Board of Directors</a></li>
+		<li id="menu-item-2375" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2375"><a href="https://opensource.org/minutes/">Minutes</a></li>
+		<li id="menu-item-2384" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2384"><a href="https://opensource.org/organization/">Organization &amp; Operations</a></li>
+		<li id="menu-item-2373" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2373"><a href="https://opensource.org/bylaws/">Bylaws</a></li>
+		<li id="menu-item-2392" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2392"><a href="https://opensource.org/about/board-of-directors/elections/">Board Elections</a></li>
+		<li id="menu-item-2374" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2374"><a href="https://opensource.org/articles-of-incorporation/">Articles of Incorporation</a></li>
+		<li id="menu-item-2390" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2390"><a href="https://opensource.org/conflict_of_interest_policy/">Conflict of Interest</a></li>
+	</ul>
+</li>
+	<li id="menu-item-2398" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2398"><a href="https://opensource.org/volunteersandstaff/">Volunteers &amp; Staff</a></li>
+	<li id="menu-item-2404" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2404"><a href="https://opensource.org/associations/">Associations</a></li>
+	<li id="menu-item-2399" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2399"><a href="https://opensource.org/affiliaterequirements/">Affiliate  Criteria</a></li>
+	<li id="menu-item-2368" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2368"><a href="https://opensource.org/history/">History</a></li>
+	<li id="menu-item-2402" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2402"><a href="https://opensource.org/authority/">International Authority &amp; Recognition</a></li>
+	<li id="menu-item-2396" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2396"><a href="https://opensource.org/trademark/">Trademark &amp; Logo<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li id="menu-item-2383" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2383"><a href="https://opensource.org/trademark-guidelines/">Trademark Guidelines</a></li>
+		<li id="menu-item-2382" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2382"><a href="https://opensource.org/logo-usage-guidelines/">Logo Guidelines</a></li>
+	</ul>
+</li>
+</ul>
+</li>
+<li id="menu-item-2535" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2535"><a href="https://opensource.org/licenses/">Licenses<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li id="menu-item-2364" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2364"><a href="https://opensource.org/approval/">License Review Process<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li id="menu-item-2365" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2365"><a href="https://opensource.org/proliferation/">Licence Proliferation</a></li>
+		<li id="menu-item-2366" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2366"><a href="https://opensource.org/proliferation-report/">LP report to the Board</a></li>
+	</ul>
+</li>
+</ul>
+</li>
+<li id="menu-item-2360" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2360"><a href="https://opensource.org/osd/">Open Source Definition</a></li>
+<li id="menu-item-2376" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2376"><a href="https://opensource.org/osr-intro/">Open Standards<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li id="menu-item-2378" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2378"><a href="https://opensource.org/osr/">The Open Standards Requirement</a></li>
+	<li id="menu-item-2380" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2380"><a href="https://opensource.org/osr-faq/">OSR Frequently Asked Questions</a></li>
+	<li id="menu-item-2377" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2377"><a href="https://opensource.org/osr-rationale/">Open Standards Requirement Rationale</a></li>
+	<li id="menu-item-2379" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2379"><a href="https://opensource.org/osr-compliance/">Open Standards Requirement Compliance</a></li>
+</ul>
+</li>
+<li id="menu-item-2394" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2394"><a href="https://opensource.org/community/">Community<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li id="menu-item-3208" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-3208"><a href="https://opensource.org/affiliates">Affiliate Organizations</a></li>
+	<li id="menu-item-2388" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2388"><a href="https://opensource.org/members/">Individuals<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li id="menu-item-2403" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2403"><a href="https://opensource.org/benefits/">Benefits</a></li>
+	</ul>
+</li>
+	<li id="menu-item-2361" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2361"><a href="https://opensource.org/lists/">Mailing lists<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li id="menu-item-2389" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2389"><a href="https://opensource.org/codeofconduct/licensing/">Licensing Code of Conduct</a></li>
+		<li id="menu-item-2371" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2371"><a href="https://opensource.org/codeofconduct/">General Code of Conduct</a></li>
+		<li id="menu-item-2405" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2405"><a href="https://opensource.org/discussion-list-reports/">Discussion List Reports</a></li>
+		<li id="menu-item-2362" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2362"><a href="https://opensource.org/?page_id=321">Membership</a></li>
+		<li id="menu-item-2400" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2400"><a href="https://opensource.org/public_archives_policy-2/">Policy on Public Communications and Archives</a></li>
+		<li id="menu-item-2401" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2401"><a href="https://opensource.org/public_forums_disclaimer/">Disclaimer for OSI Public Forums</a></li>
+	</ul>
+</li>
+	<li id="menu-item-2393" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2393"><a href="https://opensource.org/resources/">Resources<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li id="menu-item-2359" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2359"><a href="https://opensource.org/help/">Getting Help<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+		<ul class="sub-menu menu-collapse">
+			<li id="menu-item-2369" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2369"><a href="https://opensource.org/links/">Bibliography</a></li>
+			<li id="menu-item-2381" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2381"><a href="https://opensource.org/case_for_business-php/">Open Source Case for Business</a></li>
+		</ul>
+</li>
+		<li id="menu-item-2386" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2386"><a href="https://opensource.org/faq/">FAQ</a></li>
+		<li id="menu-item-2357" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2357"><a href="https://opensource.org/osi-open-source-education/">Open Source Education</a></li>
+		<li id="menu-item-2407" class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2407"><a href="https://opensource.org/articles-books/">Articles &amp; Books</a></li>
+	</ul>
+</li>
+</ul>
+</li>
+<li id="menu-item-3531" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-3531"><a href="https://blog.opensource.org/">Blog</a></li>
+<li id="menu-item-2395" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2395"><a href="https://members.opensource.org/join/">Join</a></li>
+</ul></div><div class="menu-primary-menu-container"><ul id="menu-primary-menu-1" class="nav-mobile--menu"><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2358"><a href="https://opensource.org/about/">About<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2372"><a href="https://opensource.org/board/">Board<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2551"><a href="https://opensource.org/about/board-of-directors/">Board of Directors</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2375"><a href="https://opensource.org/minutes/">Minutes</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2384"><a href="https://opensource.org/organization/">Organization &amp; Operations</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2373"><a href="https://opensource.org/bylaws/">Bylaws</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2392"><a href="https://opensource.org/about/board-of-directors/elections/">Board Elections</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2374"><a href="https://opensource.org/articles-of-incorporation/">Articles of Incorporation</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2390"><a href="https://opensource.org/conflict_of_interest_policy/">Conflict of Interest</a></li>
+	</ul>
+</li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2398"><a href="https://opensource.org/volunteersandstaff/">Volunteers &amp; Staff</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2404"><a href="https://opensource.org/associations/">Associations</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2399"><a href="https://opensource.org/affiliaterequirements/">Affiliate  Criteria</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2368"><a href="https://opensource.org/history/">History</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2402"><a href="https://opensource.org/authority/">International Authority &amp; Recognition</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2396"><a href="https://opensource.org/trademark/">Trademark &amp; Logo<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2383"><a href="https://opensource.org/trademark-guidelines/">Trademark Guidelines</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2382"><a href="https://opensource.org/logo-usage-guidelines/">Logo Guidelines</a></li>
+	</ul>
+</li>
+</ul>
+</li>
+<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2535"><a href="https://opensource.org/licenses/">Licenses<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2364"><a href="https://opensource.org/approval/">License Review Process<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2365"><a href="https://opensource.org/proliferation/">Licence Proliferation</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2366"><a href="https://opensource.org/proliferation-report/">LP report to the Board</a></li>
+	</ul>
+</li>
+</ul>
+</li>
+<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2360"><a href="https://opensource.org/osd/">Open Source Definition</a></li>
+<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2376"><a href="https://opensource.org/osr-intro/">Open Standards<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2378"><a href="https://opensource.org/osr/">The Open Standards Requirement</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2380"><a href="https://opensource.org/osr-faq/">OSR Frequently Asked Questions</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2377"><a href="https://opensource.org/osr-rationale/">Open Standards Requirement Rationale</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2379"><a href="https://opensource.org/osr-compliance/">Open Standards Requirement Compliance</a></li>
+</ul>
+</li>
+<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2394"><a href="https://opensource.org/community/">Community<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+<ul class="sub-menu menu-collapse">
+	<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-3208"><a href="https://opensource.org/affiliates">Affiliate Organizations</a></li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2388"><a href="https://opensource.org/members/">Individuals<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2403"><a href="https://opensource.org/benefits/">Benefits</a></li>
+	</ul>
+</li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2361"><a href="https://opensource.org/lists/">Mailing lists<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2389"><a href="https://opensource.org/codeofconduct/licensing/">Licensing Code of Conduct</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2371"><a href="https://opensource.org/codeofconduct/">General Code of Conduct</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2405"><a href="https://opensource.org/discussion-list-reports/">Discussion List Reports</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2362"><a href="https://opensource.org/?page_id=321">Membership</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2400"><a href="https://opensource.org/public_archives_policy-2/">Policy on Public Communications and Archives</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2401"><a href="https://opensource.org/public_forums_disclaimer/">Disclaimer for OSI Public Forums</a></li>
+	</ul>
+</li>
+	<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2393"><a href="https://opensource.org/resources/">Resources<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+	<ul class="sub-menu menu-collapse">
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children menu-item-2359"><a href="https://opensource.org/help/">Getting Help<button aria-label="Toggle Submenu" class="menu-toggle"></button></a>
+		<ul class="sub-menu menu-collapse">
+			<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2369"><a href="https://opensource.org/links/">Bibliography</a></li>
+			<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2381"><a href="https://opensource.org/case_for_business-php/">Open Source Case for Business</a></li>
+		</ul>
+</li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2386"><a href="https://opensource.org/faq/">FAQ</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2357"><a href="https://opensource.org/osi-open-source-education/">Open Source Education</a></li>
+		<li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-2407"><a href="https://opensource.org/articles-books/">Articles &amp; Books</a></li>
+	</ul>
+</li>
+</ul>
+</li>
+<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-3531"><a href="https://blog.opensource.org/">Blog</a></li>
+<li class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2395"><a href="https://members.opensource.org/join/">Join</a></li>
+</ul></div>				</nav><!-- #site-navigation -->
+				<section class="open-button-wrapper">
+						<button aria-label="Open Menu" id="openMainMenu" class="open-main-menu open-button">
+							<span class="menu-text">Open Main Menu</span>
+							<span></span>
+							<span></span>
+						</button>
+										</section>
+			</div>
+		</header><!-- #masthead -->
+
+<section class="content has_no_sidebar" id="content">
+
+	<main class="content--body content-full" role="main">
+		<section class="content--page" id="content-page">
+		  <div class="breadcrumb-area">
+    <div class="wrapper">
+          </div><!-- .wrapper -->
+  </div><!-- .breadcrumb-area -->
+
+			<article id="post-373" class="post-373 license type-license status-publish has-post-thumbnail hentry taxonomy-license-category-popular-strong-community">
+	<header class="entry-header cover--header no-thumbnail">
+	<div class="wp-block-cover alignfull has-neutral-dark-background-color has-background-dim-100 has-background-dim">
+		<div class="wp-block-cover__inner-container">
+			<div class="wp-block-columns">
+				<div class="wp-block-column" style="flex-basis: 80%">
+					<span class="pill-taxonomy">
+						<div class="post--metadata-group"><ul><li><a class="term-item" aria-label="View all filed under Popular / Strong Community" href="https://opensource.org/licenses/?categories=popular-strong-community" data-id="19" data-term="popular-strong-community">Popular / Strong Community</a></li></ul></div>
+					</span>
+					<h1 class="entry-title page--title">The 2-Clause BSD License</h1>					<p class="license-meta">
+						<span class="license-spdx">SPDX short identifier: 															BSD-2-Clause														</span>					</p>
+									</div>
+				<div class="wp-block-column" style="flex-basis: 20%; text-align: center;">
+					<img width="200" src="./The 2-Clause BSD License – Open Source Initiative_files/osi-badge-light.svg" alt="Open Spurce Initiative Approved License">
+				</div>
+				
+			</div>
+		</div>
+	</div>
+</header>
+
+	<div class="entry-content post--content">
+		<p style="font-weight: bold;">SPDX short identifier: BSD-2-Clause</p>
+<div align="right"></div>
+<p><img decoding="async" class=" size-full wp-image-323" style="float: right;" src="./The 2-Clause BSD License – Open Source Initiative_files/OSI_Approved_License.png" alt="OSI Approved License Logo" hspace="20" width="150" height="206"></p>
+<p><em>Note: This license has also been called the “Simplified BSD License” and the “FreeBSD License”. See also the <a href="https://opensource.org/licenses/bsd-3-clause/">3-clause BSD License</a>.</em></p>
+<p>Copyright &lt;YEAR&gt; &lt;COPYRIGHT HOLDER&gt;</p>
+<p>Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:</p>
+<p>1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.</p>
+<p>2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.</p>
+<p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS “AS IS” AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
+	</div><!-- .entry-content -->
+
+</article><!-- #post-373 -->
+		</section>
+	</main><!-- #primary -->
+
+	
+</section>
+
+
+		<footer id="colophon" class="footer site-footer" role="contentinfo">
+			<section class="footer-main">
+				<div class="footer--inner">
+					<div class="widgetized-footer footer--widgets">
+												<div class="footer--contact">
+									<nav class="jetpack-social-navigation jetpack-social-navigation-genericons" aria-label="Social Links Menu">
+			<div class="menu-social-menu-container"><ul id="menu-social-menu" class="menu"><li id="menu-item-2771" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-2771"><a href="https://social.opensource.org/@osi"><span class="screen-reader-text">Mastodon</span></a></li>
+<li id="menu-item-259" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-259"><a href="https://twitter.com/OpenSourceOrg"><span class="screen-reader-text">Twitter</span></a></li>
+<li id="menu-item-260" class="menu-item menu-item-type-custom menu-item-object-custom menu-item-260"><a href="https://www.linkedin.com/company/open-source-initiative-osi-"><span class="screen-reader-text">LinkedIn</span></a></li>
+</ul></div>		</nav><!-- .jetpack-social-navigation -->
+								</div>	
+						<section class="widget block-9 widget_block widget_text"><div class="widget-inner">
+<p>The content on this website, of which Opensource.org is the author, is licensed under a Creative Commons Attribution 4.0 International license.<br>Opensource.org is not the author of any of the licenses reproduced on this site. Questions about the copyright in a license should be directed to the license steward.</p>
+</div></section><section class="widget block-10 widget_block widget_text"><div class="widget-inner">
+<p><a href="https://opensource.org/tos/">Terms of Service.</a>&nbsp;For questions regarding the OSI website and contents please contact us.</p>
+</div></section>					</div>
+				</div>
+			</section>
+			<section class="footer-credits">
+				<div class="footer--inner">
+					<p class="footer--extra-text">
+						<a href="https://wordpress.com/wp/?partner_domain=opensource.org&amp;utm_source=Automattic&amp;utm_medium=colophon&amp;utm_campaign=Concierge%20Referral&amp;utm_term=opensource.org" class="imprint" target="_blank">Proudly powered by WordPress.</a> <a href="https://pressable.com/?utm_source=Automattic&amp;utm_medium=rpc&amp;utm_campaign=Concierge%20Referral&amp;utm_term=concierge" class="imprint" target="_blank">Hosted by Pressable.</a>					</p><!-- .powered-by-wordpress -->
+				</div>
+			</section>
+		</footer><!-- #colophon -->
+
+	</div><!-- #page -->
+
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/photon.min.js" id="jetpack-photon-js"></script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/coblocks-animation.js" id="coblocks-animation-js"></script>
+<script type="text/javascript" id="osi-theme-scripts-js-before">
+const OSI_LICENSE_DB = {"ajaxURL":"https:\/\/opensource.org\/wp-admin\/admin-ajax.php","action":"osi_license_db"}
+</script>
+<script type="text/javascript" src="./The 2-Clause BSD License – Open Source Initiative_files/theme.js" id="osi-theme-scripts-js"></script>
+		<script type="text/javascript">
+			(function() {
+			var t   = document.createElement( 'script' );
+			t.type  = 'text/javascript';
+			t.async = true;
+			t.id    = 'gauges-tracker';
+			t.setAttribute( 'data-site-id', '62509736f88e3a22d8b40b5f' );
+			t.src = '//secure.gaug.es/track.js';
+			var s = document.getElementsByTagName( 'script' )[0];
+			s.parentNode.insertBefore( t, s );
+			})();
+		</script>
+			<script src="./The 2-Clause BSD License – Open Source Initiative_files/e-202310.js" defer=""></script>
+	<script>
+		_stq = window._stq || [];
+		_stq.push([ 'view', {v:'ext',blog:'210318891',post:'373',tz:'0',srv:'opensource.org',hp:'atomic',ac:'3',amp:'0',j:'1:12.0-a.1'} ]);
+		_stq.push([ 'clickTrackerInit', '210318891', '373' ]);
+	</script>
+<script>(function(){var js = "window['__CF$cv$params']={r:'7a5db5decd78b324',m:'BGxv_oK6IsXzQU_GZxKV5mFMKzcnH.YMNVDPl8lV2lE-1678473881-0-ATQEEI3LwVrhNqrvA+Wig3TVZooMYOtoyV/2XQQhipGRlvPKAJuj3CW6oposWtt15ZmAdyBwO1lnfL0l51jDcNbN6eE2zesq0/SyNDTFhibvAMbCG8LU9HeCZ5yU1s1H3ml8gc436JcOxbcc7LOCYpQ=',s:[0x269cb2ba4c,0xbf4e0fefec],u:'/cdn-cgi/challenge-platform/h/g'};var now=Date.now()/1000,offset=14400,ts=''+(Math.floor(now)-Math.floor(now%offset)),_cpo=document.createElement('script');_cpo.nonce='',_cpo.src='/cdn-cgi/challenge-platform/h/g/scripts/alpha/invisible.js?ts='+ts,document.getElementsByTagName('head')[0].appendChild(_cpo);";var _0xh = document.createElement('iframe');_0xh.height = 1;_0xh.width = 1;_0xh.style.position = 'absolute';_0xh.style.top = 0;_0xh.style.left = 0;_0xh.style.border = 'none';_0xh.style.visibility = 'hidden';document.body.appendChild(_0xh);function handler() {var _0xi = _0xh.contentDocument || _0xh.contentWindow.document;if (_0xi) {var _0xj = _0xi.createElement('script');_0xj.nonce = '';_0xj.innerHTML = js;_0xi.getElementsByTagName('head')[0].appendChild(_0xj);}}if (document.readyState !== 'loading') {handler();} else if (window.addEventListener) {document.addEventListener('DOMContentLoaded', handler);} else {var prev = document.onreadystatechange || function () {};document.onreadystatechange = function (e) {prev(e);if (document.readyState !== 'loading') {document.onreadystatechange = prev;handler();}};}})();</script><iframe height="1" width="1" style="position: absolute; top: 0px; left: 0px; border: none; visibility: hidden;" src="./The 2-Clause BSD License – Open Source Initiative_files/saved_resource.html"></iframe><script defer="" src="./The 2-Clause BSD License – Open Source Initiative_files/vaafb692b2aea4879b33c060e79fe94621666317369993" integrity="sha512-0ahDYl866UMhKuYcW078ScMalXqtFJggm7TmlUtp0UlD4eQk0Ixfnm5ykXKvGJNFjLMoortdseTfsRT8oCfgGA==" data-cf-beacon="{&quot;rayId&quot;:&quot;7a5db5decd78b324&quot;,&quot;version&quot;:&quot;2023.2.0&quot;,&quot;r&quot;:1,&quot;token&quot;:&quot;36722192e396422c8012b09d7db81d9c&quot;,&quot;si&quot;:100}" crossorigin="anonymous"></script>
+
+
+<img src="./The 2-Clause BSD License – Open Source Initiative_files/g.gif" alt="" width="6" height="5" id="wpstats"></body></html>
\ No newline at end of file
diff --git a/wildfly/docs/licenses/bsd 3-clause new or revised license.html b/wildfly/docs/licenses/bsd 3-clause new or revised license.html
new file mode 100644
index 0000000..381ce70
--- /dev/null
+++ b/wildfly/docs/licenses/bsd 3-clause new or revised license.html	
@@ -0,0 +1,365 @@
+<!DOCTYPE html>
+<html lang="en" dir="ltr">
+<head profile="http://www.w3.org/1999/xhtml/vocab">
+    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
+    <meta name="Generator" content="Drupal 7 (http://drupal.org)" />
+    <link rel="canonical" href="/licenses/BSD-3-Clause" />
+    <link rel="shortlink" href="/node/568" />
+    <meta name="MobileOptimized" content="width" />
+    <meta name="HandheldFriendly" content="true" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <link rel="shortcut icon" href="https://opensource.org/files/osi_favicon.png" type="image/png" />
+    <title>The 3-Clause BSD License | Open Source Initiative</title>
+    <link type="text/css" rel="stylesheet" href="https://opensource.org/files/css/css_xE-rWrJf-fncB6ztZfd2huxqgxu4WO-qwma6Xer30m4.css" media="all" />
+    <link type="text/css" rel="stylesheet" href="https://opensource.org/files/css/css_gh8wMJiOGewsPCJRDYXmqv3eEGGGSn0O_fqsi_9a-LY.css" media="all" />
+    <link type="text/css" rel="stylesheet" href="https://opensource.org/files/css/css_PGbJgHCUCBf4dg7K9Kt8aAwsApndP4GZ9RuToPy3-Fk.css" media="all" />
+    <link type="text/css" rel="stylesheet" href="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/css/bootstrap.min.css" media="all" />
+    <link type="text/css" rel="stylesheet" href="https://opensource.org/files/css/css_KGZcOm3i1wmtbgZsjo-3V9FM4wZ-5UDcpJ7Vfzmt45E.css" media="all" />
+    <link type="text/css" rel="stylesheet" href="https://opensource.org/files/css/css_geZlrvE6NvCHlqzlL6BG-4oEOHA5n2xgs5CEOKctM_c.css" media="all" />
+
+    <!--[if (lt IE 9)]>
+    <link type="text/css" rel="stylesheet" href="https://opensource.org/sites/all/themes/bootstrap-business/css/ie8.css?q6ooiv" media="all" />
+    <![endif]-->
+
+
+    <!-- HTML5 element support for IE6-8 -->
+    <!--[if lt IE 9]>
+    <script src="//html5shiv.googlecode.com/svn/trunk/html5.js"></script>
+    <![endif]-->
+    <script type="text/javascript" src="//code.jquery.com/jquery-1.10.2.min.js"></script>
+    <script type="text/javascript">
+        <!--//--><![CDATA[//><!--
+        window.jQuery || document.write("<script src='/sites/all/modules/jquery_update/replace/jquery/1.10/jquery.min.js'>\x3C/script>")
+        //--><!]]>
+    </script>
+    <script type="text/javascript" src="https://opensource.org/files/js/js_dWhBODswdXXk1M5Z5nyqNfGljmqwxUwAK9i6D0YSDNs.js"></script>
+    <script type="text/javascript" src="//maxcdn.bootstrapcdn.com/bootstrap/3.2.0/js/bootstrap.min.js"></script>
+    <script type="text/javascript">
+        <!--//--><![CDATA[//><!--
+        jQuery(document).ready(function($) {
+            $(window).scroll(function() {
+                if($(this).scrollTop() != 0) {
+                    $("#toTop").fadeIn();
+                } else {
+                    $("#toTop").fadeOut();
+                }
+            });
+
+            $("#toTop").click(function() {
+                $("body,html").animate({scrollTop:0},800);
+            });
+
+        });
+        //--><!]]>
+    </script>
+    <script type="text/javascript" src="https://opensource.org/files/js/js_ruOYJN6FkJU2O5L1dAKVnDloSn5R6LjnLW88zFxS1Uw.js"></script>
+    <script type="text/javascript" src="https://opensource.org/files/js/js_JQHTvV_SkyFlN3f2BnQwnusF-eI6tkX8wrKAk2siiZU.js"></script>
+    <script type="text/javascript">
+        <!--//--><![CDATA[//><!--
+        jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","ajaxPageState":{"theme":"bootstrap_business","theme_token":"DCAamhPSBAPVJHAGzNvy_Mro0LySWgH-w_7KwPYFAIU","js":{"\/\/code.jquery.com\/jquery-1.10.2.min.js":1,"0":1,"misc\/jquery-extend-3.4.0.js":1,"misc\/jquery.once.js":1,"misc\/drupal.js":1,"\/\/maxcdn.bootstrapcdn.com\/bootstrap\/3.2.0\/js\/bootstrap.min.js":1,"1":1,"sites\/all\/libraries\/superfish\/jquery.hoverIntent.minified.js":1,"sites\/all\/libraries\/superfish\/sftouchscreen.js":1,"sites\/all\/libraries\/superfish\/sfsmallscreen.js":1,"sites\/all\/libraries\/superfish\/supposition.js":1,"sites\/all\/libraries\/superfish\/superfish.js":1,"sites\/all\/libraries\/superfish\/supersubs.js":1,"sites\/all\/modules\/superfish\/superfish.js":1,"sites\/all\/themes\/bootstrap-business\/js\/jquery.browser.min.js":1},"css":{"modules\/system\/system.base.css":1,"modules\/system\/system.menus.css":1,"modules\/system\/system.messages.css":1,"modules\/system\/system.theme.css":1,"modules\/aggregator\/aggregator.css":1,"modules\/comment\/comment.css":1,"modules\/field\/theme\/field.css":1,"modules\/node\/node.css":1,"modules\/search\/search.css":1,"modules\/user\/user.css":1,"sites\/all\/modules\/views\/css\/views.css":1,"sites\/all\/modules\/ckeditor\/css\/ckeditor.css":1,"sites\/all\/modules\/ctools\/css\/ctools.css":1,"\/\/maxcdn.bootstrapcdn.com\/bootstrap\/3.2.0\/css\/bootstrap.min.css":1,"sites\/all\/libraries\/superfish\/css\/superfish.css":1,"sites\/all\/themes\/bootstrap-business\/css\/style.css":1,"sites\/all\/themes\/bootstrap-business\/color\/colors.css":1,"sites\/all\/themes\/bootstrap-business\/css\/local.css":1,"sites\/all\/themes\/bootstrap-business\/css\/ie8.css":1}},"urlIsAjaxTrusted":{"\/licenses\/BSD-3-Clause":true},"superfish":{"1":{"id":"1","sf":{"animation":{"opacity":"show","height":"show"},"speed":"\u0027fast\u0027","autoArrows":false,"dropShadows":true,"disableHI":false},"plugins":{"touchscreen":{"mode":"window_width"},"smallscreen":{"mode":"window_width","addSelected":false,"menuClasses":false,"hyperlinkClasses":false,"title":"Navigation"},"supposition":true,"bgiframe":false,"supersubs":{"minWidth":"12","maxWidth":"27","extraWidth":1}}}}});
+        //--><!]]>
+    </script>
+</head>
+<body class="html not-front not-logged-in no-sidebars page-node page-node- page-node-568 node-type-page" >
+<div id="skip-link">
+    <a href="#main-content" class="element-invisible element-focusable">Skip to main content</a>
+</div>
+<div id="toTop"><span class="glyphicon glyphicon-chevron-up"></span></div>
+
+
+
+<!-- #header-top -->
+<div id="header-top" class="clearfix">
+    <div class="container">
+
+        <!-- #header-top-inside -->
+        <div id="header-top-inside" class="clearfix">
+            <div class="row">
+
+                <div class="col-md-8">
+                    <!-- #header-top-left -->
+                    <div id="header-top-left" class="clearfix">
+                        <div class="region region-header-top-left">
+                            <div id="block-menu-secondary-menu" class="block block-menu clearfix">
+
+
+                                <div class="content">
+                                    <ul class="menu"><li class="first leaf"><a href="/" title="">Home</a></li>
+                                        <li class="leaf"><a href="/blog" title="">From the Board</a></li>
+                                        <li class="leaf"><a href="/contact" title="">Contact</a></li>
+                                        <li class="leaf"><a href="/civicrm/contribute/transact?reset=1&amp;id=2" title="">Donate</a></li>
+                                        <li class="last leaf"><a href="/user/login" title="">Login</a></li>
+                                    </ul>  </div>
+                            </div>
+                        </div>
+                    </div>
+                    <!-- EOF:#header-top-left -->
+                </div>
+
+                <div class="col-md-4">
+                    <!-- #header-top-right -->
+                    <div id="header-top-right" class="clearfix">
+                        <div class="region region-header-top-right">
+                            <div id="block-search-form" class="block block-search clearfix">
+
+
+                                <div class="content">
+                                    <form action="/licenses/BSD-3-Clause" method="post" id="search-block-form" accept-charset="UTF-8"><div><div class="container-inline">
+                                        <h2 class="element-invisible">Search form</h2>
+                                        <div class="form-item form-type-textfield form-item-search-block-form">
+                                            <input onblur="if (this.value == &#039;&#039;) {this.value = &#039;Search this website...&#039;;}" onfocus="if (this.value == &#039;Search this website...&#039;) {this.value = &#039;&#039;;}" type="text" id="edit-search-block-form--2" name="search_block_form" value="Search this website..." size="15" maxlength="128" class="form-text" />
+                                        </div>
+                                        <div class="form-actions form-wrapper" id="edit-actions"><input value="" type="submit" id="edit-submit" name="op" class="form-submit" /></div><input type="hidden" name="form_build_id" value="form-Gpc3OwxyJzEAFmHZTbSQ3m7YOiTUbR-oUNuSI1xmaRo" />
+                                        <input type="hidden" name="form_id" value="search_block_form" />
+                                    </div>
+                                    </div></form>  </div>
+                            </div>
+                        </div>
+                    </div>
+                    <!-- EOF:#header-top-right -->
+                </div>
+
+            </div>
+        </div>
+        <!-- EOF: #header-top-inside -->
+
+    </div>
+</div>
+<!-- EOF: #header-top -->
+
+<!-- header -->
+<header id="header" role="banner" class="clearfix">
+    <div class="container">
+
+        <!-- #header-inside -->
+        <div id="header-inside" class="clearfix">
+            <div class="row">
+                <div class="col-md-8">
+
+                    <div id="logo">
+                        <a href="/" title="Home" rel="home"> <img src="https://opensource.org/files/osi_keyhole_300X300_90ppi_0.png" alt="Home" /> </a>
+                    </div>
+
+                    <div id="site-name">
+                        <a href="/" title="Home">Open Source Initiative</a>
+                    </div>
+
+                    <div id="site-slogan">
+                        Guaranteeing the 'our' in source...                </div>
+
+                </div>
+
+                <div class="col-md-4">
+
+
+                </div>
+            </div>
+        </div>
+        <!-- EOF: #header-inside -->
+
+    </div>
+</header>
+<!-- EOF: #header -->
+
+<!-- #main-navigation -->
+<div id="main-navigation" class="clearfix">
+    <div class="container">
+
+        <!-- #main-navigation-inside -->
+        <div id="main-navigation-inside" class="clearfix">
+            <div class="row">
+                <div class="col-md-12">
+                    <nav role="navigation">
+                        <div class="region region-navigation">
+                            <div id="block-superfish-1" class="block block-superfish clearfix">
+
+
+                                <div class="content">
+                                    <ul id="superfish-1" class="menu sf-menu sf-navigation sf-horizontal sf-style-none sf-total-items-6 sf-parent-items-6 sf-single-items-0"><li id="menu-37-1" class="first odd sf-item-1 sf-depth-1 sf-total-children-4 sf-parent-children-2 sf-single-children-2 menuparent"><a href="/about" title="About the Open Source Initiative" class="sf-depth-1 menuparent">About</a><ul><li id="menu-75-1" class="first odd sf-item-1 sf-depth-2 sf-no-children"><a href="/history" title="History of the OSI" class="sf-depth-2">History</a></li><li id="menu-82-1" class="middle even sf-item-2 sf-depth-2 sf-total-children-7 sf-parent-children-0 sf-single-children-7 menuparent"><a href="/board" title="Board of Directors" class="sf-depth-2 menuparent">Board</a><ul><li id="menu-83-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/docs/board-annotated" title="OSI Board -- With Annotations" class="sf-depth-3">Board - Annotated</a></li><li id="menu-96-1" class="middle even sf-item-2 sf-depth-3 sf-no-children"><a href="/minutes" title="Public Minutes of Board Meetings" class="sf-depth-3">Minutes</a></li><li id="menu-185-1" class="middle odd sf-item-3 sf-depth-3 sf-no-children"><a href="/organization" title="These portfolios represent the activities of the current OSI board." class="sf-depth-3">Organization &amp; Operations</a></li><li id="menu-95-1" class="middle even sf-item-4 sf-depth-3 sf-no-children"><a href="/articles-of-incorporation" title="OSI incorporation record" class="sf-depth-3">Articles of Incorporation</a></li><li id="menu-1475-1" class="middle odd sf-item-5 sf-depth-3 sf-no-children"><a href="/elections" class="sf-depth-3">Board Elections</a></li><li id="menu-84-1" class="middle even sf-item-6 sf-depth-3 sf-no-children"><a href="/bylaws" title="Bylaws of the Open Source Initiative" class="sf-depth-3">Bylaws</a></li><li id="menu-1317-1" class="last odd sf-item-7 sf-depth-3 sf-no-children"><a href="/conflict_of_interest_policy" class="sf-depth-3">Conflict of Interest</a></li></ul></li><li id="menu-1843-1" class="middle odd sf-item-3 sf-depth-2 sf-total-children-2 sf-parent-children-0 sf-single-children-2 menuparent"><a href="/trademark" title="" class="sf-depth-2 menuparent">Trademark &amp; Logo</a><ul><li id="menu-184-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/trademark-guidelines" title="OSI&#039;s Trademark Policy" class="sf-depth-3">Trademark Guidelines</a></li><li id="menu-183-1" class="last even sf-item-2 sf-depth-3 sf-no-children"><a href="/logo-usage-guidelines" title="Guidelines for appearance and usage of OSI Logo" class="sf-depth-3">Logo Guidelines</a></li></ul></li><li id="menu-126-1" class="last even sf-item-4 sf-depth-2 sf-no-children"><a href="/ToS" title="Rules for posting content on this site" class="sf-depth-2">Terms of Service</a></li></ul></li><li id="menu-65-1" class="middle even sf-item-2 sf-depth-1 sf-total-children-5 sf-parent-children-3 sf-single-children-2 menuparent"><a href="/licenses" class="sf-depth-1 menuparent">Licenses</a><ul><li id="menu-61-1" class="first odd sf-item-1 sf-depth-2 sf-total-children-1 sf-parent-children-0 sf-single-children-1 menuparent"><a href="/osd" title="The actual OSD defining what constitutes an Open Source licence" class="sf-depth-2 menuparent">Open Source Definition</a><ul><li id="menu-62-1" class="firstandlast odd sf-item-1 sf-depth-3 sf-no-children"><a href="/osd-annotated" title="The OSD with explationations and rationale interspersed." class="sf-depth-3">OSD - Annotated</a></li></ul></li><li id="menu-77-1" class="middle even sf-item-2 sf-depth-2 sf-no-children"><a href="/licenses/category" title="Licenses by Category" class="sf-depth-2">Licenses by Category</a></li><li id="menu-72-1" class="middle odd sf-item-3 sf-depth-2 sf-no-children"><a href="/licenses/alphabetical" title="Licenses that are approved by the OSI as conforming to the OSD" class="sf-depth-2">Licenses by Name</a></li><li id="menu-66-1" class="middle even sf-item-4 sf-depth-2 sf-total-children-2 sf-parent-children-0 sf-single-children-2 menuparent"><a href="/approval" title="Certifying licences as OSD-compliant" class="sf-depth-2 menuparent">License Review Process</a><ul><li id="menu-67-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/proliferation" title="Supporting choice while maintaining sanity" class="sf-depth-3">Licence Proliferation</a></li><li id="menu-69-1" class="last even sf-item-2 sf-depth-3 sf-no-children"><a href="/proliferation-report" title="License Proliferation Committee&#039;s report to the OSI Board" class="sf-depth-3">LP report to the Board</a></li></ul></li><li id="menu-99-1" class="last odd sf-item-5 sf-depth-2 sf-total-children-4 sf-parent-children-0 sf-single-children-4 menuparent"><a href="/osr-intro" title="Open Standards Requirement for Software" class="sf-depth-2 menuparent">Open Standards</a><ul><li id="menu-101-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/osr" title="An &quot;open standard&quot; must not prohibit conforming implementations in open source software." class="sf-depth-3">The Open Standards Requirement</a></li><li id="menu-102-1" class="middle even sf-item-2 sf-depth-3 sf-no-children"><a href="/osr-compliance" class="sf-depth-3">Open Standards Requirement Compliance</a></li><li id="menu-100-1" class="middle odd sf-item-3 sf-depth-3 sf-no-children"><a href="/osr-rationale" class="sf-depth-3">Open Standards Requirement Rationale</a></li><li id="menu-103-1" class="last even sf-item-4 sf-depth-3 sf-no-children"><a href="/osr-faq" title="Frequently asked questions about the Open Standards Requirement" class="sf-depth-3">OSR Frequently Asked Questions</a></li></ul></li></ul></li><li id="menu-1842-1" class="middle odd sf-item-3 sf-depth-1 sf-total-children-3 sf-parent-children-2 sf-single-children-1 menuparent"><a href="/membership" title="Page for our various membership programs" class="sf-depth-1 menuparent">Membership</a><ul><li id="menu-914-1" class="first odd sf-item-1 sf-depth-2 sf-total-children-2 sf-parent-children-0 sf-single-children-2 menuparent"><a href="/members" class="sf-depth-2 menuparent">Individuals</a><ul><li id="menu-897-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/civicrm/contribute/transact?reset=1&amp;id=1" title="" class="sf-depth-3">Join</a></li><li id="menu-2265-1" class="last even sf-item-2 sf-depth-3 sf-no-children"><a href="/benefits" class="sf-depth-3">Benefits</a></li></ul></li><li id="menu-675-1" class="middle even sf-item-2 sf-depth-2 sf-total-children-2 sf-parent-children-0 sf-single-children-2 menuparent"><a href="/affiliates" title="Home page for OSI&#039;s membership scheme for non-profits and not-for-profits" class="sf-depth-2 menuparent">Affiliates</a><ul><li id="menu-676-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/affiliates/about" class="sf-depth-3">Become an Affiliate</a></li><li id="menu-2071-1" class="last even sf-item-2 sf-depth-3 sf-no-children"><a href="/AffiliateRequirements" class="sf-depth-3">Affiliate  Criteria</a></li></ul></li><li id="menu-1436-1" class="last odd sf-item-3 sf-depth-2 sf-no-children"><a href="/sponsors" class="sf-depth-2">Sponsors &amp; Support</a></li></ul></li><li id="menu-1841-1" class="middle even sf-item-4 sf-depth-1 sf-total-children-6 sf-parent-children-1 sf-single-children-5 menuparent"><a href="/community" title="Page for our various community members." class="sf-depth-1 menuparent">Community</a><ul><li id="menu-2271-1" class="first odd sf-item-1 sf-depth-2 sf-no-children"><a href="/associations" class="sf-depth-2">Associations</a></li><li id="menu-63-1" class="middle even sf-item-2 sf-depth-2 sf-total-children-5 sf-parent-children-0 sf-single-children-5 menuparent"><a href="/lists" title="The virtual committees where the OSI&#039;s work gets done" class="sf-depth-2 menuparent">Mailing lists</a><ul><li id="menu-1072-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/codeofconduct/licensing" class="sf-depth-3">Licensing Code of Conduct</a></li><li id="menu-78-1" class="middle even sf-item-2 sf-depth-3 sf-no-children"><a href="/codeofconduct" title="Guidelines for OSI Mailing Lists" class="sf-depth-3">General Code of Conduct</a></li><li id="menu-2272-1" class="middle odd sf-item-3 sf-depth-3 sf-no-children"><a href="/node/960" title="Monthly reports summarizing the OSI&#039;s License-Discuss and License-Review mailing lists." class="sf-depth-3">Discussion List Reports</a></li><li id="menu-2111-1" class="middle even sf-item-4 sf-depth-3 sf-no-children"><a href="/public_forums_disclaimer" class="sf-depth-3">Disclaimer for OSI Public Forums</a></li><li id="menu-2110-1" class="last odd sf-item-5 sf-depth-3 sf-no-children"><a href="/public_archives_policy" class="sf-depth-3">Policy on Public Communications and Archives</a></li></ul></li><li id="menu-2032-1" class="middle odd sf-item-3 sf-depth-2 sf-no-children"><a href="/volunteersandstaff" class="sf-depth-2">Volunteers &amp; Staff</a></li><li id="menu-2192-1" class="middle even sf-item-4 sf-depth-2 sf-no-children"><a href="/AdvocateCircle" class="sf-depth-2">Advocate Circle</a></li><li id="menu-1846-1" class="middle odd sf-item-5 sf-depth-2 sf-no-children"><a href="http://wiki.opensource.org" title="" class="sf-depth-2">Wiki</a></li><li id="menu-1524-1" class="last even sf-item-6 sf-depth-2 sf-no-children"><a href="/store" class="sf-depth-2">OSI Store</a></li></ul></li><li id="menu-1840-1" class="middle odd sf-item-5 sf-depth-1 sf-total-children-7 sf-parent-children-1 sf-single-children-6 menuparent"><a href="/resources" title="Page offering resources to OSI personas" class="sf-depth-1 menuparent">Resources</a><ul><li id="menu-342-1" class="first odd sf-item-1 sf-depth-2 sf-no-children"><a href="/faq" title="Frequently Asked Questions about open source and about the OSI." class="sf-depth-2">FAQ</a></li><li id="menu-38-1" class="middle even sf-item-2 sf-depth-2 sf-no-children"><a href="/blog" title="A group blog / aggregation point for OSI Board Member blogs" class="sf-depth-2">OSI Board Blog</a></li><li id="menu-45-1" class="middle odd sf-item-3 sf-depth-2 sf-total-children-2 sf-parent-children-0 sf-single-children-2 menuparent"><a href="/help" title="Resources for questions and further exploration" class="sf-depth-2 menuparent">Getting Help</a><ul><li id="menu-76-1" class="first odd sf-item-1 sf-depth-3 sf-no-children"><a href="/links" title="Links and References to Open Source" class="sf-depth-3">Bibliography</a></li><li id="menu-125-1" class="last even sf-item-2 sf-depth-3 sf-no-children"><a href="/advocacy/case_for_business.php" title="How to advocate Open Source to businesses" class="sf-depth-3">Open Source Case for Business</a></li></ul></li><li id="menu-1514-1" class="middle even sf-item-4 sf-depth-2 sf-no-children"><a href="/working_groups" class="sf-depth-2">Working Groups &amp; Incubator Projects</a></li><li id="menu-12-1" class="middle odd sf-item-5 sf-depth-2 sf-no-children"><a href="/osi-open-source-education" title="OSI&#039;s Open Source Education Initiative and Activities" class="sf-depth-2">Open Source Education</a></li><li id="menu-3046-1" class="middle even sf-item-6 sf-depth-2 sf-no-children"><a href="/node/1012" class="sf-depth-2">Articles &amp; Books</a></li><li id="menu-2193-1" class="last odd sf-item-7 sf-depth-2 sf-no-children"><a href="/authority" class="sf-depth-2">International Authority &amp; Recognition</a></li></ul></li><li id="menu-1844-1" class="last even sf-item-6 sf-depth-1 sf-total-children-2 sf-parent-children-0 sf-single-children-2 menuparent"><a href="/news" title="Page dedicated to the latest news and events." class="sf-depth-1 menuparent">News &amp; Events</a><ul><li id="menu-1845-1" class="first odd sf-item-1 sf-depth-2 sf-no-children"><a href="/news" title="Index of newsletters" class="sf-depth-2">News</a></li><li id="menu-1999-1" class="last even sf-item-2 sf-depth-2 sf-no-children"><a href="/events" class="sf-depth-2">Events</a></li></ul></li></ul>  </div>
+                            </div>
+                        </div>
+                    </nav>
+                </div>
+            </div>
+        </div>
+        <!-- EOF: #main-navigation-inside -->
+
+    </div>
+</div>
+<!-- EOF: #main-navigation -->
+
+
+<!-- #page -->
+<div id="page" class="clearfix">
+
+
+    <!-- #main-content -->
+    <div id="main-content">
+        <div class="container">
+
+            <!-- #messages-console -->
+            <!-- EOF: #messages-console -->
+
+            <div class="row">
+
+
+
+                <section class="col-md-12">
+
+                    <!-- #main -->
+                    <div id="main" class="clearfix">
+
+
+
+                        <!-- EOF:#content-wrapper -->
+                        <div id="content-wrapper">
+
+                            <h1 class="page-title">The 3-Clause BSD License</h1>
+
+
+                            <!-- #tabs -->
+                            <div class="tabs">
+                            </div>
+                            <!-- EOF: #tabs -->
+
+                            <!-- #action links -->
+                            <!-- EOF: #action links -->
+
+                            <div class="region region-content">
+                                <div id="block-system-main" class="block block-system clearfix">
+
+
+                                    <div class="content">
+                                        <article id="node-568" class="node node-page clearfix">
+
+
+                                            <div class="content">
+                                                <div class="field field-name-body field-type-text-with-summary field-label-hidden"><div class="field-items"><div class="field-item even"><p style="font-weight:bold">SPDX short identifier: BSD-3-Clause</p>
+
+                                                    <div align="right"><button onclick="myFunction()">Further resources on the <b>3-clause BSD license</b></button>
+
+                                                        <p id="demo"> </p>
+                                                        <script>
+                                                            <!--//--><![CDATA[// ><!--
+
+                                                            function myFunction() {
+                                                                var x;
+                                                                if (confirm("Disclaimer: While the OSI acknowledges these as potentially helpful resources for the community, it does not endorse any content, contributors or license interpretations from these websites. Any links to these resources across opensource.org are solely for navigational purposes. The OSI does not promote or exclusively favor any of the mentioned resources, but instead provides them as separate third-party resource to help inform your opinion. Any content from or links to these resources are separate from the OSI, exist for purely informational purposes and creates no attorney-client relationship between you, the OSI or the resources. If you have questions about how licenses apply to you or your organization, you should seek legal advice. ") == true) {
+                                                                    x = "<br><p>The following are other community resources that may be helpful:<br><br><a href=http://www.gnu.org/licenses/license-list.en.html>GNU License List<br><a href=https://en.wikipedia.org/wiki/Comparison_of_free_and_open-source_software_licenses>Wikipedia License List<br><a href=http://oss-watch.ac.uk/apps/licdiff/>OSSWatch License Diff<br><a href=https://choosealicense.com/>Choose a license (by Github)";
+                                                                } else {
+                                                                    x = " ";
+                                                                }
+                                                                document.getElementById("demo").innerHTML = x;
+                                                            }
+
+                                                            //--><!]]>
+                                                        </script></div>
+
+                                                    <hr /><p><img alt="OSI Approved License Logo" hspace="20" src="/files/OSI_Approved_License.png" style="float:right" width="150" /></p>
+
+                                                    <p><em>Note: This license has also been called the "New BSD License" or "Modified BSD License". See also the <a href="https://opensource.org/licenses/BSD-2-Clause">2-clause BSD License</a>.</em></p>
+
+                                                    <p>Copyright &lt;YEAR&gt; &lt;COPYRIGHT HOLDER&gt;</p>
+
+                                                    <p>Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:</p>
+
+                                                    <p>1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.</p>
+
+                                                    <p>2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.</p>
+
+                                                    <p>3. Neither the name of the copyright holder nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.</p>
+
+                                                    <p>THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.</p>
+                                                </div></div></div>  </div>
+
+
+
+
+                                        </article>  </div>
+                                </div>
+                            </div>
+
+                        </div>
+                        <!-- EOF:#content-wrapper -->
+
+                    </div>
+                    <!-- EOF:#main -->
+
+                </section>
+
+
+            </div>
+
+        </div>
+    </div>
+    <!-- EOF:#main-content -->
+
+
+</div>
+<!-- EOF:#page -->
+
+
+<footer id="subfooter" class="clearfix">
+    <div class="container">
+
+        <!-- #subfooter-inside -->
+        <div id="subfooter-inside" class="clearfix">
+            <div class="row">
+                <div class="col-md-12">
+                    <!-- #subfooter-left -->
+                    <div class="subfooter-area">
+
+
+                        <div class="region region-footer">
+                            <div id="block-block-11" class="block block-block clearfix">
+
+
+                                <div class="content">
+                                    <div class="filler" style="vertical-align: middle; display: inline-block;">
+                                        <p style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;"><a href="https://twitter.com/OpenSourceOrg" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;"><img alt="" src="/files/twitterlogo.png" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;" width="50" /></a> <a href="https://www.linkedin.com/company/open-source-initiative-osi-" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;"><img alt="" src="/files/linkedin.png" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;" width="50" /></a> <a href="http://wiki.opensource.org" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;"><img alt="" src="/files/xwikilogo.png" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;" width="50" /></a> <a href="http://creativecommons.org/licenses/by/4.0/" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;"><img alt="" src="/files/ccby.png" style="margin: 0pt auto; display: table-cell; text-align: center; vertical-align: middle;" width="50" /></a></p>
+                                    </div>
+
+                                    <p> </p>
+
+                                    <div class="license" style="vertical-align: middle; display: inline-block;">
+                                        <p>The content on this website, of which Opensource.org is the author, is licensed under a <a href="http://creativecommons.org/licenses/by/4.0/" rel="license">Creative Commons Attribution 4.0 International License</a>.<br />
+                                            Opensource.org is not the author of any of the licenses reproduced on this site. Questions about the copyright in a license should be directed to the license steward.</p>
+
+                                        <p>Hosting for Opensource.org is generously provided by <a href="https://www.digitalocean.com/">DigitalOcean</a>. Please see <a href="../ToS">Terms of Service</a>.<br /><span style="font-size:10px;">For questions regarding the OSI website and contents pleasee <a href="mailto:webmaster@lists.opensource.org?subject=OSI%20website%20comment">email our webmaster</a>.</span></p>
+                                    </div>
+
+                                    <p> </p>
+                                </div>
+                            </div>
+                            <div id="block-block-7" class="block block-block clearfix">
+
+
+                                <div class="content">
+                                    <script src="https://www.google-analytics.com/urchin.js" type="text/javascript">
+                                        <!--//--><![CDATA[// ><!--
+
+
+                                        //--><!]]>
+                                    </script><script type="text/javascript">
+                                    <!--//--><![CDATA[// ><!--
+
+                                    _uacct = "UA-3916956-1";
+                                    urchinTracker();
+
+                                    //--><!]]>
+                                </script>  </div>
+                            </div>
+                        </div>
+
+                    </div>
+                    <!-- EOF: #subfooter-left -->
+                </div>
+            </div>
+        </div>
+        <!-- EOF: #subfooter-inside -->
+
+    </div>
+</footer>
+<!-- EOF:#subfooter -->
+</body>
+</html>
\ No newline at end of file
diff --git a/wildfly/docs/licenses/common public license 1.0.txt b/wildfly/docs/licenses/common public license 1.0.txt
new file mode 100644
index 0000000..ebae66d
--- /dev/null
+++ b/wildfly/docs/licenses/common public license 1.0.txt	
@@ -0,0 +1,213 @@
+Common Public License Version 1.0
+
+THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS COMMON PUBLIC
+LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF THE PROGRAM
+CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
+
+1. DEFINITIONS
+
+"Contribution" means:
+
+    a) in the case of the initial Contributor, the initial code and documentation
+    distributed under this Agreement, and
+
+    b) in the case of each subsequent Contributor:
+
+    i) changes to the Program, and
+
+    ii) additions to the Program;
+
+    where such changes and/or additions to the Program originate from and are
+    distributed by that particular Contributor. A Contribution 'originates' from
+    a Contributor if it was added to the Program by such Contributor itself or
+    anyone acting on such Contributor's behalf. Contributions do not include
+    additions to the Program which: (i) are separate modules of software
+    distributed in conjunction with the Program under their own license
+    agreement, and (ii) are not derivative works of the Program.
+
+"Contributor" means any person or entity that distributes the Program.
+
+"Licensed Patents " mean patent claims licensable by a Contributor which are
+necessarily infringed by the use or sale of its Contribution alone or when
+combined with the Program.
+
+"Program" means the Contributions distributed in accordance with this Agreement.
+
+"Recipient" means anyone who receives the Program under this Agreement, including
+all Contributors.
+
+2. GRANT OF RIGHTS
+
+    a) Subject to the terms of this Agreement, each Contributor hereby grants
+    Recipient a non-exclusive, worldwide, royalty-free copyright license to
+    reproduce, prepare derivative works of, publicly display, publicly perform,
+    distribute and sublicense the Contribution of such Contributor, if any, and
+    such derivative works, in source code and object code form.
+
+    b) Subject to the terms of this Agreement, each Contributor hereby grants
+    Recipient a non-exclusive, worldwide, royalty-free patent license under
+    Licensed Patents to make, use, sell, offer to sell, import and otherwise
+    transfer the Contribution of such Contributor, if any, in source code and
+    object code form. This patent license shall apply to the combination of the
+    Contribution and the Program if, at the time the Contribution is added by
+    the Contributor, such addition of the Contribution causes such combination
+    to be covered by the Licensed Patents. The patent license shall not apply to
+    any other combinations which include the Contribution. No hardware per se is
+    licensed hereunder.
+
+    c) Recipient understands that although each Contributor grants the licenses
+    to its Contributions set forth herein, no assurances are provided by any
+    Contributor that the Program does not infringe the patent or other
+    intellectual property rights of any other entity. Each Contributor disclaims
+    any liability to Recipient for claims brought by any other entity based on
+    infringement of intellectual property rights or otherwise. As a condition to
+    exercising the rights and licenses granted hereunder, each Recipient hereby
+    assumes sole responsibility to secure any other intellectual property rights
+    needed, if any. For example, if a third party patent license is required to
+    allow Recipient to distribute the Program, it is Recipient's responsibility
+    to acquire that license before distributing the Program.
+
+    d) Each Contributor represents that to its knowledge it has sufficient
+    copyright rights in its Contribution, if any, to grant the copyright license
+    set forth in this Agreement.
+
+3. REQUIREMENTS
+
+A Contributor may choose to distribute the Program in object code form under its
+own license agreement, provided that:
+
+    a) it complies with the terms and conditions of this Agreement; and
+
+    b) its license agreement:
+
+    i) effectively disclaims on behalf of all Contributors all warranties and
+    conditions, express and implied, including warranties or conditions of title
+    and non-infringement, and implied warranties or conditions of merchantability
+    and fitness for a particular purpose;
+
+    ii) effectively excludes on behalf of all Contributors all liability for
+    damages, including direct, indirect, special, incidental and consequential
+    damages, such as lost profits;
+
+    iii) states that any provisions which differ from this Agreement are offered
+    by that Contributor alone and not by any other party; and
+
+    iv) states that source code for the Program is available from such Contributor,
+    and informs licensees how to obtain it in a reasonable manner on or through
+    a medium customarily used for software exchange. 
+
+When the Program is made available in source code form:
+
+    a) it must be made available under this Agreement; and
+
+    b) a copy of this Agreement must be included with each copy of the Program. 
+
+Contributors may not remove or alter any copyright notices contained within the Program.
+
+Each Contributor must identify itself as the originator of its Contribution, if
+any, in a manner that reasonably allows subsequent Recipients to identify the
+originator of the Contribution.
+
+4. COMMERCIAL DISTRIBUTION
+
+Commercial distributors of software may accept certain responsibilities with
+respect to end users, business partners and the like. While this license is
+intended to facilitate the commercial use of the Program, the Contributor who
+includes the Program in a commercial product offering should do so in a manner
+which does not create potential liability for other Contributors. Therefore, if
+a Contributor includes the Program in a commercial product offering, such
+Contributor ("Commercial Contributor") hereby agrees to defend and indemnify
+every other Contributor ("Indemnified Contributor") against any losses, damages
+and costs (collectively "Losses") arising from claims, lawsuits and other legal
+actions brought by a third party against the Indemnified Contributor to the
+extent caused by the acts or omissions of such Commercial Contributor in
+connection with its distribution of the Program in a commercial product offering.
+The obligations in this section do not apply to any claims or Losses relating to
+any actual or alleged intellectual property infringement. In order to qualify,
+an Indemnified Contributor must: a) promptly notify the Commercial Contributor 
+n writing of such claim, and b) allow the Commercial Contributor to control,
+and cooperate with the Commercial Contributor in, the defense and any related
+settlement negotiations. The Indemnified Contributor may participate in any such
+claim at its own expense.
+
+For example, a Contributor might include the Program in a commercial product
+offering, Product X. That Contributor is then a Commercial Contributor. If that
+Commercial Contributor then makes performance claims, or offers warranties
+related to Product X, those performance claims and warranties are such Commercial
+Contributor's responsibility alone. Under this section, the Commercial
+Contributor would have to defend claims against the other Contributors related
+to those performance claims and warranties, and if a court requires any other
+Contributor to pay any damages as a result, the Commercial Contributor must pay
+those damages.
+
+5. NO WARRANTY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS PROVIDED ON AN
+"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR
+IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE,
+NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each
+Recipient is solely responsible for determining the appropriateness of using
+and distributing the Program and assumes all risks associated with its exercise
+of rights under this Agreement, including but not limited to the risks and costs
+of program errors, compliance with applicable laws, damage to or loss of data,
+programs or equipment, and unavailability or interruption of operations.
+
+6. DISCLAIMER OF LIABILITY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR ANY
+CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOST
+PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
+STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY
+WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS
+GRANTED HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7. GENERAL
+
+If any provision of this Agreement is invalid or unenforceable under applicable
+law, it shall not affect the validity or enforceability of the remainder of the
+terms of this Agreement, and without further action by the parties hereto, such
+provision shall be reformed to the minimum extent necessary to make such
+provision valid and enforceable.
+
+If Recipient institutes patent litigation against a Contributor with respect to
+a patent applicable to software (including a cross-claim or counterclaim in a
+lawsuit), then any patent licenses granted by that Contributor to such Recipient
+under this Agreement shall terminate as of the date such litigation is filed.
+In addition, if Recipient institutes patent litigation against any entity
+(including a cross-claim or counterclaim in a lawsuit) alleging that the Program
+itself (excluding combinations of the Program with other software or hardware)
+infringes such Recipient's patent(s), then such Recipient's rights granted under
+Section 2(b) shall terminate as of the date such litigation is filed.
+
+All Recipient's rights under this Agreement shall terminate if it fails to comply
+with any of the material terms or conditions of this Agreement and does not cure
+such failure in a reasonable period of time after becoming aware of such
+noncompliance. If all Recipient's rights under this Agreement terminate, Recipient
+agrees to cease use and distribution of the Program as soon as reasonably
+practicable. However, Recipient's obligations under this Agreement and any
+licenses granted by Recipient relating to the Program shall continue and survive.
+
+Everyone is permitted to copy and distribute copies of this Agreement, but in
+order to avoid inconsistency the Agreement is copyrighted and may only be modified
+in the following manner. The Agreement Steward reserves the right to publish new
+versions (including revisions) of this Agreement from time to time. No one other
+than the Agreement Steward has the right to modify this Agreement. IBM is the
+initial Agreement Steward. IBM may assign the responsibility to serve as the
+Agreement Steward to a suitable separate entity. Each new version of the Agreement
+will be given a distinguishing version number. The Program (including Contributions)
+may always be distributed subject to the version of the Agreement under which it
+was received. In addition, after a new version of the Agreement is published,
+Contributor may elect to distribute the Program (including its Contributions)
+under the new version. Except as expressly stated in Sections 2(a) and 2(b) above,
+Recipient receives no rights or licenses to the intellectual property of any
+Contributor under this Agreement, whether expressly, by implication, estoppel or
+otherwise. All rights in the Program not expressly granted under this Agreement
+are reserved.
+
+This Agreement is governed by the laws of the State of New York and the
+intellectual property laws of the United States of America. No party to this
+Agreement will bring a legal action under this Agreement more than one year after
+the cause of action arose. Each party waives its rights to a jury trial in any
+resulting litigation.
+
diff --git a/wildfly/docs/licenses/creative commons attribution 2.5.html b/wildfly/docs/licenses/creative commons attribution 2.5.html
new file mode 100644
index 0000000..a03d225
--- /dev/null
+++ b/wildfly/docs/licenses/creative commons attribution 2.5.html	
@@ -0,0 +1,121 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "DTD/xhtml1-transitional.dtd">
+<html>
+<head>
+<title>Creative Commons Legal Code</title>
+<link rel="stylesheet" type="text/css" href="/includes/deeds.css" />
+<style type="text/css">
+
+li {
+margin-bottom:12px;
+}
+
+</style>
+</head>
+<body>
+<p align="center"><a href="/">Creative Commons</a></p>
+<div id="deed">
+<div align="center"><img src="/images/deed/logo_code.gif" alt="Creative Commons Legal Code" width="280" height="79" vspace="14" border="0" /></div>
+<p align="center"><b>Attribution 2.5</b></p>
+<div class="text">
+<div class="fineprint" style="background:none;">
+CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE LEGAL
+SERVICES. DISTRIBUTION OF THIS LICENSE DOES NOT CREATE AN
+ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS INFORMATION ON
+AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES REGARDING THE
+INFORMATION PROVIDED, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+ITS USE.</div>
+<p><em>License</em> </p>
+<p>THE WORK (AS DEFINED BELOW) IS PROVIDED UNDER THE TERMS OF THIS CREATIVE COMMONS PUBLIC LICENSE ("CCPL" OR "LICENSE"). THE WORK IS PROTECTED BY COPYRIGHT AND/OR OTHER APPLICABLE LAW. ANY USE OF THE WORK OTHER THAN AS AUTHORIZED UNDER THIS LICENSE OR COPYRIGHT LAW IS PROHIBITED. </p>
+<p>BY EXERCISING ANY RIGHTS TO THE WORK PROVIDED HERE, YOU ACCEPT AND AGREE TO BE BOUND BY THE TERMS OF THIS LICENSE. THE LICENSOR GRANTS YOU THE RIGHTS CONTAINED HERE IN CONSIDERATION OF YOUR ACCEPTANCE OF SUCH TERMS AND CONDITIONS. </p>
+<p><strong>1. Definitions</strong> </p>
+<ol type="a">
+<li>
+<strong>"Collective Work"</strong> means a work, such as a periodical issue, anthology or encyclopedia, in which the Work in its entirety in unmodified form, along with a number of other contributions, constituting separate and independent works in themselves, are assembled into a collective whole. A work that constitutes a Collective Work will not be considered a Derivative Work (as defined below) for the purposes of this License.
+</li>
+<li>
+<strong>"Derivative Work"</strong> means a work based upon the Work or upon the Work and other pre-existing works, such as a translation, musical arrangement, dramatization, fictionalization, motion picture version, sound recording, art reproduction, abridgment, condensation, or any other form in which the Work may be recast, transformed, or adapted, except that a work that constitutes a Collective Work will not be considered a Derivative Work for the purpose of this License. For the avoidance of doubt, where the Work is a musical composition or sound recording, the synchronization of the Work in timed-relation with a moving image ("synching") will be considered a Derivative Work for the purpose of this License.</li>
+<li>
+<strong>"Licensor"</strong> means the individual or entity that offers the Work under the terms of this License.
+</li>
+<li>
+<strong>"Original Author"</strong> means the individual or entity who created the Work.
+</li>
+<li>
+<strong>"Work"</strong> means the copyrightable work of authorship offered under the terms of this License.
+</li>
+<li>
+<strong>"You"</strong> means an individual or entity exercising rights under this License who has not previously violated the terms of this License with respect to the Work, or who has received express permission from the Licensor to exercise rights under this License despite a previous violation.
+</li>
+</ol>
+<p><strong>2. Fair Use Rights.</strong> Nothing in this license is intended to reduce, limit, or restrict any rights arising from fair use, first sale or other limitations on the exclusive rights of the copyright owner under copyright law or other applicable laws. </p>
+<p><strong>3. License Grant.</strong> Subject to the terms and conditions of this License, Licensor hereby grants You a worldwide, royalty-free, non-exclusive, perpetual (for the duration of the applicable copyright) license to exercise the rights in the Work as stated below: </p>
+<ol type="a">
+<li>
+to reproduce the Work, to incorporate the Work into one or more Collective Works, and to reproduce the Work as incorporated in the Collective Works;
+</li>
+<li>
+to create and reproduce Derivative Works;
+</li>
+<li>
+to distribute copies or phonorecords of, display publicly, perform publicly, and perform publicly by means of a digital audio transmission the Work including as incorporated in Collective Works;
+</li>
+<li>
+to distribute copies or phonorecords of, display publicly, perform publicly, and perform publicly by means of a digital audio transmission Derivative Works.
+</li>
+<li><p>For the avoidance of doubt, where the work is a musical composition:</p>
+<ol type="i">
+<li><strong>Performance Royalties Under Blanket Licenses</strong>. Licensor waives the exclusive right to collect, whether individually or via a performance rights society (e.g. ASCAP, BMI, SESAC), royalties for the public performance or public digital performance (e.g. webcast) of the Work.</li>
+<li><strong>Mechanical Rights and Statutory Royalties</strong>. Licensor waives the exclusive right to collect, whether individually or via a music rights agency or designated agent (e.g. Harry Fox Agency), royalties for any phonorecord You create from the Work ("cover version") and distribute, subject to the compulsory license created by 17 USC Section 115 of the US Copyright Act (or the equivalent in other jurisdictions).</li></ol></li>
+<li><strong>Webcasting Rights and Statutory Royalties</strong>. For the avoidance of doubt, where the Work is a sound recording, Licensor waives the exclusive right to collect, whether individually or via a performance-rights society (e.g. SoundExchange), royalties for the public digital performance (e.g. webcast) of the Work, subject to the compulsory license created by 17 USC Section 114 of the US Copyright Act (or the equivalent in other jurisdictions).</li>
+</ol>
+<p>The above rights may be exercised in all media and formats whether now known or hereafter devised. The above rights include the right to make such modifications as are technically necessary to exercise the rights in other media and formats. All rights not expressly granted by Licensor are hereby reserved.</p>
+<p><strong>4. Restrictions.</strong>The license granted in Section 3 above is expressly made subject to and limited by the following restrictions: </p>
+<ol type="a">
+<li>
+You may distribute, publicly display, publicly perform, or publicly digitally perform the Work only under the terms of this License, and You must include a copy of, or the Uniform Resource Identifier for, this License with every copy or phonorecord of the Work You distribute, publicly display, publicly perform, or publicly digitally perform. You may not offer or impose any terms on the Work that alter or restrict the terms of this License or the recipients' exercise of the rights granted hereunder. You may not sublicense the Work. You must keep intact all notices that refer to this License and to the disclaimer of warranties. You may not distribute, publicly display, publicly perform, or publicly digitally perform the Work with any technological measures that control access or use of the Work in a manner inconsistent with the terms of this License Agreement. The above applies to the Work as incorporated in a Collective Work, but this does not require the Collective Work apart from the Work itself to be made subject to the terms of this License. If You create a Collective Work, upon notice from any Licensor You must, to the extent practicable, remove from the Collective Work any credit as required by clause 4(b), as requested. If You create a Derivative Work, upon notice from any Licensor You must, to the extent practicable, remove from the Derivative Work any credit as required by clause 4(b), as requested.
+</li>
+<li>
+If you distribute, publicly display, publicly perform, or publicly digitally perform the Work or any Derivative Works or Collective Works, You must keep intact all copyright notices for the Work and provide, reasonable to the medium or means You are utilizing: (i) the name of the Original Author (or pseudonym, if applicable) if supplied, and/or (ii) if the Original Author and/or Licensor designate another party or parties (e.g. a sponsor institute, publishing entity, journal) for attribution in Licensor's copyright notice, terms of service or by other reasonable means, the name of such party or parties; the title of the Work if supplied; to the extent reasonably practicable, the Uniform Resource Identifier, if any, that Licensor specifies to be associated with the Work, unless such URI does not refer to the copyright notice or licensing information for the Work; and in the case of a Derivative Work, a credit identifying the use of the Work in the Derivative Work (e.g., "French translation of the Work by Original Author," or "Screenplay based on original Work by Original Author"). Such credit may be implemented in any reasonable manner; provided, however, that in the case of a Derivative Work or Collective Work, at a minimum such credit will appear where any other comparable authorship credit appears and in a manner at least as prominent as such other comparable authorship credit.
+</li>
+</ol>
+<p><strong>5. Representations, Warranties and Disclaimer</strong></p>
+<p>UNLESS OTHERWISE MUTUALLY AGREED TO BY THE PARTIES IN WRITING, LICENSOR OFFERS THE WORK AS-IS AND MAKES NO REPRESENTATIONS OR WARRANTIES OF ANY KIND CONCERNING THE WORK, EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, INCLUDING, WITHOUT LIMITATION, WARRANTIES OF TITLE, MERCHANTIBILITY, FITNESS FOR A PARTICULAR PURPOSE, NONINFRINGEMENT, OR THE ABSENCE OF LATENT OR OTHER DEFECTS, ACCURACY, OR THE PRESENCE OF ABSENCE OF ERRORS, WHETHER OR NOT DISCOVERABLE. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SUCH EXCLUSION MAY NOT APPLY TO YOU.</p>
+<p><strong>6. Limitation on Liability.</strong> EXCEPT TO THE EXTENT REQUIRED BY APPLICABLE LAW, IN NO EVENT WILL LICENSOR BE LIABLE TO YOU ON ANY LEGAL THEORY FOR ANY SPECIAL, INCIDENTAL, CONSEQUENTIAL, PUNITIVE OR EXEMPLARY DAMAGES ARISING OUT OF THIS LICENSE OR THE USE OF THE WORK, EVEN IF LICENSOR HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. </p>
+<p><strong>7. Termination</strong> </p>
+<ol type="a">
+<li>
+This License and the rights granted hereunder will terminate automatically upon any breach by You of the terms of this License. Individuals or entities who have received Derivative Works or Collective Works from You under this License, however, will not have their licenses terminated provided such individuals or entities remain in full compliance with those licenses. Sections 1, 2, 5, 6, 7, and 8 will survive any termination of this License.
+</li>
+<li>
+Subject to the above terms and conditions, the license granted here is perpetual (for the duration of the applicable copyright in the Work). Notwithstanding the above, Licensor reserves the right to release the Work under different license terms or to stop distributing the Work at any time; provided, however that any such election will not serve to withdraw this License (or any other license that has been, or is required to be, granted under the terms of this License), and this License will continue in full force and effect unless terminated as stated above.
+</li>
+</ol>
+<p><strong>8. Miscellaneous</strong> </p>
+<ol type="a">
+<li>
+Each time You distribute or publicly digitally perform the Work or a Collective Work, the Licensor offers to the recipient a license to the Work on the same terms and conditions as the license granted to You under this License.
+</li>
+<li>
+Each time You distribute or publicly digitally perform a Derivative Work, Licensor offers to the recipient a license to the original Work on the same terms and conditions as the license granted to You under this License.
+</li>
+<li>
+If any provision of this License is invalid or unenforceable under applicable law, it shall not affect the validity or enforceability of the remainder of the terms of this License, and without further action by the parties to this agreement, such provision shall be reformed to the minimum extent necessary to make such provision valid and enforceable.
+</li>
+<li>
+No term or provision of this License shall be deemed waived and no breach consented to unless such waiver or consent shall be in writing and signed by the party to be charged with such waiver or consent.
+</li>
+<li>
+This License constitutes the entire agreement between the parties with respect to the Work licensed here. There are no understandings, agreements or representations with respect to the Work not specified here. Licensor shall not be bound by any additional provisions that may appear in any communication from You. This License may not be modified without the mutual written agreement of the Licensor and You.
+</li>
+</ol>
+
+<div class="fineprint">
+<p>Creative Commons is not a party to this License, and makes no warranty whatsoever in connection with the Work. Creative Commons will not be liable to You or any party on any legal theory for any damages whatsoever, including without limitation any general, special, incidental or consequential damages arising in connection to this license. Notwithstanding the foregoing two (2) sentences, if Creative Commons has expressly identified itself as the Licensor hereunder, it shall have all rights and obligations of Licensor. </p>
+<p>Except for the limited purpose of indicating to the public that the Work is licensed under the CCPL, neither party will use the trademark "Creative Commons" or any related trademark or logo of Creative Commons without the prior written consent of Creative Commons. Any permitted use will be in compliance with Creative Commons' then-current trademark usage guidelines, as may be published on its website or otherwise made available upon request from time to time.</p>
+<p>Creative Commons may be contacted at <a href="https://creativecommons.org">https://creativecommons.org/</a>.</p>
+</div>
+
+</div>
+<div align="right" style="margin-bottom: 10px;"><a href="./" class="fulltext">&laquo; Back to Commons Deed</a></div>
+</div>
+</body></html>
diff --git a/wildfly/docs/licenses/eclipse distribution license, version 1.0.txt b/wildfly/docs/licenses/eclipse distribution license, version 1.0.txt
new file mode 100644
index 0000000..f307e59
--- /dev/null
+++ b/wildfly/docs/licenses/eclipse distribution license, version 1.0.txt	
@@ -0,0 +1,13 @@
+Eclipse Distribution License - v 1.0
+
+Copyright (c) 2007, Eclipse Foundation, Inc. and its licensors.
+
+All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+Neither the name of the Eclipse Foundation, Inc. nor the names of its contributors may be used to endorse or promote products derived from this software without specific prior written permission.
+THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
diff --git a/wildfly/docs/licenses/eclipse public license 1.0.txt b/wildfly/docs/licenses/eclipse public license 1.0.txt
new file mode 100644
index 0000000..24937b6
--- /dev/null
+++ b/wildfly/docs/licenses/eclipse public license 1.0.txt	
@@ -0,0 +1,87 @@
+Eclipse Public License - v 1.0
+
+THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION OF THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
+
+1. DEFINITIONS
+
+"Contribution" means:
+
+a) in the case of the initial Contributor, the initial code and documentation distributed under this Agreement, and
+b) in the case of each subsequent Contributor:
+
+i) changes to the Program, and
+
+ii) additions to the Program;
+
+where such changes and/or additions to the Program originate from and are distributed by that particular Contributor. A Contribution 'originates' from a Contributor if it was added to the Program by such Contributor itself or anyone acting on such Contributor's behalf. Contributions do not include additions to the Program which: (i) are separate modules of software distributed in conjunction with the Program under their own license agreement, and (ii) are not derivative works of the Program.
+
+"Contributor" means any person or entity that distributes the Program.
+
+"Licensed Patents " mean patent claims licensable by a Contributor which are necessarily infringed by the use or sale of its Contribution alone or when combined with the Program.
+
+"Program" means the Contributions distributed in accordance with this Agreement.
+
+"Recipient" means anyone who receives the Program under this Agreement, including all Contributors.
+
+2. GRANT OF RIGHTS
+
+a) Subject to the terms of this Agreement, each Contributor hereby grants Recipient a non-exclusive, worldwide, royalty-free copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, distribute and sublicense the Contribution of such Contributor, if any, and such derivative works, in source code and object code form.
+
+b) Subject to the terms of this Agreement, each Contributor hereby grants Recipient a non-exclusive, worldwide, royalty-free patent license under Licensed Patents to make, use, sell, offer to sell, import and otherwise transfer the Contribution of such Contributor, if any, in source code and object code form. This patent license shall apply to the combination of the Contribution and the Program if, at the time the Contribution is added by the Contributor, such addition of the Contribution causes such combination to be covered by the Licensed Patents. The patent license shall not apply to any other combinations which include the Contribution. No hardware per se is licensed hereunder.
+
+c) Recipient understands that although each Contributor grants the licenses to its Contributions set forth herein, no assurances are provided by any Contributor that the Program does not infringe the patent or other intellectual property rights of any other entity. Each Contributor disclaims any liability to Recipient for claims brought by any other entity based on infringement of intellectual property rights or otherwise. As a condition to exercising the rights and licenses granted hereunder, each Recipient hereby assumes sole responsibility to secure any other intellectual property rights needed, if any. For example, if a third party patent license is required to allow Recipient to distribute the Program, it is Recipient's responsibility to acquire that license before distributing the Program.
+
+d) Each Contributor represents that to its knowledge it has sufficient copyright rights in its Contribution, if any, to grant the copyright license set forth in this Agreement.
+
+3. REQUIREMENTS
+
+A Contributor may choose to distribute the Program in object code form under its own license agreement, provided that:
+
+a) it complies with the terms and conditions of this Agreement; and
+
+b) its license agreement:
+
+i) effectively disclaims on behalf of all Contributors all warranties and conditions, express and implied, including warranties or conditions of title and non-infringement, and implied warranties or conditions of merchantability and fitness for a particular purpose;
+
+ii) effectively excludes on behalf of all Contributors all liability for damages, including direct, indirect, special, incidental and consequential damages, such as lost profits;
+
+iii) states that any provisions which differ from this Agreement are offered by that Contributor alone and not by any other party; and
+
+iv) states that source code for the Program is available from such Contributor, and informs licensees how to obtain it in a reasonable manner on or through a medium customarily used for software exchange.
+
+When the Program is made available in source code form:
+
+a) it must be made available under this Agreement; and
+
+b) a copy of this Agreement must be included with each copy of the Program.
+
+Contributors may not remove or alter any copyright notices contained within the Program.
+
+Each Contributor must identify itself as the originator of its Contribution, if any, in a manner that reasonably allows subsequent Recipients to identify the originator of the Contribution.
+
+4. COMMERCIAL DISTRIBUTION
+
+Commercial distributors of software may accept certain responsibilities with respect to end users, business partners and the like. While this license is intended to facilitate the commercial use of the Program, the Contributor who includes the Program in a commercial product offering should do so in a manner which does not create potential liability for other Contributors. Therefore, if a Contributor includes the Program in a commercial product offering, such Contributor ("Commercial Contributor") hereby agrees to defend and indemnify every other Contributor ("Indemnified Contributor") against any losses, damages and costs (collectively "Losses") arising from claims, lawsuits and other legal actions brought by a third party against the Indemnified Contributor to the extent caused by the acts or omissions of such Commercial Contributor in connection with its distribution of the Program in a commercial product offering. The obligations in this section do not apply to any claims or Losses relating to any actual or alleged intellectual property infringement. In order to qualify, an Indemnified Contributor must: a) promptly notify the Commercial Contributor in writing of such claim, and b) allow the Commercial Contributor to control, and cooperate with the Commercial Contributor in, the defense and any related settlement negotiations. The Indemnified Contributor may participate in any such claim at its own expense.
+
+For example, a Contributor might include the Program in a commercial product offering, Product X. That Contributor is then a Commercial Contributor. If that Commercial Contributor then makes performance claims, or offers warranties related to Product X, those performance claims and warranties are such Commercial Contributor's responsibility alone. Under this section, the Commercial Contributor would have to defend claims against the other Contributors related to those performance claims and warranties, and if a court requires any other Contributor to pay any damages as a result, the Commercial Contributor must pay those damages.
+
+5. NO WARRANTY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, THE PROGRAM IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Each Recipient is solely responsible for determining the appropriateness of using and distributing the Program and assumes all risks associated with its exercise of rights under this Agreement , including but not limited to the risks and costs of program errors, compliance with applicable laws, damage to or loss of data, programs or equipment, and unavailability or interruption of operations.
+
+6. DISCLAIMER OF LIABILITY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, NEITHER RECIPIENT NOR ANY CONTRIBUTORS SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOST PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+7. GENERAL
+
+If any provision of this Agreement is invalid or unenforceable under applicable law, it shall not affect the validity or enforceability of the remainder of the terms of this Agreement, and without further action by the parties hereto, such provision shall be reformed to the minimum extent necessary to make such provision valid and enforceable.
+
+If Recipient institutes patent litigation against any entity (including a cross-claim or counterclaim in a lawsuit) alleging that the Program itself (excluding combinations of the Program with other software or hardware) infringes such Recipient's patent(s), then such Recipient's rights granted under Section 2(b) shall terminate as of the date such litigation is filed.
+
+All Recipient's rights under this Agreement shall terminate if it fails to comply with any of the material terms or conditions of this Agreement and does not cure such failure in a reasonable period of time after becoming aware of such noncompliance. If all Recipient's rights under this Agreement terminate, Recipient agrees to cease use and distribution of the Program as soon as reasonably practicable. However, Recipient's obligations under this Agreement and any licenses granted by Recipient relating to the Program shall continue and survive.
+
+Everyone is permitted to copy and distribute copies of this Agreement, but in order to avoid inconsistency the Agreement is copyrighted and may only be modified in the following manner. The Agreement Steward reserves the right to publish new versions (including revisions) of this Agreement from time to time. No one other than the Agreement Steward has the right to modify this Agreement. The Eclipse Foundation is the initial Agreement Steward. The Eclipse Foundation may assign the responsibility to serve as the Agreement Steward to a suitable separate entity. Each new version of the Agreement will be given a distinguishing version number. The Program (including Contributions) may always be distributed subject to the version of the Agreement under which it was received. In addition, after a new version of the Agreement is published, Contributor may elect to distribute the Program (including its Contributions) under the new version. Except as expressly stated in Sections 2(a) and 2(b) above, Recipient receives no rights or licenses to the intellectual property of any Contributor under this Agreement, whether expressly, by implication, estoppel or otherwise. All rights in the Program not expressly granted under this Agreement are reserved.
+
+This Agreement is governed by the laws of the State of New York and the intellectual property laws of the United States of America. No party to this Agreement will bring a legal action under this Agreement more than one year after the cause of action arose. Each party waives its rights to a jury trial in any resulting litigation.
+
diff --git a/wildfly/docs/licenses/eclipse public license 2.0.txt b/wildfly/docs/licenses/eclipse public license 2.0.txt
new file mode 100644
index 0000000..e23ece2
--- /dev/null
+++ b/wildfly/docs/licenses/eclipse public license 2.0.txt	
@@ -0,0 +1,277 @@
+Eclipse Public License - v 2.0
+
+    THE ACCOMPANYING PROGRAM IS PROVIDED UNDER THE TERMS OF THIS ECLIPSE
+    PUBLIC LICENSE ("AGREEMENT"). ANY USE, REPRODUCTION OR DISTRIBUTION
+    OF THE PROGRAM CONSTITUTES RECIPIENT'S ACCEPTANCE OF THIS AGREEMENT.
+
+1. DEFINITIONS
+
+"Contribution" means:
+
+  a) in the case of the initial Contributor, the initial content
+     Distributed under this Agreement, and
+
+  b) in the case of each subsequent Contributor:
+     i) changes to the Program, and
+     ii) additions to the Program;
+  where such changes and/or additions to the Program originate from
+  and are Distributed by that particular Contributor. A Contribution
+  "originates" from a Contributor if it was added to the Program by
+  such Contributor itself or anyone acting on such Contributor's behalf.
+  Contributions do not include changes or additions to the Program that
+  are not Modified Works.
+
+"Contributor" means any person or entity that Distributes the Program.
+
+"Licensed Patents" mean patent claims licensable by a Contributor which
+are necessarily infringed by the use or sale of its Contribution alone
+or when combined with the Program.
+
+"Program" means the Contributions Distributed in accordance with this
+Agreement.
+
+"Recipient" means anyone who receives the Program under this Agreement
+or any Secondary License (as applicable), including Contributors.
+
+"Derivative Works" shall mean any work, whether in Source Code or other
+form, that is based on (or derived from) the Program and for which the
+editorial revisions, annotations, elaborations, or other modifications
+represent, as a whole, an original work of authorship.
+
+"Modified Works" shall mean any work in Source Code or other form that
+results from an addition to, deletion from, or modification of the
+contents of the Program, including, for purposes of clarity any new file
+in Source Code form that contains any contents of the Program. Modified
+Works shall not include works that contain only declarations,
+interfaces, types, classes, structures, or files of the Program solely
+in each case in order to link to, bind by name, or subclass the Program
+or Modified Works thereof.
+
+"Distribute" means the acts of a) distributing or b) making available
+in any manner that enables the transfer of a copy.
+
+"Source Code" means the form of a Program preferred for making
+modifications, including but not limited to software source code,
+documentation source, and configuration files.
+
+"Secondary License" means either the GNU General Public License,
+Version 2.0, or any later versions of that license, including any
+exceptions or additional permissions as identified by the initial
+Contributor.
+
+2. GRANT OF RIGHTS
+
+  a) Subject to the terms of this Agreement, each Contributor hereby
+  grants Recipient a non-exclusive, worldwide, royalty-free copyright
+  license to reproduce, prepare Derivative Works of, publicly display,
+  publicly perform, Distribute and sublicense the Contribution of such
+  Contributor, if any, and such Derivative Works.
+
+  b) Subject to the terms of this Agreement, each Contributor hereby
+  grants Recipient a non-exclusive, worldwide, royalty-free patent
+  license under Licensed Patents to make, use, sell, offer to sell,
+  import and otherwise transfer the Contribution of such Contributor,
+  if any, in Source Code or other form. This patent license shall
+  apply to the combination of the Contribution and the Program if, at
+  the time the Contribution is added by the Contributor, such addition
+  of the Contribution causes such combination to be covered by the
+  Licensed Patents. The patent license shall not apply to any other
+  combinations which include the Contribution. No hardware per se is
+  licensed hereunder.
+
+  c) Recipient understands that although each Contributor grants the
+  licenses to its Contributions set forth herein, no assurances are
+  provided by any Contributor that the Program does not infringe the
+  patent or other intellectual property rights of any other entity.
+  Each Contributor disclaims any liability to Recipient for claims
+  brought by any other entity based on infringement of intellectual
+  property rights or otherwise. As a condition to exercising the
+  rights and licenses granted hereunder, each Recipient hereby
+  assumes sole responsibility to secure any other intellectual
+  property rights needed, if any. For example, if a third party
+  patent license is required to allow Recipient to Distribute the
+  Program, it is Recipient's responsibility to acquire that license
+  before distributing the Program.
+
+  d) Each Contributor represents that to its knowledge it has
+  sufficient copyright rights in its Contribution, if any, to grant
+  the copyright license set forth in this Agreement.
+
+  e) Notwithstanding the terms of any Secondary License, no
+  Contributor makes additional grants to any Recipient (other than
+  those set forth in this Agreement) as a result of such Recipient's
+  receipt of the Program under the terms of a Secondary License
+  (if permitted under the terms of Section 3).
+
+3. REQUIREMENTS
+
+3.1 If a Contributor Distributes the Program in any form, then:
+
+  a) the Program must also be made available as Source Code, in
+  accordance with section 3.2, and the Contributor must accompany
+  the Program with a statement that the Source Code for the Program
+  is available under this Agreement, and informs Recipients how to
+  obtain it in a reasonable manner on or through a medium customarily
+  used for software exchange; and
+
+  b) the Contributor may Distribute the Program under a license
+  different than this Agreement, provided that such license:
+     i) effectively disclaims on behalf of all other Contributors all
+     warranties and conditions, express and implied, including
+     warranties or conditions of title and non-infringement, and
+     implied warranties or conditions of merchantability and fitness
+     for a particular purpose;
+
+     ii) effectively excludes on behalf of all other Contributors all
+     liability for damages, including direct, indirect, special,
+     incidental and consequential damages, such as lost profits;
+
+     iii) does not attempt to limit or alter the recipients' rights
+     in the Source Code under section 3.2; and
+
+     iv) requires any subsequent distribution of the Program by any
+     party to be under a license that satisfies the requirements
+     of this section 3.
+
+3.2 When the Program is Distributed as Source Code:
+
+  a) it must be made available under this Agreement, or if the
+  Program (i) is combined with other material in a separate file or
+  files made available under a Secondary License, and (ii) the initial
+  Contributor attached to the Source Code the notice described in
+  Exhibit A of this Agreement, then the Program may be made available
+  under the terms of such Secondary Licenses, and
+
+  b) a copy of this Agreement must be included with each copy of
+  the Program.
+
+3.3 Contributors may not remove or alter any copyright, patent,
+trademark, attribution notices, disclaimers of warranty, or limitations
+of liability ("notices") contained within the Program from any copy of
+the Program which they Distribute, provided that Contributors may add
+their own appropriate notices.
+
+4. COMMERCIAL DISTRIBUTION
+
+Commercial distributors of software may accept certain responsibilities
+with respect to end users, business partners and the like. While this
+license is intended to facilitate the commercial use of the Program,
+the Contributor who includes the Program in a commercial product
+offering should do so in a manner which does not create potential
+liability for other Contributors. Therefore, if a Contributor includes
+the Program in a commercial product offering, such Contributor
+("Commercial Contributor") hereby agrees to defend and indemnify every
+other Contributor ("Indemnified Contributor") against any losses,
+damages and costs (collectively "Losses") arising from claims, lawsuits
+and other legal actions brought by a third party against the Indemnified
+Contributor to the extent caused by the acts or omissions of such
+Commercial Contributor in connection with its distribution of the Program
+in a commercial product offering. The obligations in this section do not
+apply to any claims or Losses relating to any actual or alleged
+intellectual property infringement. In order to qualify, an Indemnified
+Contributor must: a) promptly notify the Commercial Contributor in
+writing of such claim, and b) allow the Commercial Contributor to control,
+and cooperate with the Commercial Contributor in, the defense and any
+related settlement negotiations. The Indemnified Contributor may
+participate in any such claim at its own expense.
+
+For example, a Contributor might include the Program in a commercial
+product offering, Product X. That Contributor is then a Commercial
+Contributor. If that Commercial Contributor then makes performance
+claims, or offers warranties related to Product X, those performance
+claims and warranties are such Commercial Contributor's responsibility
+alone. Under this section, the Commercial Contributor would have to
+defend claims against the other Contributors related to those performance
+claims and warranties, and if a court requires any other Contributor to
+pay any damages as a result, the Commercial Contributor must pay
+those damages.
+
+5. NO WARRANTY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, AND TO THE EXTENT
+PERMITTED BY APPLICABLE LAW, THE PROGRAM IS PROVIDED ON AN "AS IS"
+BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, EITHER EXPRESS OR
+IMPLIED INCLUDING, WITHOUT LIMITATION, ANY WARRANTIES OR CONDITIONS OF
+TITLE, NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR
+PURPOSE. Each Recipient is solely responsible for determining the
+appropriateness of using and distributing the Program and assumes all
+risks associated with its exercise of rights under this Agreement,
+including but not limited to the risks and costs of program errors,
+compliance with applicable laws, damage to or loss of data, programs
+or equipment, and unavailability or interruption of operations.
+
+6. DISCLAIMER OF LIABILITY
+
+EXCEPT AS EXPRESSLY SET FORTH IN THIS AGREEMENT, AND TO THE EXTENT
+PERMITTED BY APPLICABLE LAW, NEITHER RECIPIENT NOR ANY CONTRIBUTORS
+SHALL HAVE ANY LIABILITY FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
+EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT LIMITATION LOST
+PROFITS), HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
+CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
+ARISING IN ANY WAY OUT OF THE USE OR DISTRIBUTION OF THE PROGRAM OR THE
+EXERCISE OF ANY RIGHTS GRANTED HEREUNDER, EVEN IF ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+7. GENERAL
+
+If any provision of this Agreement is invalid or unenforceable under
+applicable law, it shall not affect the validity or enforceability of
+the remainder of the terms of this Agreement, and without further
+action by the parties hereto, such provision shall be reformed to the
+minimum extent necessary to make such provision valid and enforceable.
+
+If Recipient institutes patent litigation against any entity
+(including a cross-claim or counterclaim in a lawsuit) alleging that the
+Program itself (excluding combinations of the Program with other software
+or hardware) infringes such Recipient's patent(s), then such Recipient's
+rights granted under Section 2(b) shall terminate as of the date such
+litigation is filed.
+
+All Recipient's rights under this Agreement shall terminate if it
+fails to comply with any of the material terms or conditions of this
+Agreement and does not cure such failure in a reasonable period of
+time after becoming aware of such noncompliance. If all Recipient's
+rights under this Agreement terminate, Recipient agrees to cease use
+and distribution of the Program as soon as reasonably practicable.
+However, Recipient's obligations under this Agreement and any licenses
+granted by Recipient relating to the Program shall continue and survive.
+
+Everyone is permitted to copy and distribute copies of this Agreement,
+but in order to avoid inconsistency the Agreement is copyrighted and
+may only be modified in the following manner. The Agreement Steward
+reserves the right to publish new versions (including revisions) of
+this Agreement from time to time. No one other than the Agreement
+Steward has the right to modify this Agreement. The Eclipse Foundation
+is the initial Agreement Steward. The Eclipse Foundation may assign the
+responsibility to serve as the Agreement Steward to a suitable separate
+entity. Each new version of the Agreement will be given a distinguishing
+version number. The Program (including Contributions) may always be
+Distributed subject to the version of the Agreement under which it was
+received. In addition, after a new version of the Agreement is published,
+Contributor may elect to Distribute the Program (including its
+Contributions) under the new version.
+
+Except as expressly stated in Sections 2(a) and 2(b) above, Recipient
+receives no rights or licenses to the intellectual property of any
+Contributor under this Agreement, whether expressly, by implication,
+estoppel or otherwise. All rights in the Program not expressly granted
+under this Agreement are reserved. Nothing in this Agreement is intended
+to be enforceable by any entity that is not a Contributor or Recipient.
+No third-party beneficiary rights are created under this Agreement.
+
+Exhibit A - Form of Secondary Licenses Notice
+
+"This Source Code may also be made available under the following 
+Secondary Licenses when the conditions for such availability set forth 
+in the Eclipse Public License, v. 2.0 are satisfied: {name license(s),
+version(s), and exceptions or additional permissions here}."
+
+  Simply including a copy of this Agreement, including this Exhibit A
+  is not sufficient to license the Source Code under Secondary Licenses.
+
+  If it is not possible or desirable to put the notice in a particular
+  file, then You may include the notice in a location (such as a LICENSE
+  file in a relevant directory) where a recipient would be likely to
+  look for such a notice.
+
+  You may add additional accurate notices of copyright ownership.
\ No newline at end of file
diff --git a/wildfly/docs/licenses/fsf all permissive license.html b/wildfly/docs/licenses/fsf all permissive license.html
new file mode 100644
index 0000000..ceba20a
--- /dev/null
+++ b/wildfly/docs/licenses/fsf all permissive license.html	
@@ -0,0 +1,104 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
+<html>
+<!-- Information for maintainers of GNU software, last updated November 7, 2017.
+
+Copyright (C) 1992, 1993, 1994, 1995, 1996, 1997, 1998, 1999,
+2000, 2001, 2002, 2003, 2004, 2005, 2006, 2007, 2008, 2009,
+2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017 Free Software Foundation,
+Inc.
+
+Permission is granted to copy, distribute and/or modify this document
+under the terms of the GNU Free Documentation License, Version 1.3 or
+any later version published by the Free Software Foundation; with no
+Invariant Sections, no Front-Cover Texts, and no Back-Cover
+Texts.  A copy of the license is included in the section entitled
+"GNU Free Documentation License". -->
+<!-- Created by GNU Texinfo 5.2, http://www.gnu.org/software/texinfo/ -->
+<head>
+<title>Information for Maintainers of GNU Software: License Notices for Other Files</title>
+
+<meta name="description" content="Information for Maintainers of GNU Software: License Notices for Other Files">
+<meta name="keywords" content="Information for Maintainers of GNU Software: License Notices for Other Files">
+<meta name="resource-type" content="document">
+<meta name="distribution" content="global">
+<meta name="Generator" content="makeinfo">
+<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
+<link href="index.html#Top" rel="start" title="Top">
+<link href="Index.html#Index" rel="index" title="Index">
+<link href="index.html#SEC_Contents" rel="contents" title="Table of Contents">
+<link href="License-Notices.html#License-Notices" rel="up" title="License Notices">
+<link href="External-Libraries.html#External-Libraries" rel="next" title="External Libraries">
+<link href="License-Notices-for-Documentation.html#License-Notices-for-Documentation" rel="prev" title="License Notices for Documentation">
+<style type="text/css">
+<!--
+a.summary-letter {text-decoration: none}
+blockquote.smallquotation {font-size: smaller}
+div.display {margin-left: 3.2em}
+div.example {margin-left: 3.2em}
+div.indentedblock {margin-left: 3.2em}
+div.lisp {margin-left: 3.2em}
+div.smalldisplay {margin-left: 3.2em}
+div.smallexample {margin-left: 3.2em}
+div.smallindentedblock {margin-left: 3.2em; font-size: smaller}
+div.smalllisp {margin-left: 3.2em}
+kbd {font-style:oblique}
+pre.display {font-family: inherit}
+pre.format {font-family: inherit}
+pre.menu-comment {font-family: serif}
+pre.menu-preformatted {font-family: serif}
+pre.smalldisplay {font-family: inherit; font-size: smaller}
+pre.smallexample {font-size: smaller}
+pre.smallformat {font-family: inherit; font-size: smaller}
+pre.smalllisp {font-size: smaller}
+span.nocodebreak {white-space:nowrap}
+span.nolinebreak {white-space:nowrap}
+span.roman {font-family:serif; font-weight:normal}
+span.sansserif {font-family:sans-serif; font-weight:normal}
+ul.no-bullet {list-style: none}
+-->
+</style>
+<link rel="stylesheet" type="text/css" href="/software/gnulib/manual.css">
+
+
+</head>
+
+<body lang="en" bgcolor="#FFFFFF" text="#000000" link="#0000FF" vlink="#800080" alink="#FF0000">
+<a name="License-Notices-for-Other-Files"></a>
+<div class="header">
+<p>
+Previous: <a href="License-Notices-for-Documentation.html#License-Notices-for-Documentation" accesskey="p" rel="prev">License Notices for Documentation</a>, Up: <a href="License-Notices.html#License-Notices" accesskey="u" rel="up">License Notices</a> &nbsp; [<a href="index.html#SEC_Contents" title="Table of contents" rel="contents">Contents</a>][<a href="Index.html#Index" title="Index" rel="index">Index</a>]</p>
+</div>
+<hr>
+<a name="License-Notices-for-Other-Files-1"></a>
+<h4 class="subsection">6.6.5 License Notices for Other Files</h4>
+
+<p>Small supporting files, short manuals (under 300 lines long) and rough
+documentation (<samp>README</samp> files, <samp>INSTALL</samp> files, etc.) can
+use a simple all-permissive license like this one:
+</p>
+<div class="smallexample">
+<pre class="smallexample">Copying and distribution of this file, with or without modification,
+are permitted in any medium without royalty provided the copyright
+notice and this notice are preserved.  This file is offered as-is,
+without any warranty.
+</pre></div>
+
+<p>Older versions of this license did not have the second sentence with
+the express warranty disclaimer.  There is no urgent need to update
+existing files, but new files should use the new text.
+</p>
+<p>If your package distributes Autoconf macros that are intended to be
+used (hence distributed) by third-party packages under possibly
+incompatible licenses, you may also use the above all-permissive
+license for these macros.
+</p>
+<p>These kinds of files can also be put in the public domain.  If
+publishing in the US, it is enough to insert a notice saying so.
+Otherwise, use Creative Commons&rsquo;s CC0&mdash;See
+<a href="https://creativecommons.org/choose/zero/">https://creativecommons.org/choose/zero/</a>.
+</p>
+
+
+
+</body>
+</html>
diff --git a/wildfly/docs/licenses/gnu general public license v2.0 only, with classpath exception.txt b/wildfly/docs/licenses/gnu general public license v2.0 only, with classpath exception.txt
new file mode 100644
index 0000000..fd91b6f
--- /dev/null
+++ b/wildfly/docs/licenses/gnu general public license v2.0 only, with classpath exception.txt	
@@ -0,0 +1,363 @@
+                    GNU GENERAL PUBLIC LICENSE
+                       Version 2, June 1991
+
+ Copyright (C) 1989, 1991 Free Software Foundation, Inc.,
+ 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+License is intended to guarantee your freedom to share and change free
+software--to make sure the software is free for all its users.  This
+General Public License applies to most of the Free Software
+Foundation's software and to any other program whose authors commit to
+using it.  (Some other Free Software Foundation software is covered by
+the GNU Lesser General Public License instead.)  You can apply it to
+your programs, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if you
+distribute copies of the software, or if you modify it.
+
+  For example, if you distribute copies of such a program, whether
+gratis or for a fee, you must give the recipients all the rights that
+you have.  You must make sure that they, too, receive or can get the
+source code.  And you must show them these terms so they know their
+rights.
+
+  We protect your rights with two steps: (1) copyright the software, and
+(2) offer you this license which gives you legal permission to copy,
+distribute and/or modify the software.
+
+  Also, for each author's protection and ours, we want to make certain
+that everyone understands that there is no warranty for this free
+software.  If the software is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original, so
+that any problems introduced by others will not reflect on the original
+authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that redistributors of a free
+program will individually obtain patent licenses, in effect making the
+program proprietary.  To prevent this, we have made it clear that any
+patent must be licensed for everyone's free use or not licensed at all.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                    GNU GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License applies to any program or other work which contains
+a notice placed by the copyright holder saying it may be distributed
+under the terms of this General Public License.  The "Program", below,
+refers to any such program or work, and a "work based on the Program"
+means either the Program or any derivative work under copyright law:
+that is to say, a work containing the Program or a portion of it,
+either verbatim or with modifications and/or translated into another
+language.  (Hereinafter, translation is included without limitation in
+the term "modification".)  Each licensee is addressed as "you".
+
+Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running the Program is not restricted, and the output from the Program
+is covered only if its contents constitute a work based on the
+Program (independent of having been made by running the Program).
+Whether that is true depends on what the Program does.
+
+  1. You may copy and distribute verbatim copies of the Program's
+source code as you receive it, in any medium, provided that you
+conspicuously and appropriately publish on each copy an appropriate
+copyright notice and disclaimer of warranty; keep intact all the
+notices that refer to this License and to the absence of any warranty;
+and give any other recipients of the Program a copy of this License
+along with the Program.
+
+You may charge a fee for the physical act of transferring a copy, and
+you may at your option offer warranty protection in exchange for a fee.
+
+  2. You may modify your copy or copies of the Program or any portion
+of it, thus forming a work based on the Program, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) You must cause the modified files to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    b) You must cause any work that you distribute or publish, that in
+    whole or in part contains or is derived from the Program or any
+    part thereof, to be licensed as a whole at no charge to all third
+    parties under the terms of this License.
+
+    c) If the modified program normally reads commands interactively
+    when run, you must cause it, when started running for such
+    interactive use in the most ordinary way, to print or display an
+    announcement including an appropriate copyright notice and a
+    notice that there is no warranty (or else, saying that you provide
+    a warranty) and that users may redistribute the program under
+    these conditions, and telling the user how to view a copy of this
+    License.  (Exception: if the Program itself is interactive but
+    does not normally print such an announcement, your work based on
+    the Program is not required to print an announcement.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Program,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Program, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Program.
+
+In addition, mere aggregation of another work not based on the Program
+with the Program (or with a work based on the Program) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may copy and distribute the Program (or a work based on it,
+under Section 2) in object code or executable form under the terms of
+Sections 1 and 2 above provided that you also do one of the following:
+
+    a) Accompany it with the complete corresponding machine-readable
+    source code, which must be distributed under the terms of Sections
+    1 and 2 above on a medium customarily used for software interchange; or,
+
+    b) Accompany it with a written offer, valid for at least three
+    years, to give any third party, for a charge no more than your
+    cost of physically performing source distribution, a complete
+    machine-readable copy of the corresponding source code, to be
+    distributed under the terms of Sections 1 and 2 above on a medium
+    customarily used for software interchange; or,
+
+    c) Accompany it with the information you received as to the offer
+    to distribute corresponding source code.  (This alternative is
+    allowed only for noncommercial distribution and only if you
+    received the program in object code or executable form with such
+    an offer, in accord with Subsection b above.)
+
+The source code for a work means the preferred form of the work for
+making modifications to it.  For an executable work, complete source
+code means all the source code for all modules it contains, plus any
+associated interface definition files, plus the scripts used to
+control compilation and installation of the executable.  However, as a
+special exception, the source code distributed need not include
+anything that is normally distributed (in either source or binary
+form) with the major components (compiler, kernel, and so on) of the
+operating system on which the executable runs, unless that component
+itself accompanies the executable.
+
+If distribution of executable or object code is made by offering
+access to copy from a designated place, then offering equivalent
+access to copy the source code from the same place counts as
+distribution of the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  4. You may not copy, modify, sublicense, or distribute the Program
+except as expressly provided under this License.  Any attempt
+otherwise to copy, modify, sublicense or distribute the Program is
+void, and will automatically terminate your rights under this License.
+However, parties who have received copies, or rights, from you under
+this License will not have their licenses terminated so long as such
+parties remain in full compliance.
+
+  5. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Program or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Program (or any work based on the
+Program), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Program or works based on it.
+
+  6. Each time you redistribute the Program (or any work based on the
+Program), the recipient automatically receives a license from the
+original licensor to copy, distribute or modify the Program subject to
+these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  7. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Program at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Program by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Program.
+
+If any portion of this section is held invalid or unenforceable under
+any particular circumstance, the balance of the section is intended to
+apply and the section as a whole is intended to apply in other
+circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system, which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  8. If the distribution and/or use of the Program is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Program under this License
+may add an explicit geographical distribution limitation excluding
+those countries, so that distribution is permitted only in or among
+countries not thus excluded.  In such case, this License incorporates
+the limitation as if written in the body of this License.
+
+  9. The Free Software Foundation may publish revised and/or new versions
+of the General Public License from time to time.  Such new versions will
+be similar in spirit to the present version, but may differ in detail to
+address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Program
+specifies a version number of this License which applies to it and "any
+later version", you have the option of following the terms and conditions
+either of that version or of any later version published by the Free
+Software Foundation.  If the Program does not specify a version number of
+this License, you may choose any version ever published by the Free Software
+Foundation.
+
+  10. If you wish to incorporate parts of the Program into other free
+programs whose distribution conditions are different, write to the author
+to ask for permission.  For software which is copyrighted by the Free
+Software Foundation, write to the Free Software Foundation; we sometimes
+make exceptions for this.  Our decision will be guided by the two goals
+of preserving the free status of all derivatives of our free software and
+of promoting the sharing and reuse of software generally.
+
+                            NO WARRANTY
+
+  11. BECAUSE THE PROGRAM IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY
+FOR THE PROGRAM, TO THE EXTENT PERMITTED BY APPLICABLE LAW.  EXCEPT WHEN
+OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES
+PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED
+OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
+MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  THE ENTIRE RISK AS
+TO THE QUALITY AND PERFORMANCE OF THE PROGRAM IS WITH YOU.  SHOULD THE
+PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING,
+REPAIR OR CORRECTION.
+
+  12. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR
+REDISTRIBUTE THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES,
+INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING
+OUT OF THE USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED
+TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY
+YOU OR THIRD PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER
+PROGRAMS), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE
+POSSIBILITY OF SUCH DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software; you can redistribute it and/or modify
+    it under the terms of the GNU General Public License as published by
+    the Free Software Foundation; either version 2 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License along
+    with this program; if not, write to the Free Software Foundation, Inc.,
+    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
+
+Also add information on how to contact you by electronic and paper mail.
+
+If the program is interactive, make it output a short notice like this
+when it starts in an interactive mode:
+
+    Gnomovision version 69, Copyright (C) year name of author
+    Gnomovision comes with ABSOLUTELY NO WARRANTY; for details type `show w'.
+    This is free software, and you are welcome to redistribute it
+    under certain conditions; type `show c' for details.
+
+The hypothetical commands `show w' and `show c' should show the appropriate
+parts of the General Public License.  Of course, the commands you use may
+be called something other than `show w' and `show c'; they could even be
+mouse-clicks or menu items--whatever suits your program.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the program, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the program
+  `Gnomovision' (which makes passes at compilers) written by James Hacker.
+
+  <signature of Ty Coon>, 1 April 1989
+  Ty Coon, President of Vice
+
+This General Public License does not permit incorporating your program into
+proprietary programs.  If your program is a subroutine library, you may
+consider it more useful to permit linking proprietary applications with the
+library.  If this is what you want to do, use the GNU Lesser General
+Public License instead of this License.
+
+
+"CLASSPATH" EXCEPTION TO THE GPL
+
+Certain source files distributed by Oracle America and/or its affiliates are
+subject to the following clarification and special exception to the GPL, but
+only where Oracle has expressly included in the particular source file's header
+the words "Oracle designates this particular file as subject to the "Classpath"
+exception as provided by Oracle in the LICENSE file that accompanied this code."
+
+    Linking this library statically or dynamically with other modules is making
+    a combined work based on this library.  Thus, the terms and conditions of
+    the GNU General Public License cover the whole combination.
+
+    As a special exception, the copyright holders of this library give you
+    permission to link this library with independent modules to produce an
+    executable, regardless of the license terms of these independent modules,
+    and to copy and distribute the resulting executable under terms of your
+    choice, provided that you also meet, for each linked independent module,
+    the terms and conditions of the license of that module.  An independent
+    module is a module which is not derived from or based on this library.  If
+    you modify this library, you may extend this exception to your version of
+    the library, but you are not obligated to do so.  If you do not wish to do
+    so, delete this exception statement from your version.
diff --git a/wildfly/docs/licenses/gnu lesser general public license v2.1 only.txt b/wildfly/docs/licenses/gnu lesser general public license v2.1 only.txt
new file mode 100644
index 0000000..4362b49
--- /dev/null
+++ b/wildfly/docs/licenses/gnu lesser general public license v2.1 only.txt	
@@ -0,0 +1,502 @@
+                  GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 2.1, February 1999
+
+ Copyright (C) 1991, 1999 Free Software Foundation, Inc.
+ 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+[This is the first released version of the Lesser GPL.  It also counts
+ as the successor of the GNU Library Public License, version 2, hence
+ the version number 2.1.]
+
+                            Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+Licenses are intended to guarantee your freedom to share and change
+free software--to make sure the software is free for all its users.
+
+  This license, the Lesser General Public License, applies to some
+specially designated software packages--typically libraries--of the
+Free Software Foundation and other authors who decide to use it.  You
+can use it too, but we suggest you first think carefully about whether
+this license or the ordinary General Public License is the better
+strategy to use in any particular case, based on the explanations below.
+
+  When we speak of free software, we are referring to freedom of use,
+not price.  Our General Public Licenses are designed to make sure that
+you have the freedom to distribute copies of free software (and charge
+for this service if you wish); that you receive source code or can get
+it if you want it; that you can change the software and use pieces of
+it in new free programs; and that you are informed that you can do
+these things.
+
+  To protect your rights, we need to make restrictions that forbid
+distributors to deny you these rights or to ask you to surrender these
+rights.  These restrictions translate to certain responsibilities for
+you if you distribute copies of the library or if you modify it.
+
+  For example, if you distribute copies of the library, whether gratis
+or for a fee, you must give the recipients all the rights that we gave
+you.  You must make sure that they, too, receive or can get the source
+code.  If you link other code with the library, you must provide
+complete object files to the recipients, so that they can relink them
+with the library after making changes to the library and recompiling
+it.  And you must show them these terms so they know their rights.
+
+  We protect your rights with a two-step method: (1) we copyright the
+library, and (2) we offer you this license, which gives you legal
+permission to copy, distribute and/or modify the library.
+
+  To protect each distributor, we want to make it very clear that
+there is no warranty for the free library.  Also, if the library is
+modified by someone else and passed on, the recipients should know
+that what they have is not the original version, so that the original
+author's reputation will not be affected by problems that might be
+introduced by others.
+
+  Finally, software patents pose a constant threat to the existence of
+any free program.  We wish to make sure that a company cannot
+effectively restrict the users of a free program by obtaining a
+restrictive license from a patent holder.  Therefore, we insist that
+any patent license obtained for a version of the library must be
+consistent with the full freedom of use specified in this license.
+
+  Most GNU software, including some libraries, is covered by the
+ordinary GNU General Public License.  This license, the GNU Lesser
+General Public License, applies to certain designated libraries, and
+is quite different from the ordinary General Public License.  We use
+this license for certain libraries in order to permit linking those
+libraries into non-free programs.
+
+  When a program is linked with a library, whether statically or using
+a shared library, the combination of the two is legally speaking a
+combined work, a derivative of the original library.  The ordinary
+General Public License therefore permits such linking only if the
+entire combination fits its criteria of freedom.  The Lesser General
+Public License permits more lax criteria for linking other code with
+the library.
+
+  We call this license the "Lesser" General Public License because it
+does Less to protect the user's freedom than the ordinary General
+Public License.  It also provides other free software developers Less
+of an advantage over competing non-free programs.  These disadvantages
+are the reason we use the ordinary General Public License for many
+libraries.  However, the Lesser license provides advantages in certain
+special circumstances.
+
+  For example, on rare occasions, there may be a special need to
+encourage the widest possible use of a certain library, so that it becomes
+a de-facto standard.  To achieve this, non-free programs must be
+allowed to use the library.  A more frequent case is that a free
+library does the same job as widely used non-free libraries.  In this
+case, there is little to gain by limiting the free library to free
+software only, so we use the Lesser General Public License.
+
+  In other cases, permission to use a particular library in non-free
+programs enables a greater number of people to use a large body of
+free software.  For example, permission to use the GNU C Library in
+non-free programs enables many more people to use the whole GNU
+operating system, as well as its variant, the GNU/Linux operating
+system.
+
+  Although the Lesser General Public License is Less protective of the
+users' freedom, it does ensure that the user of a program that is
+linked with the Library has the freedom and the wherewithal to run
+that program using a modified version of the Library.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.  Pay close attention to the difference between a
+"work based on the library" and a "work that uses the library".  The
+former contains code derived from the library, whereas the latter must
+be combined with the library in order to run.
+
+                  GNU LESSER GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License Agreement applies to any software library or other
+program which contains a notice placed by the copyright holder or
+other authorized party saying it may be distributed under the terms of
+this Lesser General Public License (also called "this License").
+Each licensee is addressed as "you".
+
+  A "library" means a collection of software functions and/or data
+prepared so as to be conveniently linked with application programs
+(which use some of those functions and data) to form executables.
+
+  The "Library", below, refers to any such software library or work
+which has been distributed under these terms.  A "work based on the
+Library" means either the Library or any derivative work under
+copyright law: that is to say, a work containing the Library or a
+portion of it, either verbatim or with modifications and/or translated
+straightforwardly into another language.  (Hereinafter, translation is
+included without limitation in the term "modification".)
+
+  "Source code" for a work means the preferred form of the work for
+making modifications to it.  For a library, complete source code means
+all the source code for all modules it contains, plus any associated
+interface definition files, plus the scripts used to control compilation
+and installation of the library.
+
+  Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running a program using the Library is not restricted, and output from
+such a program is covered only if its contents constitute a work based
+on the Library (independent of the use of the Library in a tool for
+writing it).  Whether that is true depends on what the Library does
+and what the program that uses the Library does.
+
+  1. You may copy and distribute verbatim copies of the Library's
+complete source code as you receive it, in any medium, provided that
+you conspicuously and appropriately publish on each copy an
+appropriate copyright notice and disclaimer of warranty; keep intact
+all the notices that refer to this License and to the absence of any
+warranty; and distribute a copy of this License along with the
+Library.
+
+  You may charge a fee for the physical act of transferring a copy,
+and you may at your option offer warranty protection in exchange for a
+fee.
+
+  2. You may modify your copy or copies of the Library or any portion
+of it, thus forming a work based on the Library, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) The modified work must itself be a software library.
+
+    b) You must cause the files modified to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    c) You must cause the whole of the work to be licensed at no
+    charge to all third parties under the terms of this License.
+
+    d) If a facility in the modified Library refers to a function or a
+    table of data to be supplied by an application program that uses
+    the facility, other than as an argument passed when the facility
+    is invoked, then you must make a good faith effort to ensure that,
+    in the event an application does not supply such function or
+    table, the facility still operates, and performs whatever part of
+    its purpose remains meaningful.
+
+    (For example, a function in a library to compute square roots has
+    a purpose that is entirely well-defined independent of the
+    application.  Therefore, Subsection 2d requires that any
+    application-supplied function or table used by this function must
+    be optional: if the application does not supply it, the square
+    root function must still compute square roots.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Library,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Library, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote
+it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Library.
+
+In addition, mere aggregation of another work not based on the Library
+with the Library (or with a work based on the Library) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may opt to apply the terms of the ordinary GNU General Public
+License instead of this License to a given copy of the Library.  To do
+this, you must alter all the notices that refer to this License, so
+that they refer to the ordinary GNU General Public License, version 2,
+instead of to this License.  (If a newer version than version 2 of the
+ordinary GNU General Public License has appeared, then you can specify
+that version instead if you wish.)  Do not make any other change in
+these notices.
+
+  Once this change is made in a given copy, it is irreversible for
+that copy, so the ordinary GNU General Public License applies to all
+subsequent copies and derivative works made from that copy.
+
+  This option is useful when you wish to copy part of the code of
+the Library into a program that is not a library.
+
+  4. You may copy and distribute the Library (or a portion or
+derivative of it, under Section 2) in object code or executable form
+under the terms of Sections 1 and 2 above provided that you accompany
+it with the complete corresponding machine-readable source code, which
+must be distributed under the terms of Sections 1 and 2 above on a
+medium customarily used for software interchange.
+
+  If distribution of object code is made by offering access to copy
+from a designated place, then offering equivalent access to copy the
+source code from the same place satisfies the requirement to
+distribute the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  5. A program that contains no derivative of any portion of the
+Library, but is designed to work with the Library by being compiled or
+linked with it, is called a "work that uses the Library".  Such a
+work, in isolation, is not a derivative work of the Library, and
+therefore falls outside the scope of this License.
+
+  However, linking a "work that uses the Library" with the Library
+creates an executable that is a derivative of the Library (because it
+contains portions of the Library), rather than a "work that uses the
+library".  The executable is therefore covered by this License.
+Section 6 states terms for distribution of such executables.
+
+  When a "work that uses the Library" uses material from a header file
+that is part of the Library, the object code for the work may be a
+derivative work of the Library even though the source code is not.
+Whether this is true is especially significant if the work can be
+linked without the Library, or if the work is itself a library.  The
+threshold for this to be true is not precisely defined by law.
+
+  If such an object file uses only numerical parameters, data
+structure layouts and accessors, and small macros and small inline
+functions (ten lines or less in length), then the use of the object
+file is unrestricted, regardless of whether it is legally a derivative
+work.  (Executables containing this object code plus portions of the
+Library will still fall under Section 6.)
+
+  Otherwise, if the work is a derivative of the Library, you may
+distribute the object code for the work under the terms of Section 6.
+Any executables containing that work also fall under Section 6,
+whether or not they are linked directly with the Library itself.
+
+  6. As an exception to the Sections above, you may also combine or
+link a "work that uses the Library" with the Library to produce a
+work containing portions of the Library, and distribute that work
+under terms of your choice, provided that the terms permit
+modification of the work for the customer's own use and reverse
+engineering for debugging such modifications.
+
+  You must give prominent notice with each copy of the work that the
+Library is used in it and that the Library and its use are covered by
+this License.  You must supply a copy of this License.  If the work
+during execution displays copyright notices, you must include the
+copyright notice for the Library among them, as well as a reference
+directing the user to the copy of this License.  Also, you must do one
+of these things:
+
+    a) Accompany the work with the complete corresponding
+    machine-readable source code for the Library including whatever
+    changes were used in the work (which must be distributed under
+    Sections 1 and 2 above); and, if the work is an executable linked
+    with the Library, with the complete machine-readable "work that
+    uses the Library", as object code and/or source code, so that the
+    user can modify the Library and then relink to produce a modified
+    executable containing the modified Library.  (It is understood
+    that the user who changes the contents of definitions files in the
+    Library will not necessarily be able to recompile the application
+    to use the modified definitions.)
+
+    b) Use a suitable shared library mechanism for linking with the
+    Library.  A suitable mechanism is one that (1) uses at run time a
+    copy of the library already present on the user's computer system,
+    rather than copying library functions into the executable, and (2)
+    will operate properly with a modified version of the library, if
+    the user installs one, as long as the modified version is
+    interface-compatible with the version that the work was made with.
+
+    c) Accompany the work with a written offer, valid for at
+    least three years, to give the same user the materials
+    specified in Subsection 6a, above, for a charge no more
+    than the cost of performing this distribution.
+
+    d) If distribution of the work is made by offering access to copy
+    from a designated place, offer equivalent access to copy the above
+    specified materials from the same place.
+
+    e) Verify that the user has already received a copy of these
+    materials or that you have already sent this user a copy.
+
+  For an executable, the required form of the "work that uses the
+Library" must include any data and utility programs needed for
+reproducing the executable from it.  However, as a special exception,
+the materials to be distributed need not include anything that is
+normally distributed (in either source or binary form) with the major
+components (compiler, kernel, and so on) of the operating system on
+which the executable runs, unless that component itself accompanies
+the executable.
+
+  It may happen that this requirement contradicts the license
+restrictions of other proprietary libraries that do not normally
+accompany the operating system.  Such a contradiction means you cannot
+use both them and the Library together in an executable that you
+distribute.
+
+  7. You may place library facilities that are a work based on the
+Library side-by-side in a single library together with other library
+facilities not covered by this License, and distribute such a combined
+library, provided that the separate distribution of the work based on
+the Library and of the other library facilities is otherwise
+permitted, and provided that you do these two things:
+
+    a) Accompany the combined library with a copy of the same work
+    based on the Library, uncombined with any other library
+    facilities.  This must be distributed under the terms of the
+    Sections above.
+
+    b) Give prominent notice with the combined library of the fact
+    that part of it is a work based on the Library, and explaining
+    where to find the accompanying uncombined form of the same work.
+
+  8. You may not copy, modify, sublicense, link with, or distribute
+the Library except as expressly provided under this License.  Any
+attempt otherwise to copy, modify, sublicense, link with, or
+distribute the Library is void, and will automatically terminate your
+rights under this License.  However, parties who have received copies,
+or rights, from you under this License will not have their licenses
+terminated so long as such parties remain in full compliance.
+
+  9. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Library or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Library (or any work based on the
+Library), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Library or works based on it.
+
+  10. Each time you redistribute the Library (or any work based on the
+Library), the recipient automatically receives a license from the
+original licensor to copy, distribute, link with or modify the Library
+subject to these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties with
+this License.
+
+  11. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Library at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Library by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Library.
+
+If any portion of this section is held invalid or unenforceable under any
+particular circumstance, the balance of the section is intended to apply,
+and the section as a whole is intended to apply in other circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  12. If the distribution and/or use of the Library is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Library under this License may add
+an explicit geographical distribution limitation excluding those countries,
+so that distribution is permitted only in or among countries not thus
+excluded.  In such case, this License incorporates the limitation as if
+written in the body of this License.
+
+  13. The Free Software Foundation may publish revised and/or new
+versions of the Lesser General Public License from time to time.
+Such new versions will be similar in spirit to the present version,
+but may differ in detail to address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Library
+specifies a version number of this License which applies to it and
+"any later version", you have the option of following the terms and
+conditions either of that version or of any later version published by
+the Free Software Foundation.  If the Library does not specify a
+license version number, you may choose any version ever published by
+the Free Software Foundation.
+
+  14. If you wish to incorporate parts of the Library into other free
+programs whose distribution conditions are incompatible with these,
+write to the author to ask for permission.  For software which is
+copyrighted by the Free Software Foundation, write to the Free
+Software Foundation; we sometimes make exceptions for this.  Our
+decision will be guided by the two goals of preserving the free status
+of all derivatives of our free software and of promoting the sharing
+and reuse of software generally.
+
+                            NO WARRANTY
+
+  15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO
+WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW.
+EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
+OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY
+KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE
+LIBRARY IS WITH YOU.  SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME
+THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN
+WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY
+AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU
+FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR
+CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE
+LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING
+RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A
+FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF
+SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGES.
+
+                     END OF TERMS AND CONDITIONS
+
+           How to Apply These Terms to Your New Libraries
+
+  If you develop a new library, and you want it to be of the greatest
+possible use to the public, we recommend making it free software that
+everyone can redistribute and change.  You can do so by permitting
+redistribution under these terms (or, alternatively, under the terms of the
+ordinary General Public License).
+
+  To apply these terms, attach the following notices to the library.  It is
+safest to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least the
+"copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the library's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This library is free software; you can redistribute it and/or
+    modify it under the terms of the GNU Lesser General Public
+    License as published by the Free Software Foundation; either
+    version 2.1 of the License, or (at your option) any later version.
+
+    This library is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+    Lesser General Public License for more details.
+
+    You should have received a copy of the GNU Lesser General Public
+    License along with this library; if not, write to the Free Software
+    Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+
+Also add information on how to contact you by electronic and paper mail.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the library, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the
+  library `Frob' (a library for tweaking knobs) written by James Random Hacker.
+
+  <signature of Ty Coon>, 1 April 1990
+  Ty Coon, President of Vice
+
+That's all there is to it!
diff --git a/wildfly/docs/licenses/gnu lesser general public license v2.1 or later.txt b/wildfly/docs/licenses/gnu lesser general public license v2.1 or later.txt
new file mode 100644
index 0000000..ceadfe7
--- /dev/null
+++ b/wildfly/docs/licenses/gnu lesser general public license v2.1 or later.txt	
@@ -0,0 +1,176 @@
+GNU LESSER GENERAL PUBLIC LICENSE
+
+Version 2.1, February 1999
+
+Copyright (C) 1991, 1999 Free Software Foundation, Inc.
+51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+
+Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed.
+
+[This is the first released version of the Lesser GPL.  It also counts as the successor of the GNU Library Public License, version 2, hence the version number 2.1.]
+
+Preamble
+
+The licenses for most software are designed to take away your freedom to share and change it. By contrast, the GNU General Public Licenses are intended to guarantee your freedom to share and change free software--to make sure the software is free for all its users.
+
+This license, the Lesser General Public License, applies to some specially designated software packages--typically libraries--of the Free Software Foundation and other authors who decide to use it. You can use it too, but we suggest you first think carefully about whether this license or the ordinary General Public License is the better strategy to use in any particular case, based on the explanations below.
+
+When we speak of free software, we are referring to freedom of use, not price. Our General Public Licenses are designed to make sure that you have the freedom to distribute copies of free software (and charge for this service if you wish); that you receive source code or can get it if you want it; that you can change the software and use pieces of it in new free programs; and that you are informed that you can do these things.
+
+To protect your rights, we need to make restrictions that forbid distributors to deny you these rights or to ask you to surrender these rights. These restrictions translate to certain responsibilities for you if you distribute copies of the library or if you modify it.
+
+For example, if you distribute copies of the library, whether gratis or for a fee, you must give the recipients all the rights that we gave you. You must make sure that they, too, receive or can get the source code. If you link other code with the library, you must provide complete object files to the recipients, so that they can relink them with the library after making changes to the library and recompiling it. And you must show them these terms so they know their rights.
+
+We protect your rights with a two-step method: (1) we copyright the library, and (2) we offer you this license, which gives you legal permission to copy, distribute and/or modify the library.
+
+To protect each distributor, we want to make it very clear that there is no warranty for the free library. Also, if the library is modified by someone else and passed on, the recipients should know that what they have is not the original version, so that the original author's reputation will not be affected by problems that might be introduced by others.
+
+Finally, software patents pose a constant threat to the existence of any free program. We wish to make sure that a company cannot effectively restrict the users of a free program by obtaining a restrictive license from a patent holder. Therefore, we insist that any patent license obtained for a version of the library must be consistent with the full freedom of use specified in this license.
+
+Most GNU software, including some libraries, is covered by the ordinary GNU General Public License. This license, the GNU Lesser General Public License, applies to certain designated libraries, and is quite different from the ordinary General Public License. We use this license for certain libraries in order to permit linking those libraries into non-free programs.
+
+When a program is linked with a library, whether statically or using a shared library, the combination of the two is legally speaking a combined work, a derivative of the original library. The ordinary General Public License therefore permits such linking only if the entire combination fits its criteria of freedom. The Lesser General Public License permits more lax criteria for linking other code with the library.
+
+We call this license the "Lesser" General Public License because it does Less to protect the user's freedom than the ordinary General Public License. It also provides other free software developers Less of an advantage over competing non-free programs. These disadvantages are the reason we use the ordinary General Public License for many libraries. However, the Lesser license provides advantages in certain special circumstances.
+
+For example, on rare occasions, there may be a special need to encourage the widest possible use of a certain library, so that it becomes a de-facto standard. To achieve this, non-free programs must be allowed to use the library. A more frequent case is that a free library does the same job as widely used non-free libraries. In this case, there is little to gain by limiting the free library to free software only, so we use the Lesser General Public License.
+
+In other cases, permission to use a particular library in non-free programs enables a greater number of people to use a large body of free software. For example, permission to use the GNU C Library in non-free programs enables many more people to use the whole GNU operating system, as well as its variant, the GNU/Linux operating system.
+
+Although the Lesser General Public License is Less protective of the users' freedom, it does ensure that the user of a program that is linked with the Library has the freedom and the wherewithal to run that program using a modified version of the Library.
+
+The precise terms and conditions for copying, distribution and modification follow. Pay close attention to the difference between a "work based on the library" and a "work that uses the library". The former contains code derived from the library, whereas the latter must be combined with the library in order to run.
+
+TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+0. This License Agreement applies to any software library or other program which contains a notice placed by the copyright holder or other authorized party saying it may be distributed under the terms of this Lesser General Public License (also called "this License"). Each licensee is addressed as "you".
+
+A "library" means a collection of software functions and/or data prepared so as to be conveniently linked with application programs (which use some of those functions and data) to form executables.
+
+The "Library", below, refers to any such software library or work which has been distributed under these terms. A "work based on the Library" means either the Library or any derivative work under copyright law: that is to say, a work containing the Library or a portion of it, either verbatim or with modifications and/or translated straightforwardly into another language. (Hereinafter, translation is included without limitation in the term "modification".)
+
+"Source code" for a work means the preferred form of the work for making modifications to it. For a library, complete source code means all the source code for all modules it contains, plus any associated interface definition files, plus the scripts used to control compilation and installation of the library.
+
+Activities other than copying, distribution and modification are not covered by this License; they are outside its scope. The act of running a program using the Library is not restricted, and output from such a program is covered only if its contents constitute a work based on the Library (independent of the use of the Library in a tool for writing it). Whether that is true depends on what the Library does and what the program that uses the Library does.
+
+1. You may copy and distribute verbatim copies of the Library's complete source code as you receive it, in any medium, provided that you conspicuously and appropriately publish on each copy an appropriate copyright notice and disclaimer of warranty; keep intact all the notices that refer to this License and to the absence of any warranty; and distribute a copy of this License along with the Library.
+
+You may charge a fee for the physical act of transferring a copy, and you may at your option offer warranty protection in exchange for a fee.
+
+2. You may modify your copy or copies of the Library or any portion of it, thus forming a work based on the Library, and copy and distribute such modifications or work under the terms of Section 1 above, provided that you also meet all of these conditions:
+
+a) The modified work must itself be a software library.
+b) You must cause the files modified to carry prominent notices stating that you changed the files and the date of any change.
+c) You must cause the whole of the work to be licensed at no charge to all third parties under the terms of this License.
+d) If a facility in the modified Library refers to a function or a table of data to be supplied by an application program that uses the facility, other than as an argument passed when the facility is invoked, then you must make a good faith effort to ensure that, in the event an application does not supply such function or table, the facility still operates, and performs whatever part of its purpose remains meaningful.
+
+(For example, a function in a library to compute square roots has a purpose that is entirely well-defined independent of the application. Therefore, Subsection 2d requires that any application-supplied function or table used by this function must be optional: if the application does not supply it, the square root function must still compute square roots.)
+
+These requirements apply to the modified work as a whole. If identifiable sections of that work are not derived from the Library, and can be reasonably considered independent and separate works in themselves, then this License, and its terms, do not apply to those sections when you distribute them as separate works. But when you distribute the same sections as part of a whole which is a work based on the Library, the distribution of the whole must be on the terms of this License, whose permissions for other licensees extend to the entire whole, and thus to each and every part regardless of who wrote it.
+
+Thus, it is not the intent of this section to claim rights or contest your rights to work written entirely by you; rather, the intent is to exercise the right to control the distribution of derivative or collective works based on the Library.
+
+In addition, mere aggregation of another work not based on the Library with the Library (or with a work based on the Library) on a volume of a storage or distribution medium does not bring the other work under the scope of this License.
+
+3. You may opt to apply the terms of the ordinary GNU General Public License instead of this License to a given copy of the Library. To do this, you must alter all the notices that refer to this License, so that they refer to the ordinary GNU General Public License, version 2, instead of to this License. (If a newer version than version 2 of the ordinary GNU General Public License has appeared, then you can specify that version instead if you wish.) Do not make any other change in these notices.
+
+Once this change is made in a given copy, it is irreversible for that copy, so the ordinary GNU General Public License applies to all subsequent copies and derivative works made from that copy.
+
+This option is useful when you wish to copy part of the code of the Library into a program that is not a library.
+
+4. You may copy and distribute the Library (or a portion or derivative of it, under Section 2) in object code or executable form under the terms of Sections 1 and 2 above provided that you accompany it with the complete corresponding machine-readable source code, which must be distributed under the terms of Sections 1 and 2 above on a medium customarily used for software interchange.
+
+If distribution of object code is made by offering access to copy from a designated place, then offering equivalent access to copy the source code from the same place satisfies the requirement to distribute the source code, even though third parties are not compelled to copy the source along with the object code.
+
+5. A program that contains no derivative of any portion of the Library, but is designed to work with the Library by being compiled or linked with it, is called a "work that uses the Library". Such a work, in isolation, is not a derivative work of the Library, and therefore falls outside the scope of this License.
+
+However, linking a "work that uses the Library" with the Library creates an executable that is a derivative of the Library (because it contains portions of the Library), rather than a "work that uses the library". The executable is therefore covered by this License. Section 6 states terms for distribution of such executables.
+
+When a "work that uses the Library" uses material from a header file that is part of the Library, the object code for the work may be a derivative work of the Library even though the source code is not. Whether this is true is especially significant if the work can be linked without the Library, or if the work is itself a library. The threshold for this to be true is not precisely defined by law.
+
+If such an object file uses only numerical parameters, data structure layouts and accessors, and small macros and small inline functions (ten lines or less in length), then the use of the object file is unrestricted, regardless of whether it is legally a derivative work. (Executables containing this object code plus portions of the Library will still fall under Section 6.)
+
+Otherwise, if the work is a derivative of the Library, you may distribute the object code for the work under the terms of Section 6. Any executables containing that work also fall under Section 6, whether or not they are linked directly with the Library itself.
+
+6. As an exception to the Sections above, you may also combine or link a "work that uses the Library" with the Library to produce a work containing portions of the Library, and distribute that work under terms of your choice, provided that the terms permit modification of the work for the customer's own use and reverse engineering for debugging such modifications.
+
+You must give prominent notice with each copy of the work that the Library is used in it and that the Library and its use are covered by this License. You must supply a copy of this License. If the work during execution displays copyright notices, you must include the copyright notice for the Library among them, as well as a reference directing the user to the copy of this License. Also, you must do one of these things:
+
+a) Accompany the work with the complete corresponding machine-readable source code for the Library including whatever changes were used in the work (which must be distributed under Sections 1 and 2 above); and, if the work is an executable linked with the Library, with the complete machine-readable "work that uses the Library", as object code and/or source code, so that the user can modify the Library and then relink to produce a modified executable containing the modified Library. (It is understood that the user who changes the contents of definitions files in the Library will not necessarily be able to recompile the application to use the modified definitions.)
+b) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (1) uses at run time a copy of the library already present on the user's computer system, rather than copying library functions into the executable, and (2) will operate properly with a modified version of the library, if the user installs one, as long as the modified version is interface-compatible with the version that the work was made with.
+c) Accompany the work with a written offer, valid for at least three years, to give the same user the materials specified in Subsection 6a, above, for a charge no more than the cost of performing this distribution.
+d) If distribution of the work is made by offering access to copy from a designated place, offer equivalent access to copy the above specified materials from the same place.
+e) Verify that the user has already received a copy of these materials or that you have already sent this user a copy.
+
+For an executable, the required form of the "work that uses the Library" must include any data and utility programs needed for reproducing the executable from it. However, as a special exception, the materials to be distributed need not include anything that is normally distributed (in either source or binary form) with the major components (compiler, kernel, and so on) of the operating system on which the executable runs, unless that component itself accompanies the executable.
+
+It may happen that this requirement contradicts the license restrictions of other proprietary libraries that do not normally accompany the operating system. Such a contradiction means you cannot use both them and the Library together in an executable that you distribute.
+
+7. You may place library facilities that are a work based on the Library side-by-side in a single library together with other library facilities not covered by this License, and distribute such a combined library, provided that the separate distribution of the work based on the Library and of the other library facilities is otherwise permitted, and provided that you do these two things:
+
+a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities. This must be distributed under the terms of the Sections above.
+b) Give prominent notice with the combined library of the fact that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work.
+
+8. You may not copy, modify, sublicense, link with, or distribute the Library except as expressly provided under this License. Any attempt otherwise to copy, modify, sublicense, link with, or distribute the Library is void, and will automatically terminate your rights under this License. However, parties who have received copies, or rights, from you under this License will not have their licenses terminated so long as such parties remain in full compliance.
+
+9. You are not required to accept this License, since you have not signed it. However, nothing else grants you permission to modify or distribute the Library or its derivative works. These actions are prohibited by law if you do not accept this License. Therefore, by modifying or distributing the Library (or any work based on the Library), you indicate your acceptance of this License to do so, and all its terms and conditions for copying, distributing or modifying the Library or works based on it.
+
+10. Each time you redistribute the Library (or any work based on the Library), the recipient automatically receives a license from the original licensor to copy, distribute, link with or modify the Library subject to these terms and conditions. You may not impose any further restrictions on the recipients' exercise of the rights granted herein. You are not responsible for enforcing compliance by third parties with this License.
+
+11. If, as a consequence of a court judgment or allegation of patent infringement or for any other reason (not limited to patent issues), conditions are imposed on you (whether by court order, agreement or otherwise) that contradict the conditions of this License, they do not excuse you from the conditions of this License. If you cannot distribute so as to satisfy simultaneously your obligations under this License and any other pertinent obligations, then as a consequence you may not distribute the Library at all. For example, if a patent license would not permit royalty-free redistribution of the Library by all those who receive copies directly or indirectly through you, then the only way you could satisfy both it and this License would be to refrain entirely from distribution of the Library.
+
+If any portion of this section is held invalid or unenforceable under any particular circumstance, the balance of the section is intended to apply, and the section as a whole is intended to apply in other circumstances.
+
+It is not the purpose of this section to induce you to infringe any patents or other property right claims or to contest validity of any such claims; this section has the sole purpose of protecting the integrity of the free software distribution system which is implemented by public license practices. Many people have made generous contributions to the wide range of software distributed through that system in reliance on consistent application of that system; it is up to the author/donor to decide if he or she is willing to distribute software through any other system and a licensee cannot impose that choice.
+
+This section is intended to make thoroughly clear what is believed to be a consequence of the rest of this License.
+
+12. If the distribution and/or use of the Library is restricted in certain countries either by patents or by copyrighted interfaces, the original copyright holder who places the Library under this License may add an explicit geographical distribution limitation excluding those countries, so that distribution is permitted only in or among countries not thus excluded. In such case, this License incorporates the limitation as if written in the body of this License.
+
+13. The Free Software Foundation may publish revised and/or new versions of the Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns.
+
+Each version is given a distinguishing version number. If the Library specifies a version number of this License which applies to it and "any later version", you have the option of following the terms and conditions either of that version or of any later version published by the Free Software Foundation. If the Library does not specify a license version number, you may choose any version ever published by the Free Software Foundation.
+
+14. If you wish to incorporate parts of the Library into other free programs whose distribution conditions are incompatible with these, write to the author to ask for permission. For software which is copyrighted by the Free Software Foundation, write to the Free Software Foundation; we sometimes make exceptions for this. Our decision will be guided by the two goals of preserving the free status of all derivatives of our free software and of promoting the sharing and reuse of software generally.
+
+NO WARRANTY
+
+15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW. EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE LIBRARY IS WITH YOU. SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
+
+END OF TERMS AND CONDITIONS
+
+How to Apply These Terms to Your New Libraries
+
+If you develop a new library, and you want it to be of the greatest possible use to the public, we recommend making it free software that everyone can redistribute and change. You can do so by permitting redistribution under these terms (or, alternatively, under the terms of the ordinary General Public License).
+
+To apply these terms, attach the following notices to the library. It is safest to attach them to the start of each source file to most effectively convey the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found.
+
+one line to give the library's name and an idea of what it does.
+Copyright (C) year  name of author
+
+This library is free software; you can redistribute it and/or
+modify it under the terms of the GNU Lesser General Public
+License as published by the Free Software Foundation; either
+version 2.1 of the License, or (at your option) any later version.
+
+This library is distributed in the hope that it will be useful,
+but WITHOUT ANY WARRANTY; without even the implied warranty of
+MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+Lesser General Public License for more details.
+
+You should have received a copy of the GNU Lesser General Public
+License along with this library; if not, write to the Free Software
+Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA  02110-1301  USA
+Also add information on how to contact you by electronic and paper mail.
+
+You should also get your employer (if you work as a programmer) or your school, if any, to sign a "copyright disclaimer" for the library, if necessary. Here is a sample; alter the names:
+
+Yoyodyne, Inc., hereby disclaims all copyright interest in
+the library `Frob' (a library for tweaking knobs) written
+by James Random Hacker.
+
+signature of Ty Coon, 1 April 1990
+Ty Coon, President of Vice
+That's all there is to it!
\ No newline at end of file
diff --git a/wildfly/docs/licenses/gnu lesser general public license v3.0 only.txt b/wildfly/docs/licenses/gnu lesser general public license v3.0 only.txt
new file mode 100644
index 0000000..fc8a5de
--- /dev/null
+++ b/wildfly/docs/licenses/gnu lesser general public license v3.0 only.txt	
@@ -0,0 +1,165 @@
+		   GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions. 
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version. 
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.
diff --git a/wildfly/docs/licenses/gnu lesser general public license v3.0 or later.txt b/wildfly/docs/licenses/gnu lesser general public license v3.0 or later.txt
new file mode 100644
index 0000000..fc8a5de
--- /dev/null
+++ b/wildfly/docs/licenses/gnu lesser general public license v3.0 or later.txt	
@@ -0,0 +1,165 @@
+		   GNU LESSER GENERAL PUBLIC LICENSE
+                       Version 3, 29 June 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <http://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+
+  This version of the GNU Lesser General Public License incorporates
+the terms and conditions of version 3 of the GNU General Public
+License, supplemented by the additional permissions listed below.
+
+  0. Additional Definitions. 
+
+  As used herein, "this License" refers to version 3 of the GNU Lesser
+General Public License, and the "GNU GPL" refers to version 3 of the GNU
+General Public License.
+
+  "The Library" refers to a covered work governed by this License,
+other than an Application or a Combined Work as defined below.
+
+  An "Application" is any work that makes use of an interface provided
+by the Library, but which is not otherwise based on the Library.
+Defining a subclass of a class defined by the Library is deemed a mode
+of using an interface provided by the Library.
+
+  A "Combined Work" is a work produced by combining or linking an
+Application with the Library.  The particular version of the Library
+with which the Combined Work was made is also called the "Linked
+Version".
+
+  The "Minimal Corresponding Source" for a Combined Work means the
+Corresponding Source for the Combined Work, excluding any source code
+for portions of the Combined Work that, considered in isolation, are
+based on the Application, and not on the Linked Version.
+
+  The "Corresponding Application Code" for a Combined Work means the
+object code and/or source code for the Application, including any data
+and utility programs needed for reproducing the Combined Work from the
+Application, but excluding the System Libraries of the Combined Work.
+
+  1. Exception to Section 3 of the GNU GPL.
+
+  You may convey a covered work under sections 3 and 4 of this License
+without being bound by section 3 of the GNU GPL.
+
+  2. Conveying Modified Versions.
+
+  If you modify a copy of the Library, and, in your modifications, a
+facility refers to a function or data to be supplied by an Application
+that uses the facility (other than as an argument passed when the
+facility is invoked), then you may convey a copy of the modified
+version:
+
+   a) under this License, provided that you make a good faith effort to
+   ensure that, in the event an Application does not supply the
+   function or data, the facility still operates, and performs
+   whatever part of its purpose remains meaningful, or
+
+   b) under the GNU GPL, with none of the additional permissions of
+   this License applicable to that copy.
+
+  3. Object Code Incorporating Material from Library Header Files.
+
+  The object code form of an Application may incorporate material from
+a header file that is part of the Library.  You may convey such object
+code under terms of your choice, provided that, if the incorporated
+material is not limited to numerical parameters, data structure
+layouts and accessors, or small macros, inline functions and templates
+(ten or fewer lines in length), you do both of the following:
+
+   a) Give prominent notice with each copy of the object code that the
+   Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the object code with a copy of the GNU GPL and this license
+   document.
+
+  4. Combined Works.
+
+  You may convey a Combined Work under terms of your choice that,
+taken together, effectively do not restrict modification of the
+portions of the Library contained in the Combined Work and reverse
+engineering for debugging such modifications, if you also do each of
+the following:
+
+   a) Give prominent notice with each copy of the Combined Work that
+   the Library is used in it and that the Library and its use are
+   covered by this License.
+
+   b) Accompany the Combined Work with a copy of the GNU GPL and this license
+   document.
+
+   c) For a Combined Work that displays copyright notices during
+   execution, include the copyright notice for the Library among
+   these notices, as well as a reference directing the user to the
+   copies of the GNU GPL and this license document.
+
+   d) Do one of the following:
+
+       0) Convey the Minimal Corresponding Source under the terms of this
+       License, and the Corresponding Application Code in a form
+       suitable for, and under terms that permit, the user to
+       recombine or relink the Application with a modified version of
+       the Linked Version to produce a modified Combined Work, in the
+       manner specified by section 6 of the GNU GPL for conveying
+       Corresponding Source.
+
+       1) Use a suitable shared library mechanism for linking with the
+       Library.  A suitable mechanism is one that (a) uses at run time
+       a copy of the Library already present on the user's computer
+       system, and (b) will operate properly with a modified version
+       of the Library that is interface-compatible with the Linked
+       Version. 
+
+   e) Provide Installation Information, but only if you would otherwise
+   be required to provide such information under section 6 of the
+   GNU GPL, and only to the extent that such information is
+   necessary to install and execute a modified version of the
+   Combined Work produced by recombining or relinking the
+   Application with a modified version of the Linked Version. (If
+   you use option 4d0, the Installation Information must accompany
+   the Minimal Corresponding Source and Corresponding Application
+   Code. If you use option 4d1, you must provide the Installation
+   Information in the manner specified by section 6 of the GNU GPL
+   for conveying Corresponding Source.)
+
+  5. Combined Libraries.
+
+  You may place library facilities that are a work based on the
+Library side by side in a single library together with other library
+facilities that are not Applications and are not covered by this
+License, and convey such a combined library under terms of your
+choice, if you do both of the following:
+
+   a) Accompany the combined library with a copy of the same work based
+   on the Library, uncombined with any other library facilities,
+   conveyed under the terms of this License.
+
+   b) Give prominent notice with the combined library that part of it
+   is a work based on the Library, and explaining where to find the
+   accompanying uncombined form of the same work.
+
+  6. Revised Versions of the GNU Lesser General Public License.
+
+  The Free Software Foundation may publish revised and/or new versions
+of the GNU Lesser General Public License from time to time. Such new
+versions will be similar in spirit to the present version, but may
+differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number. If the
+Library as you received it specifies that a certain numbered version
+of the GNU Lesser General Public License "or any later version"
+applies to it, you have the option of following the terms and
+conditions either of that published version or of any later version
+published by the Free Software Foundation. If the Library as you
+received it does not specify a version number of the GNU Lesser
+General Public License, you may choose any version of the GNU Lesser
+General Public License ever published by the Free Software Foundation.
+
+  If the Library as you received it specifies that a proxy can decide
+whether future versions of the GNU Lesser General Public License shall
+apply, that proxy's public statement of acceptance of any version is
+permanent authorization for you to choose that version for the
+Library.
diff --git a/wildfly/docs/licenses/gnu library general public license v2 only.txt b/wildfly/docs/licenses/gnu library general public license v2 only.txt
new file mode 100644
index 0000000..161a3d1
--- /dev/null
+++ b/wildfly/docs/licenses/gnu library general public license v2 only.txt	
@@ -0,0 +1,482 @@
+		  GNU LIBRARY GENERAL PUBLIC LICENSE
+		       Version 2, June 1991
+
+ Copyright (C) 1991 Free Software Foundation, Inc.
+ 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+[This is the first released version of the library GPL.  It is
+ numbered 2 because it goes with version 2 of the ordinary GPL.]
+
+			    Preamble
+
+  The licenses for most software are designed to take away your
+freedom to share and change it.  By contrast, the GNU General Public
+Licenses are intended to guarantee your freedom to share and change
+free software--to make sure the software is free for all its users.
+
+  This license, the Library General Public License, applies to some
+specially designated Free Software Foundation software, and to any
+other libraries whose authors decide to use it.  You can use it for
+your libraries, too.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+this service if you wish), that you receive source code or can get it
+if you want it, that you can change the software or use pieces of it
+in new free programs; and that you know you can do these things.
+
+  To protect your rights, we need to make restrictions that forbid
+anyone to deny you these rights or to ask you to surrender the rights.
+These restrictions translate to certain responsibilities for you if
+you distribute copies of the library, or if you modify it.
+
+  For example, if you distribute copies of the library, whether gratis
+or for a fee, you must give the recipients all the rights that we gave
+you.  You must make sure that they, too, receive or can get the source
+code.  If you link a program with the library, you must provide
+complete object files to the recipients so that they can relink them
+with the library, after making changes to the library and recompiling
+it.  And you must show them these terms so they know their rights.
+
+  Our method of protecting your rights has two steps: (1) copyright
+the library, and (2) offer you this license which gives you legal
+permission to copy, distribute and/or modify the library.
+
+  Also, for each distributor's protection, we want to make certain
+that everyone understands that there is no warranty for this free
+library.  If the library is modified by someone else and passed on, we
+want its recipients to know that what they have is not the original
+version, so that any problems introduced by others will not reflect on
+the original authors' reputations.
+
+  Finally, any free program is threatened constantly by software
+patents.  We wish to avoid the danger that companies distributing free
+software will individually obtain patent licenses, thus in effect
+transforming the program into proprietary software.  To prevent this,
+we have made it clear that any patent must be licensed for everyone's
+free use or not licensed at all.
+
+  Most GNU software, including some libraries, is covered by the ordinary
+GNU General Public License, which was designed for utility programs.  This
+license, the GNU Library General Public License, applies to certain
+designated libraries.  This license is quite different from the ordinary
+one; be sure to read it in full, and don't assume that anything in it is
+the same as in the ordinary license.
+
+  The reason we have a separate public license for some libraries is that
+they blur the distinction we usually make between modifying or adding to a
+program and simply using it.  Linking a program with a library, without
+changing the library, is in some sense simply using the library, and is
+analogous to running a utility program or application program.  However, in
+a textual and legal sense, the linked executable is a combined work, a
+derivative of the original library, and the ordinary General Public License
+treats it as such.
+
+  Because of this blurred distinction, using the ordinary General
+Public License for libraries did not effectively promote software
+sharing, because most developers did not use the libraries.  We
+concluded that weaker conditions might promote sharing better.
+
+  However, unrestricted linking of non-free programs would deprive the
+users of those programs of all benefit from the free status of the
+libraries themselves.  This Library General Public License is intended to
+permit developers of non-free programs to use free libraries, while
+preserving your freedom as a user of such programs to change the free
+libraries that are incorporated in them.  (We have not seen how to achieve
+this as regards changes in header files, but we have achieved it as regards
+changes in the actual functions of the Library.)  The hope is that this
+will lead to faster development of free libraries.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.  Pay close attention to the difference between a
+"work based on the library" and a "work that uses the library".  The
+former contains code derived from the library, while the latter only
+works together with the library.
+
+  Note that it is possible for a library to be covered by the ordinary
+General Public License rather than by this special one.
+
+		  GNU LIBRARY GENERAL PUBLIC LICENSE
+   TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
+
+  0. This License Agreement applies to any software library which
+contains a notice placed by the copyright holder or other authorized
+party saying it may be distributed under the terms of this Library
+General Public License (also called "this License").  Each licensee is
+addressed as "you".
+
+  A "library" means a collection of software functions and/or data
+prepared so as to be conveniently linked with application programs
+(which use some of those functions and data) to form executables.
+
+  The "Library", below, refers to any such software library or work
+which has been distributed under these terms.  A "work based on the
+Library" means either the Library or any derivative work under
+copyright law: that is to say, a work containing the Library or a
+portion of it, either verbatim or with modifications and/or translated
+straightforwardly into another language.  (Hereinafter, translation is
+included without limitation in the term "modification".)
+
+  "Source code" for a work means the preferred form of the work for
+making modifications to it.  For a library, complete source code means
+all the source code for all modules it contains, plus any associated
+interface definition files, plus the scripts used to control compilation
+and installation of the library.
+
+  Activities other than copying, distribution and modification are not
+covered by this License; they are outside its scope.  The act of
+running a program using the Library is not restricted, and output from
+such a program is covered only if its contents constitute a work based
+on the Library (independent of the use of the Library in a tool for
+writing it).  Whether that is true depends on what the Library does
+and what the program that uses the Library does.
+  
+  1. You may copy and distribute verbatim copies of the Library's
+complete source code as you receive it, in any medium, provided that
+you conspicuously and appropriately publish on each copy an
+appropriate copyright notice and disclaimer of warranty; keep intact
+all the notices that refer to this License and to the absence of any
+warranty; and distribute a copy of this License along with the
+Library.
+
+  You may charge a fee for the physical act of transferring a copy,
+and you may at your option offer warranty protection in exchange for a
+fee.
+
+  2. You may modify your copy or copies of the Library or any portion
+of it, thus forming a work based on the Library, and copy and
+distribute such modifications or work under the terms of Section 1
+above, provided that you also meet all of these conditions:
+
+    a) The modified work must itself be a software library.
+
+    b) You must cause the files modified to carry prominent notices
+    stating that you changed the files and the date of any change.
+
+    c) You must cause the whole of the work to be licensed at no
+    charge to all third parties under the terms of this License.
+
+    d) If a facility in the modified Library refers to a function or a
+    table of data to be supplied by an application program that uses
+    the facility, other than as an argument passed when the facility
+    is invoked, then you must make a good faith effort to ensure that,
+    in the event an application does not supply such function or
+    table, the facility still operates, and performs whatever part of
+    its purpose remains meaningful.
+
+    (For example, a function in a library to compute square roots has
+    a purpose that is entirely well-defined independent of the
+    application.  Therefore, Subsection 2d requires that any
+    application-supplied function or table used by this function must
+    be optional: if the application does not supply it, the square
+    root function must still compute square roots.)
+
+These requirements apply to the modified work as a whole.  If
+identifiable sections of that work are not derived from the Library,
+and can be reasonably considered independent and separate works in
+themselves, then this License, and its terms, do not apply to those
+sections when you distribute them as separate works.  But when you
+distribute the same sections as part of a whole which is a work based
+on the Library, the distribution of the whole must be on the terms of
+this License, whose permissions for other licensees extend to the
+entire whole, and thus to each and every part regardless of who wrote
+it.
+
+Thus, it is not the intent of this section to claim rights or contest
+your rights to work written entirely by you; rather, the intent is to
+exercise the right to control the distribution of derivative or
+collective works based on the Library.
+
+In addition, mere aggregation of another work not based on the Library
+with the Library (or with a work based on the Library) on a volume of
+a storage or distribution medium does not bring the other work under
+the scope of this License.
+
+  3. You may opt to apply the terms of the ordinary GNU General Public
+License instead of this License to a given copy of the Library.  To do
+this, you must alter all the notices that refer to this License, so
+that they refer to the ordinary GNU General Public License, version 2,
+instead of to this License.  (If a newer version than version 2 of the
+ordinary GNU General Public License has appeared, then you can specify
+that version instead if you wish.)  Do not make any other change in
+these notices.
+
+  Once this change is made in a given copy, it is irreversible for
+that copy, so the ordinary GNU General Public License applies to all
+subsequent copies and derivative works made from that copy.
+
+  This option is useful when you wish to copy part of the code of
+the Library into a program that is not a library.
+
+  4. You may copy and distribute the Library (or a portion or
+derivative of it, under Section 2) in object code or executable form
+under the terms of Sections 1 and 2 above provided that you accompany
+it with the complete corresponding machine-readable source code, which
+must be distributed under the terms of Sections 1 and 2 above on a
+medium customarily used for software interchange.
+
+  If distribution of object code is made by offering access to copy
+from a designated place, then offering equivalent access to copy the
+source code from the same place satisfies the requirement to
+distribute the source code, even though third parties are not
+compelled to copy the source along with the object code.
+
+  5. A program that contains no derivative of any portion of the
+Library, but is designed to work with the Library by being compiled or
+linked with it, is called a "work that uses the Library".  Such a
+work, in isolation, is not a derivative work of the Library, and
+therefore falls outside the scope of this License.
+
+  However, linking a "work that uses the Library" with the Library
+creates an executable that is a derivative of the Library (because it
+contains portions of the Library), rather than a "work that uses the
+library".  The executable is therefore covered by this License.
+Section 6 states terms for distribution of such executables.
+
+  When a "work that uses the Library" uses material from a header file
+that is part of the Library, the object code for the work may be a
+derivative work of the Library even though the source code is not.
+Whether this is true is especially significant if the work can be
+linked without the Library, or if the work is itself a library.  The
+threshold for this to be true is not precisely defined by law.
+
+  If such an object file uses only numerical parameters, data
+structure layouts and accessors, and small macros and small inline
+functions (ten lines or less in length), then the use of the object
+file is unrestricted, regardless of whether it is legally a derivative
+work.  (Executables containing this object code plus portions of the
+Library will still fall under Section 6.)
+
+  Otherwise, if the work is a derivative of the Library, you may
+distribute the object code for the work under the terms of Section 6.
+Any executables containing that work also fall under Section 6,
+whether or not they are linked directly with the Library itself.
+
+  6. As an exception to the Sections above, you may also compile or
+link a "work that uses the Library" with the Library to produce a
+work containing portions of the Library, and distribute that work
+under terms of your choice, provided that the terms permit
+modification of the work for the customer's own use and reverse
+engineering for debugging such modifications.
+
+  You must give prominent notice with each copy of the work that the
+Library is used in it and that the Library and its use are covered by
+this License.  You must supply a copy of this License.  If the work
+during execution displays copyright notices, you must include the
+copyright notice for the Library among them, as well as a reference
+directing the user to the copy of this License.  Also, you must do one
+of these things:
+
+    a) Accompany the work with the complete corresponding
+    machine-readable source code for the Library including whatever
+    changes were used in the work (which must be distributed under
+    Sections 1 and 2 above); and, if the work is an executable linked
+    with the Library, with the complete machine-readable "work that
+    uses the Library", as object code and/or source code, so that the
+    user can modify the Library and then relink to produce a modified
+    executable containing the modified Library.  (It is understood
+    that the user who changes the contents of definitions files in the
+    Library will not necessarily be able to recompile the application
+    to use the modified definitions.)
+
+    b) Accompany the work with a written offer, valid for at
+    least three years, to give the same user the materials
+    specified in Subsection 6a, above, for a charge no more
+    than the cost of performing this distribution.
+
+    c) If distribution of the work is made by offering access to copy
+    from a designated place, offer equivalent access to copy the above
+    specified materials from the same place.
+
+    d) Verify that the user has already received a copy of these
+    materials or that you have already sent this user a copy.
+
+  For an executable, the required form of the "work that uses the
+Library" must include any data and utility programs needed for
+reproducing the executable from it.  However, as a special exception,
+the source code distributed need not include anything that is normally
+distributed (in either source or binary form) with the major
+components (compiler, kernel, and so on) of the operating system on
+which the executable runs, unless that component itself accompanies
+the executable.
+
+  It may happen that this requirement contradicts the license
+restrictions of other proprietary libraries that do not normally
+accompany the operating system.  Such a contradiction means you cannot
+use both them and the Library together in an executable that you
+distribute.
+
+  7. You may place library facilities that are a work based on the
+Library side-by-side in a single library together with other library
+facilities not covered by this License, and distribute such a combined
+library, provided that the separate distribution of the work based on
+the Library and of the other library facilities is otherwise
+permitted, and provided that you do these two things:
+
+    a) Accompany the combined library with a copy of the same work
+    based on the Library, uncombined with any other library
+    facilities.  This must be distributed under the terms of the
+    Sections above.
+
+    b) Give prominent notice with the combined library of the fact
+    that part of it is a work based on the Library, and explaining
+    where to find the accompanying uncombined form of the same work.
+
+  8. You may not copy, modify, sublicense, link with, or distribute
+the Library except as expressly provided under this License.  Any
+attempt otherwise to copy, modify, sublicense, link with, or
+distribute the Library is void, and will automatically terminate your
+rights under this License.  However, parties who have received copies,
+or rights, from you under this License will not have their licenses
+terminated so long as such parties remain in full compliance.
+
+  9. You are not required to accept this License, since you have not
+signed it.  However, nothing else grants you permission to modify or
+distribute the Library or its derivative works.  These actions are
+prohibited by law if you do not accept this License.  Therefore, by
+modifying or distributing the Library (or any work based on the
+Library), you indicate your acceptance of this License to do so, and
+all its terms and conditions for copying, distributing or modifying
+the Library or works based on it.
+
+  10. Each time you redistribute the Library (or any work based on the
+Library), the recipient automatically receives a license from the
+original licensor to copy, distribute, link with or modify the Library
+subject to these terms and conditions.  You may not impose any further
+restrictions on the recipients' exercise of the rights granted herein.
+You are not responsible for enforcing compliance by third parties to
+this License.
+
+  11. If, as a consequence of a court judgment or allegation of patent
+infringement or for any other reason (not limited to patent issues),
+conditions are imposed on you (whether by court order, agreement or
+otherwise) that contradict the conditions of this License, they do not
+excuse you from the conditions of this License.  If you cannot
+distribute so as to satisfy simultaneously your obligations under this
+License and any other pertinent obligations, then as a consequence you
+may not distribute the Library at all.  For example, if a patent
+license would not permit royalty-free redistribution of the Library by
+all those who receive copies directly or indirectly through you, then
+the only way you could satisfy both it and this License would be to
+refrain entirely from distribution of the Library.
+
+If any portion of this section is held invalid or unenforceable under any
+particular circumstance, the balance of the section is intended to apply,
+and the section as a whole is intended to apply in other circumstances.
+
+It is not the purpose of this section to induce you to infringe any
+patents or other property right claims or to contest validity of any
+such claims; this section has the sole purpose of protecting the
+integrity of the free software distribution system which is
+implemented by public license practices.  Many people have made
+generous contributions to the wide range of software distributed
+through that system in reliance on consistent application of that
+system; it is up to the author/donor to decide if he or she is willing
+to distribute software through any other system and a licensee cannot
+impose that choice.
+
+This section is intended to make thoroughly clear what is believed to
+be a consequence of the rest of this License.
+
+  12. If the distribution and/or use of the Library is restricted in
+certain countries either by patents or by copyrighted interfaces, the
+original copyright holder who places the Library under this License may add
+an explicit geographical distribution limitation excluding those countries,
+so that distribution is permitted only in or among countries not thus
+excluded.  In such case, this License incorporates the limitation as if
+written in the body of this License.
+
+  13. The Free Software Foundation may publish revised and/or new
+versions of the Library General Public License from time to time.
+Such new versions will be similar in spirit to the present version,
+but may differ in detail to address new problems or concerns.
+
+Each version is given a distinguishing version number.  If the Library
+specifies a version number of this License which applies to it and
+"any later version", you have the option of following the terms and
+conditions either of that version or of any later version published by
+the Free Software Foundation.  If the Library does not specify a
+license version number, you may choose any version ever published by
+the Free Software Foundation.
+
+  14. If you wish to incorporate parts of the Library into other free
+programs whose distribution conditions are incompatible with these,
+write to the author to ask for permission.  For software which is
+copyrighted by the Free Software Foundation, write to the Free
+Software Foundation; we sometimes make exceptions for this.  Our
+decision will be guided by the two goals of preserving the free status
+of all derivatives of our free software and of promoting the sharing
+and reuse of software generally.
+
+			    NO WARRANTY
+
+  15. BECAUSE THE LIBRARY IS LICENSED FREE OF CHARGE, THERE IS NO
+WARRANTY FOR THE LIBRARY, TO THE EXTENT PERMITTED BY APPLICABLE LAW.
+EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT HOLDERS AND/OR
+OTHER PARTIES PROVIDE THE LIBRARY "AS IS" WITHOUT WARRANTY OF ANY
+KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE
+IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE
+LIBRARY IS WITH YOU.  SHOULD THE LIBRARY PROVE DEFECTIVE, YOU ASSUME
+THE COST OF ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN
+WRITING WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MAY MODIFY
+AND/OR REDISTRIBUTE THE LIBRARY AS PERMITTED ABOVE, BE LIABLE TO YOU
+FOR DAMAGES, INCLUDING ANY GENERAL, SPECIAL, INCIDENTAL OR
+CONSEQUENTIAL DAMAGES ARISING OUT OF THE USE OR INABILITY TO USE THE
+LIBRARY (INCLUDING BUT NOT LIMITED TO LOSS OF DATA OR DATA BEING
+RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD PARTIES OR A
+FAILURE OF THE LIBRARY TO OPERATE WITH ANY OTHER SOFTWARE), EVEN IF
+SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH
+DAMAGES.
+
+		     END OF TERMS AND CONDITIONS
+
+     Appendix: How to Apply These Terms to Your New Libraries
+
+  If you develop a new library, and you want it to be of the greatest
+possible use to the public, we recommend making it free software that
+everyone can redistribute and change.  You can do so by permitting
+redistribution under these terms (or, alternatively, under the terms of the
+ordinary General Public License).
+
+  To apply these terms, attach the following notices to the library.  It is
+safest to attach them to the start of each source file to most effectively
+convey the exclusion of warranty; and each file should have at least the
+"copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the library's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This library is free software; you can redistribute it and/or
+    modify it under the terms of the GNU Library General Public
+    License as published by the Free Software Foundation; either
+    version 2 of the License, or (at your option) any later version.
+
+    This library is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
+    Library General Public License for more details.
+
+    You should have received a copy of the GNU Library General Public
+    License along with this library; if not, write to the Free
+    Software Foundation, Inc., 59 Temple Place - Suite 330, Boston,
+    MA 02111-1307, USA
+
+Also add information on how to contact you by electronic and paper mail.
+
+You should also get your employer (if you work as a programmer) or your
+school, if any, to sign a "copyright disclaimer" for the library, if
+necessary.  Here is a sample; alter the names:
+
+  Yoyodyne, Inc., hereby disclaims all copyright interest in the
+  library `Frob' (a library for tweaking knobs) written by James Random Hacker.
+
+  <signature of Ty Coon>, 1 April 1990
+  Ty Coon, President of Vice
+
+That's all there is to it!
diff --git a/wildfly/docs/licenses/indiana university extreme lab software license 1.1.1.html b/wildfly/docs/licenses/indiana university extreme lab software license 1.1.1.html
new file mode 100644
index 0000000..01bc490
--- /dev/null
+++ b/wildfly/docs/licenses/indiana university extreme lab software license 1.1.1.html	
@@ -0,0 +1,1333 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <title>Licenses: Indiana Extreme License 1.1.1 (indiana-extreme)</title>
+    <!-- Required meta tags -->
+    <meta charset="utf-8">
+    <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no">
+    
+    <!-- Bootstrap CSS -->
+    <link rel="stylesheet" href="/static/bootstrap/bootstrap-4.4.1.min.css" integrity="sha384-Vkoo8x4CGsO3+Hhxv8T/Q5PaXtkKtu6ug5TOeNV6gBiFeWPGFN9MuhOf23Q9Ifjh" crossorigin="anonymous">
+    <!-- Font Awesome CSS -->
+    <link rel="stylesheet" href="/static/fontawesome/css/fontawesome-5.3.1.min.css" integrity="sha384-mzrmE5qonljUremFsqc01SB46JvROS7bZs3IO2EmfFsd15uHvIt+Y8vEf7N7fWAU" crossorigin="anonymous">
+    <!-- Custom CSS -->
+    <link rel="stylesheet" href="/static/css/dejacode_bootstrap.css">
+    
+  
+  
+
+    
+    <script src="/static/js/jquery-3.3.1.min.js" integrity="sha384-tsQFqpEReu7ZLhBV2VZlAu7zcOV+rXbYlF2cqB8txI/8aZajjp4Bqd+V6D5IgvKT" crossorigin="anonymous"></script>
+    <!-- Favicon -->
+    <link rel="icon" href="/static/img/favicon.ico">
+  </head>
+  <body class="body-background">
+    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+<nav class="navbar navbar-expand-md navbar-dark fixed-top">
+  
+  
+    
+  <div class="navbar-nav navbar-brand mr-4 p-0">
+    <a class="nav-link dropdown-toggle mr-md-2 p-0" href="#" data-toggle="dropdown" aria-haspopup="true" aria-expanded="true">
+      DejaCode
+    </a>
+    <div class="dropdown-menu">
+      <a class="dropdown-item" href="/home/">Home</a>
+      <a class="dropdown-item" href="https://dejacode.zendesk.com/home" target="_blank">Support</a>
+      <a class="dropdown-item" href="https://www.nexb.com/contactus.html" target="_blank">Contact</a>
+      <div class="dropdown-divider"></div>
+      <a class="dropdown-item" href="/about/">About</a>
+      <a class="dropdown-item" href="/release_notes/">Release notes</a>
+      <a class="dropdown-item" href="http://status.dejacode.com/" target="_blank">Status</a>
+      <a class="dropdown-item" href="/eula/">EULA</a>
+    </div>
+  </div>
+
+    <button class="navbar-toggler" type="button" data-toggle="collapse" data-target="#navbarCollapse" aria-controls="navbarCollapse" aria-expanded="false" aria-label="Toggle navigation">
+      <span class="navbar-toggler-icon"></span>
+    </button>
+    <div class="collapse navbar-collapse" id="navbarCollapse">
+      <ul class="navbar-nav mr-auto">
+        
+
+
+
+
+
+
+
+<li class="nav-item">
+  <a class="nav-link" href="/components/">Components</a>
+</li>
+  <li class="nav-item">
+  <a class="nav-link" href="/packages/">Packages</a>
+</li>
+  <li class="nav-item active">
+  <a class="nav-link" href="/licenses/">Licenses</a>
+</li>
+<li class="nav-item">
+  <a class="nav-link" href="/owners/">Owners</a>
+</li>
+        
+      </ul>
+    </div>
+    <form id="search-form" class="form-inline mt-md-0 mr-sm-2" action="/licenses/">
+      <div class="input-group input-group-sm">
+        <div class="input-group-prepend">
+          <button class="btn btn-djc-primary dropdown-toggle" type="button" data-toggle="dropdown" aria-haspopup="true" aria-expanded="false">
+            <span id="search-selector-content">
+              
+                <i class="fa fa-book"></i> License
+              
+            </span>
+          </button>
+          <div id="search-selector-list" class="dropdown-menu">
+            
+            <a class="dropdown-item" href="/components/"><i class="fa fa-puzzle-piece" aria-hidden="true"></i> Component</a>
+            <a class="dropdown-item" href="/packages/"><i class="fas fa-archive" aria-hidden="true"></i> Package</a>
+            <a class="dropdown-item" href="/licenses/"><i class="fa fa-book" aria-hidden="true"></i> License</a>
+            <a class="dropdown-item" href="/owners/"><i class="fa fa-users" aria-hidden="true"></i> Owner</a>
+            <div role="separator" class="dropdown-divider"></div>
+              <a class="dropdown-item" href="/global_search/"><i class="fa fa-globe" aria-hidden="true"></i> Global</a>
+            </div>
+        </div>
+        <input style="width: 250px;" type="text" class="form-control" id="search-input" name="q" placeholder="Search" aria-label="Search" autocomplete="off" value="">
+      </div>
+      <a id="search-help-link" href="#search-help-modal" class="ml-1" data-toggle="modal" style="color: white;"><i class="fas fa-question-circle fa-sm"></i></a>
+      
+    </form>
+
+    
+      <ul class="navbar-nav flex-row ml-md-auto d-none d-md-flex">
+        
+          <li class="nav-item">
+            <a class="nav-item nav-link" href="/account/register/"><i class="fas fa-user-plus"></i> Sign Up</a>
+          </li>
+        
+        
+          <li class="nav-item">
+            <a class="nav-item nav-link" href="/login/"><i class="fas fa-sign-in-alt"></i> Sign in</a>
+          </li>
+        
+      </ul>
+    
+  
+</nav>
+    <main class="white-background pb-5">
+      
+  <div class="header container">
+    <div class="header-body pb-0" style="border-bottom: 0;">
+      <div class="row align-items-end">
+        <div class="col">
+          <h6 class="header-pretitle">
+            <a class="mr-1" href="/licenses/?q=indiana+extreme" title="Return to license list" data-toggle="tooltip" data-placement="bottom">Licenses</a>
+            
+            
+          </h6>
+          <h1 class="header-title">
+            
+              Indiana Extreme License 1.1.1 (indiana-extreme)
+              <small class="ml-1" style="font-size: 70%">
+                
+                  
+                  
+                    
+                  
+                
+              </small>
+            
+          </h1>
+        </div>
+        <div class="col-auto pr-0">
+          
+            
+            
+            
+            <div class="btn-group">
+              
+              
+            </div>
+          
+        </div>
+      </div>
+    </div>
+  </div>
+
+  
+
+  <ul class="nav nav-tabs container" id="details_tab" role="tablist" style="padding-right: 15px; padding-left: 15px;">
+    
+      <li class="nav-item">
+        <a href="#tab_essentials" data-toggle="tab" role="tab" class="nav-link">
+          
+            Essentials
+          
+        </a>
+      </li>
+    
+      <li class="nav-item">
+        <a href="#tab_license-text" data-toggle="tab" role="tab" class="nav-link">
+          
+            License text
+          
+        </a>
+      </li>
+    
+      <li class="nav-item">
+        <a href="#tab_license-conditions" data-toggle="tab" role="tab" class="nav-link">
+          
+            License conditions
+          
+        </a>
+      </li>
+    
+      <li class="nav-item">
+        <a href="#tab_urls" data-toggle="tab" role="tab" class="nav-link">
+          
+            URLs
+          
+        </a>
+      </li>
+    
+      <li class="nav-item">
+        <a href="#tab_owner" data-toggle="tab" role="tab" class="nav-link">
+          
+            Owner
+          
+        </a>
+      </li>
+    
+      <li class="nav-item">
+        <a href="#tab_history" data-toggle="tab" role="tab" class="nav-link">
+          
+            History
+          
+        </a>
+      </li>
+    
+  </ul>
+
+  <div class="background-white">
+    <div class="tab-content pt-4 px-0 container" style="height: 100%; min-height: 28.5em;">
+      
+        
+        <div class="tab-pane show" id="tab_essentials">
+          
+            
+              
+<dl class="row mb-0">
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Unique key name of the license.">
+  Key
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-key">indiana-extreme</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The full name of the license, as provided by the original authors.">
+  Name
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-name">Indiana University Extreme! Lab Software License Version 1.1.1</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Most commonly used name for the license, often abbreviated.">
+  Short Name
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-short-name">Indiana Extreme License 1.1.1</pre>
+</dd>
+
+            
+          
+            
+              
+
+
+<dt class="col-sm-2 text-right pt-2 pr-0"><span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="When true (checked), indicates that the license has at least one License Tag that requires attribution in the source code or the documentation of the product where the licensed software is being used, or both.">Attribution required</span></dt>
+<dd class="col-sm-10 pt-2 mb-3"><i class="fas fa-check-circle color-true fa-md"></i></dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="A license category, identified by a code, provides a major grouping for licenses, generally describing the relationship between the licensor and licensee.">
+  Category
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-category">Permissive</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="A License Type identifies the high level nature of a License Category: Open Source, Commercial, or Proprietary.">
+  License type
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-license-type">Open Source</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="License profile: a selection of license tags and their values, identified by a numeric code, in order to provide a convenient way to assign a set of tag values to a license. A &quot;Tag&quot; identifies a frequently encountered obligation, restriction, or other notable characteristic of license terms. Note that individual tag value assignments may vary by license.">
+  License profile
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-license-profile">7: Apache1.1 Terms</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="A license style identifies a group of miscellaneous characteristics about a license, which may include a combination of restrictions about software modification and usage">
+  License style
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-license-style">Apache 1.1-Style</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="An owner is an entity that is the original author or custodian  of one or more software licenses, and which is responsible for the text of that license.">
+  Owner
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-owner"><a href="/owners/public/Indiana+University/">Indiana University</a></pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Short identifier of the license as stated on each license detail page at https://spdx.org/licenses/">
+  SPDX short identifier
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-spdx-short-identifier">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Keywords to associate with a license to ensure that the license will be found when a user searches on one or more of the keywords. Examples include alternative names for the license, or file/product names that are commonly associated with the license.">
+  Keywords
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-keywords">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The standard notice text for this license if it exists.">
+  Standard notice
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-standard-notice">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="A concise description, maintained by an administrator, of the obligations (or restrictions) mandated by the license which are not communicated by the standard tag assignments of License profile associated with this License.">
+  Special obligations
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-special-obligations">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Year this license was first published, in four-digits format.">
+  Publication year
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-publication-year">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="URN is a globally unique and universal way to reference data.">
+  URN
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-urn"><a href="/urn/urn:dje:license:indiana-extreme/">urn:dje:license:indiana-extreme</a></pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="A Dataspace is an independent, exclusive set of DejaCode data, which can be either nexB master reference data or installation-specific data.">
+  Dataspace
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-dataspace">public</pre>
+</dd>
+</dl>
+            
+          
+          
+        </div>
+      
+        
+        <div class="tab-pane show" id="tab_license-text">
+          
+            
+              
+
+
+
+<p class="text-muted"><i>The full text of the license. Note that actual usage of a license with software may include copyright statements and owner information.</i></p>
+<div class="clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1">Indiana University Extreme! Lab Software License Version 1.1.1
+
+Copyright (c) 2002 Extreme! Lab, Indiana University. All rights reserved.
+
+Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met:
+
+1. Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer.
+
+2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution.
+
+3. The end-user documentation included with the redistribution, if any, must include the following acknowledgment:
+
+&quot;This product includes software developed by the Indiana University Extreme! Lab (http://www.extreme.indiana.edu/).&quot;
+
+Alternately, this acknowledgment may appear in the software itself, if and wherever such third-party acknowledgments normally appear.
+
+4. The names &quot;Indiana University&quot; and &quot;Indiana University Extreme! Lab&quot; must not be used to endorse or promote products derived from this software without prior written permission. For written permission, please contact (http://www.extreme.indiana.edu/).
+
+5. Products derived from this software may not use &quot;Indiana University&quot; name nor may &quot;Indiana University&quot; appear in their name, without prior written permission of the Indiana University.
+
+THIS SOFTWARE IS PROVIDED &quot;AS IS&quot; AND ANY EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHORS, COPYRIGHT HOLDERS OR ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+
+</pre>
+</div>
+
+
+            
+          
+          
+        </div>
+      
+        
+        <div class="tab-pane show" id="tab_license-conditions">
+          
+            
+              
+
+
+  
+    <div class="text-right mb-3">
+      <button type="button" class="btn btn-info" onclick="$('.tag-False').toggle()">Show/hide un-checked Tags</button>
+    </div>
+  
+  <div class="card bg-light mb-3">
+    <h4 class="card-header p-2">Obligations</h4>
+    <div class="card-body p-2">
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>License Text in Source</strong>
+            
+            <p class="card-text">This license requires a copy of the license text and all copyright notices to be included in the source file(s). This obligation can also mean that a license or notice text file must be present in the same directory as the associated code.</p>
+          </div>
+        
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>License Text in Documentation</strong>
+            
+            <p class="card-text">This license requires a copy of the license text and all copyright notices to be included in the product documentation.</p>
+          </div>
+        
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>Usage Notice in Documentation</strong>
+            
+            <p class="card-text">This license requires a notice in the product documentation that the licensed software is being used.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Usage Notice in Advertisement</strong>
+            
+            <p class="card-text">This license requires a notice in all advertisements for the product (typically those mentioning features of the licensed software) that the licensed software is being used.</p>
+          </div>
+        
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>No Use in Endorsements</strong>
+            
+            <p class="card-text">This license requires that neither the name of the organization that owns the licensed software nor the names of its contributors nor the name of the licensed software may be used to endorse or promote products derived from the licensed software without specific prior written permission.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Source Redistribution</strong>
+            
+            <p class="card-text">This license requires the product documentation to include instructions regarding how to obtain source code for the licensed software, including any modifications to it.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Change Tracking in Source</strong>
+            
+            <p class="card-text">This license requires that any changes to the original source code of the licensed software must be documented within the source code itself.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Change Tracking in Documentation</strong>
+            
+            <p class="card-text">This license requires that any changes to the original source code of the licensed software must be documented in the product documentation.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Special Attribution Obligation</strong>
+            
+            <p class="card-text">This license has one or more special attribution obligations that are described in the text of the license.</p>
+          </div>
+        
+      
+    </div>
+  </div>
+
+  
+  <div class="card bg-light mb-3">
+    <h4 class="card-header p-2">Restrictions</h4>
+    <div class="card-body p-2">
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Non-Commercial Use Only</strong>
+            
+            <p class="card-text">This license prohibits commercial use (and typically redistribution) of the licensed software.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Platform Deployment Restriction</strong>
+            
+            <p class="card-text">This license restricts the deployment of the licensed software by operating system, technology, technical field of use or type of device. Licenses with this restriction are not OSI compliant.</p>
+          </div>
+        
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>Name Restriction</strong>
+            
+            <p class="card-text">This license restricts and may specify how the name of the licensed software may be used, including restrictions that may require a name change if the code is modified.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Restricted Redistribution</strong>
+            
+            <p class="card-text">This license restricts which licensed software sub-components you can redistribute.  The restriction may apply to source code, binary files or other sub-components. This restriction is typically included only in proprietary or commercial licenses. Licenses with this restriction are not OSI compliant.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Restricted Modifications</strong>
+            
+            <p class="card-text">This license restricts how the software can be modified.  This restriction is typically included in proprietary or commercial licenses (for example, Oracle and Microsoft proprietary licenses) and in some licenses with restrictions on the creation of derivative works (for example,  the Creative Common &quot;no derivative&quot; licenses).</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>No License Change</strong>
+            
+            <p class="card-text">This license prohibits changing the license that applies to the original licensed software or a derivative work of it. An example is the license for OpenSSL.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Specification Constraints</strong>
+            
+            <p class="card-text">This license has constraints on how the licensed software can be used or modified, in relation to some specification or standard. Few licenses have such constraints; examples include the licenses for MPEG for IP; the Independent JPEG group; some Open Group; POSIX; and some early Sun Java licenses. </p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>DRM Not Allowed</strong>
+            
+            <p class="card-text">This license does not allow the assertion of any digital rights management on the licensed software or a derivative work of it with the intent of restricting the ability to exercise the rights granted by this license. </p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Prohibited in Aircraft</strong>
+            
+            <p class="card-text">This license prohibits use of the licensed software in aircraft-related applications.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Prohibited in Medical</strong>
+            
+            <p class="card-text">This license prohibits use of the licensed software in medical facilities and/or life support equipment.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Prohibited in Nuclear</strong>
+            
+            <p class="card-text">This license prohibits use of the licensed software in a nuclear-power environment.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Export Controls</strong>
+            
+            <p class="card-text">This license text includes export controls.</p>
+          </div>
+        
+      
+    </div>
+  </div>
+
+  
+  <div class="card bg-light mb-3">
+    <h4 class="card-header p-2">Policies</h4>
+    <div class="card-body p-2">
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Patent - Rights Impairment</strong>
+            
+            <p class="card-text">This license has terms that may impair your patent rights if you redistribute the licensed software, since the license terms may require you to convey your patent rights along with redistribution of the licensed software, or otherwise constrain the enforcement ability of your patent rights.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Patent - License Termination</strong>
+            
+            <p class="card-text">This license may end automatically if you bring a patent claim against any contributor over patents that you claim are infringed by the licensed software; your patent license from such contributor to the licensed software may also end automatically. </p>
+          </div>
+        
+      
+    </div>
+  </div>
+
+  
+  <div class="card bg-light mb-3">
+    <h4 class="card-header p-2">Information</h4>
+    <div class="card-body p-2">
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>Warranty Disclaimer</strong>
+            
+            <p class="card-text">This license text includes a warranty disclaimer.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Indemnify Licensor</strong>
+            
+            <p class="card-text">This license says that you agree to indemnify, hold harmless and defend the licensor from and against any loss, damage, claims or lawsuits, including attorney&#x27;s fees that arise or result from your use or distribution of the licensed software.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Network Redistribution</strong>
+            
+            <p class="card-text">This license has specific terms that apply when the software is used or deployed over a network. Few licenses have such terms; examples include Affero GPL, OSL and the Common Public Attribution License (CPAL 1.0).</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Patent - Grant</strong>
+            
+            <p class="card-text">This license states that the author conveys a grant of patent rights without constraining the use of patents held by a recipient.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Patent - Warning</strong>
+            
+            <p class="card-text">This license explicitly warns that the license does not convey a patent grant and that such a grant and/or royalty payments are probably required.</p>
+          </div>
+        
+      
+        
+          <div class="tag-True mb-2 " >
+            <i class="fas fa-check-circle color-true fa-md"></i>
+            <strong>GPL Compatible</strong>
+            
+            <p class="card-text">This license is compatible with the GPL; that is, software licensed under this license can be combined with a program under the GPL without conflict, and the new combination would have the GPL applied to the whole. The primary authority for compatibility is FSF.</p>
+          </div>
+        
+      
+        
+          <div class="tag-False mb-2 " style="display: none;">
+            <i class="far fa-circle color-false fa-md"></i>
+            <strong>Exceptions</strong>
+            
+            <p class="card-text">This license is based upon another license with specific exceptions. Examples include exceptions to the GPL 2.0, such as the GCC Runtime Exception or the Classpath Exception.</p>
+          </div>
+        
+      
+    </div>
+  </div>
+
+            
+          
+          
+        </div>
+      
+        
+        <div class="tab-pane show" id="tab_urls">
+          
+            
+              
+<dl class="row mb-0">
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Homepage URL for the license.">
+  Homepage URL
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-homepage-url">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="URLs to the text of the license (plain text or HTML) on the main site of this license.">
+  Text URLs
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-text-urls"><a target="_blank" href="http://www.bearcave.com/software/java/xml/xmlpull_license.html" rel="nofollow">http://www.bearcave.com/software/java/xml/xmlpull_license.html</a> </pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="URL on the OSI website http://opensource.org for OSI-approved licenses.">
+  OSI URL
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-osi-url">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="URL of a page with Frequently Asked Questions about this license.">
+  FAQ URL
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-faq-url">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="A URL to a page that documents your organization&#x27;s policies and procedures that relate to the obligations and restrictions associated with this license or with similar licenses.">
+  Guidance URL
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-guidance-url">&nbsp;</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Other URLs that identify this license, such as URLs to this license in different open-source projects. Obsolete links may be kept here, as they may be useful for historical analysis purpose.">
+  Other URLs
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+  <pre class="pre-bg-light mb-1 field-other-urls">&nbsp;</pre>
+</dd>
+</dl>
+            
+          
+          
+        </div>
+      
+        
+        <div class="tab-pane show" id="tab_owner">
+          
+            
+              
+<dl class="row mb-0">
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The unique user-maintained name of the author, custodian, or provider of one or more software objects (licenses, components, products).">
+  Name
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-name"><a href="/owners/public/Indiana+University/">Indiana University</a></pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The homepage URL of the owner.">
+  Homepage URL
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-homepage-url"><a target="_blank" href="http://www.extreme.indiana.edu/" rel="nofollow">http://www.extreme.indiana.edu/</a></pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="An owner type differentiates individuals, ongoing businesses, and dynamic organizations (such as software projects). An owner of any type can be associated with a license, component, or product. An owner can also be the parent of any other owner.">
+  Type
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-type">Organization</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Information, frequently a dedicated email address, about contacting an owner for license clarifications and permissions.">
+  Contact information
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-contact-information"><a target="_blank" href="http://www.extreme.indiana.edu/" rel="nofollow">http://www.extreme.indiana.edu/</a></pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Alternative spellings of the name of the owner as a comma-separated list.">
+  Alias
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-alias">Extreme Computing</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="Extended notes about an owner.">
+  Notes
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-notes">Extreme! Computing
+High Performance Distributed and Parallel Systems Research 
+Department of Computer Science 
+Indiana University
+</pre>
+</dd>
+</dl>
+            
+          
+          
+        </div>
+      
+        
+        <div class="tab-pane show" id="tab_history">
+          
+            
+              
+<dl class="row mb-0">
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The date and time the object was created.">
+  Created date
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-created-date">Aug. 27, 2014, 05:17:50 p.m. PDT</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The application user who created the object.">
+  Created by
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-created-by">tomd</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The date and time the object was last modified.">
+  Last modified date
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-last-modified-date">Aug. 27, 2014, 05:17:50 p.m. PDT</pre>
+</dd>
+
+            
+          
+            
+              
+
+<dt class="col-sm-2 text-right pt-2 pr-0">
+  <span class="help_text" data-placement="right" data-toggle="tooltip" data-original-title="The application user who last modified the object.">
+  Last modified by
+  </span>
+</dt>
+<dd class="col-sm-10 clipboard">
+  
+    <button class="btn-clipboard" data-toggle="tooltip" title="Copy to clipboard"><i class="fas fa-clipboard"></i></button>
+  
+  <pre class="pre-bg-light mb-1 field-last-modified-by">tomd</pre>
+</dd>
+
+            
+          
+            
+              
+
+
+
+
+
+</dl>
+            
+          
+          
+        </div>
+      
+    </div>
+  </div>
+
+    </main>
+    <div id="search-help-modal" class="modal" tabindex="-1" role="dialog">
+  <div class="modal-dialog modal-lg" role="document">
+    <div class="modal-content">
+      <div class="modal-header">
+        <h5 class="modal-title">Search help</h5>
+        <button type="button" class="close" data-dismiss="modal" aria-label="Close">
+          <span aria-hidden="true">&times;</span>
+        </button>
+      </div>
+      <div class="modal-body bg-light">
+        <p>
+          Note that the search value you enter is not case sensitive.<br>
+          <code>apache</code> and <code>Apache</code> and <code>APACHE</code> are equivalent
+          values for search purposes.
+        </p>
+        <p>
+          The search starts with a simple case-insensitive containment search on the Name field
+          of the application object (Component, License, Owner, Package, Product, "Global"),
+          ordering the results by exact match first.<br>
+          If the simple search returns nothing, a second step searches the application object by
+          field ranking, using fields in the application object that help identify it.
+        </p>
+        <p>Search results are ordered by</p>
+          <ol>
+            <li>exact matches</li>
+            <li>word matches</li>
+            <li>text string matches</li>
+          </ol>
+        <p>alphabetically within each group.</p>
+        <p>
+          You can also filter search results by various column headers, selecting one or more values
+          for that purpose, optionally using "type ahead" to quickly find the value you want.
+          DejaCode limits the values you can select for filtering by those that will actually
+          return results. You can use the column filters with or without a value in the search
+          field. You can clear any filter simply by clicking the "x" on the label that identifies
+          an active filter.
+        </p>
+        <p>
+          You can reorder the search results simply by clicking the up or down arrow next to a
+          column header.
+        </p>
+        <p style="margin-bottom: 0;">
+          Note that, unlike a Google search, DejaCode will not try to guess what you intended if
+          your spelling of search text is not accurate - e.g. DejaCode will not not return
+          results for a mis-spelled search value.
+        </p>
+      </div>
+      <div class="modal-footer">
+        <button type="button" class="btn btn-secondary" data-dismiss="modal">Close</button>
+      </div>
+    </div>
+  </div>
+</div>
+    
+      
+<footer class="footer">
+  <div class="container-fluid p-3 p-md-5">
+    <ul class="mb-3 pl-0" >
+      <li><a href="/">Home</a></li>
+      <li><a href="https://dejacode.zendesk.com/home" target="_blank">Support</a></li>
+      <li><a href="https://www.nexb.com/contactus.html" target="_blank">Contact</a></li>
+      <li><a href="/about/">About</a></li>
+      <li><a href="/release_notes/">Release notes</a></li>
+      <li><a href="http://status.dejacode.com/" target="_blank">Status</a></li>
+      <li><a href="/eula/">EULA</a></li>
+      <li><a href="http://twitter.com/dejacode" target="_blank">Twitter</a></li>
+      <li><a href="https://www.facebook.com/nexB.Inc" target="_blank">Facebook</a></li>
+    </ul>
+    <p class="text-muted mb-0">Copyright nexB Inc. DejaCode is a trademark of nexB Inc.</p>
+    <p class="text-muted mb-0">No content on DejaCode should be considered or used as legal advice. Consult an Attorney for any legal advice.</p>
+  </div>
+</footer>
+    
+    <div id="back-to-top" class="btn btn-dark"><i class="fas fa-chevron-up"></i></div>
+    <!-- jQuery first, then Popper.js, then Bootstrap JS -->
+    <!-- We need the full jQuery for feature like $.ajax -->
+    
+    <script src="/static/bootstrap/bootstrap.bundle-4.4.1.min.js" integrity="sha384-6khuMg9gaYr5AxOqhkVIODVIvm9ynTT5J4V1cfthmT+emCG6yVmEZsRHdxlotUnm" crossorigin="anonymous"></script>
+    <script>
+      NEXB = {};
+      NEXB.client_data = {};
+
+      $(document).ready(function() {
+        // Enables all tooltip
+        $('[data-toggle="tooltip"]').tooltip({
+          container: 'body'
+        });
+
+        // Enables all popovers
+        $('[data-toggle="popover"]').popover({
+          container: 'body',
+          html: true
+        });
+
+        // Search selection in the header
+        $('#search-selector-list a').click(function(event) {
+          event.preventDefault();
+          $('#search-form').attr('action', $(this).attr('href'));
+          $('#search-selector-content').html($(this).html());
+          $('#search-input').focus();
+        });
+
+        // Back to top
+        $(window).scroll(function () {
+          if ($(this).scrollTop() >= 250) { // Page is scrolled more than 250px
+            $('#back-to-top').fadeIn(200);
+          } else {
+            $('#back-to-top').fadeOut(200);
+          }
+        });
+        $('#back-to-top').click(function(){
+          $('body,html').animate({scrollTop: 0}, 500);
+        });
+
+      });
+    </script>
+    
+    
+  <script src="/static/js/clipboard-2.0.0.min.js"></script>
+  <script>
+  $(document).ready(function() {
+    // Check if a hash is present in the url
+    if (document.location.hash == "") {
+      // If not set the tab to the first one
+      $('#details_tab a:first').tab('show');
+    } else {
+      // Building a jQuery selector based on a combination of the hash and the 'tab_' prefix
+      // This prefix is used to avoid auto scrolling when coming from an URL containing
+      // a tab in the hash.
+      var selector = 'a[href="#tab_' + document.location.hash.slice(1) + '"]';
+      // If an object is return, set the active tab on it
+      if ($(selector).length) $(selector).tab('show');
+      else $('#details_tab a:first').tab('show');
+    }
+    // When changing the active tab, reflect the change in the url
+    $('a[data-toggle="tab"]').on('shown.bs.tab', function (e) {
+      /* Clean the 'tab_' prefix from the href before injecting it in the hash */
+      document.location.hash = $(e.target).attr('href').replace('tab_', '');
+    });
+
+    
+    
+
+    /* Policy tooltip */
+    $('[data-toggle="tooltip"]').tooltip({placement: 'bottom', container: 'body'});
+
+    $('.toggle-details')
+      .tooltip({container: 'body', placement: 'top'})
+      .on('click', function() {
+          $('.extra-details').toggle();
+      });
+
+    // clipboard.js
+    let clip = new ClipboardJS(".btn-clipboard", {
+      target: function(trigger){
+        return trigger.nextElementSibling
+      }
+    });
+    clip.on("success", function(clip){
+      $(clip.trigger)
+        .attr("title", "Copied!")
+        .tooltip("_fixTitle")
+        .tooltip("show")
+        .attr("title", "Copy to clipboard")
+        .tooltip("_fixTitle");
+      clip.clearSelection()
+    });
+
+    $('.btn-expend').on("click", function() {
+        let button = $(this);
+        let dd = button.parent();
+        let icon = button.children("i");
+        dd.toggleClass("reduced");
+        icon.toggleClass("fa-expand").toggleClass("fa-compress");
+    });
+  });
+  </script>
+
+    
+
+    
+
+    
+  </body>
+</html>
\ No newline at end of file
diff --git a/wildfly/docs/licenses/licenses.css b/wildfly/docs/licenses/licenses.css
new file mode 100644
index 0000000..566d3c9
--- /dev/null
+++ b/wildfly/docs/licenses/licenses.css
@@ -0,0 +1,22 @@
+table {
+    border-collapse: collapse;
+}
+
+table, th, td {
+    border: 1px solid navy;
+}
+
+th {
+    text-align: left;
+    background-color: #BCC6CC;
+
+}
+
+th, td {
+    padding: 2px;
+    text-align: left;
+}
+
+tr:nth-child(even) {
+    background-color: #f2f2f2;
+}
\ No newline at end of file
diff --git a/wildfly/docs/licenses/licenses.html b/wildfly/docs/licenses/licenses.html
new file mode 100644
index 0000000..906f9f8
--- /dev/null
+++ b/wildfly/docs/licenses/licenses.html
@@ -0,0 +1,5546 @@
+<html>
+    <head>
+        <META http-equiv="Content-Type" content="text/html; charset=utf-8">
+        <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
+        <link rel="stylesheet" type="text/css" href="licenses.css">
+    </head>
+    <body>
+        <h2>WildFly </h2>
+        <p>The following material has been provided for informational purposes only, and should not be relied upon or construed as a legal opinion or legal advice.</p>
+        <table>
+            <tr>
+                <th>Package Group</th><th>Package Artifact</th><th>Package Version</th><th>Remote Licenses</th><th>Local Licenses</th>
+            </tr>
+            <tr>
+                <td>com.carrotsearch</td><td>hppc</td><td>0.8.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml</td><td>classmate</td><td>1.5.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.core</td><td>jackson-annotations</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.core</td><td>jackson-core</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.core</td><td>jackson-databind</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.dataformat</td><td>jackson-dataformat-yaml</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.datatype</td><td>jackson-datatype-jdk8</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.datatype</td><td>jackson-datatype-jsr310</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.jakarta.rs</td><td>jackson-jakarta-rs-base</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.jakarta.rs</td><td>jackson-jakarta-rs-json-provider</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.jr</td><td>jackson-jr-objects</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.module</td><td>jackson-module-jakarta-xmlbind-annotations</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.woodstox</td><td>woodstox-core</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.ben-manes.caffeine</td><td>caffeine</td><td>3.1.8</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>btf</td><td>1.2</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>jackson-coreutils</td><td>1.8</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>json-patch</td><td>1.9</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>msg-simple</td><td>1.1</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.luben</td><td>zstd-jni</td><td>1.5.6-5</td><td><a href="https://opensource.org/license/BSD-2-Clause/">BSD 2-clause "Simplified" License</a>
+                    <br>
+                </td><td><a href="bsd 2-clause simplified license.html">bsd 2-clause simplified license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.api.grpc</td><td>proto-google-common-protos</td><td>2.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.code.gson</td><td>gson</td><td>2.8.9</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.guava</td><td>failureaccess</td><td>1.0.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.guava</td><td>guava</td><td>33.0.0-jre</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.protobuf</td><td>protobuf-java</td><td>3.25.5</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.protobuf</td><td>protobuf-java-util</td><td>3.25.5</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.googlecode.javaewah</td><td>JavaEWAH</td><td>1.2.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.h2database</td><td>h2</td><td>2.2.224</td><td><a href="https://fedoraproject.org/wiki/Licensing/MPLv2.0">Mozilla Public License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="mozilla public license 2.0.html">mozilla public license 2.0.html</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.ibm.async</td><td>asyncutil</td><td>0.1.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.microsoft.azure</td><td>azure-storage</td><td>8.6.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.nimbusds</td><td>nimbus-jose-jwt</td><td>9.37.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.squareup</td><td>protoparser</td><td>4.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.istack</td><td>istack-commons-runtime</td><td>4.1.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.istack</td><td>istack-commons-tools</td><td>4.1.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.bind.external</td><td>relaxng-datatype</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.bind.external</td><td>rngom</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.fastinfoset</td><td>FastInfoset</td><td>2.1.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.messaging.saaj</td><td>saaj-impl</td><td>3.0.0</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-beanutils</td><td>commons-beanutils</td><td>1.9.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-cli</td><td>commons-cli</td><td>1.9.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-codec</td><td>commons-codec</td><td>1.17.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-collections</td><td>commons-collections</td><td>3.2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-daemon</td><td>commons-daemon</td><td>Not Installed</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-io</td><td>commons-io</td><td>2.16.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>de.dentrassi.crypto</td><td>pem-keystore</td><td>2.4.0</td><td><a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>gnu.getopt</td><td>java-getopt</td><td>1.0.13</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.0-standalone.html">GNU Library General Public License v2 only</a>
+                    <br>
+                </td><td><a href="gnu library general public license v2 only.txt">gnu library general public license v2 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.agroal</td><td>agroal-api</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.agroal</td><td>agroal-narayana</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.agroal</td><td>agroal-pool</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.grpc</td><td>grpc-api</td><td>1.58.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.micrometer</td><td>micrometer-commons</td><td>1.12.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.micrometer</td><td>micrometer-core</td><td>1.12.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.micrometer</td><td>micrometer-registry-otlp</td><td>1.12.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-buffer</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-dns</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-http</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-http2</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-socks</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-common</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-handler</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-handler-proxy</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-resolver</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-resolver-dns</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-classes-epoll</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-classes-kqueue</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-native-epoll</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-native-kqueue</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-native-unix-common</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-annotations</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-annotations-support</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-api</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-api-semconv</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-api</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-api-events</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-context</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-exporter-common</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-exporter-otlp</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-exporter-otlp-common</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-common</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-extension-autoconfigure</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-extension-autoconfigure-spi</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-logs</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-metrics</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-trace</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-semconv</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.proto</td><td>opentelemetry-proto</td><td>0.20.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.perfmark</td><td>perfmark-api</td><td>0.23.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.reactivex.rxjava2</td><td>rxjava</td><td>2.2.21</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.reactivex.rxjava3</td><td>rxjava</td><td>3.1.9</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-annotation</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-classloader</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-constraint</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-expression</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-function</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-vertx-context</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config-common</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config-core</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config-source-file-system</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>jandex</td><td>3.2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-api</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-cdi</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-exporters</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-propagation</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-rest</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny</td><td>2.6.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny-reactive-streams-operators</td><td>2.6.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny-zero</td><td>1.1.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny-zero-flow-adapters</td><td>1.1.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-amqp-client</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-core</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-kafka-client</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-runtime</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-converter-api</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-amqp</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-api</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-kafka</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-kafka-api</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-provider</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance-api</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance-autoconfig-core</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance-core</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-health</td><td>4.0.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt-cdi-extension</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt-common</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt-http-mechanism</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-open-api-core</td><td>3.10.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-open-api-jaxrs</td><td>3.10.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow.jastow</td><td>jastow</td><td>2.2.8.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow</td><td>undertow-core</td><td>2.3.17.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow</td><td>undertow-servlet</td><td>2.3.17.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow</td><td>undertow-websockets-jsr</td><td>2.3.17.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-amqp-client</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-core</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-grpc-client</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-grpc-common</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-kafka-client</td><td>4.4.9</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-proton</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.activation</td><td>jakarta.activation-api</td><td>2.1.3</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.annotation</td><td>jakarta.annotation-api</td><td>2.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.authentication</td><td>jakarta.authentication-api</td><td>3.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.authorization</td><td>jakarta.authorization-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.batch</td><td>jakarta.batch-api</td><td>2.1.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.ejb</td><td>jakarta.ejb-api</td><td>4.0.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.enterprise.concurrent</td><td>jakarta.enterprise.concurrent-api</td><td>3.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.enterprise</td><td>jakarta.enterprise.cdi-api</td><td>4.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.enterprise</td><td>jakarta.enterprise.lang-model</td><td>4.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.inject</td><td>jakarta.inject-api</td><td>2.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.interceptor</td><td>jakarta.interceptor-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.jms</td><td>jakarta.jms-api</td><td>3.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.json.bind</td><td>jakarta.json.bind-api</td><td>3.0.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.json</td><td>jakarta.json-api</td><td>2.1.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.mail</td><td>jakarta.mail-api</td><td>2.1.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.mvc</td><td>jakarta.mvc-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.persistence</td><td>jakarta.persistence-api</td><td>3.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.resource</td><td>jakarta.resource-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.security.enterprise</td><td>jakarta.security.enterprise-api</td><td>3.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.servlet</td><td>jakarta.servlet-api</td><td>6.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.servlet.jsp</td><td>jakarta.servlet.jsp-api</td><td>3.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.servlet.jsp.jstl</td><td>jakarta.servlet.jsp.jstl-api</td><td>3.0.2</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.transaction</td><td>jakarta.transaction-api</td><td>2.0.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.validation</td><td>jakarta.validation-api</td><td>3.0.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.websocket</td><td>jakarta.websocket-api</td><td>2.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.websocket</td><td>jakarta.websocket-client-api</td><td>2.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.ws.rs</td><td>jakarta.ws.rs-api</td><td>3.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.xml.bind</td><td>jakarta.xml.bind-api</td><td>4.0.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jboss.jaxbintros</td><td>jboss-jaxb-intros</td><td>2.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>joda-time</td><td>joda-time</td><td>2.12.7</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>net.bytebuddy</td><td>byte-buddy</td><td>1.14.18</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>net.jcip</td><td>jcip-annotations</td><td>1.0</td><td><a href="https://creativecommons.org/licenses/by/2.5/legalcode">Creative Commons Attribution 2.5</a>
+                    <br>
+                </td><td><a href="creative commons attribution 2.5.html">creative commons attribution 2.5.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>net.shibboleth.utilities</td><td>java-support</td><td>8.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.aesh</td><td>aesh</td><td>2.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.aesh</td><td>aesh-extensions</td><td>1.8</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.aesh</td><td>readline</td><td>2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.antlr</td><td>antlr4</td><td>4.13.0</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.antlr</td><td>antlr4-runtime</td><td>4.13.0</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>activemq-artemis-native</td><td>2.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-amqp-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-cli</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-commons</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-core-client</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-dto</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-hornetq-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-hqclient-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-client</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-ra</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-server</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-service-extensions</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jdbc-store</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-journal</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-selector</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-server</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-stomp-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.commons</td><td>commons-lang3</td><td>3.15.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-bindings-coloc</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-bindings-soap</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-bindings-xml</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-databinding-aegis</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-databinding-jaxb</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-features-clustering</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-features-logging</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-features-throttling</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-frontend-jaxws</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-frontend-simple</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-management</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-security</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-security-saml</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-http</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-http-hc</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-jms</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-local</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-addr</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-wsdl</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-mex</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-policy</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-rm</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-security</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-common</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-java2ws</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-validator</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-wsdlto-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-wsdlto-databinding-jaxb</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-wsdlto-frontend-jaxws</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.services.sts</td><td>cxf-services-sts-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.services.ws-discovery</td><td>cxf-services-ws-discovery-api</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-boolean</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-bug986</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-dv</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-ts</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjc-utils</td><td>cxf-xjc-runtime</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpasyncclient</td><td>4.1.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpclient</td><td>4.5.14</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpcore</td><td>4.4.16</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpcore-nio</td><td>4.4.16</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpmime</td><td>4.5.14</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.james</td><td>apache-mime4j-core</td><td>0.8.11</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.james</td><td>apache-mime4j-dom</td><td>0.8.11</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.james</td><td>apache-mime4j-storage</td><td>0.8.11</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.kafka</td><td>kafka-clients</td><td>3.7.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.logging.log4j</td><td>log4j-api</td><td>2.23.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-analysis-common</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-core</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-facet</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-join</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-queries</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-queryparser</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.neethi</td><td>neethi</td><td>3.2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.qpid</td><td>proton-j</td><td>0.34.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.santuario</td><td>xmlsec</td><td>3.0.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.sshd</td><td>sshd-common</td><td>2.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.sshd</td><td>sshd-core</td><td>2.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.velocity</td><td>velocity-engine-core</td><td>2.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.ws.xmlschema</td><td>xmlschema-core</td><td>2.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-bindings</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-policy</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-common</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-dom</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-policy-stax</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-stax</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bitbucket.b_c</td><td>jose4j</td><td>0.9.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcjmail-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcpg-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcpkix-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcprov-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcutil-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.codehaus.woodstox</td><td>stax2-api</td><td>4.2.2</td><td><a href="https://opensource.org/license/BSD-2-Clause/">BSD 2-clause "Simplified" License</a>
+                    <br>
+                </td><td><a href="bsd 2-clause simplified license.html">bsd 2-clause simplified license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.cryptacular</td><td>cryptacular</td><td>1.2.5</td><td><a href="https://www.gnu.org/licenses/lgpl-3.0-standalone.html">GNU Lesser General Public License v3.0 only</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 only.txt">gnu lesser general public license v3.0 only.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.angus</td><td>angus-activation</td><td>2.0.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.angus</td><td>angus-mail</td><td>2.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.jdt</td><td>ecj</td><td>3.32.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.jgit</td><td>org.eclipse.jgit</td><td>6.10.0.202406032230-r</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.jgit</td><td>org.eclipse.jgit.ssh.apache</td><td>6.10.0.202406032230-r</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.krazo</td><td>krazo-core</td><td>3.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.krazo</td><td>krazo-resteasy</td><td>3.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.config</td><td>microprofile-config-api</td><td>3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.fault-tolerance</td><td>microprofile-fault-tolerance-api</td><td>4.0.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.health</td><td>microprofile-health-api</td><td>4.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.jwt</td><td>microprofile-jwt-auth-api</td><td>2.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.lra</td><td>microprofile-lra-api</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.openapi</td><td>microprofile-openapi-api</td><td>3.1.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.reactive-streams-operators</td><td>microprofile-reactive-streams-operators-api</td><td>3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.reactive-streams-operators</td><td>microprofile-reactive-streams-operators-core</td><td>3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.rest.client</td><td>microprofile-rest-client-api</td><td>3.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.parsson</td><td>parsson</td><td>1.1.7</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse</td><td>yasson</td><td>3.0.2</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.elasticsearch.client</td><td>elasticsearch-rest-client</td><td>8.15.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.elasticsearch.client</td><td>elasticsearch-rest-client-sniffer</td><td>8.15.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.fusesource.jansi</td><td>jansi</td><td>1.18</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.expressly</td><td>expressly</td><td>5.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish</td><td>jakarta.enterprise.concurrent</td><td>3.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish</td><td>jakarta.faces</td><td>4.0.7</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish</td><td>jakarta.json</td><td>1.1.6</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>codemodel</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-core</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-jxc</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-runtime</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-xjc</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>txw2</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>xsom</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.soteria</td><td>jakarta.security.enterprise</td><td>3.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.soteria</td><td>soteria.spi.bean.decorator.weld</td><td>3.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.web</td><td>jakarta.servlet.jsp.jstl</td><td>3.0.1-jbossorg-1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.common</td><td>hibernate-commons-annotations</td><td>7.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.orm</td><td>hibernate-core</td><td>6.6.1.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.orm</td><td>hibernate-envers</td><td>6.6.1.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-backend-elasticsearch</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-backend-lucene</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-engine</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-mapper-orm</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-mapper-pojo-base</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-util-common</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.validator</td><td>hibernate-validator</td><td>8.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.validator</td><td>hibernate-validator-cdi</td><td>8.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hornetq</td><td>hornetq-commons</td><td>2.4.9.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hornetq</td><td>hornetq-core-client</td><td>2.4.9.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hornetq</td><td>hornetq-jakarta-client</td><td>2.4.9.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cachestore-jdbc-common-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cachestore-jdbc-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cachestore-remote</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cdi-common-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cdi-embedded-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cdi-remote-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-client-hotrod-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-clustered-counter</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-clustered-lock</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-commons-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-core-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-hibernate-cache-commons</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-hibernate-cache-spi</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-hibernate-cache-v62</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-objectfilter</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-query</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-query-core</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-query-dsl</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-remote-query-client</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan.protostream</td><td>protostream</td><td>4.6.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan.protostream</td><td>protostream-types</td><td>4.6.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jasypt</td><td>jasypt</td><td>1.9.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jberet</td><td>jberet-core</td><td>3.0.0.Final</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.activemq.artemis.integration</td><td>artemis-wildfly-integration</td><td>2.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.classfilewriter</td><td>jboss-classfilewriter</td><td>1.3.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.common</td><td>jboss-common-beans</td><td>2.0.1.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ejb3</td><td>jboss-ejb3-ext-api</td><td>2.4.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.genericjms</td><td>generic-jms-ra-jar</td><td>3.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.hal</td><td>hal-console</td><td>3.7.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.invocation</td><td>jboss-invocation</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-common-api</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-common-impl</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-common-spi</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-core-api</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-core-impl</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-deployers-common</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-jdbc</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-validator</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-dmr</td><td>1.7.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-ejb-client</td><td>5.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-iiop-client</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-transaction-spi</td><td>8.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-vfs</td><td>3.3.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logging</td><td>commons-logging-jboss-logging</td><td>1.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logging</td><td>jboss-logging</td><td>3.6.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logging</td><td>jul-to-slf4j-stub</td><td>1.0.1.Final</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logmanager</td><td>jboss-logmanager</td><td>2.1.19.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logmanager</td><td>log4j2-jboss-logmanager</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.marshalling</td><td>jboss-marshalling</td><td>2.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.marshalling</td><td>jboss-marshalling-river</td><td>2.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-appclient</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-common</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-ear</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-ejb</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-web</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.mod_cluster</td><td>mod_cluster-container-spi</td><td>2.0.4.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.mod_cluster</td><td>mod_cluster-core</td><td>2.0.4.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.mod_cluster</td><td>mod_cluster-load-spi</td><td>2.0.4.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.modules</td><td>jboss-modules</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://enterprise.dejacode.com/licenses/public/indiana-extreme/?_list_filters=q%3Dindiana%2Bextreme#license-text">Indiana University Extreme! Lab Software License 1.1.1</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="indiana university extreme lab software license 1.1.1.html">indiana university extreme lab software license 1.1.1.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.msc</td><td>jboss-msc</td><td>1.5.5.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana</td><td>jbosstxbridge</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.jts</td><td>narayana-jts-idlj</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.jts</td><td>narayana-jts-integration</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-client</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-coordinator-jar</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-proxy-api</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-service-base</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>narayana-lra</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-api</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-bridge</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-integration</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-util</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.xts</td><td>jbossxts</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.openjdk-orb</td><td>openjdk-orb</td><td>10.1.0.Final</td><td><a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.remoting</td><td>jboss-remoting</td><td>5.0.29.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.remotingjmx</td><td>remoting-jmx</td><td>3.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.microprofile</td><td>microprofile-config</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.microprofile</td><td>microprofile-rest-client</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.microprofile</td><td>microprofile-rest-client-base</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-atom-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-cdi</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-client</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-client-api</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-core</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-core-spi</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-crypto</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-jackson2-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-jaxb-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-jsapi</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-json-binding-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-json-p-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-multipart-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-rxjava2</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-tracing-api</td><td>2.0.1.Final</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-validator-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.spring</td><td>resteasy-spring</td><td>3.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.slf4j</td><td>slf4j-jboss-logmanager</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.spec.jakarta.el</td><td>jboss-el-api_5.0_spec</td><td>4.0.1.Final</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.spec.jakarta.xml.soap</td><td>jboss-saaj-api_3.0_spec</td><td>1.0.0.Final</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.spec.jakarta.xml.ws</td><td>jboss-jakarta-xml-ws-api_4.0_spec</td><td>1.0.0.Final</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>staxmapper</td><td>1.5.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.stdio</td><td>jboss-stdio</td><td>1.1.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.threads</td><td>jboss-threads</td><td>2.4.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-ejb</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-jsf</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-jta</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-web</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-api</td><td>5.0.SP3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-core-impl</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-lite-extension-translator</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-spi</td><td>5.0.SP3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-client</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-factories</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-resources</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-server</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-transports-udp</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-transports-undertow</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-api</td><td>3.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-common</td><td>5.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-common-tools</td><td>2.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-spi</td><td>5.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.projects</td><td>jaxws-undertow-httpspi</td><td>2.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.xnio.netty</td><td>netty-xnio-transport</td><td>0.1.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.xnio</td><td>xnio-api</td><td>3.8.16.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.xnio</td><td>xnio-nio</td><td>3.8.16.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jctools</td><td>jctools-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups.aws</td><td>jgroups-aws</td><td>3.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups.azure</td><td>jgroups-azure</td><td>2.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups</td><td>jgroups</td><td>5.2.28.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups.kubernetes</td><td>jgroups-kubernetes</td><td>2.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jvnet.staxex</td><td>stax-ex</td><td>2.1.0</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.lz4</td><td>lz4-java</td><td>1.8.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-core</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-profile-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-saml-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-saml-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-security-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-security-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-soap-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-saml-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-saml-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xmlsec-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xmlsec-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.ow2.asm</td><td>asm</td><td>9.7</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.ow2.asm</td><td>asm-util</td><td>9.7</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.projectodd.vdx</td><td>vdx-core</td><td>1.1.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.projectodd.vdx</td><td>vdx-wildfly</td><td>1.1.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.reactivestreams</td><td>reactive-streams</td><td>1.0.4</td><td><a href="https://spdx.org/licenses/MIT-0.html">MIT-0</a>
+                    <br>
+                </td><td><a href="mit-0.html">mit-0.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.slf4j</td><td>slf4j-api</td><td>2.0.13</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.client</td><td>wildfly-client-config</td><td>1.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-infinispan-common</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-infinispan-embedded</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-infinispan-remote</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-context</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-marshalling-jboss</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-marshalling-protostream</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-marshalling-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-api</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-infinispan</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-jgroups</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-local</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-cache</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-infinispan-embedded</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-infinispan-remote</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-spec-servlet-6.0</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-spec-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.common</td><td>wildfly-common</td><td>1.7.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-cli</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-controller-client</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-core-management-client</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-core-management-subsystem</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-core-security</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-deployment-repository</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-deployment-scanner</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-discovery</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-domain-http-error-context</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-domain-http-interface</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-domain-management</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-elytron-integration</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-elytron-tool-wrapper</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-embedded</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-event-logger</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-host-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-installation-manager</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-io</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-io-spi</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-jar-runtime</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-jmx</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-launcher</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-logging</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-management-client-content</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-network</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-patching</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-platform-mbean</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-process-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-protocol</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-remoting</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-request-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-security-manager</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-server</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-service</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-subsystem</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-threads</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-version</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.discovery</td><td>wildfly-discovery-client</td><td>1.3.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.installation-manager</td><td>installation-manager-api</td><td>1.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-eclipselink</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-hibernate6</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-hibernatesearch</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>mvc-krazo-galleon-shared</td><td>Not Installed</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>mvc-krazo-subsystem</td><td>1.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-java</td><td>2.2.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-linux-s390x</td><td>2.2.2.SP01</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-linux-x86_64</td><td>2.2.2.SP01</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-macosx-x86_64</td><td>2.2.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-windows-x86_64</td><td>2.2.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.elytron-web</td><td>undertow-server</td><td>4.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.elytron-web</td><td>undertow-server-servlet</td><td>4.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-authentication</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-authorization</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-client-resteasy</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-client-webservices</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-security</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.mp</td><td>wildfly-elytron-jwt</td><td>2.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-asn1</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-audit</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server-deprecated</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server-http</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server-sasl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-base</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-client</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-credential</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-credential-source-impl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-credential-store</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-dynamic-ssl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-encryption</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-basic</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-bearer</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-cert</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-external</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-form</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-oidc</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-spnego</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-sso</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-stateful-basic</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-jose-jwk</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-jose-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-json-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-keystore</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-gssapi</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-http</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-oauth2</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-scram</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-password-impl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-permission</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-provider-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm-jdbc</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm-ldap</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm-token</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-anonymous</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-auth-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-entity</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-external</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-gs2</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-gssapi</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-localuser</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-oauth2</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-otp</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-plain</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-scram</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-security-manager</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-security-manager-action</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-ssh-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-ssl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-tool</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-cert</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-cert-acme</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-cert-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-principal</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.transaction</td><td>wildfly-transaction-client</td><td>3.0.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.unstable.api.annotation</td><td>unstable-api-annotation-classpath-indexer</td><td>1.0.0.Final</td><td>Public Domain
+                    <br>
+                </td><td><a href="public domain.txt">public domain.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-appclient</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-batch-jberet</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-bean-validation</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-client-all</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-cache</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-client</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-infinispan</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-el-expressly</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-faces-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-faces-mojarra</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-client-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-client-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-embedded-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-jgroups-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-jgroups-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-jgroups-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-marshalling-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-marshalling-jboss</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-marshalling-protostream</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-server-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-server-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-server-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-compat</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-server</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-container</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-undertow</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-weld-core</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-weld-ejb</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-weld-web</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-connector</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-datasources-agroal</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ee</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ee-feature-pack-product-conf</td><td>Not Installed</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ee-security</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ejb3</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-elytron-oidc-client-subsystem</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-feature-pack-product-conf</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-health</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-client-common</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-ejb-client</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-naming-client</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-transaction-client</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-iiop-openjdk</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jaxrs</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jdr</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jpa</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jsf</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jsf-injection</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jsr77</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-keycloak</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-mail</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-messaging-activemq-injection</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-messaging-activemq-subsystem</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-metrics</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-micrometer</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-micrometer-deployment</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-config-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-fault-tolerance-smallrye-deployment</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-fault-tolerance-smallrye-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-health-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-jwt-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-lra-coordinator</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-lra-participant</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-metrics-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-openapi-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-opentracing-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-amqp</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-config</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-kafka</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-streams-operators</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-streams-operators-cdi-provider</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-telemetry</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-telemetry-cdi-provider</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-mod_cluster-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-mod_cluster-undertow</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-naming</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-naming-client</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-opentelemetry</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-opentelemetry-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-picketlink</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-pojo</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-rts</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-sar</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-security</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-system-jmx</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-transactions</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-undertow</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-web-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-webservices-opensaml-sysconfig</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-webservices-server-integration</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-bean-validation</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-ejb</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-jpa</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-transactions</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-webservices</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-xts</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.xerial.snappy</td><td>snappy-java</td><td>1.1.10.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.yaml</td><td>snakeyaml</td><td>2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>annotations</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>apache-client</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>arns</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>auth</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>aws-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>aws-query-protocol</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>aws-xml-protocol</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>crt-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>endpoints-spi</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>http-client-spi</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>json-utils</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>metrics-spi</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>profiles</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>protocol-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>regions</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>s3</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>sdk-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>third-party-jackson-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>utils</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.eventstream</td><td>eventstream</td><td>1.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>wsdl4j</td><td>wsdl4j</td><td>1.6.3</td><td><a href="https://www.eclipse.org/legal/cpl-v10.html">Common Public License 1.0</a>
+                    <br>
+                </td><td><a href="common public license 1.0.txt">common public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>xml-resolver</td><td>xml-resolver</td><td>1.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+        </table>
+    </body>
+</html>
diff --git a/wildfly/docs/licenses/licenses.xml b/wildfly/docs/licenses/licenses.xml
new file mode 100644
index 0000000..d12a8ea
--- /dev/null
+++ b/wildfly/docs/licenses/licenses.xml
@@ -0,0 +1,10130 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<licenseSummary>
+  <dependencies>
+    <dependency>
+      <groupId>com.carrotsearch</groupId>
+      <artifactId>hppc</artifactId>
+      <version>0.8.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml</groupId>
+      <artifactId>classmate</artifactId>
+      <version>1.5.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-annotations</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-core</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-databind</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.dataformat</groupId>
+      <artifactId>jackson-dataformat-yaml</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.datatype</groupId>
+      <artifactId>jackson-datatype-jdk8</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.datatype</groupId>
+      <artifactId>jackson-datatype-jsr310</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.jakarta.rs</groupId>
+      <artifactId>jackson-jakarta-rs-base</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.jakarta.rs</groupId>
+      <artifactId>jackson-jakarta-rs-json-provider</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.module</groupId>
+      <artifactId>jackson-module-jakarta-xmlbind-annotations</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.woodstox</groupId>
+      <artifactId>woodstox-core</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.github.ben-manes.caffeine</groupId>
+      <artifactId>caffeine</artifactId>
+      <version>3.1.8</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>btf</artifactId>
+      <version>1.2</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>jackson-coreutils</artifactId>
+      <version>1.8</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>json-patch</artifactId>
+      <version>1.9</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>msg-simple</artifactId>
+      <version>1.1</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.google.code.gson</groupId>
+      <artifactId>gson</artifactId>
+      <version>2.8.9</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.google.guava</groupId>
+      <artifactId>failureaccess</artifactId>
+      <version>1.0.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.google.guava</groupId>
+      <artifactId>guava</artifactId>
+      <version>33.0.0-jre</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.googlecode.javaewah</groupId>
+      <artifactId>JavaEWAH</artifactId>
+      <version>1.2.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.h2database</groupId>
+      <artifactId>h2</artifactId>
+      <version>2.2.224</version>
+      <licenses>
+        <license>
+          <name>Mozilla Public License 2.0</name>
+          <url>https://fedoraproject.org/wiki/Licensing/MPLv2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.ibm.async</groupId>
+      <artifactId>asyncutil</artifactId>
+      <version>0.1.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.microsoft.azure</groupId>
+      <artifactId>azure-storage</artifactId>
+      <version>8.6.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.nimbusds</groupId>
+      <artifactId>nimbus-jose-jwt</artifactId>
+      <version>9.37.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.squareup</groupId>
+      <artifactId>protoparser</artifactId>
+      <version>4.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.istack</groupId>
+      <artifactId>istack-commons-runtime</artifactId>
+      <version>4.1.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.istack</groupId>
+      <artifactId>istack-commons-tools</artifactId>
+      <version>4.1.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.bind.external</groupId>
+      <artifactId>relaxng-datatype</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.bind.external</groupId>
+      <artifactId>rngom</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.fastinfoset</groupId>
+      <artifactId>FastInfoset</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.messaging.saaj</groupId>
+      <artifactId>saaj-impl</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>commons-beanutils</groupId>
+      <artifactId>commons-beanutils</artifactId>
+      <version>1.9.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>commons-cli</groupId>
+      <artifactId>commons-cli</artifactId>
+      <version>1.9.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>commons-codec</groupId>
+      <artifactId>commons-codec</artifactId>
+      <version>1.17.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>commons-collections</groupId>
+      <artifactId>commons-collections</artifactId>
+      <version>3.2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>commons-daemon</groupId>
+      <artifactId>commons-daemon</artifactId>
+      <version>Not Installed</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>commons-io</groupId>
+      <artifactId>commons-io</artifactId>
+      <version>2.16.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>de.dentrassi.crypto</groupId>
+      <artifactId>pem-keystore</artifactId>
+      <version>2.4.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>gnu.getopt</groupId>
+      <artifactId>java-getopt</artifactId>
+      <version>1.0.13</version>
+      <licenses>
+        <license>
+          <name>GNU Library General Public License v2 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.0-standalone.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.agroal</groupId>
+      <artifactId>agroal-api</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.agroal</groupId>
+      <artifactId>agroal-narayana</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.agroal</groupId>
+      <artifactId>agroal-pool</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-buffer</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-dns</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-http</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-socks</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-common</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-handler</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-handler-proxy</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-resolver</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-resolver-dns</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-classes-epoll</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-classes-kqueue</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-epoll</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-kqueue</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-unix-common</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.reactivex.rxjava2</groupId>
+      <artifactId>rxjava</artifactId>
+      <version>2.2.21</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.reactivex.rxjava3</groupId>
+      <artifactId>rxjava</artifactId>
+      <version>3.1.9</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>jandex</artifactId>
+      <version>3.2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow</groupId>
+      <artifactId>undertow-core</artifactId>
+      <version>2.3.17.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow</groupId>
+      <artifactId>undertow-servlet</artifactId>
+      <version>2.3.17.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow</groupId>
+      <artifactId>undertow-websockets-jsr</artifactId>
+      <version>2.3.17.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow.jastow</groupId>
+      <artifactId>jastow</artifactId>
+      <version>2.2.8.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.activation</groupId>
+      <artifactId>jakarta.activation-api</artifactId>
+      <version>2.1.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.annotation</groupId>
+      <artifactId>jakarta.annotation-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.authentication</groupId>
+      <artifactId>jakarta.authentication-api</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.authorization</groupId>
+      <artifactId>jakarta.authorization-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.batch</groupId>
+      <artifactId>jakarta.batch-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.ejb</groupId>
+      <artifactId>jakarta.ejb-api</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.enterprise</groupId>
+      <artifactId>jakarta.enterprise.cdi-api</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.enterprise</groupId>
+      <artifactId>jakarta.enterprise.lang-model</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.enterprise.concurrent</groupId>
+      <artifactId>jakarta.enterprise.concurrent-api</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.inject</groupId>
+      <artifactId>jakarta.inject-api</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.interceptor</groupId>
+      <artifactId>jakarta.interceptor-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.jms</groupId>
+      <artifactId>jakarta.jms-api</artifactId>
+      <version>3.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.json</groupId>
+      <artifactId>jakarta.json-api</artifactId>
+      <version>2.1.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.json.bind</groupId>
+      <artifactId>jakarta.json.bind-api</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.mail</groupId>
+      <artifactId>jakarta.mail-api</artifactId>
+      <version>2.1.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.persistence</groupId>
+      <artifactId>jakarta.persistence-api</artifactId>
+      <version>3.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.resource</groupId>
+      <artifactId>jakarta.resource-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.security.enterprise</groupId>
+      <artifactId>jakarta.security.enterprise-api</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.servlet</groupId>
+      <artifactId>jakarta.servlet-api</artifactId>
+      <version>6.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.servlet.jsp</groupId>
+      <artifactId>jakarta.servlet.jsp-api</artifactId>
+      <version>3.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.servlet.jsp.jstl</groupId>
+      <artifactId>jakarta.servlet.jsp.jstl-api</artifactId>
+      <version>3.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.transaction</groupId>
+      <artifactId>jakarta.transaction-api</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.validation</groupId>
+      <artifactId>jakarta.validation-api</artifactId>
+      <version>3.0.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.websocket</groupId>
+      <artifactId>jakarta.websocket-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.websocket</groupId>
+      <artifactId>jakarta.websocket-client-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.ws.rs</groupId>
+      <artifactId>jakarta.ws.rs-api</artifactId>
+      <version>3.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.xml.bind</groupId>
+      <artifactId>jakarta.xml.bind-api</artifactId>
+      <version>4.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jboss.jaxbintros</groupId>
+      <artifactId>jboss-jaxb-intros</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>joda-time</groupId>
+      <artifactId>joda-time</artifactId>
+      <version>2.12.7</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>net.bytebuddy</groupId>
+      <artifactId>byte-buddy</artifactId>
+      <version>1.14.18</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>net.jcip</groupId>
+      <artifactId>jcip-annotations</artifactId>
+      <version>1.0</version>
+      <licenses>
+        <license>
+          <name>Creative Commons Attribution 2.5</name>
+          <url>https://creativecommons.org/licenses/by/2.5/legalcode</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>net.shibboleth.utilities</groupId>
+      <artifactId>java-support</artifactId>
+      <version>8.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.aesh</groupId>
+      <artifactId>aesh</artifactId>
+      <version>2.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.aesh</groupId>
+      <artifactId>aesh-extensions</artifactId>
+      <version>1.8</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.aesh</groupId>
+      <artifactId>readline</artifactId>
+      <version>2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.antlr</groupId>
+      <artifactId>antlr4</artifactId>
+      <version>4.13.0</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.antlr</groupId>
+      <artifactId>antlr4-runtime</artifactId>
+      <version>4.13.0</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>activemq-artemis-native</artifactId>
+      <version>2.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-amqp-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-cli</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-commons</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-core-client</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-dto</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-hornetq-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-hqclient-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-client</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-ra</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-server</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-service-extensions</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jdbc-store</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-journal</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-selector</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-server</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-stomp-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <version>3.15.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-bindings-coloc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-bindings-soap</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-bindings-xml</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-databinding-aegis</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-databinding-jaxb</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-features-clustering</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-features-logging</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-features-throttling</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-frontend-jaxws</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-frontend-simple</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-management</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-security</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-security-saml</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-http</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-http-hc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-jms</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-local</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-addr</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-mex</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-policy</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-rm</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-security</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-wsdl</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-common</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-java2ws</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-validator</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-wsdlto-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-wsdlto-databinding-jaxb</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-wsdlto-frontend-jaxws</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.services.sts</groupId>
+      <artifactId>cxf-services-sts-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.services.ws-discovery</groupId>
+      <artifactId>cxf-services-ws-discovery-api</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjc-utils</groupId>
+      <artifactId>cxf-xjc-runtime</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-boolean</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-bug986</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-dv</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-ts</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpasyncclient</artifactId>
+      <version>4.1.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpclient</artifactId>
+      <version>4.5.14</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpcore</artifactId>
+      <version>4.4.16</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpcore-nio</artifactId>
+      <version>4.4.16</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpmime</artifactId>
+      <version>4.5.14</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.james</groupId>
+      <artifactId>apache-mime4j-core</artifactId>
+      <version>0.8.11</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.james</groupId>
+      <artifactId>apache-mime4j-dom</artifactId>
+      <version>0.8.11</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.james</groupId>
+      <artifactId>apache-mime4j-storage</artifactId>
+      <version>0.8.11</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.logging.log4j</groupId>
+      <artifactId>log4j-api</artifactId>
+      <version>2.23.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-analysis-common</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-core</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-facet</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-join</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-queries</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-queryparser</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.neethi</groupId>
+      <artifactId>neethi</artifactId>
+      <version>3.2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.qpid</groupId>
+      <artifactId>proton-j</artifactId>
+      <version>0.34.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.santuario</groupId>
+      <artifactId>xmlsec</artifactId>
+      <version>3.0.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.sshd</groupId>
+      <artifactId>sshd-common</artifactId>
+      <version>2.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.sshd</groupId>
+      <artifactId>sshd-core</artifactId>
+      <version>2.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.velocity</groupId>
+      <artifactId>velocity-engine-core</artifactId>
+      <version>2.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.ws.xmlschema</groupId>
+      <artifactId>xmlschema-core</artifactId>
+      <version>2.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-bindings</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-policy</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-common</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-dom</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-policy-stax</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-stax</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.bitbucket.b_c</groupId>
+      <artifactId>jose4j</artifactId>
+      <version>0.9.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcjmail-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcpg-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcpkix-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcprov-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcutil-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.codehaus.woodstox</groupId>
+      <artifactId>stax2-api</artifactId>
+      <version>4.2.2</version>
+      <licenses>
+        <license>
+          <name>BSD 2-clause "Simplified" License</name>
+          <url>https://opensource.org/license/BSD-2-Clause/</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.cryptacular</groupId>
+      <artifactId>cryptacular</artifactId>
+      <version>1.2.5</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 only</name>
+          <url>https://www.gnu.org/licenses/lgpl-3.0-standalone.html</url>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse</groupId>
+      <artifactId>yasson</artifactId>
+      <version>3.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.angus</groupId>
+      <artifactId>angus-activation</artifactId>
+      <version>2.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.angus</groupId>
+      <artifactId>angus-mail</artifactId>
+      <version>2.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.jdt</groupId>
+      <artifactId>ecj</artifactId>
+      <version>3.32.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.jgit</groupId>
+      <artifactId>org.eclipse.jgit</artifactId>
+      <version>6.10.0.202406032230-r</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.jgit</groupId>
+      <artifactId>org.eclipse.jgit.ssh.apache</artifactId>
+      <version>6.10.0.202406032230-r</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.parsson</groupId>
+      <artifactId>parsson</artifactId>
+      <version>1.1.7</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.elasticsearch.client</groupId>
+      <artifactId>elasticsearch-rest-client</artifactId>
+      <version>8.15.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.elasticsearch.client</groupId>
+      <artifactId>elasticsearch-rest-client-sniffer</artifactId>
+      <version>8.15.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.fusesource.jansi</groupId>
+      <artifactId>jansi</artifactId>
+      <version>1.18</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>jakarta.enterprise.concurrent</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>jakarta.faces</artifactId>
+      <version>4.0.7</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>jakarta.json</artifactId>
+      <version>1.1.6</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.expressly</groupId>
+      <artifactId>expressly</artifactId>
+      <version>5.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>codemodel</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-jxc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-runtime</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-xjc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>txw2</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>xsom</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.soteria</groupId>
+      <artifactId>jakarta.security.enterprise</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.soteria</groupId>
+      <artifactId>soteria.spi.bean.decorator.weld</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.web</groupId>
+      <artifactId>jakarta.servlet.jsp.jstl</artifactId>
+      <version>3.0.1-jbossorg-1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.common</groupId>
+      <artifactId>hibernate-commons-annotations</artifactId>
+      <version>7.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.orm</groupId>
+      <artifactId>hibernate-core</artifactId>
+      <version>6.6.1.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.orm</groupId>
+      <artifactId>hibernate-envers</artifactId>
+      <version>6.6.1.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-backend-elasticsearch</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-backend-lucene</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-engine</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-mapper-orm</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-mapper-pojo-base</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-util-common</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.validator</groupId>
+      <artifactId>hibernate-validator</artifactId>
+      <version>8.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.validator</groupId>
+      <artifactId>hibernate-validator-cdi</artifactId>
+      <version>8.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hornetq</groupId>
+      <artifactId>hornetq-commons</artifactId>
+      <version>2.4.9.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hornetq</groupId>
+      <artifactId>hornetq-core-client</artifactId>
+      <version>2.4.9.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.hornetq</groupId>
+      <artifactId>hornetq-jakarta-client</artifactId>
+      <version>2.4.9.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cachestore-jdbc-common-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cachestore-jdbc-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cachestore-remote</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cdi-common-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cdi-embedded-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cdi-remote-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-client-hotrod-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-clustered-counter</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-clustered-lock</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-commons-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-core-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-hibernate-cache-commons</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-hibernate-cache-spi</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-hibernate-cache-v62</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-objectfilter</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-query</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-query-core</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-query-dsl</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-remote-query-client</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan.protostream</groupId>
+      <artifactId>protostream</artifactId>
+      <version>4.6.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan.protostream</groupId>
+      <artifactId>protostream-types</artifactId>
+      <version>4.6.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jasypt</groupId>
+      <artifactId>jasypt</artifactId>
+      <version>1.9.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jberet</groupId>
+      <artifactId>jberet-core</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-dmr</artifactId>
+      <version>1.7.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-ejb-client</artifactId>
+      <version>5.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-iiop-client</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-transaction-spi</artifactId>
+      <version>8.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-vfs</artifactId>
+      <version>3.3.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>staxmapper</artifactId>
+      <version>1.5.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.activemq.artemis.integration</groupId>
+      <artifactId>artemis-wildfly-integration</artifactId>
+      <version>2.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.classfilewriter</groupId>
+      <artifactId>jboss-classfilewriter</artifactId>
+      <version>1.3.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.common</groupId>
+      <artifactId>jboss-common-beans</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ejb3</groupId>
+      <artifactId>jboss-ejb3-ext-api</artifactId>
+      <version>2.4.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.genericjms</groupId>
+      <artifactId>generic-jms-ra-jar</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.hal</groupId>
+      <artifactId>hal-console</artifactId>
+      <version>3.7.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.invocation</groupId>
+      <artifactId>jboss-invocation</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-common-api</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-common-impl</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-common-spi</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-core-api</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-core-impl</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-deployers-common</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-jdbc</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-validator</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logging</groupId>
+      <artifactId>commons-logging-jboss-logging</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logging</groupId>
+      <artifactId>jboss-logging</artifactId>
+      <version>3.6.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logging</groupId>
+      <artifactId>jul-to-slf4j-stub</artifactId>
+      <version>1.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logmanager</groupId>
+      <artifactId>jboss-logmanager</artifactId>
+      <version>2.1.19.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logmanager</groupId>
+      <artifactId>log4j2-jboss-logmanager</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.marshalling</groupId>
+      <artifactId>jboss-marshalling</artifactId>
+      <version>2.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.marshalling</groupId>
+      <artifactId>jboss-marshalling-river</artifactId>
+      <version>2.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-appclient</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-common</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-ear</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-ejb</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-web</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.mod_cluster</groupId>
+      <artifactId>mod_cluster-container-spi</artifactId>
+      <version>2.0.4.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.mod_cluster</groupId>
+      <artifactId>mod_cluster-core</artifactId>
+      <version>2.0.4.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.mod_cluster</groupId>
+      <artifactId>mod_cluster-load-spi</artifactId>
+      <version>2.0.4.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.modules</groupId>
+      <artifactId>jboss-modules</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Indiana University Extreme! Lab Software License 1.1.1</name>
+          <url>https://enterprise.dejacode.com/licenses/public/indiana-extreme/?_list_filters=q%3Dindiana%2Bextreme#license-text</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.msc</groupId>
+      <artifactId>jboss-msc</artifactId>
+      <version>1.5.5.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana</groupId>
+      <artifactId>jbosstxbridge</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.jts</groupId>
+      <artifactId>narayana-jts-idlj</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.jts</groupId>
+      <artifactId>narayana-jts-integration</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-api</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-bridge</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-integration</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-util</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.xts</groupId>
+      <artifactId>jbossxts</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.openjdk-orb</groupId>
+      <artifactId>openjdk-orb</artifactId>
+      <version>10.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.remoting</groupId>
+      <artifactId>jboss-remoting</artifactId>
+      <version>5.0.29.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.remotingjmx</groupId>
+      <artifactId>remoting-jmx</artifactId>
+      <version>3.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-atom-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-cdi</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-client</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-client-api</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-core</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-core-spi</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-crypto</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-jackson2-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-jaxb-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-jsapi</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-json-binding-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-json-p-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-multipart-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-rxjava2</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-tracing-api</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-validator-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.spring</groupId>
+      <artifactId>resteasy-spring</artifactId>
+      <version>3.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.slf4j</groupId>
+      <artifactId>slf4j-jboss-logmanager</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.spec.jakarta.el</groupId>
+      <artifactId>jboss-el-api_5.0_spec</artifactId>
+      <version>4.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.spec.jakarta.xml.soap</groupId>
+      <artifactId>jboss-saaj-api_3.0_spec</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.spec.jakarta.xml.ws</groupId>
+      <artifactId>jboss-jakarta-xml-ws-api_4.0_spec</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.stdio</groupId>
+      <artifactId>jboss-stdio</artifactId>
+      <version>1.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.threads</groupId>
+      <artifactId>jboss-threads</artifactId>
+      <version>2.4.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-api</artifactId>
+      <version>5.0.SP3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-core-impl</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-lite-extension-translator</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-spi</artifactId>
+      <version>5.0.SP3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-ejb</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-jsf</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-jta</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-web</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-api</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-common</artifactId>
+      <version>5.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-common-tools</artifactId>
+      <version>2.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-spi</artifactId>
+      <version>5.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-client</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-factories</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-resources</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-server</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-transports-udp</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-transports-undertow</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.projects</groupId>
+      <artifactId>jaxws-undertow-httpspi</artifactId>
+      <version>2.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.xnio</groupId>
+      <artifactId>xnio-api</artifactId>
+      <version>3.8.16.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.xnio</groupId>
+      <artifactId>xnio-nio</artifactId>
+      <version>3.8.16.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.xnio.netty</groupId>
+      <artifactId>netty-xnio-transport</artifactId>
+      <version>0.1.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jctools</groupId>
+      <artifactId>jctools-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups</groupId>
+      <artifactId>jgroups</artifactId>
+      <version>5.2.28.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups.aws</groupId>
+      <artifactId>jgroups-aws</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups.azure</groupId>
+      <artifactId>jgroups-azure</artifactId>
+      <version>2.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups.kubernetes</groupId>
+      <artifactId>jgroups-kubernetes</artifactId>
+      <version>2.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jvnet.staxex</groupId>
+      <artifactId>stax-ex</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-core</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-profile-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-saml-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-saml-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-security-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-security-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-soap-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-saml-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-saml-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xmlsec-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xmlsec-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm</artifactId>
+      <version>9.7</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm-util</artifactId>
+      <version>9.7</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.projectodd.vdx</groupId>
+      <artifactId>vdx-core</artifactId>
+      <version>1.1.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.projectodd.vdx</groupId>
+      <artifactId>vdx-wildfly</artifactId>
+      <version>1.1.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.reactivestreams</groupId>
+      <artifactId>reactive-streams</artifactId>
+      <version>1.0.4</version>
+      <licenses>
+        <license>
+          <name>MIT-0</name>
+          <url>https://spdx.org/licenses/MIT-0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-api</artifactId>
+      <version>2.0.13</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-eclipselink</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-hibernate6</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-hibernatesearch</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-appclient</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-batch-jberet</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-bean-validation</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-client-all</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-cache</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-client</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-infinispan</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-el-expressly</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-faces-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-faces-mojarra</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-client-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-client-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-embedded-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-jgroups-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-jgroups-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-jgroups-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-marshalling-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-marshalling-jboss</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-marshalling-protostream</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-server-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-server-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-server-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-compat</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-server</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-container</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-undertow</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-weld-core</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-weld-ejb</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-weld-web</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-connector</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-datasources-agroal</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ee</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ee-feature-pack-product-conf</artifactId>
+      <version>Not Installed</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ee-security</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ejb3</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-elytron-oidc-client-subsystem</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-health</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-iiop-openjdk</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jaxrs</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jdr</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jpa</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jsf</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jsf-injection</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jsr77</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-keycloak</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-mail</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-messaging-activemq-injection</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-messaging-activemq-subsystem</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-metrics</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-mod_cluster-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-mod_cluster-undertow</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-naming</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-naming-client</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-picketlink</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-pojo</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-rts</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-sar</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-security</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-system-jmx</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-transactions</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-undertow</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-web-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-webservices-opensaml-sysconfig</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-webservices-server-integration</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-bean-validation</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-ejb</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-jpa</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-transactions</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-webservices</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-xts</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.client</groupId>
+      <artifactId>wildfly-client-config</artifactId>
+      <version>1.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-infinispan-common</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-infinispan-embedded</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-infinispan-remote</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-context</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-marshalling-jboss</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-marshalling-protostream</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-marshalling-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-api</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-infinispan</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-jgroups</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-local</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-cache</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-infinispan-embedded</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-infinispan-remote</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-spec-servlet-6.0</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-spec-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.common</groupId>
+      <artifactId>wildfly-common</artifactId>
+      <version>1.7.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-cli</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-controller-client</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-core-management-client</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-core-management-subsystem</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-core-security</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-deployment-repository</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-deployment-scanner</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-discovery</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-domain-http-error-context</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-domain-http-interface</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-domain-management</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-elytron-integration</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-elytron-tool-wrapper</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-embedded</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-event-logger</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-host-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-installation-manager</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-io</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-io-spi</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-jar-runtime</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-jmx</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-launcher</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-logging</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-management-client-content</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-network</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-patching</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-platform-mbean</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-process-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-protocol</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-remoting</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-request-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-security-manager</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-server</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-service</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-subsystem</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-threads</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-version</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.discovery</groupId>
+      <artifactId>wildfly-discovery-client</artifactId>
+      <version>1.3.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.installation-manager</groupId>
+      <artifactId>installation-manager-api</artifactId>
+      <version>1.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-java</artifactId>
+      <version>2.2.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-linux-s390x</artifactId>
+      <version>2.2.2.SP01</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-linux-x86_64</artifactId>
+      <version>2.2.2.SP01</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-macosx-x86_64</artifactId>
+      <version>2.2.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-windows-x86_64</artifactId>
+      <version>2.2.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-asn1</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-audit</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server-deprecated</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server-http</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server-sasl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-base</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-client</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-credential</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-credential-source-impl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-credential-store</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-dynamic-ssl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-encryption</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-basic</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-bearer</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-cert</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-external</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-form</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-oidc</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-spnego</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-sso</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-stateful-basic</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-jose-jwk</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-jose-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-json-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-keystore</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-gssapi</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-http</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-oauth2</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-scram</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-password-impl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-permission</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-provider-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm-jdbc</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm-ldap</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm-token</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-anonymous</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-auth-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-entity</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-external</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-gs2</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-gssapi</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-localuser</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-oauth2</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-otp</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-plain</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-scram</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-security-manager</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-security-manager-action</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-ssh-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-ssl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-tool</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-cert</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-cert-acme</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-cert-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-principal</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.elytron-web</groupId>
+      <artifactId>undertow-server</artifactId>
+      <version>4.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.elytron-web</groupId>
+      <artifactId>undertow-server-servlet</artifactId>
+      <version>4.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-authentication</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-authorization</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-client-resteasy</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-client-webservices</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-security</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.transaction</groupId>
+      <artifactId>wildfly-transaction-client</artifactId>
+      <version>3.0.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.unstable.api.annotation</groupId>
+      <artifactId>unstable-api-annotation-classpath-indexer</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Public Domain</name>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-client-common</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-ejb-client</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-naming-client</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-transaction-client</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>annotations</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>apache-client</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>arns</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>auth</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>aws-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>aws-query-protocol</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>aws-xml-protocol</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>crt-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>endpoints-spi</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>http-client-spi</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>json-utils</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>metrics-spi</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>profiles</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>protocol-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>regions</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>s3</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>sdk-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>third-party-jackson-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>utils</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.eventstream</groupId>
+      <artifactId>eventstream</artifactId>
+      <version>1.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>wsdl4j</groupId>
+      <artifactId>wsdl4j</artifactId>
+      <version>1.6.3</version>
+      <licenses>
+        <license>
+          <name>Common Public License 1.0</name>
+          <url>https://www.eclipse.org/legal/cpl-v10.html</url>
+          <distribution>repo</distribution>
+          <comments>Common Public License</comments>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>xml-resolver</groupId>
+      <artifactId>xml-resolver</artifactId>
+      <version>1.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-ee-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.jr</groupId>
+      <artifactId>jackson-jr-objects</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.github.luben</groupId>
+      <artifactId>zstd-jni</artifactId>
+      <version>1.5.6-5</version>
+      <licenses>
+        <license>
+          <name>BSD 2-clause "Simplified" License</name>
+          <url>https://opensource.org/license/BSD-2-Clause/</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.google.api.grpc</groupId>
+      <artifactId>proto-google-common-protos</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.google.protobuf</groupId>
+      <artifactId>protobuf-java</artifactId>
+      <version>3.25.5</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>com.google.protobuf</groupId>
+      <artifactId>protobuf-java-util</artifactId>
+      <version>3.25.5</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.grpc</groupId>
+      <artifactId>grpc-api</artifactId>
+      <version>1.58.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.micrometer</groupId>
+      <artifactId>micrometer-commons</artifactId>
+      <version>1.12.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.micrometer</groupId>
+      <artifactId>micrometer-core</artifactId>
+      <version>1.12.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.micrometer</groupId>
+      <artifactId>micrometer-registry-otlp</artifactId>
+      <version>1.12.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-http2</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-api</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-api-events</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-context</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-exporter-common</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-exporter-otlp</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-exporter-otlp-common</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-common</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-extension-autoconfigure</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-extension-autoconfigure-spi</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-logs</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-metrics</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-trace</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-semconv</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-annotations</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-annotations-support</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-api</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-api-semconv</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.proto</groupId>
+      <artifactId>opentelemetry-proto</artifactId>
+      <version>0.20.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.perfmark</groupId>
+      <artifactId>perfmark-api</artifactId>
+      <version>0.23.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance-api</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance-autoconfig-core</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance-core</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-health</artifactId>
+      <version>4.0.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt-cdi-extension</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt-common</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt-http-mechanism</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-open-api-core</artifactId>
+      <version>3.10.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-open-api-jaxrs</artifactId>
+      <version>3.10.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-annotation</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-classloader</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-constraint</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-expression</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-function</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-vertx-context</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config-common</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config-core</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config-source-file-system</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-api</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-cdi</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-exporters</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-propagation</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-rest</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny</artifactId>
+      <version>2.6.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny-reactive-streams-operators</artifactId>
+      <version>2.6.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny-zero</artifactId>
+      <version>1.1.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny-zero-flow-adapters</artifactId>
+      <version>1.1.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-amqp-client</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-core</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-kafka-client</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-runtime</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-converter-api</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-amqp</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-api</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-kafka</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-kafka-api</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-provider</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-amqp-client</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-core</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-grpc-client</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-grpc-common</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-kafka-client</artifactId>
+      <version>4.4.9</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-proton</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.mvc</groupId>
+      <artifactId>jakarta.mvc-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.kafka</groupId>
+      <artifactId>kafka-clients</artifactId>
+      <version>3.7.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.krazo</groupId>
+      <artifactId>krazo-core</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.krazo</groupId>
+      <artifactId>krazo-resteasy</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.config</groupId>
+      <artifactId>microprofile-config-api</artifactId>
+      <version>3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.fault-tolerance</groupId>
+      <artifactId>microprofile-fault-tolerance-api</artifactId>
+      <version>4.0.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.health</groupId>
+      <artifactId>microprofile-health-api</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.jwt</groupId>
+      <artifactId>microprofile-jwt-auth-api</artifactId>
+      <version>2.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.lra</groupId>
+      <artifactId>microprofile-lra-api</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.openapi</groupId>
+      <artifactId>microprofile-openapi-api</artifactId>
+      <version>3.1.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.reactive-streams-operators</groupId>
+      <artifactId>microprofile-reactive-streams-operators-api</artifactId>
+      <version>3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.reactive-streams-operators</groupId>
+      <artifactId>microprofile-reactive-streams-operators-core</artifactId>
+      <version>3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.rest.client</groupId>
+      <artifactId>microprofile-rest-client-api</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-client</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-coordinator-jar</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-proxy-api</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-service-base</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>narayana-lra</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.microprofile</groupId>
+      <artifactId>microprofile-config</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.microprofile</groupId>
+      <artifactId>microprofile-rest-client</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.microprofile</groupId>
+      <artifactId>microprofile-rest-client-base</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.lz4</groupId>
+      <artifactId>lz4-java</artifactId>
+      <version>1.8.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.reactivestreams</groupId>
+      <artifactId>reactive-streams</artifactId>
+      <version>1.0.4</version>
+      <licenses>
+        <license>
+          <name>MIT-0</name>
+          <url>https://spdx.org/licenses/MIT-0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>mvc-krazo-galleon-shared</artifactId>
+      <version>Not Installed</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>mvc-krazo-subsystem</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-feature-pack-product-conf</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-micrometer</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-micrometer-deployment</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-config-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-fault-tolerance-smallrye-deployment</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-fault-tolerance-smallrye-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-health-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-jwt-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-lra-coordinator</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-lra-participant</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-metrics-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-openapi-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-opentracing-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-amqp</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-config</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-kafka</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-streams-operators</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-streams-operators-cdi-provider</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-telemetry</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-telemetry-cdi-provider</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-opentelemetry</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-opentelemetry-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.mp</groupId>
+      <artifactId>wildfly-elytron-jwt</artifactId>
+      <version>2.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+    <dependency>
+      <groupId>org.xerial.snappy</groupId>
+      <artifactId>snappy-java</artifactId>
+      <version>1.1.10.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+      <source>wildfly-feature-pack-licenses.xml</source>
+    </dependency>
+  </dependencies>
+</licenseSummary>
diff --git a/wildfly/docs/licenses/licenses.xsl b/wildfly/docs/licenses/licenses.xsl
new file mode 100644
index 0000000..e72380f
--- /dev/null
+++ b/wildfly/docs/licenses/licenses.xsl
@@ -0,0 +1,102 @@
+<?xml version="1.0"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsl:stylesheet version="1.0"
+                xmlns:xsl="http://www.w3.org/1999/XSL/Transform">
+
+    <xsl:output method="html" encoding="utf-8" standalone="no" media-type="text/html" />
+    <xsl:param name="version"/>
+    <xsl:param name="product.release.name"/>
+    <xsl:variable name="lowercase" select="'abcdefghijklmnopqrstuvwxyz '" />
+    <xsl:variable name="uppercase" select="'ABCDEFGHIJKLMNOPQRSTUVWXYZ!'" />
+
+    <xsl:template match="/">
+        <html>
+            <head>
+                <meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
+                <link rel="stylesheet" type="text/css" href="licenses.css"/>
+            </head>
+            <body>
+                <h2><xsl:value-of select="$product.release.name"/><xsl:text> </xsl:text><xsl:value-of select="substring-before($version, '-')"/></h2>
+                <p>The following material has been provided for informational purposes only, and should not be relied upon or construed as a legal opinion or legal advice.</p>
+                <!-- Read matching templates -->
+                <table>
+                    <tr>
+                        <th>Package Group</th>
+                        <th>Package Artifact</th>
+                        <th>Package Version</th>
+                        <th>Remote Licenses</th>
+                        <th>Local Licenses</th>
+                    </tr>
+                    <xsl:for-each select="licenseSummary/dependencies/dependency">
+                        <xsl:sort select="concat(groupId, '.', artifactId)"/>
+                        <xsl:variable name="GAV" select="concat(groupId, ':', artifactId, ':', version)"/>
+                        <xsl:variable name="countOfPrevious" select="count(preceding-sibling::*[(concat(groupId, ':', artifactId, ':', version) = $GAV)])"/>
+                        <xsl:if test="$countOfPrevious = 0">
+                        <tr>
+                            <td><xsl:value-of select="groupId"/></td>
+                            <td><xsl:value-of select="artifactId"/></td>
+                            <td><xsl:value-of select="version"/></td>
+                            <td>
+                                <xsl:for-each select="licenses/license">
+                                    <xsl:choose>
+                                        <xsl:when test="name = 'Public Domain'">
+                                            <xsl:value-of select="name"/><br/>
+                                        </xsl:when>
+                                        <xsl:otherwise>
+                                            <a href="{./url}"><xsl:value-of select="name"/></a><br/>
+                                        </xsl:otherwise>
+                                    </xsl:choose>
+                                </xsl:for-each>
+                            </td>
+                            <td>
+                                <xsl:for-each select="licenses/license">
+                                    <xsl:variable name="filename">
+                                        <xsl:call-template name="remap-local-filename">
+                                            <xsl:with-param name="name" select="name" />
+                                        </xsl:call-template>
+                                    </xsl:variable>
+                                    <a href="{$filename}"><xsl:value-of select="$filename"/></a><br/>
+                                </xsl:for-each>
+                            </td>
+                        </tr>
+                        </xsl:if>
+                    </xsl:for-each>
+                </table>
+            </body>
+        </html>
+    </xsl:template>
+
+    <xsl:template name="remap-local-filename">
+        <xsl:param name="name"/>
+        <xsl:choose>
+            <xsl:when test="$name = 'BSD 2-clause &quot;Simplified&quot; License'">
+                <xsl:text>bsd 2-clause simplified license.html</xsl:text>
+            </xsl:when>
+            <xsl:when test="$name = 'BSD 3-Clause &quot;New&quot; or &quot;Revised&quot; License'">
+                <xsl:text>bsd 3-clause new or revised license.html</xsl:text>
+            </xsl:when>
+            <xsl:when test="$name = 'Creative Commons Attribution 2.5'">
+                <xsl:text>creative commons attribution 2.5.html</xsl:text>
+            </xsl:when>
+            <xsl:when test="$name = 'FSF All Permissive License'">
+                <xsl:text>fsf all permissive license.html</xsl:text>
+            </xsl:when>
+            <xsl:when test="$name = 'Indiana University Extreme! Lab Software License 1.1.1'">
+                <xsl:text>indiana university extreme lab software license 1.1.1.html</xsl:text>
+            </xsl:when>
+            <xsl:when test="$name = 'MIT-0'">
+                <xsl:text>mit-0.html</xsl:text>
+            </xsl:when>
+            <xsl:when test="$name = 'Mozilla Public License 2.0'">
+                <xsl:text>mozilla public license 2.0.html</xsl:text>
+            </xsl:when>
+            <xsl:otherwise>
+                <xsl:value-of select="concat(translate($name, $uppercase, $lowercase), '.txt')"/>
+            </xsl:otherwise>
+        </xsl:choose>
+    </xsl:template>
+</xsl:stylesheet>
diff --git a/wildfly/docs/licenses/mit license.txt b/wildfly/docs/licenses/mit license.txt
new file mode 100644
index 0000000..0d951a4
--- /dev/null
+++ b/wildfly/docs/licenses/mit license.txt	
@@ -0,0 +1,14 @@
+The MIT License
+
+Copyright (c) <year> <copyright holders>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), 
+to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, 
+and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, 
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, 
+DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR 
+OTHER DEALINGS IN THE SOFTWARE.
diff --git a/wildfly/docs/licenses/mit-0.html b/wildfly/docs/licenses/mit-0.html
new file mode 100644
index 0000000..5787fcb
--- /dev/null
+++ b/wildfly/docs/licenses/mit-0.html
@@ -0,0 +1,228 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML+RDFa 1.0//EN" "http://www.w3.org/MarkUp/DTD/xhtml-rdfa-1.dtd">
+<!-- saved from url=(0036)https://spdx.org/licenses/MIT-0.html -->
+<html xmlns="http://www.w3.org/1999/xhtml" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:owl="http://www.w3.org/2002/07/owl#" xmlns:rdfs="http://www.w3.org/2000/01/rdf-schema#" xmlns:dc="http://purl.org/dc/terms/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:spdx="http://spdx.org/rdf/terms#"><script type="text/javascript" async="" src="./MIT No Attribution _ Software Package Data Exchange (SPDX)_files/ga.js"></script><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
+    
+    <link rel="shortcut icon" href="https://spdx.org/licenses/sites/all/themes/cpstandard/favicon.ico" type="image/vnd.microsoft.icon">
+
+    <title>MIT No Attribution | Software Package Data Exchange (SPDX)</title>
+
+    <link rel="shortcut icon" href="https://spdx.org/licenses/sites/all/themes/cpstandard/favicon.ico" type="image/vnd.microsoft.icon">
+    <link type="text/css" rel="stylesheet" media="all" href="./MIT No Attribution _ Software Package Data Exchange (SPDX)_files/style.css">
+    <link type="text/css" rel="stylesheet" media="all" href="./MIT No Attribution _ Software Package Data Exchange (SPDX)_files/colors.css">
+    <link href="./MIT No Attribution _ Software Package Data Exchange (SPDX)_files/font-awesome.css" rel="stylesheet">
+    <!-- GOOGLE FONTS -->
+    <link href="./MIT No Attribution _ Software Package Data Exchange (SPDX)_files/css" rel="stylesheet" type="text/css">
+
+    <style type="text/css">
+
+      .page {
+        color: #58595b;
+      }
+
+      #header {
+        border-bottom: 3px solid #4597cb;
+        padding-bottom: 50px;
+      }
+
+      .breadcrumb {
+        margin-top: 25px;
+      }
+
+      #content-header h1 {
+        color: #58595b;
+      }
+
+      .page h2, h3, h4, h5 {
+        color: #00416b;
+      }
+
+      .page h1 {
+      font-size: 2em;
+      }
+
+      .page h2 {
+      font-size: 1.5em;
+      }
+
+      a, a:visited, a:hover {
+        color: #00416b;
+      }
+
+      #footer-copyright {
+        margin-top: 25px;
+      }
+
+      .replaceable-license-text {
+      color: #CC0000;
+      }
+
+      .replaceable-license-text p var {
+      color: #CC0000;
+      }
+
+      .optional-license-text {
+      color: #0000cc;
+      }
+
+      .optional-license-text p var {
+      color: #0000cc;
+      }
+      ul, ol, li {
+      margin: 10px 0 10px 0;
+	  }
+    </style>
+
+  <script type="text/javascript">
+
+    var _gaq = _gaq || [];
+    _gaq.push(['_setAccount', 'UA-3676394-2']);
+    _gaq.push(['_trackPageview']);
+
+    (function() {
+      var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;
+      ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';
+      var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);
+    })();
+
+  </script>
+
+  </head>
+
+  <body typeof="spdx:License">
+
+  <div id="lf-header" class="collaborative-projects">
+    <div class="gray-diagonal">
+      <div class="container">
+        <a id="collaborative-projects-logo" href="http://collabprojects.linuxfoundation.org/">Linux Foundation Collaborative Projects</a>
+      </div>
+    </div>
+  </div>
+
+  <div id="header">
+    <div id="header-inner">
+      <a href="https://spdx.org/" title="Home" rel="home" id="logo">
+        <img src="./MIT No Attribution _ Software Package Data Exchange (SPDX)_files/logo_spdx_250.png" alt="Home">
+      </a>
+
+      <div id="name-and-slogan">
+        <div id="site-name">
+          <h1><a href="https://spdx.org/" title="Home" rel="home">Software Package Data Exchange (SPDX)</a></h1>
+        </div>
+      </div>
+
+    </div>
+  </div> <!-- /header -->
+
+  <div id="highlighted">
+      <div class="region region-highlighted">
+      </div>
+  </div>
+
+    <div id="page" class="page">
+
+      <div class="breadcrumb"><a href="https://spdx.org/">Home</a> » <a href="https://spdx.org/licenses">Licenses</a></div>
+
+      <h1 property="dc:title">MIT No Attribution</h1>
+      <div style="display:none;"><code property="spdx:deprecated">false</code></div>
+      <h2>Full name</h2>
+          <p style="margin-left: 20px;"><code property="spdx:name">MIT No Attribution</code></p>
+
+      <h2>Short identifier</h2>
+          <p style="margin-left: 20px;"><code property="spdx:licenseId">MIT-0</code></p>
+
+      <h2>Other web pages for this license</h2>
+          <div style="margin-left: 20px;">
+            <ul>
+             <li>
+               <a href="https://github.com/aws/mit-0" rel="rdfs:seeAlso" isvalid="true" islive="true" iswaybacklink="false" match="false" timestamp="2023-02-17T20:55:13Z">https://github.com/aws/mit-0</a>
+               <!--Tentative way of displaying information <p>isValid: true, isLive: true, isWayBackLink: false, match: false, timestamp: 2023-02-17T20:55:13Z</p> -->
+             </li>
+             <li>
+               <a href="https://romanrm.net/mit-zero" rel="rdfs:seeAlso" isvalid="true" islive="true" iswaybacklink="false" match="false" timestamp="2023-02-17T20:55:13Z">https://romanrm.net/mit-zero</a>
+               <!--Tentative way of displaying information <p>isValid: true, isLive: true, isWayBackLink: false, match: false, timestamp: 2023-02-17T20:55:13Z</p> -->
+             </li>
+             <li>
+               <a href="https://github.com/awsdocs/aws-cloud9-user-guide/blob/master/LICENSE-SAMPLECODE" rel="rdfs:seeAlso" isvalid="true" islive="true" iswaybacklink="false" match="false" timestamp="2023-02-17T20:55:14Z">https://github.com/awsdocs/aws-cloud9-user-guide/blob/master/LICENSE-SAMPLECODE</a>
+               <!--Tentative way of displaying information <p>isValid: true, isLive: true, isWayBackLink: false, match: false, timestamp: 2023-02-17T20:55:14Z</p> -->
+             </li>
+           </ul>
+          </div>
+
+      <div property="spdx:isOsiApproved" style="display: none;">true</div>
+
+      <h2 id="notes">Notes</h2>
+          <p style="margin-left: 20px;">This license is a modified version of the common MIT license, with the attribution paragraph removed.</p>
+
+      <h2 id="licenseText">Text</h2>
+
+      <div property="spdx:licenseText" class="license-text">
+      
+      <div class="optional-license-text"> 
+        <p><var class="replaceable-license-text"> MIT No Attribution</var></p>
+
+      </div>
+      <div class="replaceable-license-text"> 
+        <p>
+          Copyright &lt;YEAR&gt; &lt;COPYRIGHT HOLDER&gt;
+        </p>
+
+      </div>
+
+      <p>
+        Permission is hereby granted, free of charge, to any person obtaining a copy of this
+        software and associated documentation files (the "Software"), to deal in the Software
+        without restriction, including without limitation the rights to use, copy, modify,
+        merge, publish, distribute, sublicense, and/or sell copies of the Software, and to
+        permit persons to whom the Software is furnished to do so.
+      </p>
+
+      <p>
+        THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED,
+        INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+        PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT
+        HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+        OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE
+        SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+      </p>
+
+    
+      </div>
+
+      <h2 id="licenseHeader">Standard License Header</h2>
+      <div property="spdx:standardLicenseHeader" class="license-text">
+        <p style="font-style: italic">There is no standard license header for the license</p>
+        
+      </div>
+      <div property="spdx:standardLicenseTemplate" style="display: none;">
+      &lt;&lt;beginOptional&gt;&gt;&lt;&lt;var;name="title";original="MIT No Attribution";match="The MIT-Zero License|MIT No Attribution|"&gt;&gt;
+
+&lt;&lt;endOptional&gt;&gt; &lt;&lt;var;name="copyright";original="Copyright &lt;YEAR&gt; &lt;COPYRIGHT HOLDER&gt;  ";match=".{0,5000}"&gt;&gt;
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+
+
+      </div>
+
+    </div> <!-- /page -->
+
+    <div class="collaborative-projects">
+      <div class="gray-diagonal">
+        <div class="container">
+          <div id="footer-copyright">
+            <p>© 2018          SPDX Workgroup a Linux Foundation Project. All Rights Reserved.        </p>
+            <p>Linux Foundation is a registered trademark of The Linux Foundation. Linux is a registered <a href="http://www.linuxfoundation.org/programs/legal/trademark" title="Linux Mark Institute">trademark</a> of Linus Torvalds.</p>
+            <p>Please see our <a href="http://www.linuxfoundation.org/privacy">privacy policy</a> and <a href="http://www.linuxfoundation.org/terms">terms of use</a>.</p>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div id="top-page-link">
+      <a href="https://spdx.org/licenses/MIT-0.html#"><i class="fa fa-arrow-circle-up"></i><span>top of page</span></a>
+    </div>
+
+  
+
+</body></html>
\ No newline at end of file
diff --git a/wildfly/docs/licenses/mozilla public license 2.0.html b/wildfly/docs/licenses/mozilla public license 2.0.html
new file mode 100644
index 0000000..efd2a36
--- /dev/null
+++ b/wildfly/docs/licenses/mozilla public license 2.0.html	
@@ -0,0 +1,346 @@
+<!DOCTYPE html>
+<html class="client-nojs" lang="en" dir="ltr">
+<head>
+  <meta charset="UTF-8"/>
+  <title>Licensing/MPLv2.0 - Fedora Project Wiki</title>
+  <script>document.documentElement.className = document.documentElement.className.replace( /(^|\s)client-nojs(\s|$)/, "$1client-js$2" );</script>
+  <script>(window.RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgCanonicalNamespace":"","wgCanonicalSpecialPageName":false,"wgNamespaceNumber":0,"wgPageName":"Licensing/MPLv2.0","wgTitle":"Licensing/MPLv2.0","wgCurRevisionId":271014,"wgRevisionId":271014,"wgArticleId":44415,"wgIsArticle":true,"wgIsRedirect":false,"wgAction":"view","wgUserName":null,"wgUserGroups":["*"],"wgCategories":[],"wgBreakFrames":false,"wgPageContentLanguage":"en","wgPageContentModel":"wikitext","wgSeparatorTransformTable":["",""],"wgDigitTransformTable":["",""],"wgDefaultDateFormat":"dmy","wgMonthNames":["","January","February","March","April","May","June","July","August","September","October","November","December"],"wgMonthNamesShort":["","Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"],"wgRelevantPageName":"Licensing/MPLv2.0","wgRelevantArticleId":44415,"wgRequestId":"Xmo0iVA6R5mTiMaucNXe6AAAAAM","wgCSPNonce":false,"wgIsProbablyEditable":false,"wgRelevantPageIsProbablyEditable":false,"wgRestrictionEdit":[],"wgRestrictionMove":[],"wgWikiEditorEnabledModules":[]});mw.loader.state({"site.styles":"ready","noscript":"ready","user.styles":"ready","user":"ready","user.options":"ready","user.tokens":"loading","mediawiki.legacy.shared":"ready","mediawiki.legacy.commonPrint":"ready","mediawiki.skinning.interface":"ready","mediawiki.skinning.content.externallinks":"ready","skins.fedora":"ready"});mw.loader.implement("user.tokens@0tffind",function($,jQuery,require,module){/*@nomin*/mw.user.tokens.set({"editToken":"+\\","patrolToken":"+\\","watchToken":"+\\","csrfToken":"+\\"});
+  });RLPAGEMODULES=["site","mediawiki.page.startup","mediawiki.user","mediawiki.page.ready","mediawiki.searchSuggest","skins.fedora.js"];mw.loader.load(RLPAGEMODULES);});</script>
+  <link rel="stylesheet" href="/w/load.php?debug=false&amp;lang=en&amp;modules=mediawiki.legacy.commonPrint%2Cshared%7Cmediawiki.skinning.content.externallinks%7Cmediawiki.skinning.interface%7Cskins.fedora&amp;only=styles&amp;skin=fedora"/>
+  <script async="" src="/w/load.php?debug=false&amp;lang=en&amp;modules=startup&amp;only=scripts&amp;skin=fedora"></script>
+  <link rel="stylesheet" href="https://apps.fedoraproject.org/global/fedora-bootstrap-1.0.1/fedora-bootstrap.css"/><link rel="stylesheet" href="https://apps.fedoraproject.org/global/fedora-bootstrap-fonts/open-sans.css"/><link rel="stylesheet" href="https://apps.fedoraproject.org/global/fedora-bootstrap-fonts/font-awesome.css"/><link rel="stylesheet" href="https://apps.fedoraproject.org/global/fedora-bootstrap-fonts/hack.css"/>
+  <meta name="ResourceLoaderDynamicStyles" content=""/>
+  <link rel="stylesheet" href="/w/load.php?debug=false&amp;lang=en&amp;modules=site.styles&amp;only=styles&amp;skin=fedora"/>
+  <meta name="generator" content="MediaWiki 1.32.4"/>
+  <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
+  <link rel="shortcut icon" href="/favicon.ico"/>
+  <link rel="search" type="application/opensearchdescription+xml" href="/w/opensearch_desc.php" title="Fedora Project Wiki (en)"/>
+  <link rel="EditURI" type="application/rsd+xml" href="https://fedoraproject.org/w/api.php?action=rsd"/>
+  <link rel="license" href="/wiki/Legal:Main"/>
+  <link rel="alternate" type="application/atom+xml" title="Fedora Project Wiki Atom feed" href="/w/index.php?title=Special:RecentChanges&amp;feed=atom"/>
+  <!--[if lt IE 9]><script src="/w/load.php?debug=false&amp;lang=en&amp;modules=html5shiv&amp;only=scripts&amp;skin=Fedora&amp;sync=1"></script><![endif]-->
+</head>
+<body class="mediawiki ltr sitedir-ltr mw-hide-empty-elt ns-0 ns-subject page-Licensing_MPLv2_0 rootpage-Licensing skin-fedora action-view">		<div class="navbar navbar-full navbar-light masthead"><div class="container"><div class="row"><div class="col-md-4"><a href="/wiki/Fedora_Project_Wiki"><img src="/w/skins/Fedora/resources/images/fedorawiki_logo.png" alt="Fedora Project Wiki" height="40px"/></a></div><div class="col-md-4"><form action="/w/index.php" role="search" class="mw-portlet" id="p-search"><input type="hidden" value="Special:Search" name="title"/><h3><label for="searchInput">Search</label></h3><div class="input-group"><input type="search" name="search" placeholder="Search Fedora Project Wiki" title="Search Fedora Project Wiki [f]" accesskey="f" id="searchInput" class="form-control"/><span class="input-group-btn"><button id="searchGoButton" class="btn btn-secondary" type="submit"><i class="fa fa-search"></i></button></span></div></form></div><div class="col-md-4"><ul class="nav navbar-nav pull-xs-right"><li class="nav-item dropdown"><a class="nav-link dropdown-toggle" data-toggle="dropdown" href="#" role="button">Links</a><ul class="dropdown-menu dropdown-menu-right"><li id="n-Get-Fedora"><a href="https://getfedora.org/" class="dropdown-item">Get Fedora</a></li><li id="n-Fedora-Docs"><a href="https://docs.fedoraproject.org/" class="dropdown-item">Fedora Docs</a></li><li id="n-Fedora-Magazine"><a href="https://fedoramagazine.org/" class="dropdown-item">Fedora Magazine</a></li><li id="n-What-Can-I-Do.3F"><a href="https://whatcanidoforfedora.org/" class="dropdown-item">What Can I Do?</a></li></ul></li><li class="nav-item dropdown"><a class="nav-link dropdown-toggle" data-toggle="dropdown" href="#" role="button">Subprojects</a><ul class="dropdown-menu dropdown-menu-right"><li id="n-Ambassadors"><a href="/wiki/Ambassadors" class="dropdown-item">Ambassadors</a></li><li id="n-Community-Operations"><a href="/wiki/CommOps" class="dropdown-item">Community Operations</a></li><li id="n-Design"><a href="/wiki/Design" class="dropdown-item">Design</a></li><li id="n-Documentation"><a href="/wiki/DocsProject" class="dropdown-item">Documentation</a></li><li id="n-EPEL"><a href="/wiki/EPEL" class="dropdown-item">EPEL</a></li><li id="n-Infrastructure"><a href="/wiki/Infrastructure" class="dropdown-item">Infrastructure</a></li><li id="n-Internationalization"><a href="/wiki/I18N" class="dropdown-item">Internationalization</a></li><li id="n-Localization"><a href="/wiki/L10N" class="dropdown-item">Localization</a></li><li id="n-Marketing"><a href="/wiki/Marketing" class="dropdown-item">Marketing</a></li><li id="n-Magazine"><a href="/wiki/Magazine" class="dropdown-item">Magazine</a></li><li id="n-Package-Maintainers"><a href="/wiki/PackageMaintainers" class="dropdown-item">Package Maintainers</a></li><li id="n-Quality-Assurance"><a href="/wiki/QA" class="dropdown-item">Quality Assurance</a></li><li id="n-Websites"><a href="/wiki/Websites" class="dropdown-item">Websites</a></li><li id="n-All-projects"><a href="/wiki/Projects" class="dropdown-item">All projects</a></li></ul></li><a href="/w/index.php?title=Special:UserLogin&amp;returnto=Licensing%2FMPLv2.0" class="btn btn-primary m-l-2">Log In</a></ul></div></div></div></div>
+
+<div class="bodycontent">
+  <div class="sub-header p-t-1">
+    <div class="container">
+      <div class="row">
+        <div class="col-sm-6">
+          <h1>Licensing/MPLv2.0</h1>					</div>
+        <div class="col-sm-6">
+          <div class="btn-group pull-xs-right">
+            <div class="mw-indicators mw-body-content">
+            </div>
+          </div>
+        </div>
+      </div>
+
+      <ul class="nav nav-tabs nav-small m-l-0">
+        <li class="nav-item" id="ca-nstab-main" class="selected"><a href="/wiki/Licensing/MPLv2.0" title="View the content page [c]" accesskey="c" class="nav-link active">Page</a></li class="nav-item"><li class="nav-item" id="ca-talk" class="new"><a href="/w/index.php?title=Talk:Licensing/MPLv2.0&amp;action=edit&amp;redlink=1" rel="discussion" title="Discussion about the content page (page does not exist) [t]" accesskey="t" class="nav-link">Discussion</a></li class="nav-item"><li class="nav-item pull-xs-right" id="ca-view" class="selected"><a href="/wiki/Licensing/MPLv2.0" redundant="1" class="nav-link active">View</a></li class="nav-item pull-xs-right"><li class="nav-item pull-xs-right" id="ca-viewsource"><a href="/w/index.php?title=Licensing/MPLv2.0&amp;action=edit" title="This page is protected.&#10;You can view its source [e]" accesskey="e" class="nav-link">View source</a></li class="nav-item pull-xs-right"><li class="nav-item pull-xs-right" id="ca-history"><a href="/w/index.php?title=Licensing/MPLv2.0&amp;action=history" title="Past revisions of this page [h]" accesskey="h" class="nav-link">History</a></li class="nav-item pull-xs-right">
+      </ul>
+    </div>
+  </div>
+
+  <div class="mw-body container" role="main">
+    <div id="siteNotice"><div id="localNotice" lang="en" dir="ltr"><div class="mw-parser-output"></div></div></div><div id="siteSub">From Fedora Project Wiki</div>
+    <div class="mw-body-content">
+      <div id="contentSub"><p><span class="subpages">&lt; <a href="/wiki/Licensing" class="mw-redirect" title="Licensing">Licensing</a></span></p><p></p></div><div id="mw-content-text" lang="en" dir="ltr" class="mw-content-ltr"><div class="mw-parser-output"><h2><span class="mw-headline" id="License_Notes">License Notes</span></h2>
+      <p>This license is the successor to the Mozilla Public License v1.1. It is Free. By default, the MPLv2.0 is GPL Compatible, however, there are several situations where it would not be considered GPL compatible:
+      </p><p>1) If the code is available under the MPLv1.1, but not also dual or tri-licensed under the GPL and/or LGPL, then leveraging clause 6.2 in MPLv1.1 to use Covered Code under the terms of "any subsequent version of the License" permits use of that Covered Code under the MPLv2.0 terms, but it is not considered to be GPL Compatible.
+      </p><p>2) If the initial MPLv2.0 copyright holder explicitly states that the code is "Incompatible with Secondary Licenses", then they are opting out of the compatibility scheme, and the license is GPL-incompatible.
+      </p>
+      <h2><span class="mw-headline" id="License_Text">License Text</span></h2>
+      <pre>Mozilla Public License, version 2.0
+1. Definitions
+
+1.1. “Contributor”
+
+    means each individual or legal entity that creates, contributes to the creation of, or owns Covered Software.
+1.2. “Contributor Version”
+
+    means the combination of the Contributions of others (if any) used by a Contributor and that particular
+Contributor’s Contribution.
+1.3. “Contribution”
+
+    means Covered Software of a particular Contributor.
+1.4. “Covered Software”
+
+    means Source Code Form to which the initial Contributor has attached the notice in Exhibit A, the Executable
+Form of such Source Code Form, and Modifications of such Source Code Form, in each case including portions thereof.
+1.5. “Incompatible With Secondary Licenses”
+
+    means
+
+        that the initial Contributor has attached the notice described in Exhibit B to the Covered Software; or
+
+        that the Covered Software was made available under the terms of version 1.1 or earlier of the License, but
+not also under the terms of a Secondary License.
+
+1.6. “Executable Form”
+
+    means any form of the work other than Source Code Form.
+1.7. “Larger Work”
+
+    means a work that combines Covered Software with other material, in a separate file or files, that is not
+Covered Software.
+1.8. “License”
+
+    means this document.
+1.9. “Licensable”
+
+    means having the right to grant, to the maximum extent possible, whether at the time of the initial grant or
+subsequently, any and all of the rights conveyed by this License.
+1.10. “Modifications”
+
+    means any of the following:
+
+        any file in Source Code Form that results from an addition to, deletion from, or modification of the
+contents of Covered Software; or
+
+        any new file in Source Code Form that contains any Covered Software.
+
+1.11. “Patent Claims” of a Contributor
+
+    means any patent claim(s), including without limitation, method, process, and apparatus claims, in any
+patent Licensable by such Contributor that would be infringed, but for the grant of the License, by the making,
+using, selling, offering for sale, having made, import, or transfer of either its Contributions or its
+Contributor Version.
+1.12. “Secondary License”
+
+    means either the GNU General Public License, Version 2.0, the GNU Lesser General Public License, Version 2.1,
+the GNU Affero General Public License, Version 3.0, or any later versions of those licenses.
+1.13. “Source Code Form”
+
+    means the form of the work preferred for making modifications.
+1.14. “You” (or “Your”)
+
+    means an individual or a legal entity exercising rights under this License. For legal entities, “You”
+includes any entity that controls, is controlled by, or is under common control with You. For purposes of this
+definition, “control” means (a) the power, direct or indirect, to cause the direction or management of such entity,
+whether by contract or otherwise, or (b) ownership of more than fifty percent (50%) of the outstanding shares or
+beneficial ownership of such entity.
+
+2. License Grants and Conditions
+2.1. Grants
+
+Each Contributor hereby grants You a world-wide, royalty-free, non-exclusive license:
+
+    under intellectual property rights (other than patent or trademark) Licensable by such Contributor to use,
+reproduce, make available, modify, display, perform, distribute, and otherwise exploit its Contributions, either on
+an unmodified basis, with Modifications, or as part of a Larger Work; and
+
+    under Patent Claims of such Contributor to make, use, sell, offer for sale, have made, import, and otherwise
+transfer either its Contributions or its Contributor Version.
+
+2.2. Effective Date
+
+The licenses granted in Section 2.1 with respect to any Contribution become effective for each Contribution on the
+date the Contributor first distributes such Contribution.
+2.3. Limitations on Grant Scope
+
+The licenses granted in this Section 2 are the only rights granted under this License. No additional rights or
+licenses will be implied from the distribution or licensing of Covered Software under this License. Notwithstanding
+Section 2.1(b) above, no patent license is granted by a Contributor:
+
+    for any code that a Contributor has removed from Covered Software; or
+
+    for infringements caused by: (i) Your and any other third party’s modifications of Covered Software, or (ii) the
+combination of its Contributions with other software (except as part of its Contributor Version); or
+
+    under Patent Claims infringed by Covered Software in the absence of its Contributions.
+
+This License does not grant any rights in the trademarks, service marks, or logos of any Contributor (except as may
+be necessary to comply with the notice requirements in Section 3.4).
+2.4. Subsequent Licenses
+
+No Contributor makes additional grants as a result of Your choice to distribute the Covered Software under a
+subsequent version of this License (see Section 10.2) or under the terms of a Secondary License (if permitted under
+the terms of Section 3.3).
+2.5. Representation
+
+Each Contributor represents that the Contributor believes its Contributions are its original creation(s) or it has
+sufficient rights to grant the rights to its Contributions conveyed by this License.
+2.6. Fair Use
+
+This License is not intended to limit any rights You have under applicable copyright doctrines of fair use, fair
+dealing, or other equivalents.
+2.7. Conditions
+
+Sections 3.1, 3.2, 3.3, and 3.4 are conditions of the licenses granted in Section 2.1.
+3. Responsibilities
+3.1. Distribution of Source Form
+
+All distribution of Covered Software in Source Code Form, including any Modifications that You create or to which
+You contribute, must be under the terms of this License. You must inform recipients that the Source Code Form of the
+Covered Software is governed by the terms of this License, and how they can obtain a copy of this License. You may
+not attempt to alter or restrict the recipients’ rights in the Source Code Form.
+3.2. Distribution of Executable Form
+
+If You distribute Covered Software in Executable Form then:
+
+    such Covered Software must also be made available in Source Code Form, as described in Section 3.1, and You must
+inform recipients of the Executable Form how they can obtain a copy of such Source Code Form by reasonable means in
+a timely manner, at a charge no more than the cost of distribution to the recipient; and
+
+    You may distribute such Executable Form under the terms of this License, or sublicense it under different terms,
+provided that the license for the Executable Form does not attempt to limit or alter the recipients’ rights in the
+Source Code Form under this License.
+
+3.3. Distribution of a Larger Work
+
+You may create and distribute a Larger Work under terms of Your choice, provided that You also comply with the
+requirements of this License for the Covered Software. If the Larger Work is a combination of Covered Software with
+a work governed by one or more Secondary Licenses, and the Covered Software is not Incompatible With Secondary
+Licenses, this License permits You to additionally distribute such Covered Software under the terms of such
+Secondary License(s), so that the recipient of the Larger Work may, at their option, further distribute the Covered
+Software under the terms of either this License or such Secondary License(s).
+3.4. Notices
+
+You may not remove or alter the substance of any license notices (including copyright notices, patent notices,
+disclaimers of warranty, or limitations of liability) contained within the Source Code Form of the Covered
+Software, except that You may alter any license notices to the extent required to remedy known factual
+inaccuracies.
+3.5. Application of Additional Terms
+
+You may choose to offer, and to charge a fee for, warranty, support, indemnity or liability obligations to one or
+more recipients of Covered Software. However, You may do so only on Your own behalf, and not on behalf of any
+Contributor. You must make it absolutely clear that any such warranty, support, indemnity, or liability obligation
+is offered by You alone, and You hereby agree to indemnify every Contributor for any liability incurred by such
+Contributor as a result of warranty, support, indemnity or liability terms You offer. You may include additional
+disclaimers of warranty and limitations of liability specific to any jurisdiction.
+4. Inability to Comply Due to Statute or Regulation
+
+If it is impossible for You to comply with any of the terms of this License with respect to some or all of the
+Covered Software due to statute, judicial order, or regulation then You must: (a) comply with the terms of this
+License to the maximum extent possible; and (b) describe the limitations and the code they affect. Such
+description must be placed in a text file included with all distributions of the Covered Software under this
+License. Except to the extent prohibited by statute or regulation, such description must be sufficiently detailed
+for a recipient of ordinary skill to be able to understand it.
+5. Termination
+
+5.1. The rights granted under this License will terminate automatically if You fail to comply with any of its
+terms. However, if You become compliant, then the rights granted under this License from a particular Contributor
+are reinstated (a) provisionally, unless and until such Contributor explicitly and finally terminates Your grants,
+and (b) on an ongoing basis, if such Contributor fails to notify You of the non-compliance by some reasonable
+means prior to 60 days after You have come back into compliance. Moreover, Your grants from a particular
+Contributor are reinstated on an ongoing basis if such Contributor notifies You of the non-compliance by some
+reasonable means, this is the first time You have received notice of non-compliance with this License from such
+Contributor, and You become compliant prior to 30 days after Your receipt of the notice.
+
+5.2. If You initiate litigation against any entity by asserting a patent infringement claim (excluding
+declaratory judgment actions, counter-claims, and cross-claims) alleging that a Contributor Version directly or
+indirectly infringes any patent, then the rights granted to You by any and all Contributors for the Covered
+Software under Section 2.1 of this License shall terminate.
+
+5.3. In the event of termination under Sections 5.1 or 5.2 above, all end user license agreements (excluding
+distributors and resellers) which have been validly granted by You or Your distributors under this License prior
+to termination shall survive termination.
+6. Disclaimer of Warranty
+
+Covered Software is provided under this License on an “as is” basis, without warranty of any kind, either
+expressed, implied, or statutory, including, without limitation, warranties that the Covered Software is free of
+defects, merchantable, fit for a particular purpose or non-infringing. The entire risk as to the quality and
+performance of the Covered Software is with You. Should any Covered Software prove defective in any respect, You
+(not any Contributor) assume the cost of any necessary servicing, repair, or correction. This disclaimer of
+warranty constitutes an essential part of this License. No use of any Covered Software is authorized under this
+License except under this disclaimer.
+7. Limitation of Liability
+
+Under no circumstances and under no legal theory, whether tort (including negligence), contract, or otherwise,
+shall any Contributor, or anyone who distributes Covered Software as permitted above, be liable to You for any
+direct, indirect, special, incidental, or consequential damages of any character including, without limitation,
+damages for lost profits, loss of goodwill, work stoppage, computer failure or malfunction, or any and all other
+commercial damages or losses, even if such party shall have been informed of the possibility of such damages.
+This limitation of liability shall not apply to liability for death or personal injury resulting from such
+party’s negligence to the extent applicable law prohibits such limitation. Some jurisdictions do not allow the
+exclusion or limitation of incidental or consequential damages, so this exclusion and limitation may not apply
+to You.
+8. Litigation
+
+Any litigation relating to this License may be brought only in the courts of a jurisdiction where the defendant
+maintains its principal place of business and such litigation shall be governed by laws of that jurisdiction,
+without reference to its conflict-of-law provisions. Nothing in this Section shall prevent a party’s ability to
+bring cross-claims or counter-claims.
+9. Miscellaneous
+
+This License represents the complete agreement concerning the subject matter hereof. If any provision of this
+License is held to be unenforceable, such provision shall be reformed only to the extent necessary to make it
+enforceable. Any law or regulation which provides that the language of a contract shall be construed against
+the drafter shall not be used to construe this License against a Contributor.
+10. Versions of the License
+10.1. New Versions
+
+Mozilla Foundation is the license steward. Except as provided in Section 10.3, no one other than the license
+steward has the right to modify or publish new versions of this License. Each version will be given a
+distinguishing version number.
+10.2. Effect of New Versions
+
+You may distribute the Covered Software under the terms of the version of the License under which You
+originally received the Covered Software, or under the terms of any subsequent version published by the
+license steward.
+10.3. Modified Versions
+
+If you create software not governed by this License, and you want to create a new license for such software,
+you may create and use a modified version of this License if you rename the license and remove any references
+to the name of the license steward (except to note that such modified license differs from this License).
+10.4. Distributing Source Code Form that is Incompatible With Secondary Licenses
+
+If You choose to distribute Source Code Form that is Incompatible With Secondary Licenses under the terms of
+this version of the License, the notice described in Exhibit B of this License must be attached.
+Exhibit A - Source Code Form License Notice
+
+    This Source Code Form is subject to the terms of the Mozilla Public License, v. 2.0. If a copy of the
+MPL was not distributed with this file, You can obtain one at http://mozilla.org/MPL/2.0/.
+
+If it is not possible or desirable to put the notice in a particular file, then You may include the notice in
+a location (such as a LICENSE file in a relevant directory) where a recipient would be likely to look for
+such a notice.
+
+You may add additional accurate notices of copyright ownership.
+Exhibit B - “Incompatible With Secondary Licenses” Notice
+
+    This Source Code Form is “Incompatible With Secondary Licenses”, as defined by the Mozilla Public
+License, v. 2.0.
+</pre>
+
+      <!--
+      NewPP limit report
+      Cached time: 20200312130929
+      Cache expiry: 86400
+      Dynamic content: false
+      CPU time usage: 0.017 seconds
+      Real time usage: 0.022 seconds
+      Preprocessor visited node count: 9/1000000
+      Preprocessor generated node count: 32/1000000
+      Post‐expand include size: 0/2097152 bytes
+      Template argument size: 0/2097152 bytes
+      Highest expansion depth: 2/40
+      Expensive parser function count: 0/100
+      Unstrip recursion depth: 0/20
+      Unstrip post‐expand size: 15085/5000000 bytes
+      -->
+      <!--
+      Transclusion expansion time report (%,ms,calls,template)
+      100.00%    0.000      1 -total
+      -->
+
+      <!-- Saved in parser cache with key fpo-mediawiki-en_:pcache:idhash:44415-0!canonical and timestamp 20200312130929 and revision id 271014
+       -->
+    </div></div><div class="visualClear"></div><div class="printfooter">Retrieved from "<a dir="ltr" href="https://fedoraproject.org/w/index.php?title=Licensing/MPLv2.0&amp;oldid=271014">https://fedoraproject.org/w/index.php?title=Licensing/MPLv2.0&amp;oldid=271014</a>"</div><div id="catlinks" class="catlinks catlinks-allhidden" data-mw="interface"></div>				</div>
+  </div>
+
+  <div id="mw-footer" class="footer text-muted text-xs-center m-t-3 p-y-3">
+    <p class="copy">
+      Copyright &copy; 2020 Red Hat, Inc. and others.  All Rights Reserved.  For comments or queries, please <a href="/wiki/Communicating_and_getting_help">contact us</a>.
+    </p>
+    <p class="disclaimer">
+      The Fedora Project is maintained and driven by the community and sponsored by Red Hat.  This is a community maintained site.  Red Hat is not responsible for content.
+    </p>
+    <ul id="footer-info" role="contentinfo"><li id="footer-info-lastmod"> This page was last edited on 13 February 2012, at 16:19.</li><li id="footer-info-copyright">Content is available under <a href="/wiki/Legal:Main" title="Legal:Main">Attribution-Share Alike 3.0 Unported</a> unless otherwise noted.</li></ul><ul id="footer-places" role="contentinfo"><li id="footer-places-privacy"><a href="/wiki/Fedora_Project_Wiki:Privacy_policy" class="mw-redirect" title="Fedora Project Wiki:Privacy policy">Privacy policy</a></li><li id="footer-places-about"><a href="/wiki/Fedora_Project_Wiki:About" class="mw-redirect" title="Fedora Project Wiki:About">About Fedora Project Wiki</a></li><li id="footer-places-disclaimer"><a href="/wiki/Fedora_Project_Wiki:General_disclaimer" class="mw-redirect" title="Fedora Project Wiki:General disclaimer">Disclaimers</a></li><li><a href='https://docs.fedoraproject.org/fedora-project/project/code-of-conduct.html'>Code of Conduct</a></li><li><a href='http://fedoraproject.org/en/sponsors'>Sponsors</a></li><li><a href='http://fedoraproject.org/wiki/Legal:Main'>Legal</a></li><li><a href='http://fedoraproject.org/wiki/Legal:Trademark_guidelines'>Trademark Guidelines</a></li></ul><div class="visualClear"></div>
+  </div>
+</div>
+
+
+<script>(window.RLQ=window.RLQ||[]).push(function(){mw.config.set({"wgPageParseReport":{"limitreport":{"cputime":"0.017","walltime":"0.022","ppvisitednodes":{"value":9,"limit":1000000},"ppgeneratednodes":{"value":32,"limit":1000000},"postexpandincludesize":{"value":0,"limit":2097152},"templateargumentsize":{"value":0,"limit":2097152},"expansiondepth":{"value":2,"limit":40},"expensivefunctioncount":{"value":0,"limit":100},"unstrip-depth":{"value":0,"limit":20},"unstrip-size":{"value":15085,"limit":5000000},"timingprofile":["100.00%    0.000      1 -total"]},"cachereport":{"timestamp":"20200312130929","ttl":86400,"transientcontent":false}}});mw.config.set({"wgBackendResponseTime":335});});</script>		</body>
+</html>
\ No newline at end of file
diff --git a/wildfly/docs/licenses/wildfly-ee-feature-pack-licenses.html b/wildfly/docs/licenses/wildfly-ee-feature-pack-licenses.html
new file mode 100644
index 0000000..0502658
--- /dev/null
+++ b/wildfly/docs/licenses/wildfly-ee-feature-pack-licenses.html
@@ -0,0 +1,4640 @@
+<html>
+    <head>
+        <META http-equiv="Content-Type" content="text/html; charset=utf-8">
+        <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
+        <link rel="stylesheet" type="text/css" href="licenses.css">
+    </head>
+    <body>
+        <h2>WildFly EE </h2>
+        <p>The following material has been provided for informational purposes only, and should not be relied upon or construed as a legal opinion or legal advice.</p>
+        <table>
+            <tr>
+                <th>Package Group</th><th>Package Artifact</th><th>Package Version</th><th>Remote Licenses</th><th>Local Licenses</th>
+            </tr>
+            <tr>
+                <td>com.carrotsearch</td><td>hppc</td><td>0.8.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml</td><td>classmate</td><td>1.5.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.core</td><td>jackson-annotations</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.core</td><td>jackson-core</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.core</td><td>jackson-databind</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.dataformat</td><td>jackson-dataformat-yaml</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.datatype</td><td>jackson-datatype-jdk8</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.datatype</td><td>jackson-datatype-jsr310</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.jakarta.rs</td><td>jackson-jakarta-rs-base</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.jakarta.rs</td><td>jackson-jakarta-rs-json-provider</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.module</td><td>jackson-module-jakarta-xmlbind-annotations</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.fasterxml.woodstox</td><td>woodstox-core</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.ben-manes.caffeine</td><td>caffeine</td><td>3.1.8</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>btf</td><td>1.2</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>jackson-coreutils</td><td>1.8</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>json-patch</td><td>1.9</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.fge</td><td>msg-simple</td><td>1.1</td><td><a href="https://spdx.org/licenses/LGPL-3.0+.html">GNU Lesser General Public License v3.0 or later</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 or later.txt">gnu lesser general public license v3.0 or later.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.code.gson</td><td>gson</td><td>2.8.9</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.guava</td><td>failureaccess</td><td>1.0.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.guava</td><td>guava</td><td>33.0.0-jre</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.googlecode.javaewah</td><td>JavaEWAH</td><td>1.2.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.h2database</td><td>h2</td><td>2.2.224</td><td><a href="https://fedoraproject.org/wiki/Licensing/MPLv2.0">Mozilla Public License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="mozilla public license 2.0.html">mozilla public license 2.0.html</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.ibm.async</td><td>asyncutil</td><td>0.1.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.microsoft.azure</td><td>azure-storage</td><td>8.6.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.nimbusds</td><td>nimbus-jose-jwt</td><td>9.37.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.squareup</td><td>protoparser</td><td>4.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.istack</td><td>istack-commons-runtime</td><td>4.1.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.istack</td><td>istack-commons-tools</td><td>4.1.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.bind.external</td><td>relaxng-datatype</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.bind.external</td><td>rngom</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.fastinfoset</td><td>FastInfoset</td><td>2.1.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.sun.xml.messaging.saaj</td><td>saaj-impl</td><td>3.0.0</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-beanutils</td><td>commons-beanutils</td><td>1.9.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-cli</td><td>commons-cli</td><td>1.9.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-codec</td><td>commons-codec</td><td>1.17.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-collections</td><td>commons-collections</td><td>3.2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-daemon</td><td>commons-daemon</td><td>Not Installed</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>commons-io</td><td>commons-io</td><td>2.16.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>de.dentrassi.crypto</td><td>pem-keystore</td><td>2.4.0</td><td><a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>gnu.getopt</td><td>java-getopt</td><td>1.0.13</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.0-standalone.html">GNU Library General Public License v2 only</a>
+                    <br>
+                </td><td><a href="gnu library general public license v2 only.txt">gnu library general public license v2 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.agroal</td><td>agroal-api</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.agroal</td><td>agroal-narayana</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.agroal</td><td>agroal-pool</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-buffer</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-dns</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-http</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-socks</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-common</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-handler</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-handler-proxy</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-resolver</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-resolver-dns</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-classes-epoll</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-classes-kqueue</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-native-epoll</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-native-kqueue</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-transport-native-unix-common</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.reactivex.rxjava2</td><td>rxjava</td><td>2.2.21</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.reactivex.rxjava3</td><td>rxjava</td><td>3.1.9</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>jandex</td><td>3.2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow.jastow</td><td>jastow</td><td>2.2.8.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow</td><td>undertow-core</td><td>2.3.17.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow</td><td>undertow-servlet</td><td>2.3.17.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.undertow</td><td>undertow-websockets-jsr</td><td>2.3.17.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.activation</td><td>jakarta.activation-api</td><td>2.1.3</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.annotation</td><td>jakarta.annotation-api</td><td>2.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.authentication</td><td>jakarta.authentication-api</td><td>3.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.authorization</td><td>jakarta.authorization-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.batch</td><td>jakarta.batch-api</td><td>2.1.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.ejb</td><td>jakarta.ejb-api</td><td>4.0.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.enterprise.concurrent</td><td>jakarta.enterprise.concurrent-api</td><td>3.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.enterprise</td><td>jakarta.enterprise.cdi-api</td><td>4.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.enterprise</td><td>jakarta.enterprise.lang-model</td><td>4.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.inject</td><td>jakarta.inject-api</td><td>2.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.interceptor</td><td>jakarta.interceptor-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.jms</td><td>jakarta.jms-api</td><td>3.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.json.bind</td><td>jakarta.json.bind-api</td><td>3.0.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.json</td><td>jakarta.json-api</td><td>2.1.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.mail</td><td>jakarta.mail-api</td><td>2.1.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.persistence</td><td>jakarta.persistence-api</td><td>3.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.resource</td><td>jakarta.resource-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.security.enterprise</td><td>jakarta.security.enterprise-api</td><td>3.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.servlet</td><td>jakarta.servlet-api</td><td>6.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.servlet.jsp</td><td>jakarta.servlet.jsp-api</td><td>3.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.servlet.jsp.jstl</td><td>jakarta.servlet.jsp.jstl-api</td><td>3.0.2</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.transaction</td><td>jakarta.transaction-api</td><td>2.0.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.validation</td><td>jakarta.validation-api</td><td>3.0.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.websocket</td><td>jakarta.websocket-api</td><td>2.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.websocket</td><td>jakarta.websocket-client-api</td><td>2.1.1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.ws.rs</td><td>jakarta.ws.rs-api</td><td>3.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.xml.bind</td><td>jakarta.xml.bind-api</td><td>4.0.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jboss.jaxbintros</td><td>jboss-jaxb-intros</td><td>2.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>joda-time</td><td>joda-time</td><td>2.12.7</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>net.bytebuddy</td><td>byte-buddy</td><td>1.14.18</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>net.jcip</td><td>jcip-annotations</td><td>1.0</td><td><a href="https://creativecommons.org/licenses/by/2.5/legalcode">Creative Commons Attribution 2.5</a>
+                    <br>
+                </td><td><a href="creative commons attribution 2.5.html">creative commons attribution 2.5.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>net.shibboleth.utilities</td><td>java-support</td><td>8.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.aesh</td><td>aesh</td><td>2.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.aesh</td><td>aesh-extensions</td><td>1.8</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.aesh</td><td>readline</td><td>2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.antlr</td><td>antlr4</td><td>4.13.0</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.antlr</td><td>antlr4-runtime</td><td>4.13.0</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>activemq-artemis-native</td><td>2.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-amqp-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-cli</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-commons</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-core-client</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-dto</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-hornetq-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-hqclient-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-client</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-ra</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-server</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jakarta-service-extensions</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-jdbc-store</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-journal</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-selector</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-server</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.activemq</td><td>artemis-stomp-protocol</td><td>2.37.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.commons</td><td>commons-lang3</td><td>3.15.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-bindings-coloc</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-bindings-soap</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-bindings-xml</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-databinding-aegis</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-databinding-jaxb</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-features-clustering</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-features-logging</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-features-throttling</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-frontend-jaxws</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-frontend-simple</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-management</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-security</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-security-saml</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-http</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-http-hc</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-jms</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-transports-local</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-addr</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-wsdl</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-mex</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-policy</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-rm</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-rt-ws-security</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-common</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-java2ws</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-validator</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-wsdlto-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-wsdlto-databinding-jaxb</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf</td><td>cxf-tools-wsdlto-frontend-jaxws</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.services.sts</td><td>cxf-services-sts-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.services.ws-discovery</td><td>cxf-services-ws-discovery-api</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-boolean</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-bug986</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-dv</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjcplugins</td><td>cxf-xjc-ts</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.cxf.xjc-utils</td><td>cxf-xjc-runtime</td><td>4.0.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpasyncclient</td><td>4.1.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpclient</td><td>4.5.14</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpcore</td><td>4.4.16</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpcore-nio</td><td>4.4.16</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.httpcomponents</td><td>httpmime</td><td>4.5.14</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.james</td><td>apache-mime4j-core</td><td>0.8.11</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.james</td><td>apache-mime4j-dom</td><td>0.8.11</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.james</td><td>apache-mime4j-storage</td><td>0.8.11</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.logging.log4j</td><td>log4j-api</td><td>2.23.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-analysis-common</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-core</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-facet</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-join</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-queries</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.lucene</td><td>lucene-queryparser</td><td>9.11.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.neethi</td><td>neethi</td><td>3.2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.qpid</td><td>proton-j</td><td>0.34.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.santuario</td><td>xmlsec</td><td>3.0.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.sshd</td><td>sshd-common</td><td>2.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.sshd</td><td>sshd-core</td><td>2.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.velocity</td><td>velocity-engine-core</td><td>2.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.ws.xmlschema</td><td>xmlschema-core</td><td>2.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-bindings</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-policy</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-common</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-dom</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-policy-stax</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.wss4j</td><td>wss4j-ws-security-stax</td><td>3.0.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bitbucket.b_c</td><td>jose4j</td><td>0.9.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcjmail-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcpg-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcpkix-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcprov-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.bouncycastle</td><td>bcutil-jdk18on</td><td>1.78.1</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.codehaus.woodstox</td><td>stax2-api</td><td>4.2.2</td><td><a href="https://opensource.org/license/BSD-2-Clause/">BSD 2-clause "Simplified" License</a>
+                    <br>
+                </td><td><a href="bsd 2-clause simplified license.html">bsd 2-clause simplified license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.cryptacular</td><td>cryptacular</td><td>1.2.5</td><td><a href="https://www.gnu.org/licenses/lgpl-3.0-standalone.html">GNU Lesser General Public License v3.0 only</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v3.0 only.txt">gnu lesser general public license v3.0 only.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.angus</td><td>angus-activation</td><td>2.0.2</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.angus</td><td>angus-mail</td><td>2.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.jdt</td><td>ecj</td><td>3.32.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.jgit</td><td>org.eclipse.jgit</td><td>6.10.0.202406032230-r</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.jgit</td><td>org.eclipse.jgit.ssh.apache</td><td>6.10.0.202406032230-r</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.parsson</td><td>parsson</td><td>1.1.7</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse</td><td>yasson</td><td>3.0.2</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.elasticsearch.client</td><td>elasticsearch-rest-client</td><td>8.15.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.elasticsearch.client</td><td>elasticsearch-rest-client-sniffer</td><td>8.15.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.fusesource.jansi</td><td>jansi</td><td>1.18</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.expressly</td><td>expressly</td><td>5.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish</td><td>jakarta.enterprise.concurrent</td><td>3.0.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish</td><td>jakarta.faces</td><td>4.0.7</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish</td><td>jakarta.json</td><td>1.1.6</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>codemodel</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-core</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-jxc</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-runtime</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>jaxb-xjc</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>txw2</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.jaxb</td><td>xsom</td><td>4.0.5</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.soteria</td><td>jakarta.security.enterprise</td><td>3.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.soteria</td><td>soteria.spi.bean.decorator.weld</td><td>3.0.3</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.glassfish.web</td><td>jakarta.servlet.jsp.jstl</td><td>3.0.1-jbossorg-1</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.common</td><td>hibernate-commons-annotations</td><td>7.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.orm</td><td>hibernate-core</td><td>6.6.1.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.orm</td><td>hibernate-envers</td><td>6.6.1.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-backend-elasticsearch</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-backend-lucene</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-engine</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-mapper-orm</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-mapper-pojo-base</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.search</td><td>hibernate-search-util-common</td><td>7.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.validator</td><td>hibernate-validator</td><td>8.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hibernate.validator</td><td>hibernate-validator-cdi</td><td>8.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hornetq</td><td>hornetq-commons</td><td>2.4.9.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hornetq</td><td>hornetq-core-client</td><td>2.4.9.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.hornetq</td><td>hornetq-jakarta-client</td><td>2.4.9.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cachestore-jdbc-common-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cachestore-jdbc-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cachestore-remote</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cdi-common-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cdi-embedded-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-cdi-remote-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-client-hotrod-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-clustered-counter</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-clustered-lock</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-commons-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-core-jakarta</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-hibernate-cache-commons</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-hibernate-cache-spi</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-hibernate-cache-v62</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-objectfilter</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-query</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-query-core</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-query-dsl</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan</td><td>infinispan-remote-query-client</td><td>14.0.31.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan.protostream</td><td>protostream</td><td>4.6.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.infinispan.protostream</td><td>protostream-types</td><td>4.6.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jasypt</td><td>jasypt</td><td>1.9.3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jberet</td><td>jberet-core</td><td>3.0.0.Final</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.activemq.artemis.integration</td><td>artemis-wildfly-integration</td><td>2.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.classfilewriter</td><td>jboss-classfilewriter</td><td>1.3.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.common</td><td>jboss-common-beans</td><td>2.0.1.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ejb3</td><td>jboss-ejb3-ext-api</td><td>2.4.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.genericjms</td><td>generic-jms-ra-jar</td><td>3.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.hal</td><td>hal-console</td><td>3.7.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.invocation</td><td>jboss-invocation</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-common-api</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-common-impl</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-common-spi</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-core-api</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-core-impl</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-deployers-common</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-jdbc</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ironjacamar</td><td>ironjacamar-validator</td><td>3.0.10.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-dmr</td><td>1.7.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-ejb-client</td><td>5.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-iiop-client</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-transaction-spi</td><td>8.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>jboss-vfs</td><td>3.3.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logging</td><td>commons-logging-jboss-logging</td><td>1.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logging</td><td>jboss-logging</td><td>3.6.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logging</td><td>jul-to-slf4j-stub</td><td>1.0.1.Final</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logmanager</td><td>jboss-logmanager</td><td>2.1.19.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.logmanager</td><td>log4j2-jboss-logmanager</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.marshalling</td><td>jboss-marshalling</td><td>2.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.marshalling</td><td>jboss-marshalling-river</td><td>2.2.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-appclient</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-common</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-ear</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-ejb</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.metadata</td><td>jboss-metadata-web</td><td>16.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.mod_cluster</td><td>mod_cluster-container-spi</td><td>2.0.4.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.mod_cluster</td><td>mod_cluster-core</td><td>2.0.4.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.mod_cluster</td><td>mod_cluster-load-spi</td><td>2.0.4.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.modules</td><td>jboss-modules</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://enterprise.dejacode.com/licenses/public/indiana-extreme/?_list_filters=q%3Dindiana%2Bextreme#license-text">Indiana University Extreme! Lab Software License 1.1.1</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="indiana university extreme lab software license 1.1.1.html">indiana university extreme lab software license 1.1.1.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.msc</td><td>jboss-msc</td><td>1.5.5.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana</td><td>jbosstxbridge</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.jts</td><td>narayana-jts-idlj</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.jts</td><td>narayana-jts-integration</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-api</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-bridge</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-integration</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>restat-util</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.xts</td><td>jbossxts</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.openjdk-orb</td><td>openjdk-orb</td><td>10.1.0.Final</td><td><a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.remoting</td><td>jboss-remoting</td><td>5.0.29.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.remotingjmx</td><td>remoting-jmx</td><td>3.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-atom-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-cdi</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-client</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-client-api</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-core</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-core-spi</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-crypto</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-jackson2-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-jaxb-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-jsapi</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-json-binding-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-json-p-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-multipart-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-rxjava2</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-tracing-api</td><td>2.0.1.Final</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy</td><td>resteasy-validator-provider</td><td>6.2.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.spring</td><td>resteasy-spring</td><td>3.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.slf4j</td><td>slf4j-jboss-logmanager</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.spec.jakarta.el</td><td>jboss-el-api_5.0_spec</td><td>4.0.1.Final</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                    <a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html">GNU Lesser General Public License v2.1 or later</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                    <a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="gnu lesser general public license v2.1 or later.txt">gnu lesser general public license v2.1 or later.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.spec.jakarta.xml.soap</td><td>jboss-saaj-api_3.0_spec</td><td>1.0.0.Final</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.spec.jakarta.xml.ws</td><td>jboss-jakarta-xml-ws-api_4.0_spec</td><td>1.0.0.Final</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss</td><td>staxmapper</td><td>1.5.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.stdio</td><td>jboss-stdio</td><td>1.1.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.threads</td><td>jboss-threads</td><td>2.4.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-ejb</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-jsf</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-jta</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld.module</td><td>weld-web</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-api</td><td>5.0.SP3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-core-impl</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-lite-extension-translator</td><td>5.1.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.weld</td><td>weld-spi</td><td>5.0.SP3</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-client</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-factories</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-resources</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-server</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-transports-udp</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.cxf</td><td>jbossws-cxf-transports-undertow</td><td>7.2.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-api</td><td>3.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-common</td><td>5.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-common-tools</td><td>2.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws</td><td>jbossws-spi</td><td>5.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.ws.projects</td><td>jaxws-undertow-httpspi</td><td>2.0.0.Final</td><td><a href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html">GNU Lesser General Public License v2.1 only</a>
+                    <br>
+                </td><td><a href="gnu lesser general public license v2.1 only.txt">gnu lesser general public license v2.1 only.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.xnio.netty</td><td>netty-xnio-transport</td><td>0.1.10.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.xnio</td><td>xnio-api</td><td>3.8.16.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.xnio</td><td>xnio-nio</td><td>3.8.16.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jctools</td><td>jctools-core</td><td>4.0.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups.aws</td><td>jgroups-aws</td><td>3.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups.azure</td><td>jgroups-azure</td><td>2.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups</td><td>jgroups</td><td>5.2.28.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jgroups.kubernetes</td><td>jgroups-kubernetes</td><td>2.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jvnet.staxex</td><td>stax-ex</td><td>2.1.0</td><td><a href="https://repository.jboss.org/licenses/edl-1.0.txt">Eclipse Distribution License, Version 1.0</a>
+                    <br>
+                </td><td><a href="eclipse distribution license, version 1.0.txt">eclipse distribution license, version 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-core</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-profile-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-saml-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-saml-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-security-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-security-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-soap-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-saml-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xacml-saml-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xmlsec-api</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.opensaml</td><td>opensaml-xmlsec-impl</td><td>4.3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.ow2.asm</td><td>asm</td><td>9.7</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.ow2.asm</td><td>asm-util</td><td>9.7</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.projectodd.vdx</td><td>vdx-core</td><td>1.1.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.projectodd.vdx</td><td>vdx-wildfly</td><td>1.1.6</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.reactivestreams</td><td>reactive-streams</td><td>1.0.4</td><td><a href="https://spdx.org/licenses/MIT-0.html">MIT-0</a>
+                    <br>
+                </td><td><a href="mit-0.html">mit-0.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.slf4j</td><td>slf4j-api</td><td>2.0.13</td><td><a href="https://www.opensource.org/licenses/MIT">MIT License</a>
+                    <br>
+                </td><td><a href="mit license.txt">mit license.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.client</td><td>wildfly-client-config</td><td>1.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-infinispan-common</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-infinispan-embedded</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-infinispan-remote</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-cache-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-context</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-marshalling-jboss</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-marshalling-protostream</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-marshalling-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-api</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-infinispan</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-jgroups</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-local</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-server-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-cache</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-infinispan-embedded</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-infinispan-remote</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-spec-servlet-6.0</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-spec-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.clustering</td><td>wildfly-clustering-session-spi</td><td>1.1.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.common</td><td>wildfly-common</td><td>1.7.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-cli</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-controller-client</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-core-management-client</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-core-management-subsystem</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-core-security</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-deployment-repository</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-deployment-scanner</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-discovery</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-domain-http-error-context</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-domain-http-interface</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-domain-management</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-elytron-integration</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-elytron-tool-wrapper</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-embedded</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-event-logger</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-host-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-installation-manager</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-io</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-io-spi</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-jar-runtime</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-jmx</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-launcher</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-logging</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-management-client-content</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-network</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-patching</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-platform-mbean</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-process-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-protocol</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-remoting</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-request-controller</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-security-manager</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-server</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-service</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-subsystem</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-threads</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.core</td><td>wildfly-version</td><td>26.0.0.Beta5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.discovery</td><td>wildfly-discovery-client</td><td>1.3.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.installation-manager</td><td>installation-manager-api</td><td>1.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-eclipselink</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-hibernate6</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-hibernatesearch</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>jipijapa-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-java</td><td>2.2.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-linux-s390x</td><td>2.2.2.SP01</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-linux-x86_64</td><td>2.2.2.SP01</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-macosx-x86_64</td><td>2.2.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.openssl</td><td>wildfly-openssl-windows-x86_64</td><td>2.2.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.elytron-web</td><td>undertow-server</td><td>4.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.elytron-web</td><td>undertow-server-servlet</td><td>4.1.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-authentication</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-authorization</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-client-resteasy</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-client-webservices</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.jakarta</td><td>jakarta-security</td><td>3.0.3.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-asn1</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-audit</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server-deprecated</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server-http</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-server-sasl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-auth-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-base</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-client</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-credential</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-credential-source-impl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-credential-store</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-dynamic-ssl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-encryption</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-basic</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-bearer</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-cert</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-external</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-form</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-oidc</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-spnego</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-sso</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-stateful-basic</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-http-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-jose-jwk</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-jose-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-json-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-keystore</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-gssapi</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-http</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-oauth2</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-mechanism-scram</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-password-impl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-permission</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-provider-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm-jdbc</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm-ldap</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-realm-token</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-anonymous</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-auth-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-digest</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-entity</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-external</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-gs2</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-gssapi</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-localuser</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-oauth2</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-otp</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-plain</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-sasl-scram</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-security-manager</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-security-manager-action</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-ssh-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-ssl</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-tool</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-cert</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-cert-acme</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-cert-util</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security</td><td>wildfly-elytron-x500-principal</td><td>2.6.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.transaction</td><td>wildfly-transaction-client</td><td>3.0.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.unstable.api.annotation</td><td>unstable-api-annotation-classpath-indexer</td><td>1.0.0.Final</td><td>Public Domain
+                    <br>
+                </td><td><a href="public domain.txt">public domain.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-appclient</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-batch-jberet</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-bean-validation</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-client-all</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-cache</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-client</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-infinispan</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-ejb-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-el-expressly</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-faces-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-faces-mojarra</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-client-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-client-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-embedded-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-infinispan-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-jgroups-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-jgroups-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-jgroups-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-marshalling-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-marshalling-jboss</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-marshalling-protostream</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-server-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-server-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-server-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-compat</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-singleton-server</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-container</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-service</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-web-undertow</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-weld-core</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-weld-ejb</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-clustering-weld-web</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-connector</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-datasources-agroal</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ee</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ee-feature-pack-product-conf</td><td>Not Installed</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ee-security</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-ejb3</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-elytron-oidc-client-subsystem</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-health</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-client-common</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-ejb-client</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-naming-client</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.wildfly-http-client</td><td>wildfly-http-transaction-client</td><td>2.0.7.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-iiop-openjdk</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jaxrs</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jdr</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jpa</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jsf</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jsf-injection</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-jsr77</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-keycloak</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-mail</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-messaging-activemq-injection</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-messaging-activemq-subsystem</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-metrics</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-mod_cluster-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-mod_cluster-undertow</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-naming</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-naming-client</td><td>2.0.1.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-picketlink</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-pojo</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-rts</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-sar</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-security</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-system-jmx</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-transactions</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-undertow</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-web-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-webservices-opensaml-sysconfig</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-webservices-server-integration</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-bean-validation</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-ejb</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-jpa</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-spi</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-transactions</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-weld-webservices</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-xts</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.yaml</td><td>snakeyaml</td><td>2.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>annotations</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>apache-client</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>arns</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>auth</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>aws-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>aws-query-protocol</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>aws-xml-protocol</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>crt-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>endpoints-spi</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>http-client-spi</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>json-utils</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>metrics-spi</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>profiles</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>protocol-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>regions</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>s3</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>sdk-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>third-party-jackson-core</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.awssdk</td><td>utils</td><td>2.20.126</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>software.amazon.eventstream</td><td>eventstream</td><td>1.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>wsdl4j</td><td>wsdl4j</td><td>1.6.3</td><td><a href="https://www.eclipse.org/legal/cpl-v10.html">Common Public License 1.0</a>
+                    <br>
+                </td><td><a href="common public license 1.0.txt">common public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>xml-resolver</td><td>xml-resolver</td><td>1.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+        </table>
+    </body>
+</html>
diff --git a/wildfly/docs/licenses/wildfly-ee-feature-pack-licenses.xml b/wildfly/docs/licenses/wildfly-ee-feature-pack-licenses.xml
new file mode 100644
index 0000000..658d649
--- /dev/null
+++ b/wildfly/docs/licenses/wildfly-ee-feature-pack-licenses.xml
@@ -0,0 +1,7817 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<licenseSummary>
+  <dependencies>
+    <dependency>
+      <groupId>com.carrotsearch</groupId>
+      <artifactId>hppc</artifactId>
+      <version>0.8.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml</groupId>
+      <artifactId>classmate</artifactId>
+      <version>1.5.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-annotations</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-core</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-databind</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.dataformat</groupId>
+      <artifactId>jackson-dataformat-yaml</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.datatype</groupId>
+      <artifactId>jackson-datatype-jdk8</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.datatype</groupId>
+      <artifactId>jackson-datatype-jsr310</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.jakarta.rs</groupId>
+      <artifactId>jackson-jakarta-rs-base</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.jakarta.rs</groupId>
+      <artifactId>jackson-jakarta-rs-json-provider</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.jackson.module</groupId>
+      <artifactId>jackson-module-jakarta-xmlbind-annotations</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.fasterxml.woodstox</groupId>
+      <artifactId>woodstox-core</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.github.ben-manes.caffeine</groupId>
+      <artifactId>caffeine</artifactId>
+      <version>3.1.8</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>btf</artifactId>
+      <version>1.2</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>jackson-coreutils</artifactId>
+      <version>1.8</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>json-patch</artifactId>
+      <version>1.9</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.github.fge</groupId>
+      <artifactId>msg-simple</artifactId>
+      <version>1.1</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 or later</name>
+          <url>https://spdx.org/licenses/LGPL-3.0+.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.google.code.gson</groupId>
+      <artifactId>gson</artifactId>
+      <version>2.8.9</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.google.guava</groupId>
+      <artifactId>failureaccess</artifactId>
+      <version>1.0.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.google.guava</groupId>
+      <artifactId>guava</artifactId>
+      <version>33.0.0-jre</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.googlecode.javaewah</groupId>
+      <artifactId>JavaEWAH</artifactId>
+      <version>1.2.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.h2database</groupId>
+      <artifactId>h2</artifactId>
+      <version>2.2.224</version>
+      <licenses>
+        <license>
+          <name>Mozilla Public License 2.0</name>
+          <url>https://fedoraproject.org/wiki/Licensing/MPLv2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.ibm.async</groupId>
+      <artifactId>asyncutil</artifactId>
+      <version>0.1.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.microsoft.azure</groupId>
+      <artifactId>azure-storage</artifactId>
+      <version>8.6.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.nimbusds</groupId>
+      <artifactId>nimbus-jose-jwt</artifactId>
+      <version>9.37.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.squareup</groupId>
+      <artifactId>protoparser</artifactId>
+      <version>4.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.istack</groupId>
+      <artifactId>istack-commons-runtime</artifactId>
+      <version>4.1.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.istack</groupId>
+      <artifactId>istack-commons-tools</artifactId>
+      <version>4.1.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.bind.external</groupId>
+      <artifactId>relaxng-datatype</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.bind.external</groupId>
+      <artifactId>rngom</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.fastinfoset</groupId>
+      <artifactId>FastInfoset</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.sun.xml.messaging.saaj</groupId>
+      <artifactId>saaj-impl</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>commons-beanutils</groupId>
+      <artifactId>commons-beanutils</artifactId>
+      <version>1.9.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>commons-cli</groupId>
+      <artifactId>commons-cli</artifactId>
+      <version>1.9.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>commons-codec</groupId>
+      <artifactId>commons-codec</artifactId>
+      <version>1.17.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>commons-collections</groupId>
+      <artifactId>commons-collections</artifactId>
+      <version>3.2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>commons-daemon</groupId>
+      <artifactId>commons-daemon</artifactId>
+      <version>Not Installed</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>commons-io</groupId>
+      <artifactId>commons-io</artifactId>
+      <version>2.16.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>de.dentrassi.crypto</groupId>
+      <artifactId>pem-keystore</artifactId>
+      <version>2.4.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>gnu.getopt</groupId>
+      <artifactId>java-getopt</artifactId>
+      <version>1.0.13</version>
+      <licenses>
+        <license>
+          <name>GNU Library General Public License v2 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.0-standalone.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.agroal</groupId>
+      <artifactId>agroal-api</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.agroal</groupId>
+      <artifactId>agroal-narayana</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.agroal</groupId>
+      <artifactId>agroal-pool</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-buffer</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-dns</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-http</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-socks</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-common</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-handler</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-handler-proxy</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-resolver</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-resolver-dns</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-classes-epoll</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-classes-kqueue</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-epoll</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-kqueue</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-transport-native-unix-common</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.reactivex.rxjava2</groupId>
+      <artifactId>rxjava</artifactId>
+      <version>2.2.21</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.reactivex.rxjava3</groupId>
+      <artifactId>rxjava</artifactId>
+      <version>3.1.9</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>jandex</artifactId>
+      <version>3.2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow</groupId>
+      <artifactId>undertow-core</artifactId>
+      <version>2.3.17.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow</groupId>
+      <artifactId>undertow-servlet</artifactId>
+      <version>2.3.17.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow</groupId>
+      <artifactId>undertow-websockets-jsr</artifactId>
+      <version>2.3.17.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.undertow.jastow</groupId>
+      <artifactId>jastow</artifactId>
+      <version>2.2.8.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.activation</groupId>
+      <artifactId>jakarta.activation-api</artifactId>
+      <version>2.1.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.annotation</groupId>
+      <artifactId>jakarta.annotation-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.authentication</groupId>
+      <artifactId>jakarta.authentication-api</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.authorization</groupId>
+      <artifactId>jakarta.authorization-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.batch</groupId>
+      <artifactId>jakarta.batch-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.ejb</groupId>
+      <artifactId>jakarta.ejb-api</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.enterprise</groupId>
+      <artifactId>jakarta.enterprise.cdi-api</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.enterprise</groupId>
+      <artifactId>jakarta.enterprise.lang-model</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.enterprise.concurrent</groupId>
+      <artifactId>jakarta.enterprise.concurrent-api</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.inject</groupId>
+      <artifactId>jakarta.inject-api</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.interceptor</groupId>
+      <artifactId>jakarta.interceptor-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.jms</groupId>
+      <artifactId>jakarta.jms-api</artifactId>
+      <version>3.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.json</groupId>
+      <artifactId>jakarta.json-api</artifactId>
+      <version>2.1.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.json.bind</groupId>
+      <artifactId>jakarta.json.bind-api</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.mail</groupId>
+      <artifactId>jakarta.mail-api</artifactId>
+      <version>2.1.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.persistence</groupId>
+      <artifactId>jakarta.persistence-api</artifactId>
+      <version>3.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.resource</groupId>
+      <artifactId>jakarta.resource-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.security.enterprise</groupId>
+      <artifactId>jakarta.security.enterprise-api</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.servlet</groupId>
+      <artifactId>jakarta.servlet-api</artifactId>
+      <version>6.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.servlet.jsp</groupId>
+      <artifactId>jakarta.servlet.jsp-api</artifactId>
+      <version>3.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.servlet.jsp.jstl</groupId>
+      <artifactId>jakarta.servlet.jsp.jstl-api</artifactId>
+      <version>3.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.transaction</groupId>
+      <artifactId>jakarta.transaction-api</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.validation</groupId>
+      <artifactId>jakarta.validation-api</artifactId>
+      <version>3.0.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.websocket</groupId>
+      <artifactId>jakarta.websocket-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.websocket</groupId>
+      <artifactId>jakarta.websocket-client-api</artifactId>
+      <version>2.1.1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.ws.rs</groupId>
+      <artifactId>jakarta.ws.rs-api</artifactId>
+      <version>3.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.xml.bind</groupId>
+      <artifactId>jakarta.xml.bind-api</artifactId>
+      <version>4.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jboss.jaxbintros</groupId>
+      <artifactId>jboss-jaxb-intros</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>joda-time</groupId>
+      <artifactId>joda-time</artifactId>
+      <version>2.12.7</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>net.bytebuddy</groupId>
+      <artifactId>byte-buddy</artifactId>
+      <version>1.14.18</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>net.jcip</groupId>
+      <artifactId>jcip-annotations</artifactId>
+      <version>1.0</version>
+      <licenses>
+        <license>
+          <name>Creative Commons Attribution 2.5</name>
+          <url>https://creativecommons.org/licenses/by/2.5/legalcode</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>net.shibboleth.utilities</groupId>
+      <artifactId>java-support</artifactId>
+      <version>8.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.aesh</groupId>
+      <artifactId>aesh</artifactId>
+      <version>2.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.aesh</groupId>
+      <artifactId>aesh-extensions</artifactId>
+      <version>1.8</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.aesh</groupId>
+      <artifactId>readline</artifactId>
+      <version>2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.antlr</groupId>
+      <artifactId>antlr4</artifactId>
+      <version>4.13.0</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.antlr</groupId>
+      <artifactId>antlr4-runtime</artifactId>
+      <version>4.13.0</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>activemq-artemis-native</artifactId>
+      <version>2.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-amqp-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-cli</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-commons</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-core-client</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-dto</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-hornetq-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-hqclient-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-client</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-ra</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-server</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jakarta-service-extensions</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-jdbc-store</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-journal</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-selector</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-server</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.activemq</groupId>
+      <artifactId>artemis-stomp-protocol</artifactId>
+      <version>2.37.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.commons</groupId>
+      <artifactId>commons-lang3</artifactId>
+      <version>3.15.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-bindings-coloc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-bindings-soap</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-bindings-xml</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-databinding-aegis</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-databinding-jaxb</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-features-clustering</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-features-logging</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-features-throttling</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-frontend-jaxws</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-frontend-simple</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-management</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-security</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-security-saml</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-http</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-http-hc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-jms</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-transports-local</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-addr</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-mex</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-policy</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-rm</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-ws-security</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-rt-wsdl</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-common</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-java2ws</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-validator</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-wsdlto-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-wsdlto-databinding-jaxb</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf</groupId>
+      <artifactId>cxf-tools-wsdlto-frontend-jaxws</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.services.sts</groupId>
+      <artifactId>cxf-services-sts-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.services.ws-discovery</groupId>
+      <artifactId>cxf-services-ws-discovery-api</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjc-utils</groupId>
+      <artifactId>cxf-xjc-runtime</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-boolean</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-bug986</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-dv</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.cxf.xjcplugins</groupId>
+      <artifactId>cxf-xjc-ts</artifactId>
+      <version>4.0.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpasyncclient</artifactId>
+      <version>4.1.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpclient</artifactId>
+      <version>4.5.14</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpcore</artifactId>
+      <version>4.4.16</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpcore-nio</artifactId>
+      <version>4.4.16</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.httpcomponents</groupId>
+      <artifactId>httpmime</artifactId>
+      <version>4.5.14</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.james</groupId>
+      <artifactId>apache-mime4j-core</artifactId>
+      <version>0.8.11</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.james</groupId>
+      <artifactId>apache-mime4j-dom</artifactId>
+      <version>0.8.11</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.james</groupId>
+      <artifactId>apache-mime4j-storage</artifactId>
+      <version>0.8.11</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.logging.log4j</groupId>
+      <artifactId>log4j-api</artifactId>
+      <version>2.23.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-analysis-common</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-core</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-facet</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-join</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-queries</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.lucene</groupId>
+      <artifactId>lucene-queryparser</artifactId>
+      <version>9.11.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.neethi</groupId>
+      <artifactId>neethi</artifactId>
+      <version>3.2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.qpid</groupId>
+      <artifactId>proton-j</artifactId>
+      <version>0.34.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.santuario</groupId>
+      <artifactId>xmlsec</artifactId>
+      <version>3.0.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.sshd</groupId>
+      <artifactId>sshd-common</artifactId>
+      <version>2.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.sshd</groupId>
+      <artifactId>sshd-core</artifactId>
+      <version>2.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.velocity</groupId>
+      <artifactId>velocity-engine-core</artifactId>
+      <version>2.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.ws.xmlschema</groupId>
+      <artifactId>xmlschema-core</artifactId>
+      <version>2.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-bindings</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-policy</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-common</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-dom</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-policy-stax</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.wss4j</groupId>
+      <artifactId>wss4j-ws-security-stax</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.bitbucket.b_c</groupId>
+      <artifactId>jose4j</artifactId>
+      <version>0.9.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcjmail-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcpg-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcpkix-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcprov-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.bouncycastle</groupId>
+      <artifactId>bcutil-jdk18on</artifactId>
+      <version>1.78.1</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.codehaus.woodstox</groupId>
+      <artifactId>stax2-api</artifactId>
+      <version>4.2.2</version>
+      <licenses>
+        <license>
+          <name>BSD 2-clause "Simplified" License</name>
+          <url>https://opensource.org/license/BSD-2-Clause/</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.cryptacular</groupId>
+      <artifactId>cryptacular</artifactId>
+      <version>1.2.5</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v3.0 only</name>
+          <url>https://www.gnu.org/licenses/lgpl-3.0-standalone.html</url>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse</groupId>
+      <artifactId>yasson</artifactId>
+      <version>3.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.angus</groupId>
+      <artifactId>angus-activation</artifactId>
+      <version>2.0.2</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.angus</groupId>
+      <artifactId>angus-mail</artifactId>
+      <version>2.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.jdt</groupId>
+      <artifactId>ecj</artifactId>
+      <version>3.32.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.jgit</groupId>
+      <artifactId>org.eclipse.jgit</artifactId>
+      <version>6.10.0.202406032230-r</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.jgit</groupId>
+      <artifactId>org.eclipse.jgit.ssh.apache</artifactId>
+      <version>6.10.0.202406032230-r</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.parsson</groupId>
+      <artifactId>parsson</artifactId>
+      <version>1.1.7</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.elasticsearch.client</groupId>
+      <artifactId>elasticsearch-rest-client</artifactId>
+      <version>8.15.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.elasticsearch.client</groupId>
+      <artifactId>elasticsearch-rest-client-sniffer</artifactId>
+      <version>8.15.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.fusesource.jansi</groupId>
+      <artifactId>jansi</artifactId>
+      <version>1.18</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>jakarta.enterprise.concurrent</artifactId>
+      <version>3.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>jakarta.faces</artifactId>
+      <version>4.0.7</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish</groupId>
+      <artifactId>jakarta.json</artifactId>
+      <version>1.1.6</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.expressly</groupId>
+      <artifactId>expressly</artifactId>
+      <version>5.0.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>codemodel</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-jxc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-runtime</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>jaxb-xjc</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>txw2</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.jaxb</groupId>
+      <artifactId>xsom</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.soteria</groupId>
+      <artifactId>jakarta.security.enterprise</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.soteria</groupId>
+      <artifactId>soteria.spi.bean.decorator.weld</artifactId>
+      <version>3.0.3</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.web</groupId>
+      <artifactId>jakarta.servlet.jsp.jstl</artifactId>
+      <version>3.0.1-jbossorg-1</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.common</groupId>
+      <artifactId>hibernate-commons-annotations</artifactId>
+      <version>7.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.orm</groupId>
+      <artifactId>hibernate-core</artifactId>
+      <version>6.6.1.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.orm</groupId>
+      <artifactId>hibernate-envers</artifactId>
+      <version>6.6.1.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-backend-elasticsearch</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-backend-lucene</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-engine</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-mapper-orm</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-mapper-pojo-base</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.search</groupId>
+      <artifactId>hibernate-search-util-common</artifactId>
+      <version>7.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.validator</groupId>
+      <artifactId>hibernate-validator</artifactId>
+      <version>8.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hibernate.validator</groupId>
+      <artifactId>hibernate-validator-cdi</artifactId>
+      <version>8.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hornetq</groupId>
+      <artifactId>hornetq-commons</artifactId>
+      <version>2.4.9.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hornetq</groupId>
+      <artifactId>hornetq-core-client</artifactId>
+      <version>2.4.9.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.hornetq</groupId>
+      <artifactId>hornetq-jakarta-client</artifactId>
+      <version>2.4.9.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cachestore-jdbc-common-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cachestore-jdbc-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cachestore-remote</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cdi-common-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cdi-embedded-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-cdi-remote-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-client-hotrod-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-clustered-counter</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-clustered-lock</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-commons-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-core-jakarta</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-hibernate-cache-commons</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-hibernate-cache-spi</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-hibernate-cache-v62</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-objectfilter</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-query</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-query-core</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-query-dsl</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan</groupId>
+      <artifactId>infinispan-remote-query-client</artifactId>
+      <version>14.0.31.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan.protostream</groupId>
+      <artifactId>protostream</artifactId>
+      <version>4.6.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.infinispan.protostream</groupId>
+      <artifactId>protostream-types</artifactId>
+      <version>4.6.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jasypt</groupId>
+      <artifactId>jasypt</artifactId>
+      <version>1.9.3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jberet</groupId>
+      <artifactId>jberet-core</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-dmr</artifactId>
+      <version>1.7.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-ejb-client</artifactId>
+      <version>5.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-iiop-client</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-transaction-spi</artifactId>
+      <version>8.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>jboss-vfs</artifactId>
+      <version>3.3.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss</groupId>
+      <artifactId>staxmapper</artifactId>
+      <version>1.5.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.activemq.artemis.integration</groupId>
+      <artifactId>artemis-wildfly-integration</artifactId>
+      <version>2.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.classfilewriter</groupId>
+      <artifactId>jboss-classfilewriter</artifactId>
+      <version>1.3.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.common</groupId>
+      <artifactId>jboss-common-beans</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ejb3</groupId>
+      <artifactId>jboss-ejb3-ext-api</artifactId>
+      <version>2.4.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.genericjms</groupId>
+      <artifactId>generic-jms-ra-jar</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.hal</groupId>
+      <artifactId>hal-console</artifactId>
+      <version>3.7.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.invocation</groupId>
+      <artifactId>jboss-invocation</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-common-api</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-common-impl</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-common-spi</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-core-api</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-core-impl</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-deployers-common</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-jdbc</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ironjacamar</groupId>
+      <artifactId>ironjacamar-validator</artifactId>
+      <version>3.0.10.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logging</groupId>
+      <artifactId>commons-logging-jboss-logging</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logging</groupId>
+      <artifactId>jboss-logging</artifactId>
+      <version>3.6.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logging</groupId>
+      <artifactId>jul-to-slf4j-stub</artifactId>
+      <version>1.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logmanager</groupId>
+      <artifactId>jboss-logmanager</artifactId>
+      <version>2.1.19.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.logmanager</groupId>
+      <artifactId>log4j2-jboss-logmanager</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.marshalling</groupId>
+      <artifactId>jboss-marshalling</artifactId>
+      <version>2.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.marshalling</groupId>
+      <artifactId>jboss-marshalling-river</artifactId>
+      <version>2.2.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-appclient</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-common</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-ear</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-ejb</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.metadata</groupId>
+      <artifactId>jboss-metadata-web</artifactId>
+      <version>16.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.mod_cluster</groupId>
+      <artifactId>mod_cluster-container-spi</artifactId>
+      <version>2.0.4.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.mod_cluster</groupId>
+      <artifactId>mod_cluster-core</artifactId>
+      <version>2.0.4.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.mod_cluster</groupId>
+      <artifactId>mod_cluster-load-spi</artifactId>
+      <version>2.0.4.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.modules</groupId>
+      <artifactId>jboss-modules</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Indiana University Extreme! Lab Software License 1.1.1</name>
+          <url>https://enterprise.dejacode.com/licenses/public/indiana-extreme/?_list_filters=q%3Dindiana%2Bextreme#license-text</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.msc</groupId>
+      <artifactId>jboss-msc</artifactId>
+      <version>1.5.5.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana</groupId>
+      <artifactId>jbosstxbridge</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.jts</groupId>
+      <artifactId>narayana-jts-idlj</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.jts</groupId>
+      <artifactId>narayana-jts-integration</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-api</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-bridge</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-integration</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>restat-util</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.xts</groupId>
+      <artifactId>jbossxts</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.openjdk-orb</groupId>
+      <artifactId>openjdk-orb</artifactId>
+      <version>10.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.remoting</groupId>
+      <artifactId>jboss-remoting</artifactId>
+      <version>5.0.29.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.remotingjmx</groupId>
+      <artifactId>remoting-jmx</artifactId>
+      <version>3.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-atom-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-cdi</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-client</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-client-api</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-core</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-core-spi</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-crypto</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-jackson2-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-jaxb-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-jsapi</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-json-binding-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-json-p-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-multipart-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-rxjava2</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-tracing-api</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy</groupId>
+      <artifactId>resteasy-validator-provider</artifactId>
+      <version>6.2.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.spring</groupId>
+      <artifactId>resteasy-spring</artifactId>
+      <version>3.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.slf4j</groupId>
+      <artifactId>slf4j-jboss-logmanager</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.spec.jakarta.el</groupId>
+      <artifactId>jboss-el-api_5.0_spec</artifactId>
+      <version>4.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU Lesser General Public License v2.1 or later</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1-standalone.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.spec.jakarta.xml.soap</groupId>
+      <artifactId>jboss-saaj-api_3.0_spec</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.spec.jakarta.xml.ws</groupId>
+      <artifactId>jboss-jakarta-xml-ws-api_4.0_spec</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.stdio</groupId>
+      <artifactId>jboss-stdio</artifactId>
+      <version>1.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.threads</groupId>
+      <artifactId>jboss-threads</artifactId>
+      <version>2.4.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-api</artifactId>
+      <version>5.0.SP3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-core-impl</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-lite-extension-translator</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld</groupId>
+      <artifactId>weld-spi</artifactId>
+      <version>5.0.SP3</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-ejb</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-jsf</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-jta</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.weld.module</groupId>
+      <artifactId>weld-web</artifactId>
+      <version>5.1.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-api</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-common</artifactId>
+      <version>5.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-common-tools</artifactId>
+      <version>2.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws</groupId>
+      <artifactId>jbossws-spi</artifactId>
+      <version>5.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-client</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-factories</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-resources</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-server</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-transports-udp</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.cxf</groupId>
+      <artifactId>jbossws-cxf-transports-undertow</artifactId>
+      <version>7.2.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.ws.projects</groupId>
+      <artifactId>jaxws-undertow-httpspi</artifactId>
+      <version>2.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>GNU Lesser General Public License v2.1 only</name>
+          <url>https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.xnio</groupId>
+      <artifactId>xnio-api</artifactId>
+      <version>3.8.16.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.xnio</groupId>
+      <artifactId>xnio-nio</artifactId>
+      <version>3.8.16.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.xnio.netty</groupId>
+      <artifactId>netty-xnio-transport</artifactId>
+      <version>0.1.10.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jctools</groupId>
+      <artifactId>jctools-core</artifactId>
+      <version>4.0.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups</groupId>
+      <artifactId>jgroups</artifactId>
+      <version>5.2.28.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups.aws</groupId>
+      <artifactId>jgroups-aws</artifactId>
+      <version>3.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups.azure</groupId>
+      <artifactId>jgroups-azure</artifactId>
+      <version>2.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jgroups.kubernetes</groupId>
+      <artifactId>jgroups-kubernetes</artifactId>
+      <version>2.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jvnet.staxex</groupId>
+      <artifactId>stax-ex</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Distribution License, Version 1.0</name>
+          <url>https://repository.jboss.org/licenses/edl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-core</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-profile-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-saml-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-saml-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-security-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-security-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-soap-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-saml-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xacml-saml-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xmlsec-api</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.opensaml</groupId>
+      <artifactId>opensaml-xmlsec-impl</artifactId>
+      <version>4.3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm</artifactId>
+      <version>9.7</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm-util</artifactId>
+      <version>9.7</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.projectodd.vdx</groupId>
+      <artifactId>vdx-core</artifactId>
+      <version>1.1.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.projectodd.vdx</groupId>
+      <artifactId>vdx-wildfly</artifactId>
+      <version>1.1.6</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.reactivestreams</groupId>
+      <artifactId>reactive-streams</artifactId>
+      <version>1.0.4</version>
+      <licenses>
+        <license>
+          <name>MIT-0</name>
+          <url>https://spdx.org/licenses/MIT-0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.slf4j</groupId>
+      <artifactId>slf4j-api</artifactId>
+      <version>2.0.13</version>
+      <licenses>
+        <license>
+          <name>MIT License</name>
+          <url>https://www.opensource.org/licenses/MIT</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-eclipselink</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-hibernate6</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-hibernatesearch</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>jipijapa-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-appclient</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-batch-jberet</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-bean-validation</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-client-all</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-cache</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-client</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-infinispan</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-ejb-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-el-expressly</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-faces-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-faces-mojarra</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-client-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-client-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-embedded-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-infinispan-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-jgroups-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-jgroups-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-jgroups-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-marshalling-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-marshalling-jboss</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-marshalling-protostream</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-server-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-server-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-server-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-compat</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-singleton-server</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-container</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-service</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-web-undertow</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-weld-core</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-weld-ejb</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-clustering-weld-web</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-connector</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-datasources-agroal</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ee</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ee-feature-pack-product-conf</artifactId>
+      <version>Not Installed</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ee-security</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-ejb3</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-elytron-oidc-client-subsystem</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-health</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-iiop-openjdk</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jaxrs</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jdr</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jpa</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jsf</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jsf-injection</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-jsr77</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-keycloak</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-mail</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-messaging-activemq-injection</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-messaging-activemq-subsystem</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-metrics</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-mod_cluster-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-mod_cluster-undertow</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-naming</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-naming-client</artifactId>
+      <version>2.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-picketlink</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-pojo</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-rts</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-sar</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-security</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-system-jmx</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-transactions</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-undertow</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-web-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-webservices-opensaml-sysconfig</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-webservices-server-integration</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-bean-validation</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-ejb</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-jpa</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-spi</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-transactions</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-weld-webservices</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-xts</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.client</groupId>
+      <artifactId>wildfly-client-config</artifactId>
+      <version>1.0.1.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-infinispan-common</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-infinispan-embedded</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-infinispan-remote</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-cache-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-context</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-marshalling-jboss</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-marshalling-protostream</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-marshalling-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-api</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-infinispan</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-jgroups</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-local</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-server-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-cache</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-infinispan-embedded</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-infinispan-remote</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-spec-servlet-6.0</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-spec-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.clustering</groupId>
+      <artifactId>wildfly-clustering-session-spi</artifactId>
+      <version>1.1.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.common</groupId>
+      <artifactId>wildfly-common</artifactId>
+      <version>1.7.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-cli</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-controller-client</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-core-management-client</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-core-management-subsystem</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-core-security</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-deployment-repository</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-deployment-scanner</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-discovery</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-domain-http-error-context</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-domain-http-interface</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-domain-management</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-elytron-integration</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-elytron-tool-wrapper</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-embedded</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-event-logger</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-host-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-installation-manager</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-io</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-io-spi</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-jar-runtime</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-jmx</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-launcher</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-logging</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-management-client-content</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-network</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-patching</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-platform-mbean</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-process-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-protocol</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-remoting</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-request-controller</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-security-manager</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-server</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-service</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-subsystem</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-threads</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.core</groupId>
+      <artifactId>wildfly-version</artifactId>
+      <version>26.0.0.Beta5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.discovery</groupId>
+      <artifactId>wildfly-discovery-client</artifactId>
+      <version>1.3.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.installation-manager</groupId>
+      <artifactId>installation-manager-api</artifactId>
+      <version>1.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-java</artifactId>
+      <version>2.2.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-linux-s390x</artifactId>
+      <version>2.2.2.SP01</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-linux-x86_64</artifactId>
+      <version>2.2.2.SP01</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-macosx-x86_64</artifactId>
+      <version>2.2.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.openssl</groupId>
+      <artifactId>wildfly-openssl-windows-x86_64</artifactId>
+      <version>2.2.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-asn1</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-audit</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server-deprecated</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server-http</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-server-sasl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-auth-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-base</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-client</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-credential</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-credential-source-impl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-credential-store</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-dynamic-ssl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-encryption</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-basic</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-bearer</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-cert</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-external</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-form</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-oidc</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-spnego</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-sso</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-stateful-basic</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-http-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-jose-jwk</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-jose-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-json-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-keystore</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-gssapi</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-http</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-oauth2</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-mechanism-scram</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-password-impl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-permission</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-provider-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm-jdbc</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm-ldap</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-realm-token</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-anonymous</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-auth-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-digest</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-entity</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-external</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-gs2</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-gssapi</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-localuser</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-oauth2</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-otp</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-plain</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-sasl-scram</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-security-manager</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-security-manager-action</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-ssh-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-ssl</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-tool</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-cert</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-cert-acme</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-cert-util</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security</groupId>
+      <artifactId>wildfly-elytron-x500-principal</artifactId>
+      <version>2.6.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.elytron-web</groupId>
+      <artifactId>undertow-server</artifactId>
+      <version>4.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.elytron-web</groupId>
+      <artifactId>undertow-server-servlet</artifactId>
+      <version>4.1.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-authentication</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-authorization</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-client-resteasy</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-client-webservices</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.jakarta</groupId>
+      <artifactId>jakarta-security</artifactId>
+      <version>3.0.3.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.transaction</groupId>
+      <artifactId>wildfly-transaction-client</artifactId>
+      <version>3.0.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.unstable.api.annotation</groupId>
+      <artifactId>unstable-api-annotation-classpath-indexer</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Public Domain</name>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-client-common</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-ejb-client</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-naming-client</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.wildfly-http-client</groupId>
+      <artifactId>wildfly-http-transaction-client</artifactId>
+      <version>2.0.7.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.yaml</groupId>
+      <artifactId>snakeyaml</artifactId>
+      <version>2.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>annotations</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>apache-client</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>arns</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>auth</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>aws-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>aws-query-protocol</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>aws-xml-protocol</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>crt-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>endpoints-spi</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>http-client-spi</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>json-utils</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>metrics-spi</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>profiles</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>protocol-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>regions</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>s3</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>sdk-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>third-party-jackson-core</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.awssdk</groupId>
+      <artifactId>utils</artifactId>
+      <version>2.20.126</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>software.amazon.eventstream</groupId>
+      <artifactId>eventstream</artifactId>
+      <version>1.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>wsdl4j</groupId>
+      <artifactId>wsdl4j</artifactId>
+      <version>1.6.3</version>
+      <licenses>
+        <license>
+          <name>Common Public License 1.0</name>
+          <url>https://www.eclipse.org/legal/cpl-v10.html</url>
+          <distribution>repo</distribution>
+          <comments>Common Public License</comments>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>xml-resolver</groupId>
+      <artifactId>xml-resolver</artifactId>
+      <version>1.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+  </dependencies>
+</licenseSummary>
diff --git a/wildfly/docs/licenses/wildfly-feature-pack-licenses.html b/wildfly/docs/licenses/wildfly-feature-pack-licenses.html
new file mode 100644
index 0000000..a8c89df
--- /dev/null
+++ b/wildfly/docs/licenses/wildfly-feature-pack-licenses.html
@@ -0,0 +1,929 @@
+<html>
+    <head>
+        <META http-equiv="Content-Type" content="text/html; charset=utf-8">
+        <meta http-equiv="Content-Type" content="text/html;charset=utf-8">
+        <link rel="stylesheet" type="text/css" href="licenses.css">
+    </head>
+    <body>
+        <h2>WildFly </h2>
+        <p>The following material has been provided for informational purposes only, and should not be relied upon or construed as a legal opinion or legal advice.</p>
+        <table>
+            <tr>
+                <th>Package Group</th><th>Package Artifact</th><th>Package Version</th><th>Remote Licenses</th><th>Local Licenses</th>
+            </tr>
+            <tr>
+                <td>com.fasterxml.jackson.jr</td><td>jackson-jr-objects</td><td>2.17.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.github.luben</td><td>zstd-jni</td><td>1.5.6-5</td><td><a href="https://opensource.org/license/BSD-2-Clause/">BSD 2-clause "Simplified" License</a>
+                    <br>
+                </td><td><a href="bsd 2-clause simplified license.html">bsd 2-clause simplified license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.api.grpc</td><td>proto-google-common-protos</td><td>2.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.protobuf</td><td>protobuf-java</td><td>3.25.5</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>com.google.protobuf</td><td>protobuf-java-util</td><td>3.25.5</td><td><a href="https://www.opensource.org/licenses/BSD-3-Clause">BSD 3-Clause "New" or "Revised" License</a>
+                    <br>
+                </td><td><a href="bsd 3-clause new or revised license.html">bsd 3-clause new or revised license.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.grpc</td><td>grpc-api</td><td>1.58.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.micrometer</td><td>micrometer-commons</td><td>1.12.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.micrometer</td><td>micrometer-core</td><td>1.12.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.micrometer</td><td>micrometer-registry-otlp</td><td>1.12.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.netty</td><td>netty-codec-http2</td><td>4.1.112.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-annotations</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-annotations-support</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-api</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.instrumentation</td><td>opentelemetry-instrumentation-api-semconv</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-api</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-api-events</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-context</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-exporter-common</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-exporter-otlp</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-exporter-otlp-common</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-common</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-extension-autoconfigure</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-extension-autoconfigure-spi</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-logs</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-metrics</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-sdk-trace</td><td>1.29.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry</td><td>opentelemetry-semconv</td><td>1.29.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.opentelemetry.proto</td><td>opentelemetry-proto</td><td>0.20.0-alpha</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.perfmark</td><td>perfmark-api</td><td>0.23.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-annotation</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-classloader</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-constraint</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-expression</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-function</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.common</td><td>smallrye-common-vertx-context</td><td>2.5.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config-common</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config-core</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.config</td><td>smallrye-config-source-file-system</td><td>3.9.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-api</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-cdi</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-exporters</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-propagation</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.opentelemetry</td><td>smallrye-opentelemetry-rest</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny</td><td>2.6.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny-reactive-streams-operators</td><td>2.6.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny-zero</td><td>1.1.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>mutiny-zero-flow-adapters</td><td>1.1.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-amqp-client</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-core</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-kafka-client</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-mutiny-vertx-runtime</td><td>3.13.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-converter-api</td><td>2.6.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-amqp</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-api</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-kafka</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-kafka-api</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye.reactive</td><td>smallrye-reactive-messaging-provider</td><td>4.24.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance-api</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance-autoconfig-core</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-fault-tolerance-core</td><td>6.4.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-health</td><td>4.0.4</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt-cdi-extension</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt-common</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-jwt-http-mechanism</td><td>4.3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-open-api-core</td><td>3.10.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.smallrye</td><td>smallrye-open-api-jaxrs</td><td>3.10.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-amqp-client</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-core</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-grpc-client</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-grpc-common</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-kafka-client</td><td>4.4.9</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                    <a href="https://repository.jboss.org/licenses/epl-1.0.txt">Eclipse Public License 1.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                    <a href="eclipse public license 1.0.txt">eclipse public license 1.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>io.vertx</td><td>vertx-proton</td><td>4.5.10</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>jakarta.mvc</td><td>jakarta.mvc-api</td><td>2.1.0</td><td><a href="https://www.eclipse.org/legal/epl-v20.html">Eclipse Public License 2.0</a>
+                    <br>
+                    <a href="https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception">GNU General Public License v2.0 only, with Classpath exception</a>
+                    <br>
+                </td><td><a href="eclipse public license 2.0.txt">eclipse public license 2.0.txt</a>
+                    <br>
+                    <a href="gnu general public license v2.0 only, with classpath exception.txt">gnu general public license v2.0 only, with classpath exception.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.apache.kafka</td><td>kafka-clients</td><td>3.7.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.krazo</td><td>krazo-core</td><td>3.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.krazo</td><td>krazo-resteasy</td><td>3.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.config</td><td>microprofile-config-api</td><td>3.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.fault-tolerance</td><td>microprofile-fault-tolerance-api</td><td>4.0.2</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.health</td><td>microprofile-health-api</td><td>4.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.jwt</td><td>microprofile-jwt-auth-api</td><td>2.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.lra</td><td>microprofile-lra-api</td><td>2.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.openapi</td><td>microprofile-openapi-api</td><td>3.1.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.reactive-streams-operators</td><td>microprofile-reactive-streams-operators-api</td><td>3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.reactive-streams-operators</td><td>microprofile-reactive-streams-operators-core</td><td>3.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.eclipse.microprofile.rest.client</td><td>microprofile-rest-client-api</td><td>3.0.1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-client</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-coordinator-jar</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-proxy-api</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>lra-service-base</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.narayana.rts</td><td>narayana-lra</td><td>7.0.2.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.microprofile</td><td>microprofile-config</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.microprofile</td><td>microprofile-rest-client</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.jboss.resteasy.microprofile</td><td>microprofile-rest-client-base</td><td>2.1.5.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.lz4</td><td>lz4-java</td><td>1.8.0</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.reactivestreams</td><td>reactive-streams</td><td>1.0.4</td><td><a href="https://spdx.org/licenses/MIT-0.html">MIT-0</a>
+                    <br>
+                </td><td><a href="mit-0.html">mit-0.html</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>mvc-krazo-galleon-shared</td><td>Not Installed</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>mvc-krazo-subsystem</td><td>1.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly.security.mp</td><td>wildfly-elytron-jwt</td><td>2.0.0.Final</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-feature-pack-product-conf</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-micrometer</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-micrometer-deployment</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-config-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-fault-tolerance-smallrye-deployment</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-fault-tolerance-smallrye-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-health-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-jwt-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-lra-coordinator</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-lra-participant</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-metrics-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-openapi-smallrye</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-opentracing-extension</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-amqp</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-common</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-config</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-messaging-kafka</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-streams-operators</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-reactive-streams-operators-cdi-provider</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-telemetry</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-microprofile-telemetry-cdi-provider</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-opentelemetry</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.wildfly</td><td>wildfly-opentelemetry-api</td><td>34.0.0.Beta1</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+            <tr>
+                <td>org.xerial.snappy</td><td>snappy-java</td><td>1.1.10.5</td><td><a href="https://www.apache.org/licenses/LICENSE-2.0">Apache License 2.0</a>
+                    <br>
+                </td><td><a href="apache license 2.0.txt">apache license 2.0.txt</a>
+                    <br>
+                </td>
+            </tr>
+        </table>
+    </body>
+</html>
diff --git a/wildfly/docs/licenses/wildfly-feature-pack-licenses.xml b/wildfly/docs/licenses/wildfly-feature-pack-licenses.xml
new file mode 100644
index 0000000..b660a05
--- /dev/null
+++ b/wildfly/docs/licenses/wildfly-feature-pack-licenses.xml
@@ -0,0 +1,1559 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<licenseSummary>
+  <dependencies>
+    <dependency>
+      <groupId>com.fasterxml.jackson.jr</groupId>
+      <artifactId>jackson-jr-objects</artifactId>
+      <version>2.17.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.github.luben</groupId>
+      <artifactId>zstd-jni</artifactId>
+      <version>1.5.6-5</version>
+      <licenses>
+        <license>
+          <name>BSD 2-clause "Simplified" License</name>
+          <url>https://opensource.org/license/BSD-2-Clause/</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.google.api.grpc</groupId>
+      <artifactId>proto-google-common-protos</artifactId>
+      <version>2.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.google.protobuf</groupId>
+      <artifactId>protobuf-java</artifactId>
+      <version>3.25.5</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>com.google.protobuf</groupId>
+      <artifactId>protobuf-java-util</artifactId>
+      <version>3.25.5</version>
+      <licenses>
+        <license>
+          <name>BSD 3-Clause "New" or "Revised" License</name>
+          <url>https://www.opensource.org/licenses/BSD-3-Clause</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.grpc</groupId>
+      <artifactId>grpc-api</artifactId>
+      <version>1.58.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.micrometer</groupId>
+      <artifactId>micrometer-commons</artifactId>
+      <version>1.12.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.micrometer</groupId>
+      <artifactId>micrometer-core</artifactId>
+      <version>1.12.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.micrometer</groupId>
+      <artifactId>micrometer-registry-otlp</artifactId>
+      <version>1.12.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.netty</groupId>
+      <artifactId>netty-codec-http2</artifactId>
+      <version>4.1.112.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-api</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-api-events</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-context</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-exporter-common</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-exporter-otlp</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-exporter-otlp-common</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-common</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-extension-autoconfigure</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-extension-autoconfigure-spi</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-logs</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-metrics</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-sdk-trace</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry</groupId>
+      <artifactId>opentelemetry-semconv</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-annotations</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-annotations-support</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-api</artifactId>
+      <version>1.29.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.instrumentation</groupId>
+      <artifactId>opentelemetry-instrumentation-api-semconv</artifactId>
+      <version>1.29.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.opentelemetry.proto</groupId>
+      <artifactId>opentelemetry-proto</artifactId>
+      <version>0.20.0-alpha</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.perfmark</groupId>
+      <artifactId>perfmark-api</artifactId>
+      <version>0.23.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance-api</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance-autoconfig-core</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-fault-tolerance-core</artifactId>
+      <version>6.4.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-health</artifactId>
+      <version>4.0.4</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt-cdi-extension</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt-common</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-jwt-http-mechanism</artifactId>
+      <version>4.3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-open-api-core</artifactId>
+      <version>3.10.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye</groupId>
+      <artifactId>smallrye-open-api-jaxrs</artifactId>
+      <version>3.10.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-annotation</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-classloader</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-constraint</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-expression</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-function</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.common</groupId>
+      <artifactId>smallrye-common-vertx-context</artifactId>
+      <version>2.5.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config-common</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config-core</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.config</groupId>
+      <artifactId>smallrye-config-source-file-system</artifactId>
+      <version>3.9.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-api</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-cdi</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-exporters</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-propagation</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.opentelemetry</groupId>
+      <artifactId>smallrye-opentelemetry-rest</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny</artifactId>
+      <version>2.6.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny-reactive-streams-operators</artifactId>
+      <version>2.6.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny-zero</artifactId>
+      <version>1.1.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>mutiny-zero-flow-adapters</artifactId>
+      <version>1.1.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-amqp-client</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-core</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-kafka-client</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-mutiny-vertx-runtime</artifactId>
+      <version>3.13.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-converter-api</artifactId>
+      <version>2.6.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-amqp</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-api</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-kafka</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-kafka-api</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.smallrye.reactive</groupId>
+      <artifactId>smallrye-reactive-messaging-provider</artifactId>
+      <version>4.24.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-amqp-client</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-core</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-grpc-client</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-grpc-common</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-kafka-client</artifactId>
+      <version>4.4.9</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>Eclipse Public License 1.0</name>
+          <url>https://repository.jboss.org/licenses/epl-1.0.txt</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>io.vertx</groupId>
+      <artifactId>vertx-proton</artifactId>
+      <version>4.5.10</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>jakarta.mvc</groupId>
+      <artifactId>jakarta.mvc-api</artifactId>
+      <version>2.1.0</version>
+      <licenses>
+        <license>
+          <name>Eclipse Public License 2.0</name>
+          <url>https://www.eclipse.org/legal/epl-v20.html</url>
+          <distribution>repo</distribution>
+        </license>
+        <license>
+          <name>GNU General Public License v2.0 only, with Classpath exception</name>
+          <url>https://fedoraproject.org/wiki/Licensing/GPL_Classpath_Exception</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.apache.kafka</groupId>
+      <artifactId>kafka-clients</artifactId>
+      <version>3.7.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.krazo</groupId>
+      <artifactId>krazo-core</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.krazo</groupId>
+      <artifactId>krazo-resteasy</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.config</groupId>
+      <artifactId>microprofile-config-api</artifactId>
+      <version>3.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.fault-tolerance</groupId>
+      <artifactId>microprofile-fault-tolerance-api</artifactId>
+      <version>4.0.2</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.health</groupId>
+      <artifactId>microprofile-health-api</artifactId>
+      <version>4.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.jwt</groupId>
+      <artifactId>microprofile-jwt-auth-api</artifactId>
+      <version>2.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.lra</groupId>
+      <artifactId>microprofile-lra-api</artifactId>
+      <version>2.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.openapi</groupId>
+      <artifactId>microprofile-openapi-api</artifactId>
+      <version>3.1.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.reactive-streams-operators</groupId>
+      <artifactId>microprofile-reactive-streams-operators-api</artifactId>
+      <version>3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.reactive-streams-operators</groupId>
+      <artifactId>microprofile-reactive-streams-operators-core</artifactId>
+      <version>3.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.eclipse.microprofile.rest.client</groupId>
+      <artifactId>microprofile-rest-client-api</artifactId>
+      <version>3.0.1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-client</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-coordinator-jar</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-proxy-api</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>lra-service-base</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.narayana.rts</groupId>
+      <artifactId>narayana-lra</artifactId>
+      <version>7.0.2.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.microprofile</groupId>
+      <artifactId>microprofile-config</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.microprofile</groupId>
+      <artifactId>microprofile-rest-client</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.jboss.resteasy.microprofile</groupId>
+      <artifactId>microprofile-rest-client-base</artifactId>
+      <version>2.1.5.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.lz4</groupId>
+      <artifactId>lz4-java</artifactId>
+      <version>1.8.0</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.reactivestreams</groupId>
+      <artifactId>reactive-streams</artifactId>
+      <version>1.0.4</version>
+      <licenses>
+        <license>
+          <name>MIT-0</name>
+          <url>https://spdx.org/licenses/MIT-0.html</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>mvc-krazo-galleon-shared</artifactId>
+      <version>Not Installed</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>mvc-krazo-subsystem</artifactId>
+      <version>1.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-feature-pack-product-conf</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-micrometer</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-micrometer-deployment</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-config-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-fault-tolerance-smallrye-deployment</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-fault-tolerance-smallrye-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-health-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-jwt-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-lra-coordinator</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-lra-participant</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-metrics-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-openapi-smallrye</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-opentracing-extension</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-amqp</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-common</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-config</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-messaging-kafka</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-streams-operators</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-reactive-streams-operators-cdi-provider</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-telemetry</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-microprofile-telemetry-cdi-provider</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-opentelemetry</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly</groupId>
+      <artifactId>wildfly-opentelemetry-api</artifactId>
+      <version>34.0.0.Beta1</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.wildfly.security.mp</groupId>
+      <artifactId>wildfly-elytron-jwt</artifactId>
+      <version>2.0.0.Final</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+    <dependency>
+      <groupId>org.xerial.snappy</groupId>
+      <artifactId>snappy-java</artifactId>
+      <version>1.1.10.5</version>
+      <licenses>
+        <license>
+          <name>Apache License 2.0</name>
+          <url>https://www.apache.org/licenses/LICENSE-2.0</url>
+          <distribution>repo</distribution>
+        </license>
+      </licenses>
+    </dependency>
+  </dependencies>
+</licenseSummary>
diff --git a/wildfly/docs/schema/README.md b/wildfly/docs/schema/README.md
new file mode 100644
index 0000000..b22ddba
--- /dev/null
+++ b/wildfly/docs/schema/README.md
@@ -0,0 +1,14 @@
+# Schema for credential reference types
+
+This directory contains the shared schema for the WildFly `credentialReferenceType`. All subsystem schemas in both
+WildFly Core and WildFly that make use of credential references import and make use of this schema.
+
+The credential reference attribute itself along with its parsing and marshalling code is defined in
+`org.jboss.as.controller.security.CredentialReference`.
+
+## Adding a new version of this schema
+
+When adding a new version of this schema, all subsystem schemas in both WildFly Core and WildFly that import this
+schema should be updated to the new version as well. Although a new version of this schema would be backwards
+compatible, it is important to update the subsystem schemas that import it to the new version since it would be
+confusing for users if only some subsystems are updated and others are not.
diff --git a/wildfly/docs/schema/application-client_10.xsd b/wildfly/docs/schema/application-client_10.xsd
new file mode 100644
index 0000000..6e95b0b
--- /dev/null
+++ b/wildfly/docs/schema/application-client_10.xsd
@@ -0,0 +1,307 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="10">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the application client 10
+      deployment descriptor.  The deployment descriptor must
+      be named "META-INF/application-client.xml" in the
+      application client's jar file.  All application client
+      deployment descriptors must indicate the application
+      client schema by using the Jakarta EE namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application-client xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee 
+      	https://jakarta.ee/xml/ns/jakartaee/application-client_10.xsd"
+      version="10">
+      ...
+      </application-client>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/application-client_10.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application-client"
+               type="jakartaee:application-clientType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-client element is the root element of an
+        application client deployment descriptor.  The application
+        client deployment descriptor describes the enterprise bean 
+        components and external resources referenced by the 
+        application client.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of an
+          application client's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name must
+          be unique within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:env-entry"/>
+      <xsd:field xpath="jakartaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:unique name="ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an enterprise bean 
+          reference. The enterprise bean reference is an entry 
+          in the application client's environment and is relative to the
+          java:comp/env context. The name must be unique within the
+          application client.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-ref"/>
+      <xsd:field xpath="jakartaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the application client
+          code. The name is a JNDI name relative to the
+          java:comp/env context and must be unique within an
+          application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-env-ref"/>
+      <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the
+          name of a message destination reference; its value is
+          the message destination reference name used in the
+          application client code. The name is a JNDI name
+          relative to the java:comp/env context and must be unique
+          within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:message-destination-ref"/>
+      <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-clientType">
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="env-entry"
+                   type="jakartaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="jakartaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="jakartaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="jakartaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="jakartaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="jakartaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="callback-handler"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The callback-handler element names a class provided by
+            the application.  The class must have a no args
+            constructor and must implement the
+            jakarta.security.auth.callback.CallbackHandler
+            interface.  The class will be instantiated by the
+            application client container and used by the container
+            to collect authentication information from the user.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="jakartaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="jakartaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="jakartaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="jakartaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="jakartaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="jakartaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="10"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 10.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application-client_6.xsd b/wildfly/docs/schema/application-client_6.xsd
new file mode 100644
index 0000000..3c0855b
--- /dev/null
+++ b/wildfly/docs/schema/application-client_6.xsd
@@ -0,0 +1,311 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+
+      Contributor(s):
+
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the application client 6
+      deployment descriptor.  The deployment descriptor must
+      be named "META-INF/application-client.xml" in the
+      application client's jar file.  All application client
+      deployment descriptors must indicate the application
+      client schema by using the Java EE namespace:
+
+      http://java.sun.com/xml/ns/javaee
+
+      and indicate the version of the schema by
+      using the version element as shown below:
+
+      <application-client xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+      	http://java.sun.com/xml/ns/javaee/application-client_6.xsd"
+      version="6">
+      ...
+      </application-client>
+
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+
+      http://java.sun.com/xml/ns/javaee/application-client_6.xsd
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_6.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application-client"
+               type="javaee:application-clientType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-client element is the root element of an
+        application client deployment descriptor.  The application
+        client deployment descriptor describes the EJB components
+        and external resources referenced by the application
+        client.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of an
+          application client's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name must
+          be unique within an application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:unique name="ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the application
+          client's environment and is relative to the
+          java:comp/env context. The name must be unique within the
+          application client.
+
+          It is recommended that name is prefixed with "ejb/".
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within an application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the application client
+          code. The name is a JNDI name relative to the
+          java:comp/env context and must be unique within an
+          application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the
+          name of a message destination reference; its value is
+          the message destination reference name used in the
+          application client code. The name is a JNDI name
+          relative to the java:comp/env context and must be unique
+          within an application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-clientType">
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="callback-handler"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The callback-handler element names a class provided by
+            the application.  The class must have a no args
+            constructor and must implement the
+            javax.security.auth.callback.CallbackHandler
+            interface.  The class will be instantiated by the
+            application client container and used by the container
+            to collect authentication information from the user.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="6"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 6.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/application-client_7.xsd b/wildfly/docs/schema/application-client_7.xsd
new file mode 100644
index 0000000..7b28e2f
--- /dev/null
+++ b/wildfly/docs/schema/application-client_7.xsd
@@ -0,0 +1,331 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the application client 7
+      deployment descriptor.  The deployment descriptor must
+      be named "META-INF/application-client.xml" in the
+      application client's jar file.  All application client
+      deployment descriptors must indicate the application
+      client schema by using the Java EE namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application-client xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee 
+      	http://xmlns.jcp.org/xml/ns/javaee/application-client_7.xsd"
+      version="7">
+      ...
+      </application-client>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/application-client_7.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application-client"
+               type="javaee:application-clientType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-client element is the root element of an
+        application client deployment descriptor.  The application
+        client deployment descriptor describes the EJB components
+        and external resources referenced by the application
+        client.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of an
+          application client's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name must
+          be unique within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:unique name="ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the application
+          client's environment and is relative to the
+          java:comp/env context. The name must be unique within the
+          application client.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the application client
+          code. The name is a JNDI name relative to the
+          java:comp/env context and must be unique within an
+          application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the
+          name of a message destination reference; its value is
+          the message destination reference name used in the
+          application client code. The name is a JNDI name
+          relative to the java:comp/env context and must be unique
+          within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-clientType">
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="callback-handler"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The callback-handler element names a class provided by
+            the application.  The class must have a no args
+            constructor and must implement the
+            javax.security.auth.callback.CallbackHandler
+            interface.  The class will be instantiated by the
+            application client container and used by the container
+            to collect authentication information from the user.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="javaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="javaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="javaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="javaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="javaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="7"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 7.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application-client_8.xsd b/wildfly/docs/schema/application-client_8.xsd
new file mode 100644
index 0000000..54829d6
--- /dev/null
+++ b/wildfly/docs/schema/application-client_8.xsd
@@ -0,0 +1,331 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+      Copyright (c) 2009-2017 Oracle and/or its affiliates. All rights reserved.
+
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the application client 8
+      deployment descriptor.  The deployment descriptor must
+      be named "META-INF/application-client.xml" in the
+      application client's jar file.  All application client
+      deployment descriptors must indicate the application
+      client schema by using the Java EE namespace:
+
+      http://xmlns.jcp.org/xml/ns/javaee
+
+      and indicate the version of the schema by
+      using the version element as shown below:
+
+      <application-client xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
+	http://xmlns.jcp.org/xml/ns/javaee/application-client_8.xsd"
+      version="8">
+      ...
+      </application-client>
+
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+
+      http://xmlns.jcp.org/xml/ns/javaee/application-client_8.xsd
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_8.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application-client"
+               type="javaee:application-clientType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-client element is the root element of an
+        application client deployment descriptor.  The application
+        client deployment descriptor describes the EJB components
+        and external resources referenced by the application
+        client.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of an
+          application client's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name must
+          be unique within an application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:unique name="ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the application
+          client's environment and is relative to the
+          java:comp/env context. The name must be unique within the
+          application client.
+
+          It is recommended that name is prefixed with "ejb/".
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within an application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the application client
+          code. The name is a JNDI name relative to the
+          java:comp/env context and must be unique within an
+          application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the
+          name of a message destination reference; its value is
+          the message destination reference name used in the
+          application client code. The name is a JNDI name
+          relative to the java:comp/env context and must be unique
+          within an application client.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-clientType">
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="callback-handler"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The callback-handler element names a class provided by
+            the application.  The class must have a no args
+            constructor and must implement the
+            javax.security.auth.callback.CallbackHandler
+            interface.  The class will be instantiated by the
+            application client container and used by the container
+            to collect authentication information from the user.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="javaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="javaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="javaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="javaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="javaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="8"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 8.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application-client_9.xsd b/wildfly/docs/schema/application-client_9.xsd
new file mode 100644
index 0000000..a4df45b
--- /dev/null
+++ b/wildfly/docs/schema/application-client_9.xsd
@@ -0,0 +1,307 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="9">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the application client 9
+      deployment descriptor.  The deployment descriptor must
+      be named "META-INF/application-client.xml" in the
+      application client's jar file.  All application client
+      deployment descriptors must indicate the application
+      client schema by using the Jakarta EE namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application-client xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee 
+      	https://jakarta.ee/xml/ns/jakartaee/application-client_9.xsd"
+      version="9">
+      ...
+      </application-client>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/application-client_9.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application-client"
+               type="jakartaee:application-clientType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-client element is the root element of an
+        application client deployment descriptor.  The application
+        client deployment descriptor describes the enterprise bean 
+        components and external resources referenced by the 
+        application client.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of an
+          application client's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name must
+          be unique within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:env-entry"/>
+      <xsd:field xpath="jakartaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:unique name="ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an enterprise bean 
+          reference. The enterprise bean reference is an entry 
+          in the application client's environment and is relative to the
+          java:comp/env context. The name must be unique within the
+          application client.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-ref"/>
+      <xsd:field xpath="jakartaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the application client
+          code. The name is a JNDI name relative to the
+          java:comp/env context and must be unique within an
+          application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-env-ref"/>
+      <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the
+          name of a message destination reference; its value is
+          the message destination reference name used in the
+          application client code. The name is a JNDI name
+          relative to the java:comp/env context and must be unique
+          within an application client.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:message-destination-ref"/>
+      <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-clientType">
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="env-entry"
+                   type="jakartaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="jakartaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="jakartaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="jakartaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="jakartaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="jakartaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="callback-handler"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The callback-handler element names a class provided by
+            the application.  The class must have a no args
+            constructor and must implement the
+            jakarta.security.auth.callback.CallbackHandler
+            interface.  The class will be instantiated by the
+            application client container and used by the container
+            to collect authentication information from the user.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="jakartaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="jakartaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="jakartaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="jakartaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="jakartaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="jakartaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="9"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 9.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application_10.xsd b/wildfly/docs/schema/application_10.xsd
new file mode 100644
index 0000000..cf35cb7
--- /dev/null
+++ b/wildfly/docs/schema/application_10.xsd
@@ -0,0 +1,406 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="10">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the application 10 deployment
+      descriptor.  The deployment descriptor must be named
+      "META-INF/application.xml" in the application's ear file.
+      All application deployment descriptors must indicate
+      the application schema by using the Jakarta EE namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee 
+      	https://jakarta.ee/xml/ns/jakartaee/application_10.xsd"
+      version="10">
+      ...
+      </application>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/application_10.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application"
+               type="jakartaee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application element is the root element of a Jakarta EE
+        application deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The context-root element content must be unique
+          in the ear. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:module/jakartaee:web"/>
+      <xsd:field xpath="jakartaee:context-root"/>
+    </xsd:unique>
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The security-role-name element content
+          must be unique in the ear.  
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The applicationType defines the structure of the
+        application. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="application-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="initialize-in-order"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If initialize-in-order is true, modules must be initialized
+            in the order they're listed in this deployment descriptor,
+            with the exception of application client modules, which can
+            be initialized in any order.
+            If initialize-in-order is not set or set to false, the order
+            of initialization is unspecified and may be product-dependent.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="module"
+                   type="jakartaee:moduleType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The application deployment descriptor must have one
+            module element for each Jakarta EE module in the
+            application package. A module element is defined 
+            by moduleType definition. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+                   type="jakartaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="library-directory"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The library-directory element specifies the pathname
+            of a directory within the application package, relative
+            to the top level of the application package.  All files
+            named "*.jar" in this directory must be made available
+            in the class path of all components included in this
+            application package.  If this element isn't specified,
+            the directory named "lib" is searched.  An empty element
+            may be used to disable searching.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry"
+                   type="jakartaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="jakartaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="jakartaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="jakartaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="jakartaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="jakartaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="jakartaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="jakartaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="jakartaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="jakartaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="jakartaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="jakartaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="jakartaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="jakartaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="context-service"
+                   type="jakartaee:context-serviceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="managed-executor"
+                   type="jakartaee:managed-executorType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="managed-scheduled-executor"
+                   type="jakartaee:managed-scheduled-executorType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="managed-thread-factory"
+                   type="jakartaee:managed-thread-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="10"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 10.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The moduleType defines a single Jakarta EE module and contains a
+        connector, ejb, java, or web element, which indicates the
+        module type and contains a path to the module file, and an
+        optional alt-dd element, which specifies an optional URI to
+        the post-assembly version of the deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="connector"
+                     type="jakartaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The connector element specifies the URI of a
+              resource adapter archive file, relative to the
+              top level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="ejb"
+                     type="jakartaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb element specifies the URI of an ejb-jar,
+              relative to the top level of the application
+              package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="java"
+                     type="jakartaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The java element specifies the URI of a java
+              application client module, relative to the top
+              level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="web"
+                     type="jakartaee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The alt-dd element specifies an optional URI to the
+            post-assembly version of the deployment descriptor
+            file for a particular Jakarta EE module.  The URI must
+            specify the full pathname of the deployment
+            descriptor file relative to the application's root
+            directory. If alt-dd is not specified, the deployer
+            must read the deployment descriptor from the default
+            location and file name required by the respective
+            component specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webType defines the web-uri and context-root of
+        a web application module.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+                   type="jakartaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-uri element specifies the URI of a web
+            application file, relative to the top level of the
+            application package.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-root element specifies the context root
+            of a web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application_1_4.xsd b/wildfly/docs/schema/application_1_4.xsd
new file mode 100644
index 0000000..e67c20b
--- /dev/null
+++ b/wildfly/docs/schema/application_1_4.xsd
@@ -0,0 +1,314 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="1.4">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)application_1_4.xsds	1.13 02/11/03
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2002 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the application 1.4 deployment
+	descriptor.  The deployment descriptor must be named
+	"META-INF/application.xml" in the application's ear file.
+	All application deployment descriptors must indicate
+	the application schema by using the J2EE namespace:
+
+	http://java.sun.com/xml/ns/j2ee
+
+	and indicate the version of the schema by
+	using the version element as shown below:
+
+	    <application xmlns="http://java.sun.com/xml/ns/j2ee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
+		http://java.sun.com/xml/ns/j2ee/application_1_4.xsd"
+	      version="1.4">
+	      ...
+	    </application>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for J2EE
+	namespace with the following location:
+
+	http://java.sun.com/xml/ns/j2ee/application_1_4.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all J2EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+
+
+<!-- **************************************************** -->
+
+
+  <xsd:element name="application" type="j2ee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The application element is the root element of a J2EE
+	application deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The context-root element content must be unique
+	  in the ear.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:module/j2ee:web"/>
+      <xsd:field    xpath="j2ee:context-root"/>
+    </xsd:unique>
+
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The security-role-name element content
+	  must be unique in the ear.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:security-role"/>
+      <xsd:field    xpath="j2ee:role-name"/>
+    </xsd:unique>
+
+  </xsd:element>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The applicationType defines the structure of the
+	application.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="module"
+		   type="j2ee:moduleType"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The application deployment descriptor must have one
+	    module element for each J2EE module in the
+	    application package. A module element is defined
+	    by moduleType definition.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+		   type="j2ee:security-roleType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+		   type="j2ee:dewey-versionType"
+		   fixed="1.4"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The required value for the version is 1.4.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The moduleType defines a single J2EE module and contains a
+	connector, ejb, java, or web element, which indicates the
+	module type and contains a path to the module file, and an
+	optional alt-dd element, which specifies an optional URI to
+	the post-assembly version of the deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:choice>
+	<xsd:element name="connector"
+		     type="j2ee:pathType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The connector element specifies the URI of a
+	      resource adapter archive file, relative to the
+	      top level of the application package.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="ejb"
+		     type="j2ee:pathType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb element specifies the URI of an ejb-jar,
+	      relative to the top level of the application
+	      package.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="java"
+		     type="j2ee:pathType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The java element specifies the URI of a java
+	      application client module, relative to the top
+	      level of the application package.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="web"
+		     type="j2ee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+		   type="j2ee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The alt-dd element specifies an optional URI to the
+	    post-assembly version of the deployment descriptor
+	    file for a particular J2EE module.  The URI must
+	    specify the full pathname of the deployment
+	    descriptor file relative to the application's root
+	    directory. If alt-dd is not specified, the deployer
+	    must read the deployment descriptor from the default
+	    location and file name required by the respective
+	    component specification.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The webType defines the web-uri and context-root of
+	a web application module.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+		   type="j2ee:pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The web-uri element specifies the URI of a web
+	    application file, relative to the top level of the
+	    application package.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+		   type="j2ee:string">
+
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The context-root element specifies the context root
+	    of a web application.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/application_5.xsd b/wildfly/docs/schema/application_5.xsd
new file mode 100644
index 0000000..56aded0
--- /dev/null
+++ b/wildfly/docs/schema/application_5.xsd
@@ -0,0 +1,334 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/javaee"
+	    xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="5">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)application_5.xsds	1.17 08/05/05
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2006 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the application 5 deployment
+	descriptor.  The deployment descriptor must be named
+	"META-INF/application.xml" in the application's ear file.
+	All application deployment descriptors must indicate
+	the application schema by using the Java EE namespace:
+
+	http://java.sun.com/xml/ns/javaee
+
+	and indicate the version of the schema by
+	using the version element as shown below:
+
+	    <application xmlns="http://java.sun.com/xml/ns/javaee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+		http://java.sun.com/xml/ns/javaee/application_5.xsd"
+	      version="5">
+	      ...
+	    </application>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for Java EE
+	namespace with the following location:
+
+	http://java.sun.com/xml/ns/javaee/application_5.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_5.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application" type="javaee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The application element is the root element of a Java EE
+	application deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The context-root element content must be unique
+	  in the ear.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:module/javaee:web"/>
+      <xsd:field    xpath="javaee:context-root"/>
+    </xsd:unique>
+
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The security-role-name element content
+	  must be unique in the ear.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field    xpath="javaee:role-name"/>
+    </xsd:unique>
+
+  </xsd:element>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The applicationType defines the structure of the
+	application.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="module"
+		   type="javaee:moduleType"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The application deployment descriptor must have one
+	    module element for each Java EE module in the
+	    application package. A module element is defined
+	    by moduleType definition.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+		   type="javaee:security-roleType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="library-directory"
+		   type="javaee:pathType"
+		   minOccurs="0"
+		   maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The library-directory element specifies the pathname
+	    of a directory within the application package, relative
+	    to the top level of the application package.  All files
+	    named "*.jar" in this directory must be made available
+	    in the class path of all components included in this
+	    application package.  If this element isn't specified,
+	    the directory named "lib" is searched.  An empty element
+	    may be used to disable searching.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+		   type="javaee:dewey-versionType"
+		   fixed="5"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The required value for the version is 5.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The moduleType defines a single Java EE module and contains a
+	connector, ejb, java, or web element, which indicates the
+	module type and contains a path to the module file, and an
+	optional alt-dd element, which specifies an optional URI to
+	the post-assembly version of the deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:choice>
+	<xsd:element name="connector"
+		     type="javaee:pathType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The connector element specifies the URI of a
+	      resource adapter archive file, relative to the
+	      top level of the application package.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="ejb"
+		     type="javaee:pathType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb element specifies the URI of an ejb-jar,
+	      relative to the top level of the application
+	      package.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="java"
+		     type="javaee:pathType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The java element specifies the URI of a java
+	      application client module, relative to the top
+	      level of the application package.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="web"
+		     type="javaee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+		   type="javaee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The alt-dd element specifies an optional URI to the
+	    post-assembly version of the deployment descriptor
+	    file for a particular Java EE module.  The URI must
+	    specify the full pathname of the deployment
+	    descriptor file relative to the application's root
+	    directory. If alt-dd is not specified, the deployer
+	    must read the deployment descriptor from the default
+	    location and file name required by the respective
+	    component specification.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The webType defines the web-uri and context-root of
+	a web application module.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+		   type="javaee:pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The web-uri element specifies the URI of a web
+	    application file, relative to the top level of the
+	    application package.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+		   type="javaee:string">
+
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The context-root element specifies the context root
+	    of a web application.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/application_6.xsd b/wildfly/docs/schema/application_6.xsd
new file mode 100644
index 0000000..26111c6
--- /dev/null
+++ b/wildfly/docs/schema/application_6.xsd
@@ -0,0 +1,394 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the application 6 deployment
+      descriptor.  The deployment descriptor must be named
+      "META-INF/application.xml" in the application's ear file.
+      All application deployment descriptors must indicate
+      the application schema by using the Java EE namespace:
+      
+      http://java.sun.com/xml/ns/javaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee 
+      	http://java.sun.com/xml/ns/javaee/application_6.xsd"
+      version="6">
+      ...
+      </application>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://java.sun.com/xml/ns/javaee/application_6.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_6.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application"
+               type="javaee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application element is the root element of a Java EE
+        application deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The context-root element content must be unique
+          in the ear. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:module/javaee:web"/>
+      <xsd:field xpath="javaee:context-root"/>
+    </xsd:unique>
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The security-role-name element content
+          must be unique in the ear.  
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The applicationType defines the structure of the
+        application. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="application-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="initialize-in-order"
+                   type="javaee:generic-booleanType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If initialize-in-order is true, modules must be initialized
+            in the order they're listed in this deployment descriptor,
+            with the exception of application client modules, which can
+            be initialized in any order.
+            If initialize-in-order is not set or set to false, the order
+            of initialization is unspecified and may be product-dependent.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="module"
+                   type="javaee:moduleType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The application deployment descriptor must have one
+            module element for each Java EE module in the
+            application package. A module element is defined 
+            by moduleType definition. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="library-directory"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The library-directory element specifies the pathname
+            of a directory within the application package, relative
+            to the top level of the application package.  All files
+            named "*.jar" in this directory must be made available
+            in the class path of all components included in this
+            application package.  If this element isn't specified,
+            the directory named "lib" is searched.  An empty element
+            may be used to disable searching.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="javaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="javaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="6"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 6.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The moduleType defines a single Java EE module and contains a
+        connector, ejb, java, or web element, which indicates the
+        module type and contains a path to the module file, and an
+        optional alt-dd element, which specifies an optional URI to
+        the post-assembly version of the deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="connector"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The connector element specifies the URI of a
+              resource adapter archive file, relative to the
+              top level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="ejb"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb element specifies the URI of an ejb-jar,
+              relative to the top level of the application
+              package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="java"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The java element specifies the URI of a java
+              application client module, relative to the top
+              level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="web"
+                     type="javaee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The alt-dd element specifies an optional URI to the
+            post-assembly version of the deployment descriptor
+            file for a particular Java EE module.  The URI must
+            specify the full pathname of the deployment
+            descriptor file relative to the application's root
+            directory. If alt-dd is not specified, the deployer
+            must read the deployment descriptor from the default
+            location and file name required by the respective
+            component specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webType defines the web-uri and context-root of
+        a web application module.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+                   type="javaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-uri element specifies the URI of a web
+            application file, relative to the top level of the
+            application package.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-root element specifies the context root
+            of a web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application_7.xsd b/wildfly/docs/schema/application_7.xsd
new file mode 100644
index 0000000..3f855da
--- /dev/null
+++ b/wildfly/docs/schema/application_7.xsd
@@ -0,0 +1,414 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the application 7 deployment
+      descriptor.  The deployment descriptor must be named
+      "META-INF/application.xml" in the application's ear file.
+      All application deployment descriptors must indicate
+      the application schema by using the Java EE namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee 
+      	http://xmlns.jcp.org/xml/ns/javaee/application_7.xsd"
+      version="7">
+      ...
+      </application>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/application_7.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application"
+               type="javaee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application element is the root element of a Java EE
+        application deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The context-root element content must be unique
+          in the ear. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:module/javaee:web"/>
+      <xsd:field xpath="javaee:context-root"/>
+    </xsd:unique>
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The security-role-name element content
+          must be unique in the ear.  
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The applicationType defines the structure of the
+        application. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="application-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="initialize-in-order"
+                   type="javaee:generic-booleanType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If initialize-in-order is true, modules must be initialized
+            in the order they're listed in this deployment descriptor,
+            with the exception of application client modules, which can
+            be initialized in any order.
+            If initialize-in-order is not set or set to false, the order
+            of initialization is unspecified and may be product-dependent.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="module"
+                   type="javaee:moduleType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The application deployment descriptor must have one
+            module element for each Java EE module in the
+            application package. A module element is defined 
+            by moduleType definition. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="library-directory"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The library-directory element specifies the pathname
+            of a directory within the application package, relative
+            to the top level of the application package.  All files
+            named "*.jar" in this directory must be made available
+            in the class path of all components included in this
+            application package.  If this element isn't specified,
+            the directory named "lib" is searched.  An empty element
+            may be used to disable searching.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="javaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="javaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="javaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="javaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="javaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="javaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="javaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="7"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 7.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The moduleType defines a single Java EE module and contains a
+        connector, ejb, java, or web element, which indicates the
+        module type and contains a path to the module file, and an
+        optional alt-dd element, which specifies an optional URI to
+        the post-assembly version of the deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="connector"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The connector element specifies the URI of a
+              resource adapter archive file, relative to the
+              top level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="ejb"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb element specifies the URI of an ejb-jar,
+              relative to the top level of the application
+              package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="java"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The java element specifies the URI of a java
+              application client module, relative to the top
+              level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="web"
+                     type="javaee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The alt-dd element specifies an optional URI to the
+            post-assembly version of the deployment descriptor
+            file for a particular Java EE module.  The URI must
+            specify the full pathname of the deployment
+            descriptor file relative to the application's root
+            directory. If alt-dd is not specified, the deployer
+            must read the deployment descriptor from the default
+            location and file name required by the respective
+            component specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webType defines the web-uri and context-root of
+        a web application module.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+                   type="javaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-uri element specifies the URI of a web
+            application file, relative to the top level of the
+            application package.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-root element specifies the context root
+            of a web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application_8.xsd b/wildfly/docs/schema/application_8.xsd
new file mode 100644
index 0000000..97f7b59
--- /dev/null
+++ b/wildfly/docs/schema/application_8.xsd
@@ -0,0 +1,414 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+      Copyright (c) 2009-2017 Oracle and/or its affiliates. All rights reserved.
+
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the application 8 deployment
+      descriptor.  The deployment descriptor must be named
+      "META-INF/application.xml" in the application's ear file.
+      All application deployment descriptors must indicate
+      the application schema by using the Java EE namespace:
+
+      http://xmlns.jcp.org/xml/ns/javaee
+
+      and indicate the version of the schema by
+      using the version element as shown below:
+
+      <application xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
+	http://xmlns.jcp.org/xml/ns/javaee/application_8.xsd"
+      version="8">
+      ...
+      </application>
+
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+
+      http://xmlns.jcp.org/xml/ns/javaee/application_8.xsd
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_8.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application"
+               type="javaee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application element is the root element of a Java EE
+        application deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The context-root element content must be unique
+          in the ear.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:module/javaee:web"/>
+      <xsd:field xpath="javaee:context-root"/>
+    </xsd:unique>
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The security-role-name element content
+          must be unique in the ear.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The applicationType defines the structure of the
+        application.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="application-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="initialize-in-order"
+                   type="javaee:generic-booleanType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If initialize-in-order is true, modules must be initialized
+            in the order they're listed in this deployment descriptor,
+            with the exception of application client modules, which can
+            be initialized in any order.
+            If initialize-in-order is not set or set to false, the order
+            of initialization is unspecified and may be product-dependent.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="module"
+                   type="javaee:moduleType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The application deployment descriptor must have one
+            module element for each Java EE module in the
+            application package. A module element is defined
+            by moduleType definition.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="library-directory"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The library-directory element specifies the pathname
+            of a directory within the application package, relative
+            to the top level of the application package.  All files
+            named "*.jar" in this directory must be made available
+            in the class path of all components included in this
+            application package.  If this element isn't specified,
+            the directory named "lib" is searched.  An empty element
+            may be used to disable searching.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="javaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="javaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="javaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="javaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="javaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="javaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="javaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="8"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 8.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The moduleType defines a single Java EE module and contains a
+        connector, ejb, java, or web element, which indicates the
+        module type and contains a path to the module file, and an
+        optional alt-dd element, which specifies an optional URI to
+        the post-assembly version of the deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="connector"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The connector element specifies the URI of a
+              resource adapter archive file, relative to the
+              top level of the application package.
+
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="ejb"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb element specifies the URI of an ejb-jar,
+              relative to the top level of the application
+              package.
+
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="java"
+                     type="javaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The java element specifies the URI of a java
+              application client module, relative to the top
+              level of the application package.
+
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="web"
+                     type="javaee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The alt-dd element specifies an optional URI to the
+            post-assembly version of the deployment descriptor
+            file for a particular Java EE module.  The URI must
+            specify the full pathname of the deployment
+            descriptor file relative to the application's root
+            directory. If alt-dd is not specified, the deployer
+            must read the deployment descriptor from the default
+            location and file name required by the respective
+            component specification.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webType defines the web-uri and context-root of
+        a web application module.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+                   type="javaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-uri element specifies the URI of a web
+            application file, relative to the top level of the
+            application package.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-root element specifies the context root
+            of a web application.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/application_9.xsd b/wildfly/docs/schema/application_9.xsd
new file mode 100644
index 0000000..1e038a2
--- /dev/null
+++ b/wildfly/docs/schema/application_9.xsd
@@ -0,0 +1,390 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="9">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the application 9 deployment
+      descriptor.  The deployment descriptor must be named
+      "META-INF/application.xml" in the application's ear file.
+      All application deployment descriptors must indicate
+      the application schema by using the Jakarta EE namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and indicate the version of the schema by
+      using the version element as shown below:
+      
+      <application xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee 
+      	https://jakarta.ee/xml/ns/jakartaee/application_9.xsd"
+      version="9">
+      ...
+      </application>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/application_9.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="application"
+               type="jakartaee:applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application element is the root element of a Jakarta EE
+        application deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="context-root-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The context-root element content must be unique
+          in the ear. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:module/jakartaee:web"/>
+      <xsd:field xpath="jakartaee:context-root"/>
+    </xsd:unique>
+    <xsd:unique name="security-role-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The security-role-name element content
+          must be unique in the ear.  
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The applicationType defines the structure of the
+        application. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="application-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="initialize-in-order"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If initialize-in-order is true, modules must be initialized
+            in the order they're listed in this deployment descriptor,
+            with the exception of application client modules, which can
+            be initialized in any order.
+            If initialize-in-order is not set or set to false, the order
+            of initialization is unspecified and may be product-dependent.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="module"
+                   type="jakartaee:moduleType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The application deployment descriptor must have one
+            module element for each Jakarta EE module in the
+            application package. A module element is defined 
+            by moduleType definition. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="security-role"
+                   type="jakartaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="library-directory"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The library-directory element specifies the pathname
+            of a directory within the application package, relative
+            to the top level of the application package.  All files
+            named "*.jar" in this directory must be made available
+            in the class path of all components included in this
+            application package.  If this element isn't specified,
+            the directory named "lib" is searched.  An empty element
+            may be used to disable searching.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry"
+                   type="jakartaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="jakartaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="jakartaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="jakartaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="jakartaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="jakartaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="jakartaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="jakartaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="jakartaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="jakartaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="jakartaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="jakartaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="jakartaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="jakartaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="9"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 9.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="moduleType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The moduleType defines a single Jakarta EE module and contains a
+        connector, ejb, java, or web element, which indicates the
+        module type and contains a path to the module file, and an
+        optional alt-dd element, which specifies an optional URI to
+        the post-assembly version of the deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="connector"
+                     type="jakartaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The connector element specifies the URI of a
+              resource adapter archive file, relative to the
+              top level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="ejb"
+                     type="jakartaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb element specifies the URI of an ejb-jar,
+              relative to the top level of the application
+              package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="java"
+                     type="jakartaee:pathType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The java element specifies the URI of a java
+              application client module, relative to the top
+              level of the application package.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="web"
+                     type="jakartaee:webType"/>
+      </xsd:choice>
+      <xsd:element name="alt-dd"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The alt-dd element specifies an optional URI to the
+            post-assembly version of the deployment descriptor
+            file for a particular Jakarta EE module.  The URI must
+            specify the full pathname of the deployment
+            descriptor file relative to the application's root
+            directory. If alt-dd is not specified, the deployer
+            must read the deployment descriptor from the default
+            location and file name required by the respective
+            component specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webType defines the web-uri and context-root of
+        a web application module.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-uri"
+                   type="jakartaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-uri element specifies the URI of a web
+            application file, relative to the top level of the
+            application package.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-root"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-root element specifies the context root
+            of a web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/batch-jberet_1_0.xsd b/wildfly/docs/schema/batch-jberet_1_0.xsd
new file mode 100644
index 0000000..7dfa983
--- /dev/null
+++ b/wildfly/docs/schema/batch-jberet_1_0.xsd
@@ -0,0 +1,87 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:batch-jberet:1.0"
+           targetNamespace="urn:jboss:batch-jberet:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The deployment descriptor root element -->
+    <xs:element name="batch" type="batchType"/>
+
+    <xs:complexType name="batchType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The batch environment configuration for the deployment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="restart-jobs-on-resume" type="booleanType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        If set to true when a resume operation has be invoked after a suspend operation any jobs stopped
+                        during the suspend will be restarted. A value of false will leave the jobs in a stopped state.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="job-repository" type="job-repositoryType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pool" type="namedType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Specify the name of the thread-pool to use defined in the batch-jberet subsystem.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanType">
+        <xs:attribute name="value" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="job-repositoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The name of the job repository to use
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="in-memory" type="in-memoryType"/>
+            <xs:element name="named" type="namedType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates the name of the job repository defined on the subsystem to use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="in-memoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe an in-memory job repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/discovery-1_0.xsd b/wildfly/docs/schema/discovery-1_0.xsd
new file mode 100644
index 0000000..a5dddbe
--- /dev/null
+++ b/wildfly/docs/schema/discovery-1_0.xsd
@@ -0,0 +1,102 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2016 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly-discovery:1.0"
+           xmlns="urn:wildfly-discovery:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The root element -->
+
+    <xs:element name="discovery" type="discoveryType"/>
+
+    <xs:complexType name="discoveryType">
+        <xs:all>
+            <xs:element name="discovery-provider" type="discoveryProviderType"/>
+            <xs:element name="registry-provider" type="registryProviderType"/>
+        </xs:all>
+    </xs:complexType>
+
+    <!-- Discovery elements -->
+
+    <xs:complexType name="discoveryProviderType">
+        <xs:choice>
+            <xs:element name="local-registry" type="emptyType"/>
+            <xs:element name="static" type="staticDiscoveryProviderType"/>
+            <xs:element name="aggregate" type="aggregateDiscoveryProviderType"/>
+            <xs:element name="custom" type="customType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="staticDiscoveryProviderType">
+        <xs:sequence>
+            <xs:element name="service" type="serviceType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serviceType">
+        <xs:sequence>
+            <xs:element name="attribute" type="attributeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+        <xs:attribute name="uri-scheme-authority" type="xs:string" use="optional"/>
+        <xs:attribute name="abstract-type" type="xs:string" use="optional"/>
+        <xs:attribute name="abstract-type-authority" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="attributeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateDiscoveryProviderType">
+        <xs:sequence>
+            <xs:element name="discovery-provider" type="discoveryProviderType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Registry elements -->
+
+    <xs:complexType name="registryProviderType">
+        <xs:choice>
+            <xs:element name="local-registry" type="emptyType"/>
+            <xs:element name="aggregate" type="aggregateRegistryProviderType"/>
+            <xs:element name="custom" type="customType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRegistryProviderType">
+        <xs:sequence>
+            <xs:element name="registry-provider" type="registryProviderType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Common types -->
+
+    <xs:complexType name="emptyType"/>
+
+    <xs:complexType name="customType">
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+        <xs:attribute name="class" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/distributable-web_1_0.xsd b/wildfly/docs/schema/distributable-web_1_0.xsd
new file mode 100644
index 0000000..8f71147
--- /dev/null
+++ b/wildfly/docs/schema/distributable-web_1_0.xsd
@@ -0,0 +1,178 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema targetNamespace="urn:jboss:distributable-web:1.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:distributable-web:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="distributable-web" type="tns:distributable-web"></xs:element>
+
+    <xs:complexType name="distributable-web">
+        <xs:choice>
+            <xs:element name="session-management" type="tns:session-management">
+                <xs:annotation>
+                    <xs:documentation>References an existing session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific Infinispan cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="session-management">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References the name of an existing session management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:sequence>
+                    <xs:choice>
+                        <xs:group ref="tns:affinity"/>
+                        <xs:element name="primary-owner-affinity" type="tns:empty">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the primary owner of a given session.
+                                    Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                    <xs:group ref="tns:immutability"/>
+                </xs:sequence>
+                <xs:attribute name="cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            References a cache within the associated cache-container.
+                            If unspecified, the default cache of the associated cache-container is assumed.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:group name="immutability">
+        <xs:sequence>
+            <xs:element name="immutable-class" type="xs:string" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Identifies an immutable session attribute class.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:group>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/distributable-web_2_0.xsd b/wildfly/docs/schema/distributable-web_2_0.xsd
new file mode 100644
index 0000000..9805882
--- /dev/null
+++ b/wildfly/docs/schema/distributable-web_2_0.xsd
@@ -0,0 +1,200 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema targetNamespace="urn:jboss:distributable-web:2.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:distributable-web:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <xs:element name="distributable-web" type="tns:distributable-web"></xs:element>
+
+    <xs:complexType name="distributable-web">
+        <xs:choice>
+            <xs:element name="session-management" type="tns:session-management">
+                <xs:annotation>
+                    <xs:documentation>References an existing session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific Infinispan cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="session-management">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References the name of an existing session management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:sequence>
+                    <xs:choice>
+                        <xs:group ref="tns:affinity"/>
+                        <xs:element name="primary-owner-affinity" type="tns:empty">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the primary owner of a given session.
+                                    Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="ranked-affinity" type="tns:ranked-affinity">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the first available node in a list comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                                    Behaves the same as local-affinity if the cache is not distributed, nor replicated.
+                                    Must be explicitly supported by the load balancer.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                    <xs:group ref="tns:immutability"/>
+                </xs:sequence>
+                <xs:attribute name="cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            References a cache within the associated cache-container.
+                            If unspecified, the default cache of the associated cache-container is assumed.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string" default=".">
+            <xs:annotation>
+                <xs:documentation>The delimiter used to separate ranked routes within the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-routes" type="xs:string" default="3">
+            <xs:annotation>
+                <xs:documentation>The maximum number of routes to append to the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:group name="immutability">
+        <xs:sequence>
+            <xs:element name="immutable-class" type="xs:string" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Identifies an immutable session attribute class.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:group>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/distributable-web_3_0.xsd b/wildfly/docs/schema/distributable-web_3_0.xsd
new file mode 100644
index 0000000..ac98338
--- /dev/null
+++ b/wildfly/docs/schema/distributable-web_3_0.xsd
@@ -0,0 +1,224 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema targetNamespace="urn:jboss:distributable-web:3.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:distributable-web:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <xs:element name="distributable-web" type="tns:distributable-web"></xs:element>
+
+    <xs:complexType name="distributable-web">
+        <xs:choice>
+            <xs:element name="session-management" type="tns:session-management">
+                <xs:annotation>
+                    <xs:documentation>References an existing session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific Infinispan cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="session-management">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References the name of an existing session management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="JBOSS">
+            <xs:annotation>
+                <xs:documentation>Indicates the marshalling implementation used for serializing attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:sequence>
+                    <xs:choice>
+                        <xs:group ref="tns:affinity"/>
+                        <xs:element name="primary-owner-affinity" type="tns:empty">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the primary owner of a given session.
+                                    Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="ranked-affinity" type="tns:ranked-affinity">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the first available node in a list comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                                    Behaves the same as local-affinity if the cache is not distributed, nor replicated.
+                                    Must be explicitly supported by the load balancer.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                    <xs:group ref="tns:immutability"/>
+                </xs:sequence>
+                <xs:attribute name="cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            References a cache within the associated cache-container.
+                            If unspecified, the default cache of the associated cache-container is assumed.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using JBoss Marshalling.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using ProtoStream.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string" default=".">
+            <xs:annotation>
+                <xs:documentation>The delimiter used to separate ranked routes within the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-routes" type="xs:string" default="3">
+            <xs:annotation>
+                <xs:documentation>The maximum number of routes to append to the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:group name="immutability">
+        <xs:sequence>
+            <xs:element name="immutable-class" type="xs:string" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Identifies an immutable session attribute class.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:group>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/distributable-web_4_0.xsd b/wildfly/docs/schema/distributable-web_4_0.xsd
new file mode 100644
index 0000000..009a009
--- /dev/null
+++ b/wildfly/docs/schema/distributable-web_4_0.xsd
@@ -0,0 +1,229 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema targetNamespace="urn:jboss:distributable-web:4.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:distributable-web:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <xs:element name="distributable-web" type="tns:distributable-web"></xs:element>
+
+    <xs:complexType name="distributable-web">
+        <xs:choice>
+            <xs:element name="session-management" type="tns:session-management">
+                <xs:annotation>
+                    <xs:documentation>References an existing session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific Infinispan cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                <xs:annotation>
+                    <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="session-management">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References the name of an existing session management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="JBOSS">
+            <xs:annotation>
+                <xs:documentation>Indicates the marshalling implementation used for serializing attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:sequence>
+                    <xs:choice>
+                        <xs:group ref="tns:affinity"/>
+                        <xs:element name="primary-owner-affinity" type="tns:empty">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the primary owner of a given session.
+                                    Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="ranked-affinity" type="tns:ranked-affinity">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Web requests will have an affinity for the first available node in a list comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                                    Behaves the same as local-affinity if the cache is not distributed, nor replicated.
+                                    Must be explicitly supported by the load balancer.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                    <xs:group ref="tns:immutability"/>
+                </xs:sequence>
+                <xs:attribute name="cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            References a cache within the associated cache-container.
+                            If unspecified, the default cache of the associated cache-container is assumed.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="expiration-thread-pool-size" type="xs:positiveInteger">
+                    <xs:annotation>
+                        <xs:documentation>Configures the number of threads dedicated to processing expiration events from the remote Infinispan cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using JBoss Marshalling.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using ProtoStream.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string" default=".">
+            <xs:annotation>
+                <xs:documentation>The delimiter used to separate ranked routes within the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-routes" type="xs:string" default="3">
+            <xs:annotation>
+                <xs:documentation>The maximum number of routes to append to the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:group name="immutability">
+        <xs:sequence>
+            <xs:element name="immutable-class" type="xs:string" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Identifies an immutable session attribute class.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:group>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/ejb-jar_2_1.xsd b/wildfly/docs/schema/ejb-jar_2_1.xsd
new file mode 100644
index 0000000..9471fec
--- /dev/null
+++ b/wildfly/docs/schema/ejb-jar_2_1.xsd
@@ -0,0 +1,2207 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="2.1">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)ejb-jar_2_1.xsds	1.23 08/01/03
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the EJB 2.1 deployment descriptor.
+	The deployment descriptor must be named "META-INF/ejb-jar.xml" in
+	the EJB's jar file.  All EJB deployment descriptors must indicate
+	the ejb-jar schema by using the J2EE namespace:
+
+	http://java.sun.com/xml/ns/j2ee
+
+	and by indicating the version of the schema by
+	using the version element as shown below:
+
+	    <ejb-jar xmlns="http://java.sun.com/xml/ns/j2ee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
+		  http://java.sun.com/xml/ns/j2ee/ejb-jar_2_1.xsd"
+	      version="2.1">
+	      ...
+	    </ejb-jar>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	J2EE namespace with the following location:
+
+	http://java.sun.com/xml/ns/j2ee/ejb-jar_2_1.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all J2EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+
+
+<!-- **************************************************** -->
+
+
+  <xsd:element name="ejb-jar" type="j2ee:ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is the root of the ejb-jar deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:key name="ejb-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The ejb-name element contains the name of an enterprise
+	  bean. The name must be unique within the ejb-jar file.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:enterprise-beans/*"/>
+      <xsd:field    xpath="j2ee:ejb-name"/>
+    </xsd:key>
+
+    <xsd:keyref name="ejb-name-references"
+		refer="j2ee:ejb-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The keyref indicates the references from
+	  relationship-role-source must be to a specific ejb-name
+	  defined within the scope of enterprise-beans element.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector
+	   xpath=".//j2ee:ejb-relationship-role/j2ee:relationship-role-source"/>
+      <xsd:field
+	   xpath="j2ee:ejb-name"/>
+    </xsd:keyref>
+
+    <xsd:key name="role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  A role-name-key is specified to allow the references
+	  from the security-role-refs.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:assembly-descriptor/j2ee:security-role"/>
+      <xsd:field    xpath="j2ee:role-name"/>
+    </xsd:key>
+
+    <xsd:keyref name="role-name-references"
+		refer="j2ee:role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The keyref indicates the references from
+	  security-role-ref to a specified role-name.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:enterprise-beans/*/j2ee:security-role-ref"/>
+      <xsd:field    xpath="j2ee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The activation-config-propertyType contains a name/value
+	configuration property pair for a message-driven bean.
+
+	The properties that are recognized for a particular
+	message-driven bean are determined by the messaging type.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="activation-config-property-name"
+		   type="j2ee:xsdStringType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The activation-config-property-name element contains
+	    the name for an activation configuration property of
+	    a message-driven bean.
+
+	    For JMS message-driven beans, the following property
+	    names are recognized: acknowledgeMode,
+	    messageSelector, destinationType, subscriptionDurability
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="activation-config-property-value"
+		   type="j2ee:xsdStringType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The activation-config-property-value element
+	    contains the value for an activation configuration
+	    property of a message-driven bean.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The activation-configType defines information about the
+	expected configuration properties of the message-driven bean
+	in its operational environment. This may include information
+	about message acknowledgement, message selector, expected
+	destination type, etc.
+
+	The configuration information is expressed in terms of
+	name/value configuration properties.
+
+	The properties that are recognized for a particular
+	message-driven bean are determined by the messaging type.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="activation-config-property"
+		   type="j2ee:activation-config-propertyType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="assembly-descriptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The assembly-descriptorType defines
+	application-assembly information.
+
+	The application-assembly information consists of the
+	following parts: the definition of security roles, the
+	definition of method permissions, the definition of
+	transaction attributes for enterprise beans with
+	container-managed transaction demarcation and a list of
+	methods to be excluded from being invoked.
+
+	All the parts are optional in the sense that they are
+	omitted if the lists represented by them are empty.
+
+	Providing an assembly-descriptor in the deployment
+	descriptor is optional for the ejb-jar file producer.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="security-role"
+		   type="j2ee:security-roleType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="method-permission"
+		   type="j2ee:method-permissionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="container-transaction"
+		   type="j2ee:container-transactionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+		   type="j2ee:message-destinationType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="exclude-list"
+		   type="j2ee:exclude-listType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmp-fieldType describes a container-managed field. The
+	cmp-fieldType contains an optional description of the field,
+	and the name of the field.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="field-name"
+		   type="j2ee:java-identifierType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The field-name element specifies the name of a
+	    container managed field.
+
+	    The name of the cmp-field of an entity bean with
+	    cmp-version 2.x must begin with a lowercase
+	    letter. This field is accessed by methods whose
+	    names consists of the name of the field specified by
+	    field-name in which the first letter is uppercased,
+	    prefixed by "get" or "set".
+
+	    The name of the cmp-field of an entity bean with
+	    cmp-version 1.x must denote a public field of the
+	    enterprise bean class or one of its superclasses.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmp-versionType specifies the version of an entity bean
+	with container-managed persistence. It is used by
+	cmp-version elements.
+
+	The value must be one of the two following:
+
+	    1.x
+	    2.x
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="1.x"/>
+	<xsd:enumeration value="2.x"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-field-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmr-field-type element specifies the class of a
+	collection-valued logical relationship field in the entity
+	bean class. The value of an element using cmr-field-typeType
+	must be either: java.util.Collection or java.util.Set.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="java.util.Collection"/>
+	<xsd:enumeration value="java.util.Set"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmr-fieldType describes the bean provider's view of
+	a relationship. It consists of an optional description, and
+	the name and the class type of a field in the source of a
+	role of a relationship. The cmr-field-name element
+	corresponds to the name used for the get and set accessor
+	methods for the relationship. The cmr-field-type element is
+	used only for collection-valued cmr-fields. It specifies the
+	type of the collection that is used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="cmr-field-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The cmr-field-name element specifies the name of a
+	    logical relationship field in the entity bean
+	    class. The name of the cmr-field must begin with a
+	    lowercase letter. This field is accessed by methods
+	    whose names consist of the name of the field
+	    specified by cmr-field-name in which the first
+	    letter is uppercased, prefixed by "get" or "set".
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmr-field-type"
+		   type="j2ee:cmr-field-typeType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="container-transactionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The container-transactionType specifies how the container
+	must manage transaction scopes for the enterprise bean's
+	method invocations. It defines an optional description, a
+	list of method elements, and a transaction attribute. The
+	transaction attribute is to be applied to all the specified
+	methods.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+		   type="j2ee:methodType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="trans-attribute"
+		   type="j2ee:trans-attributeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-classType contains the fully-qualified name of the
+	  enterprise bean's class. It is used by ejb-class elements.
+
+	  Example:
+
+	      <ejb-class>com.wombat.empl.EmployeeServiceBean</ejb-class>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-jarType defines the root element of the EJB
+	deployment descriptor. It contains
+
+	    - an optional description of the ejb-jar file
+	    - an optional display name
+	    - an optional icon that contains a small and a large
+	      icon file name
+	    - mandatory structural information about all included
+	      enterprise beans
+	    - a descriptor for container managed relationships,
+	      if any
+	    - an optional application-assembly descriptor
+	    - an optional name of an ejb-client-jar file for the
+	      ejb-jar.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="enterprise-beans"
+		   type="j2ee:enterprise-beansType"/>
+      <xsd:element name="relationships"
+		   type="j2ee:relationshipsType"
+		   minOccurs="0">
+	<xsd:unique name="relationship-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-relation-name contains the name of a
+	      relation. The name must be unique within
+	      relationships.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-relation"/>
+	  <xsd:field    xpath="j2ee:ejb-relation-name"/>
+	</xsd:unique>
+      </xsd:element>
+      <xsd:element name="assembly-descriptor"
+		   type="j2ee:assembly-descriptorType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Providing an assembly-descriptor in the deployment
+	    descriptor is optional for the ejb-jar file
+	    producer.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-client-jar"
+		   type="j2ee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The optional ejb-client-jar element specifies a JAR
+	      file that contains the class files necessary for a
+	      client program to access the
+	      enterprise beans in the ejb-jar file.
+
+	      Example:
+
+		  <ejb-client-jar>employee_service_client.jar
+		  </ejb-client-jar>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+		   type="j2ee:dewey-versionType"
+		   fixed="2.1"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The version specifies the version of the
+	  EJB specification that the instance document must
+	  comply with. This information enables deployment tools
+	  to validate a particular EJB Deployment
+	  Descriptor with respect to a specific version of the EJB
+	  schema.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-nameType specifies an enterprise bean's name. It is
+	  used by ejb-name elements. This name is assigned by the
+	  ejb-jar file producer to name the enterprise bean in the
+	  ejb-jar file's deployment descriptor. The name must be
+	  unique among the names of the enterprise beans in the same
+	  ejb-jar file.
+
+	  There is no architected relationship between the used
+	  ejb-name in the deployment descriptor and the JNDI name that
+	  the Deployer will assign to the enterprise bean's home.
+
+	  The name for an entity bean must conform to the lexical
+	  rules for an NMTOKEN.
+
+	  Example:
+
+	  <ejb-name>EmployeeService</ejb-name>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-relationType describes a relationship between two
+	entity beans with container-managed persistence.  It is used
+	by ejb-relation elements. It contains a description; an
+	optional ejb-relation-name element; and exactly two
+	relationship role declarations, defined by the
+	ejb-relationship-role elements. The name of the
+	relationship, if specified, is unique within the ejb-jar
+	file.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation-name"
+		   type="j2ee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The ejb-relation-name element provides a unique name
+	    within the ejb-jar file for a relationship.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-relationship-role"
+		   type="j2ee:ejb-relationship-roleType"/>
+      <xsd:element name="ejb-relationship-role"
+		   type="j2ee:ejb-relationship-roleType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationship-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-relationship-roleType describes a role within a
+	  relationship. There are two roles in each relationship.
+
+	  The ejb-relationship-roleType contains an optional
+	  description; an optional name for the relationship role; a
+	  specification of the multiplicity of the role; an optional
+	  specification of cascade-delete functionality for the role;
+	  the role source; and a declaration of the cmr-field, if any,
+	  by means of which the other side of the relationship is
+	  accessed from the perspective of the role source.
+
+	  The multiplicity and role-source element are mandatory.
+
+	  The relationship-role-source element designates an entity
+	  bean by means of an ejb-name element. For bidirectional
+	  relationships, both roles of a relationship must declare a
+	  relationship-role-source element that specifies a cmr-field
+	  in terms of which the relationship is accessed. The lack of
+	  a cmr-field element in an ejb-relationship-role specifies
+	  that the relationship is unidirectional in navigability and
+	  the entity bean that participates in the relationship is
+	  "not aware" of the relationship.
+
+	  Example:
+
+	  <ejb-relation>
+	      <ejb-relation-name>Product-LineItem</ejb-relation-name>
+	      <ejb-relationship-role>
+		  <ejb-relationship-role-name>product-has-lineitems
+		  </ejb-relationship-role-name>
+		  <multiplicity>One</multiplicity>
+		  <relationship-role-source>
+		  <ejb-name>ProductEJB</ejb-name>
+		  </relationship-role-source>
+	       </ejb-relationship-role>
+	  </ejb-relation>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relationship-role-name"
+		   type="j2ee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The ejb-relationship-role-name element defines a
+	    name for a role that is unique within an
+	    ejb-relation. Different relationships can use the
+	    same name for a role.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="multiplicity"
+		   type="j2ee:multiplicityType"/>
+      <xsd:element name="cascade-delete"
+		   type="j2ee:emptyType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The cascade-delete element specifies that, within a
+	    particular relationship, the lifetime of one or more
+	    entity beans is dependent upon the lifetime of
+	    another entity bean. The cascade-delete element can
+	    only be specified for an ejb-relationship-role
+	    element contained in an ejb-relation element in
+	    which the other ejb-relationship-role
+	    element specifies a multiplicity of One.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="relationship-role-source"
+		   type="j2ee:relationship-role-sourceType"/>
+      <xsd:element name="cmr-field"
+		   type="j2ee:cmr-fieldType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="enterprise-beansType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The enterprise-beansType declares one or more enterprise
+	beans. Each bean can be a session, entity or message-driven
+	bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:element name="session"
+		   type="j2ee:session-beanType">
+	<xsd:unique name="session-ejb-local-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of
+	      an EJB reference. The EJB reference is an entry in
+	      the component's environment and is relative to the
+	      java:comp/env context.  The name must be unique within
+	      the component.
+
+	      It is recommended that name be prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-local-ref"/>
+	  <xsd:field    xpath="j2ee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-ejb-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of an EJB
+	      reference. The EJB reference is an entry in the
+	      component's environment and is relative to the
+	      java:comp/env context. The name must be unique
+	      within the component.
+
+	      It is recommended that name is prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-ref"/>
+	  <xsd:field    xpath="j2ee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-resource-env-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The resource-env-ref-name element specifies the name
+	      of a resource environment reference; its value is
+	      the environment entry name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:resource-env-ref"/>
+	  <xsd:field    xpath="j2ee:resource-env-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-message-destination-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The message-destination-ref-name element specifies the name
+	      of a message destination reference; its value is
+	      the message destination reference name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:message-destination-ref"/>
+	  <xsd:field    xpath="j2ee:message-destination-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-res-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The res-ref-name element specifies the name of a
+	      resource manager connection factory reference.  The name
+	      is a JNDI name relative to the java:comp/env context.
+	      The name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:resource-ref"/>
+	  <xsd:field    xpath="j2ee:res-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-env-entry-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The env-entry-name element contains the name of a
+	      component's environment entry.  The name is a JNDI
+	      name relative to the java:comp/env context.  The
+	      name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:env-entry"/>
+	  <xsd:field    xpath="j2ee:env-entry-name"/>
+	</xsd:unique>
+      </xsd:element>
+
+      <xsd:element name="entity"
+		   type="j2ee:entity-beanType">
+	<xsd:unique name="entity-ejb-local-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of
+	      an EJB reference. The EJB reference is an entry in
+	      the component's environment and is relative to the
+	      java:comp/env context.  The name must be unique within
+	      the component.
+
+	      It is recommended that name be prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-local-ref"/>
+	  <xsd:field    xpath="j2ee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-ejb-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of an EJB
+	      reference. The EJB reference is an entry in the
+	      component's environment and is relative to the
+	      java:comp/env context. The name must be unique
+	      within the component.
+
+	      It is recommended that name is prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-ref"/>
+	  <xsd:field    xpath="j2ee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-resource-env-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The resource-env-ref-name element specifies the name
+	      of a resource environment reference; its value is
+	      the environment entry name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:resource-env-ref"/>
+	  <xsd:field    xpath="j2ee:resource-env-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-message-destination-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The message-destination-ref-name element specifies the name
+	      of a message destination reference; its value is
+	      the message destination reference name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:message-destination-ref"/>
+	  <xsd:field    xpath="j2ee:message-destination-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-res-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The res-ref-name element specifies the name of a
+	      resource manager connection factory reference.  The name
+	      is a JNDI name relative to the java:comp/env context.
+	      The name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:resource-ref"/>
+	  <xsd:field    xpath="j2ee:res-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-env-entry-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The env-entry-name element contains the name of a
+	      component's environment entry.  The name is a JNDI
+	      name relative to the java:comp/env context.  The
+	      name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:env-entry"/>
+	  <xsd:field    xpath="j2ee:env-entry-name"/>
+	</xsd:unique>
+      </xsd:element>
+
+      <xsd:element name="message-driven"
+		   type="j2ee:message-driven-beanType">
+	<xsd:unique name="messaged-ejb-local-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of
+	      an EJB reference. The EJB reference is an entry in
+	      the component's environment and is relative to the
+	      java:comp/env context.  The name must be unique within
+	      the component.
+
+	      It is recommended that name be prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-local-ref"/>
+	  <xsd:field    xpath="j2ee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-ejb-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of an EJB
+	      reference. The EJB reference is an entry in the
+	      component's environment and is relative to the
+	      java:comp/env context. The name must be unique
+	      within the component.
+
+	      It is recommended that name is prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:ejb-ref"/>
+	  <xsd:field    xpath="j2ee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-resource-env-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The resource-env-ref-name element specifies the name
+	      of a resource environment reference; its value is
+	      the environment entry name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:resource-env-ref"/>
+	  <xsd:field    xpath="j2ee:resource-env-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-message-destination-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The message-destination-ref-name element specifies the name
+	      of a message destination reference; its value is
+	      the message destination reference name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:message-destination-ref"/>
+	  <xsd:field    xpath="j2ee:message-destination-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-res-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The res-ref-name element specifies the name of a
+	      resource manager connection factory reference.  The name
+	      is a JNDI name relative to the java:comp/env context.
+	      The name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:resource-ref"/>
+	  <xsd:field    xpath="j2ee:res-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-env-entry-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The env-entry-name element contains the name of a
+	      component's environment entry.  The name is a JNDI
+	      name relative to the java:comp/env context.  The
+	      name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:env-entry"/>
+	  <xsd:field    xpath="j2ee:env-entry-name"/>
+	</xsd:unique>
+      </xsd:element>
+
+    </xsd:choice>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The entity-beanType declares an entity bean. The declaration
+	consists of:
+
+	    - an optional description
+	    - an optional display name
+	    - an optional icon element that contains a small and a large
+	      icon file name
+	    - a unique name assigned to the enterprise bean
+	      in the deployment descriptor
+	    - the names of the entity bean's remote home
+	      and remote interfaces, if any
+	    - the names of the entity bean's local home and local
+	      interfaces, if any
+	    - the entity bean's implementation class
+	    - the entity bean's persistence management type
+	    - the entity bean's primary key class name
+	    - an indication of the entity bean's reentrancy
+	    - an optional specification of the
+	      entity bean's cmp-version
+	    - an optional specification of the entity bean's
+	      abstract schema name
+	    - an optional list of container-managed fields
+	    - an optional specification of the primary key
+	      field
+	    - an optional declaration of the bean's environment
+	      entries
+	    - an optional declaration of the bean's EJB
+	      references
+	    - an optional declaration of the bean's local
+	      EJB references
+	    - an optional declaration of the bean's web
+	      service references
+	    - an optional declaration of the security role
+	      references
+	    - an optional declaration of the security identity
+	      to be used for the execution of the bean's methods
+	    - an optional declaration of the bean's
+	      resource manager connection factory references
+	    - an optional declaration of the bean's
+	      resource environment references
+	    - an optional declaration of the bean's message
+	      destination references
+	    - an optional set of query declarations
+	      for finder and select methods for an entity
+	      bean with cmp-version 2.x.
+
+	The optional abstract-schema-name element must be specified
+	for an entity bean with container-managed persistence and
+	cmp-version 2.x.
+
+	The optional primkey-field may be present in the descriptor
+	if the entity's persistence-type is Container.
+
+	The optional cmp-version element may be present in the
+	descriptor if the entity's persistence-type is Container. If
+	the persistence-type is Container and the cmp-version
+	element is not specified, its value defaults to 2.x.
+
+	The optional home and remote elements must be specified if
+	the entity bean cmp-version is 1.x.
+
+	The optional home and remote elements must be specified if
+	the entity bean has a remote home and remote interface.
+
+	The optional local-home and local elements must be specified
+	if the entity bean has a local home and local interface.
+
+	Either both the local-home and the local elements or both
+	the home and the remote elements must be specified.
+
+	The optional query elements must be present if the
+	persistence-type is Container and the cmp-version is 2.x and
+	query methods other than findByPrimaryKey have been defined
+	for the entity bean.
+
+	The other elements that are optional are "optional" in the
+	sense that they are omitted if the lists represented by them
+	are empty.
+
+	At least one cmp-field element must be present in the
+	descriptor if the entity's persistence-type is Container and
+	the cmp-version is 1.x, and none must not be present if the
+	entity's persistence-type is Bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+		   type="j2ee:ejb-nameType"/>
+      <xsd:element name="home"
+		   type="j2ee:homeType"
+		   minOccurs="0"/>
+      <xsd:element name="remote"
+		   type="j2ee:remoteType"
+		   minOccurs="0"/>
+      <xsd:element name="local-home"
+		   type="j2ee:local-homeType"
+		   minOccurs="0"/>
+      <xsd:element name="local"
+		   type="j2ee:localType"
+		   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+		   type="j2ee:ejb-classType"/>
+      <xsd:element name="persistence-type"
+		   type="j2ee:persistence-typeType"/>
+      <xsd:element name="prim-key-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The prim-key-class element contains the
+	    fully-qualified name of an
+	    entity bean's primary key class.
+
+	    If the definition of the primary key class is
+	    deferred to deployment time, the prim-key-class
+	    element should specify java.lang.Object.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="reentrant"
+		   type="j2ee:true-falseType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The reentrant element specifies whether an entity
+	    bean is reentrant or not.
+
+	    The reentrant element must be one of the two
+	    following: true or false
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-version"
+		   type="j2ee:cmp-versionType"
+		   minOccurs="0"/>
+      <xsd:element name="abstract-schema-name"
+		   type="j2ee:java-identifierType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The abstract-schema-name element specifies the name
+	    of the abstract schema type of an entity bean with
+	    cmp-version 2.x. It is used in EJB QL queries.
+
+	    For example, the abstract-schema-name for an entity
+	    bean whose local interface is
+	    com.acme.commerce.Order might be Order.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-field"
+		   type="j2ee:cmp-fieldType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="primkey-field"
+		   type="j2ee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The primkey-field element is used to specify the
+	    name of the primary key field for an entity with
+	    container-managed persistence.
+
+	    The primkey-field must be one of the fields declared
+	    in the cmp-field element, and the type of the field
+	    must be the same as the primary key type.
+
+	    The primkey-field element is not used if the primary
+	    key maps to multiple container-managed fields
+	    (i.e. the key is a compound key). In this case, the
+	    fields of the primary key class must be public, and
+	    their names must correspond to the field names of
+	    the entity bean class that comprise the key.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="j2ee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+		   type="j2ee:security-role-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+		   type="j2ee:security-identityType"
+		   minOccurs="0"/>
+      <xsd:element name="query"
+		   type="j2ee:queryType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="exclude-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The exclude-listType specifies one or more methods which
+	the Assembler marks to be uncallable.
+
+	If the method permission relation contains methods that are
+	in the exclude list, the Deployer should consider those
+	methods to be uncallable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+		   type="j2ee:methodType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-driven-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The message-driven element declares a message-driven
+	bean. The declaration consists of:
+
+	    - an optional description
+	    - an optional display name
+	    - an optional icon element that contains a small and a large
+	      icon file name.
+	    - a name assigned to the enterprise bean in
+	      the deployment descriptor
+	    - the message-driven bean's implementation class
+	    - an optional declaration of the bean's messaging
+	      type
+	    - the message-driven bean's transaction management type
+	    - an optional declaration of the bean's
+	      message-destination-type
+	    - an optional declaration of the bean's
+	      message-destination-link
+	    - an optional declaration of the message-driven bean's
+	      activation configuration properties
+	    - an optional declaration of the bean's environment
+	      entries
+	    - an optional declaration of the bean's EJB references
+	    - an optional declaration of the bean's local EJB
+	      references
+	    - an optional declaration of the bean's web service
+	      references
+	    - an optional declaration of the security
+	      identity to be used for the execution of the bean's
+	      methods
+	    - an optional declaration of the bean's
+	      resource manager connection factory
+	      references
+	    - an optional declaration of the bean's resource
+	      environment references.
+	    - an optional declaration of the bean's message
+	      destination references
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+		   type="j2ee:ejb-nameType"/>
+      <xsd:element name="ejb-class"
+		   type="j2ee:ejb-classType"/>
+      <xsd:element name="messaging-type"
+		   type="j2ee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The messaging-type element specifies the message
+	    listener interface of the message-driven bean. If
+	    the messaging-type element is not specified, it is
+	    assumed to be javax.jms.MessageListener.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transaction-type"
+		   type="j2ee:transaction-typeType"/>
+      <xsd:element name="message-destination-type"
+		   type="j2ee:message-destination-typeType"
+		   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+		   type="j2ee:message-destination-linkType"
+		   minOccurs="0"/>
+      <xsd:element name="activation-config"
+		   type="j2ee:activation-configType"
+		   minOccurs="0"/>
+      <xsd:group ref="j2ee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-identity"
+		   type="j2ee:security-identityType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-intfType">
+
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-intf element allows a method element to
+	differentiate between the methods with the same name and
+	signature that are multiply defined across the home and
+	component interfaces (e.g, in both an enterprise bean's
+	remote and local interfaces or in both an enterprise bean's
+	home and remote interfaces, etc.); the component and web
+	service endpoint interfaces, and so on.
+
+	The method-intf element must be one of the following:
+
+	    Home
+	    Remote
+	    LocalHome
+	    Local
+	    ServiceEndpoint
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Home"/>
+	<xsd:enumeration value="Remote"/>
+	<xsd:enumeration value="LocalHome"/>
+	<xsd:enumeration value="Local"/>
+	<xsd:enumeration value="ServiceEndpoint"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-nameType contains a name of an enterprise
+	bean method or the asterisk (*) character. The asterisk is
+	used when the element denotes all the methods of an
+	enterprise bean's client view interfaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-paramsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-paramsType defines a list of the
+	fully-qualified Java type names of the method parameters.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="method-param"
+		   type="j2ee:java-typeType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The method-param element contains a primitive
+	    or a fully-qualified Java type name of a method
+	    parameter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-permissionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-permissionType specifies that one or more
+	security roles are allowed to invoke one or more enterprise
+	bean methods. The method-permissionType consists of an
+	optional description, a list of security role names or an
+	indicator to state that the method is unchecked for
+	authorization, and a list of method elements.
+
+	The security roles used in the method-permissionType
+	must be defined in the security-role elements of the
+	deployment descriptor, and the methods must be methods
+	defined in the enterprise bean's home, component and/or web
+	service endpoint interfaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:choice>
+	<xsd:element name="role-name"
+		     type="j2ee:role-nameType"
+		     maxOccurs="unbounded"/>
+	<xsd:element name="unchecked"
+		     type="j2ee:emptyType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The unchecked element specifies that a method is
+	      not checked for authorization by the container
+	      prior to invocation of the method.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+      <xsd:element name="method"
+		   type="j2ee:methodType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The methodType is used to denote a method of an enterprise
+	  bean's home, component, and/or web service endpoint
+	  interface, or, in the case of a message-driven bean, the
+	  bean's message listener method, or a set of such
+	  methods. The ejb-name element must be the name of one of the
+	  enterprise beans declared in the deployment descriptor; the
+	  optional method-intf element allows to distinguish between a
+	  method with the same signature that is multiply defined
+	  across the home, component, and/or web service endpoint
+	  interfaces; the method-name element specifies the method
+	  name; and the optional method-params elements identify a
+	  single method among multiple methods with an overloaded
+	  method name.
+
+	  There are three possible styles of using methodType element
+	  within a method element:
+
+	  1.
+	  <method>
+	      <ejb-name>EJBNAME</ejb-name>
+	      <method-name>*</method-name>
+	  </method>
+
+	     This style is used to refer to all the methods of the
+	     specified enterprise bean's home, component, and/or web
+	     service endpoint interfaces.
+
+	  2.
+	  <method>
+	      <ejb-name>EJBNAME</ejb-name>
+	      <method-name>METHOD</method-name>
+	  </method>
+
+	     This style is used to refer to the specified method of
+	     the specified enterprise bean. If there are multiple
+	     methods with the same overloaded name, the element of
+	     this style refers to all the methods with the overloaded
+	     name.
+
+	  3.
+	  <method>
+	      <ejb-name>EJBNAME</ejb-name>
+	      <method-name>METHOD</method-name>
+	      <method-params>
+		  <method-param>PARAM-1</method-param>
+		  <method-param>PARAM-2</method-param>
+		  ...
+		  <method-param>PARAM-n</method-param>
+	      </method-params>
+	  </method>
+
+	     This style is used to refer to a single method within a
+	     set of methods with an overloaded name. PARAM-1 through
+	     PARAM-n are the fully-qualified Java types of the
+	     method's input parameters (if the method has no input
+	     arguments, the method-params element contains no
+	     method-param elements). Arrays are specified by the
+	     array element's type, followed by one or more pair of
+	     square brackets (e.g. int[][]). If there are multiple
+	     methods with the same overloaded name, this style refers
+	     to all of the overloaded methods.
+
+	  Examples:
+
+	  Style 1: The following method element refers to all the
+	  methods of the EmployeeService bean's home, component,
+	  and/or web service endpoint interfaces:
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>*</method-name>
+	  </method>
+
+	  Style 2: The following method element refers to all the
+	  create methods of the EmployeeService bean's home
+	  interface(s).
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>create</method-name>
+	  </method>
+
+	  Style 3: The following method element refers to the
+	  create(String firstName, String LastName) method of the
+	  EmployeeService bean's home interface(s).
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  The following example illustrates a Style 3 element with
+	  more complex parameter types. The method
+	  foobar(char s, int i, int[] iar, mypackage.MyClass mycl,
+	  mypackage.MyClass[][] myclaar) would be specified as:
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>foobar</method-name>
+	      <method-params>
+		  <method-param>char</method-param>
+		  <method-param>int</method-param>
+		  <method-param>int[]</method-param>
+		  <method-param>mypackage.MyClass</method-param>
+		  <method-param>mypackage.MyClass[][]</method-param>
+	      </method-params>
+	  </method>
+
+	  The optional method-intf element can be used when it becomes
+	  necessary to differentiate between a method that is multiply
+	  defined across the enterprise bean's home, component, and/or
+	  web service endpoint interfaces with the same name and
+	  signature.
+
+	  For example, the method element
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>Remote</method-intf>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  can be used to differentiate the create(String, String)
+	  method defined in the remote interface from the
+	  create(String, String) method defined in the remote home
+	  interface, which would be defined as
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>Home</method-intf>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  and the create method that is defined in the local home
+	  interface which would be defined as
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>LocalHome</method-intf>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  The method-intf element can be used with all th ree Styles
+	  of the method element usage. For example, the following
+	  method element example could be used to refer to all the
+	  methods of the EmployeeService bean's remote home interface.
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>Home</method-intf>
+	      <method-name>*</method-name>
+	  </method>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+		   type="j2ee:ejb-nameType"/>
+      <xsd:element name="method-intf"
+		   type="j2ee:method-intfType"
+		   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="method-name"
+		   type="j2ee:method-nameType"/>
+      <xsd:element name="method-params"
+		   type="j2ee:method-paramsType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multiplicityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The multiplicityType describes the multiplicity of the
+	role that participates in a relation.
+
+	The value must be one of the two following:
+
+	    One
+	    Many
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="One"/>
+	<xsd:enumeration value="Many"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The persistence-typeType specifies an entity bean's persistence
+	management type.
+
+	The persistence-type element must be one of the two following:
+
+	    Bean
+	    Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Bean"/>
+	<xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="query-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The query-method specifies the method for a finder or select
+	  query.
+
+	  The method-name element specifies the name of a finder or select
+	  method in the entity bean's implementation class.
+
+	  Each method-param must be defined for a query-method using the
+	  method-params element.
+
+	  It is used by the query-method element.
+
+	  Example:
+
+	  <query>
+	      <description>Method finds large orders</description>
+	      <query-method>
+		  <method-name>findLargeOrders</method-name>
+		  <method-params></method-params>
+	      </query-method>
+	      <ejb-ql>
+		SELECT OBJECT(o) FROM Order o
+		  WHERE o.amount &gt; 1000
+	      </ejb-ql>
+	  </query>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="method-name"
+		   type="j2ee:method-nameType"/>
+      <xsd:element name="method-params"
+		   type="j2ee:method-paramsType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="queryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The queryType defines a finder or select
+	query. It contains
+	    - an optional description of the query
+	    - the specification of the finder or select
+	      method it is used by
+		- an optional specification of the result type
+		  mapping, if the query is for a select method
+		  and entity objects are returned.
+		- the EJB QL query string that defines the query.
+
+	Queries that are expressible in EJB QL must use the ejb-ql
+	element to specify the query. If a query is not expressible
+	in EJB QL, the description element should be used to
+	describe the semantics of the query and the ejb-ql element
+	should be empty.
+
+	The result-type-mapping is an optional element. It can only
+	be present if the query-method specifies a select method
+	that returns entity objects.  The default value for the
+	result-type-mapping element is "Local".
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType" minOccurs="0"/>
+      <xsd:element name="query-method"
+		   type="j2ee:query-methodType"/>
+      <xsd:element name="result-type-mapping"
+		   type="j2ee:result-type-mappingType"
+		   minOccurs="0"/>
+      <xsd:element name="ejb-ql"
+		   type="j2ee:xsdStringType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationship-role-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The relationship-role-sourceType designates the source of a
+	role that participates in a relationship. A
+	relationship-role-sourceType is used by
+	relationship-role-source elements to uniquely identify an
+	entity bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+		   type="j2ee:ejb-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationshipsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The relationshipsType describes the relationships in
+	which entity beans with container-managed persistence
+	participate. The relationshipsType contains an optional
+	description; and a list of ejb-relation elements, which
+	specify the container managed relationships.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation"
+		   type="j2ee:ejb-relationType"
+		   maxOccurs="unbounded">
+
+	<xsd:unique name="role-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-relationship-role-name contains the name of a
+	      relationship role. The name must be unique within
+	      a relationship, but can be reused in different
+	      relationships.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector
+	       xpath=".//j2ee:ejb-relationship-role-name"/>
+	  <xsd:field
+	       xpath="."/>
+	</xsd:unique>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="result-type-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The result-type-mappingType is used in the query element to
+	specify whether an abstract schema type returned by a query
+	for a select method is to be mapped to an EJBLocalObject or
+	EJBObject type.
+
+	The value must be one of the following:
+
+	    Local
+	    Remote
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Local"/>
+	<xsd:enumeration value="Remote"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-identityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The security-identityType specifies whether the caller's
+	security identity is to be used for the execution of the
+	methods of the enterprise bean or whether a specific run-as
+	identity is to be used. It contains an optional description
+	and a specification of the security identity to be used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:choice>
+	<xsd:element name="use-caller-identity"
+		     type="j2ee:emptyType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The use-caller-identity element specifies that
+	      the caller's security identity be used as the
+	      security identity for the execution of the
+	      enterprise bean's methods.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="run-as"
+		     type="j2ee:run-asType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The session-beanType declares an session bean. The
+	declaration consists of:
+
+	    - an optional description
+	    - an optional display name
+	    - an optional icon element that contains a small and a large
+	      icon file name
+	    - a name assigned to the enterprise bean
+	      in the deployment description
+	    - the names of the session bean's remote home and
+	      remote interfaces, if any
+	    - the names of the session bean's local home and
+	      local interfaces, if any
+	    - the name of the session bean's web service endpoint
+	      interface, if any
+	    - the session bean's implementation class
+	    - the session bean's state management type
+	    - the session bean's transaction management type
+	    - an optional declaration of the bean's
+	      environment entries
+	    - an optional declaration of the bean's EJB references
+	    - an optional declaration of the bean's local
+	      EJB references
+	    - an optional declaration of the bean's web
+	      service references
+	    - an optional declaration of the security role
+	      references
+	    - an optional declaration of the security identity
+	      to be used for the execution of the bean's methods
+	    - an optional declaration of the bean's resource
+	      manager connection factory references
+	    - an optional declaration of the bean's resource
+	      environment references.
+	    - an optional declaration of the bean's message
+	      destination references
+
+	The elements that are optional are "optional" in the sense
+	that they are omitted when if lists represented by them are
+	empty.
+
+	Either both the local-home and the local elements or both
+	the home and the remote elements must be specified for the
+	session bean.
+
+	The service-endpoint element may only be specified if the
+	bean is a stateless session bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+		   type="j2ee:ejb-nameType"/>
+      <xsd:element name="home"
+		   type="j2ee:homeType"
+		   minOccurs="0"/>
+      <xsd:element name="remote"
+		   type="j2ee:remoteType"
+		   minOccurs="0"/>
+      <xsd:element name="local-home"
+		   type="j2ee:local-homeType"
+		   minOccurs="0"/>
+      <xsd:element name="local"
+		   type="j2ee:localType"
+		   minOccurs="0"/>
+      <xsd:element name="service-endpoint"
+		   type="j2ee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-endpoint element contains the
+	    fully-qualified name of the enterprise bean's web
+	    service endpoint interface. The service-endpoint
+	    element may only be specified for a stateless
+	    session bean. The specified interface must be a
+	    valid JAX-RPC service endpoint interface.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-class"
+		   type="j2ee:ejb-classType"/>
+      <xsd:element name="session-type"
+		   type="j2ee:session-typeType"/>
+      <xsd:element name="transaction-type"
+		   type="j2ee:transaction-typeType"/>
+      <xsd:group ref="j2ee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+		   type="j2ee:security-role-refType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+		   type="j2ee:security-identityType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The session-typeType describes whether the session bean is a
+	stateful session or stateless session. It is used by
+	session-type elements.
+
+	The value must be one of the two following:
+
+	    Stateful
+	    Stateless
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Stateful"/>
+	<xsd:enumeration value="Stateless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="trans-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The trans-attributeType specifies how the container must
+	manage the transaction boundaries when delegating a method
+	invocation to an enterprise bean's business method.
+
+	The value must be one of the following:
+
+	    NotSupported
+	    Supports
+	    Required
+	    RequiresNew
+	    Mandatory
+	    Never
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="NotSupported"/>
+	<xsd:enumeration value="Supports"/>
+	<xsd:enumeration value="Required"/>
+	<xsd:enumeration value="RequiresNew"/>
+	<xsd:enumeration value="Mandatory"/>
+	<xsd:enumeration value="Never"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The transaction-typeType specifies an enterprise bean's
+	transaction management type.
+
+	The transaction-type must be one of the two following:
+
+	    Bean
+	    Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Bean"/>
+	<xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/ejb-jar_3_0.xsd b/wildfly/docs/schema/ejb-jar_3_0.xsd
new file mode 100644
index 0000000..95c749d
--- /dev/null
+++ b/wildfly/docs/schema/ejb-jar_3_0.xsd
@@ -0,0 +1,2705 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/javaee"
+	    xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="3.0">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)ejb-jar_3_0.xsds	1.51 02/23/06
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2006 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the EJB 3.0 deployment descriptor.
+	The deployment descriptor must be named "META-INF/ejb-jar.xml" in
+	the EJB's jar file.  All EJB deployment descriptors must indicate
+	the ejb-jar schema by using the Java EE namespace:
+
+	http://java.sun.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version element as shown below:
+
+	    <ejb-jar xmlns="http://java.sun.com/xml/ns/javaee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+		  http://java.sun.com/xml/ns/javaee/ejb-jar_3_0.xsd"
+	      version="3.0">
+	      ...
+	    </ejb-jar>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://java.sun.com/xml/ns/javaee/ejb-jar_3_0.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_5.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="ejb-jar" type="javaee:ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is the root of the ejb-jar deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:key name="ejb-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The ejb-name element contains the name of an enterprise
+	  bean. The name must be unique within the ejb-jar file.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:enterprise-beans/*"/>
+      <xsd:field    xpath="javaee:ejb-name"/>
+    </xsd:key>
+
+    <xsd:keyref name="ejb-name-references"
+		refer="javaee:ejb-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The keyref indicates the references from
+	  relationship-role-source must be to a specific ejb-name
+	  defined within the scope of enterprise-beans element.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector
+xpath=".//javaee:ejb-relationship-role/javaee:relationship-role-source"/>
+      <xsd:field
+	   xpath="javaee:ejb-name"/>
+    </xsd:keyref>
+
+    <xsd:key name="role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  A role-name-key is specified to allow the references
+	  from the security-role-refs.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:assembly-descriptor/javaee:security-role"/>
+      <xsd:field    xpath="javaee:role-name"/>
+    </xsd:key>
+
+    <xsd:keyref name="role-name-references"
+		refer="javaee:role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The keyref indicates the references from
+	  security-role-ref to a specified role-name.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:enterprise-beans/*/javaee:security-role-ref"/>
+      <xsd:field    xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The activation-config-propertyType contains a name/value
+	configuration property pair for a message-driven bean.
+
+	The properties that are recognized for a particular
+	message-driven bean are determined by the messaging type.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="activation-config-property-name"
+		   type="javaee:xsdStringType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The activation-config-property-name element contains
+	    the name for an activation configuration property of
+	    a message-driven bean.
+
+	    For JMS message-driven beans, the following property
+	    names are recognized: acknowledgeMode,
+	    messageSelector, destinationType, subscriptionDurability
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="activation-config-property-value"
+		   type="javaee:xsdStringType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The activation-config-property-value element
+	    contains the value for an activation configuration
+	    property of a message-driven bean.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The activation-configType defines information about the
+	expected configuration properties of the message-driven bean
+	in its operational environment. This may include information
+	about message acknowledgement, message selector, expected
+	destination type, etc.
+
+	The configuration information is expressed in terms of
+	name/value configuration properties.
+
+	The properties that are recognized for a particular
+	message-driven bean are determined by the messaging type.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="activation-config-property"
+		   type="javaee:activation-config-propertyType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-exceptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-exceptionType declares an application
+        exception. The declaration consists of:
+
+            - the exception class. When the container receives
+              an exception of this type, it is required to
+              forward this exception as an applcation exception
+              to the client regardless of whether it is a checked
+              or unchecked exception.
+            - an optional rollback element. If this element is
+              set to true, the container must rollback the current
+              transaction before forwarding the exception to the
+              client.  If not specified, it defaults to false.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="exception-class"
+		   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="rollback"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-invokeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-invoke type specifies a method on a
+        class to be called during the around invoke portion of an
+        ejb invocation.  Note that each class may have only one
+        around invoke method and that the method may not be
+        overloaded.
+
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around invoke
+        definition appears.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="assembly-descriptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The assembly-descriptorType defines
+	application-assembly information.
+
+	The application-assembly information consists of the
+	following parts: the definition of security roles, the
+	definition of method permissions, the definition of
+	transaction attributes for enterprise beans with
+	container-managed transaction demarcation, the definition
+        of interceptor bindings, a list of
+	methods to be excluded from being invoked, and a list of
+        exception types that should be treated as application exceptions.
+
+	All the parts are optional in the sense that they are
+	omitted if the lists represented by them are empty.
+
+	Providing an assembly-descriptor in the deployment
+	descriptor is optional for the ejb-jar file producer.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="security-role"
+		   type="javaee:security-roleType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="method-permission"
+		   type="javaee:method-permissionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="container-transaction"
+		   type="javaee:container-transactionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-binding"
+                   type="javaee:interceptor-bindingType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+		   type="javaee:message-destinationType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="exclude-list"
+		   type="javaee:exclude-listType"
+		   minOccurs="0"/>
+      <xsd:element name="application-exception"
+                   type="javaee:application-exceptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmp-fieldType describes a container-managed field. The
+	cmp-fieldType contains an optional description of the field,
+	and the name of the field.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="field-name"
+		   type="javaee:java-identifierType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The field-name element specifies the name of a
+	    container managed field.
+
+	    The name of the cmp-field of an entity bean with
+	    cmp-version 2.x must begin with a lowercase
+	    letter. This field is accessed by methods whose
+	    names consists of the name of the field specified by
+	    field-name in which the first letter is uppercased,
+	    prefixed by "get" or "set".
+
+	    The name of the cmp-field of an entity bean with
+	    cmp-version 1.x must denote a public field of the
+	    enterprise bean class or one of its superclasses.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmp-versionType specifies the version of an entity bean
+	with container-managed persistence. It is used by
+	cmp-version elements.
+
+	The value must be one of the two following:
+
+	    1.x
+	    2.x
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="1.x"/>
+	<xsd:enumeration value="2.x"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-field-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmr-field-type element specifies the class of a
+	collection-valued logical relationship field in the entity
+	bean class. The value of an element using cmr-field-typeType
+	must be either: java.util.Collection or java.util.Set.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="java.util.Collection"/>
+	<xsd:enumeration value="java.util.Set"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The cmr-fieldType describes the bean provider's view of
+	a relationship. It consists of an optional description, and
+	the name and the class type of a field in the source of a
+	role of a relationship. The cmr-field-name element
+	corresponds to the name used for the get and set accessor
+	methods for the relationship. The cmr-field-type element is
+	used only for collection-valued cmr-fields. It specifies the
+	type of the collection that is used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="cmr-field-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The cmr-field-name element specifies the name of a
+	    logical relationship field in the entity bean
+	    class. The name of the cmr-field must begin with a
+	    lowercase letter. This field is accessed by methods
+	    whose names consist of the name of the field
+	    specified by cmr-field-name in which the first
+	    letter is uppercased, prefixed by "get" or "set".
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmr-field-type"
+		   type="javaee:cmr-field-typeType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="container-transactionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The container-transactionType specifies how the container
+	must manage transaction scopes for the enterprise bean's
+	method invocations. It defines an optional description, a
+	list of method elements, and a transaction attribute. The
+	transaction attribute is to be applied to all the specified
+	methods.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+		   type="javaee:methodType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="trans-attribute"
+		   type="javaee:trans-attributeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-classType contains the fully-qualified name of the
+	  enterprise bean's class. It is used by ejb-class elements.
+
+	  Example:
+
+	      <ejb-class>com.wombat.empl.EmployeeServiceBean</ejb-class>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-jarType defines the root element of the EJB
+	deployment descriptor. It contains
+
+	    - an optional description of the ejb-jar file
+	    - an optional display name
+	    - an optional icon that contains a small and a large
+	      icon file name
+	    - structural information about all included
+	      enterprise beans that is not specified through
+              annotations
+            - structural information about interceptor classes
+	    - a descriptor for container managed relationships,
+	      if any.
+	    - an optional application-assembly descriptor
+	    - an optional name of an ejb-client-jar file for the
+	      ejb-jar.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="enterprise-beans"
+		   type="javaee:enterprise-beansType"
+                   minOccurs="0"/>
+      <xsd:element name="interceptors"
+		   type="javaee:interceptorsType"
+                   minOccurs="0"/>
+      <xsd:element name="relationships"
+		   type="javaee:relationshipsType"
+		   minOccurs="0">
+	<xsd:unique name="relationship-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-relation-name contains the name of a
+	      relation. The name must be unique within
+	      relationships.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-relation"/>
+	  <xsd:field    xpath="javaee:ejb-relation-name"/>
+	</xsd:unique>
+      </xsd:element>
+      <xsd:element name="assembly-descriptor"
+		   type="javaee:assembly-descriptorType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Providing an assembly-descriptor in the deployment
+	    descriptor is optional for the ejb-jar file
+	    producer.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-client-jar"
+		   type="javaee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The optional ejb-client-jar element specifies a JAR
+	      file that contains the class files necessary for a
+	      client program to access the
+	      enterprise beans in the ejb-jar file.
+
+	      Example:
+
+		  <ejb-client-jar>employee_service_client.jar
+		  </ejb-client-jar>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+		   type="javaee:dewey-versionType"
+		   fixed="3.0"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The version specifies the version of the
+	  EJB specification that the instance document must
+	  comply with. This information enables deployment tools
+	  to validate a particular EJB Deployment
+	  Descriptor with respect to a specific version of the EJB
+	  schema.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The metadata-complete attribute defines whether this
+	  deployment descriptor and other related deployment
+	  descriptors for this module (e.g., web service
+	  descriptors) are complete, or whether the class
+	  files available to this module and packaged with
+	  this application should be examined for annotations
+	  that specify deployment information.
+
+	  If metadata-complete is set to "true", the deployment
+	  tool must ignore any annotations that specify deployment
+	  information, which might be present in the class files
+	  of the application.
+
+	  If metadata-complete is not specified or is set to
+	  "false", the deployment tool must examine the class
+	  files of the application for annotations, as
+	  specified by the specifications.
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+    </xsd:attribute>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-nameType specifies an enterprise bean's name. It is
+	  used by ejb-name elements. This name is assigned by the
+	  ejb-jar file producer to name the enterprise bean in the
+	  ejb-jar file's deployment descriptor. The name must be
+	  unique among the names of the enterprise beans in the same
+	  ejb-jar file.
+
+	  There is no architected relationship between the used
+	  ejb-name in the deployment descriptor and the JNDI name that
+	  the Deployer will assign to the enterprise bean's home.
+
+	  The name for an entity bean must conform to the lexical
+	  rules for an NMTOKEN.
+
+	  Example:
+
+	  <ejb-name>EmployeeService</ejb-name>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-relationType describes a relationship between two
+	entity beans with container-managed persistence.  It is used
+	by ejb-relation elements. It contains a description; an
+	optional ejb-relation-name element; and exactly two
+	relationship role declarations, defined by the
+	ejb-relationship-role elements. The name of the
+	relationship, if specified, is unique within the ejb-jar
+	file.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation-name"
+		   type="javaee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The ejb-relation-name element provides a unique name
+	    within the ejb-jar file for a relationship.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-relationship-role"
+		   type="javaee:ejb-relationship-roleType"/>
+      <xsd:element name="ejb-relationship-role"
+		   type="javaee:ejb-relationship-roleType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationship-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-relationship-roleType describes a role within a
+	  relationship. There are two roles in each relationship.
+
+	  The ejb-relationship-roleType contains an optional
+	  description; an optional name for the relationship role; a
+	  specification of the multiplicity of the role; an optional
+	  specification of cascade-delete functionality for the role;
+	  the role source; and a declaration of the cmr-field, if any,
+	  by means of which the other side of the relationship is
+	  accessed from the perspective of the role source.
+
+	  The multiplicity and role-source element are mandatory.
+
+	  The relationship-role-source element designates an entity
+	  bean by means of an ejb-name element. For bidirectional
+	  relationships, both roles of a relationship must declare a
+	  relationship-role-source element that specifies a cmr-field
+	  in terms of which the relationship is accessed. The lack of
+	  a cmr-field element in an ejb-relationship-role specifies
+	  that the relationship is unidirectional in navigability and
+	  the entity bean that participates in the relationship is
+	  "not aware" of the relationship.
+
+	  Example:
+
+	  <ejb-relation>
+	      <ejb-relation-name>Product-LineItem</ejb-relation-name>
+	      <ejb-relationship-role>
+		  <ejb-relationship-role-name>product-has-lineitems
+		  </ejb-relationship-role-name>
+		  <multiplicity>One</multiplicity>
+		  <relationship-role-source>
+		  <ejb-name>ProductEJB</ejb-name>
+		  </relationship-role-source>
+	       </ejb-relationship-role>
+	  </ejb-relation>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relationship-role-name"
+		   type="javaee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The ejb-relationship-role-name element defines a
+	    name for a role that is unique within an
+	    ejb-relation. Different relationships can use the
+	    same name for a role.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="multiplicity"
+		   type="javaee:multiplicityType"/>
+      <xsd:element name="cascade-delete"
+		   type="javaee:emptyType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The cascade-delete element specifies that, within a
+	    particular relationship, the lifetime of one or more
+	    entity beans is dependent upon the lifetime of
+	    another entity bean. The cascade-delete element can
+	    only be specified for an ejb-relationship-role
+	    element contained in an ejb-relation element in
+	    which the other ejb-relationship-role
+	    element specifies a multiplicity of One.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="relationship-role-source"
+		   type="javaee:relationship-role-sourceType"/>
+      <xsd:element name="cmr-field"
+		   type="javaee:cmr-fieldType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="enterprise-beansType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The enterprise-beansType declares one or more enterprise
+	beans. Each bean can be a session, entity or message-driven
+	bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:element name="session"
+		   type="javaee:session-beanType">
+	<xsd:unique name="session-ejb-local-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of
+	      an EJB reference. The EJB reference is an entry in
+	      the component's environment and is relative to the
+	      java:comp/env context.  The name must be unique within
+	      the component.
+
+	      It is recommended that name be prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-local-ref"/>
+	  <xsd:field    xpath="javaee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-ejb-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of an EJB
+	      reference. The EJB reference is an entry in the
+	      component's environment and is relative to the
+	      java:comp/env context. The name must be unique
+	      within the component.
+
+	      It is recommended that name is prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-ref"/>
+	  <xsd:field    xpath="javaee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-resource-env-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The resource-env-ref-name element specifies the name
+	      of a resource environment reference; its value is
+	      the environment entry name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:resource-env-ref"/>
+	  <xsd:field    xpath="javaee:resource-env-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-message-destination-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The message-destination-ref-name element specifies the name
+	      of a message destination reference; its value is
+	      the message destination reference name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:message-destination-ref"/>
+	  <xsd:field    xpath="javaee:message-destination-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-res-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The res-ref-name element specifies the name of a
+	      resource manager connection factory reference.  The name
+	      is a JNDI name relative to the java:comp/env context.
+	      The name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:resource-ref"/>
+	  <xsd:field    xpath="javaee:res-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="session-env-entry-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The env-entry-name element contains the name of a
+	      component's environment entry.  The name is a JNDI
+	      name relative to the java:comp/env context.  The
+	      name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:env-entry"/>
+	  <xsd:field    xpath="javaee:env-entry-name"/>
+	</xsd:unique>
+      </xsd:element>
+
+      <xsd:element name="entity"
+		   type="javaee:entity-beanType">
+	<xsd:unique name="entity-ejb-local-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of
+	      an EJB reference. The EJB reference is an entry in
+	      the component's environment and is relative to the
+	      java:comp/env context.  The name must be unique within
+	      the component.
+
+	      It is recommended that name be prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-local-ref"/>
+	  <xsd:field    xpath="javaee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-ejb-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of an EJB
+	      reference. The EJB reference is an entry in the
+	      component's environment and is relative to the
+	      java:comp/env context. The name must be unique
+	      within the component.
+
+	      It is recommended that name is prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-ref"/>
+	  <xsd:field    xpath="javaee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-resource-env-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The resource-env-ref-name element specifies the name
+	      of a resource environment reference; its value is
+	      the environment entry name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:resource-env-ref"/>
+	  <xsd:field    xpath="javaee:resource-env-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-message-destination-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The message-destination-ref-name element specifies the name
+	      of a message destination reference; its value is
+	      the message destination reference name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:message-destination-ref"/>
+	  <xsd:field    xpath="javaee:message-destination-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-res-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The res-ref-name element specifies the name of a
+	      resource manager connection factory reference.  The name
+	      is a JNDI name relative to the java:comp/env context.
+	      The name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:resource-ref"/>
+	  <xsd:field    xpath="javaee:res-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="entity-env-entry-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The env-entry-name element contains the name of a
+	      component's environment entry.  The name is a JNDI
+	      name relative to the java:comp/env context.  The
+	      name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:env-entry"/>
+	  <xsd:field    xpath="javaee:env-entry-name"/>
+	</xsd:unique>
+      </xsd:element>
+
+      <xsd:element name="message-driven"
+		   type="javaee:message-driven-beanType">
+	<xsd:unique name="messaged-ejb-local-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of
+	      an EJB reference. The EJB reference is an entry in
+	      the component's environment and is relative to the
+	      java:comp/env context.  The name must be unique within
+	      the component.
+
+	      It is recommended that name be prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-local-ref"/>
+	  <xsd:field    xpath="javaee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-ejb-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-ref-name element contains the name of an EJB
+	      reference. The EJB reference is an entry in the
+	      component's environment and is relative to the
+	      java:comp/env context. The name must be unique
+	      within the component.
+
+	      It is recommended that name is prefixed with "ejb/".
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:ejb-ref"/>
+	  <xsd:field    xpath="javaee:ejb-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-resource-env-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The resource-env-ref-name element specifies the name
+	      of a resource environment reference; its value is
+	      the environment entry name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:resource-env-ref"/>
+	  <xsd:field    xpath="javaee:resource-env-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-message-destination-ref-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The message-destination-ref-name element specifies the name
+	      of a message destination reference; its value is
+	      the message destination reference name used in the component
+	      code. The name is a JNDI name relative to the
+	      java:comp/env context and must be unique within an
+	      component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:message-destination-ref"/>
+	  <xsd:field    xpath="javaee:message-destination-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-res-ref-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The res-ref-name element specifies the name of a
+	      resource manager connection factory reference.  The name
+	      is a JNDI name relative to the java:comp/env context.
+	      The name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:resource-ref"/>
+	  <xsd:field    xpath="javaee:res-ref-name"/>
+	</xsd:unique>
+
+	<xsd:unique name="messaged-env-entry-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The env-entry-name element contains the name of a
+	      component's environment entry.  The name is a JNDI
+	      name relative to the java:comp/env context.  The
+	      name must be unique within an component.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:env-entry"/>
+	  <xsd:field    xpath="javaee:env-entry-name"/>
+	</xsd:unique>
+      </xsd:element>
+
+    </xsd:choice>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The entity-beanType declares an entity bean. The declaration
+	consists of:
+
+	    - an optional description
+	    - an optional display name
+	    - an optional icon element that contains a small and a large
+	      icon file name
+	    - a unique name assigned to the enterprise bean
+	      in the deployment descriptor
+            - an optional mapped-name element that can be used to provide
+              vendor-specific deployment information such as the physical
+              jndi-name of the entity bean's remote home interface. This
+              element is not required to be supported by all implementations.
+              Any use of this element is non-portable.
+	    - the names of the entity bean's remote home
+	      and remote interfaces, if any
+	    - the names of the entity bean's local home and local
+	      interfaces, if any
+	    - the entity bean's implementation class
+	    - the optional entity bean's persistence management type. If
+              this element is not specified it is defaulted to Container.
+	    - the entity bean's primary key class name
+	    - an indication of the entity bean's reentrancy
+	    - an optional specification of the
+	      entity bean's cmp-version
+	    - an optional specification of the entity bean's
+	      abstract schema name
+	    - an optional list of container-managed fields
+	    - an optional specification of the primary key
+	      field
+	    - an optional declaration of the bean's environment
+	      entries
+	    - an optional declaration of the bean's EJB
+	      references
+	    - an optional declaration of the bean's local
+	      EJB references
+	    - an optional declaration of the bean's web
+	      service references
+	    - an optional declaration of the security role
+	      references
+	    - an optional declaration of the security identity
+	      to be used for the execution of the bean's methods
+	    - an optional declaration of the bean's
+	      resource manager connection factory references
+	    - an optional declaration of the bean's
+	      resource environment references
+	    - an optional declaration of the bean's message
+	      destination references
+	    - an optional set of query declarations
+	      for finder and select methods for an entity
+	      bean with cmp-version 2.x.
+
+	The optional abstract-schema-name element must be specified
+	for an entity bean with container-managed persistence and
+	cmp-version 2.x.
+
+	The optional primkey-field may be present in the descriptor
+	if the entity's persistence-type is Container.
+
+	The optional cmp-version element may be present in the
+	descriptor if the entity's persistence-type is Container. If
+	the persistence-type is Container and the cmp-version
+	element is not specified, its value defaults to 2.x.
+
+	The optional home and remote elements must be specified if
+	the entity bean cmp-version is 1.x.
+
+	The optional home and remote elements must be specified if
+	the entity bean has a remote home and remote interface.
+
+	The optional local-home and local elements must be specified
+	if the entity bean has a local home and local interface.
+
+	Either both the local-home and the local elements or both
+	the home and the remote elements must be specified.
+
+	The optional query elements must be present if the
+	persistence-type is Container and the cmp-version is 2.x and
+	query methods other than findByPrimaryKey have been defined
+	for the entity bean.
+
+	The other elements that are optional are "optional" in the
+	sense that they are omitted if the lists represented by them
+	are empty.
+
+	At least one cmp-field element must be present in the
+	descriptor if the entity's persistence-type is Container and
+	the cmp-version is 1.x, and none must not be present if the
+	entity's persistence-type is Bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+		   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+		   type="javaee:xsdStringType"
+		   minOccurs="0"/>
+      <xsd:element name="home"
+		   type="javaee:homeType"
+		   minOccurs="0"/>
+      <xsd:element name="remote"
+		   type="javaee:remoteType"
+		   minOccurs="0"/>
+      <xsd:element name="local-home"
+		   type="javaee:local-homeType"
+		   minOccurs="0"/>
+      <xsd:element name="local"
+		   type="javaee:localType"
+		   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+		   type="javaee:ejb-classType"/>
+      <xsd:element name="persistence-type"
+		   type="javaee:persistence-typeType"/>
+      <xsd:element name="prim-key-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The prim-key-class element contains the
+	    fully-qualified name of an
+	    entity bean's primary key class.
+
+	    If the definition of the primary key class is
+	    deferred to deployment time, the prim-key-class
+	    element should specify java.lang.Object.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="reentrant"
+		   type="javaee:true-falseType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The reentrant element specifies whether an entity
+	    bean is reentrant or not.
+
+	    The reentrant element must be one of the two
+	    following: true or false
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-version"
+		   type="javaee:cmp-versionType"
+		   minOccurs="0"/>
+      <xsd:element name="abstract-schema-name"
+		   type="javaee:java-identifierType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The abstract-schema-name element specifies the name
+	    of the abstract schema type of an entity bean with
+	    cmp-version 2.x. It is used in EJB QL queries.
+
+	    For example, the abstract-schema-name for an entity
+	    bean whose local interface is
+	    com.acme.commerce.Order might be Order.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-field"
+		   type="javaee:cmp-fieldType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="primkey-field"
+		   type="javaee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The primkey-field element is used to specify the
+	    name of the primary key field for an entity with
+	    container-managed persistence.
+
+	    The primkey-field must be one of the fields declared
+	    in the cmp-field element, and the type of the field
+	    must be the same as the primary key type.
+
+	    The primkey-field element is not used if the primary
+	    key maps to multiple container-managed fields
+	    (i.e. the key is a compound key). In this case, the
+	    fields of the primary key class must be public, and
+	    their names must correspond to the field names of
+	    the entity bean class that comprise the key.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+		   type="javaee:security-role-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+		   type="javaee:security-identityType"
+		   minOccurs="0"/>
+      <xsd:element name="query"
+		   type="javaee:queryType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="exclude-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The exclude-listType specifies one or more methods which
+	the Assembler marks to be uncallable.
+
+	If the method permission relation contains methods that are
+	in the exclude list, the Deployer should consider those
+	methods to be uncallable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+		   type="javaee:methodType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="init-methodType">
+    <xsd:sequence>
+      <xsd:element name="create-method"
+		   type="javaee:named-methodType"/>
+      <xsd:element name="bean-method"
+		   type="javaee:named-methodType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptor-bindingType element describes the binding of
+        interceptor classes to beans within the ejb-jar.
+        It consists of :
+
+          - An optional description.
+          - The name of an ejb within the ejb-jar or the wildcard value "*",
+            which is used to define interceptors that are bound to all
+            beans in the ejb-jar.
+          - A list of interceptor classes that are bound to the contents of
+            the ejb-name element or a specification of the total ordering
+            over the interceptors defined for the given level and above.
+          - An optional exclude-default-interceptors element.  If set to true,
+            specifies that default interceptors are not to be applied to
+            a bean-class and/or business method.
+          - An optional exclude-class-interceptors element.  If set to true,
+            specifies that class interceptors are not to be applied to
+            a business method.
+          - An optional set of method elements for describing the name/params
+            of a method-level interceptor.
+
+         Interceptors bound to all classes using the wildcard syntax
+         "*" are default interceptors for the components in the ejb-jar.
+         In addition, interceptors may be bound at the level of the bean
+         class (class-level interceptors) or business methods (method-level
+         interceptors ).
+
+         The binding of interceptors to classes is additive.  If interceptors
+         are bound at the class-level and/or default-level as well as the
+         method-level, both class-level and/or default-level as well as
+         method-level will apply.
+
+         There are four possible styles of the interceptor element syntax :
+
+         1.
+         <interceptor-binding>
+           <ejb-name>*</ejb-name>
+           <interceptor-class>INTERCEPTOR</interceptor-class>
+         </interceptor-binding>
+
+         Specifying the ejb-name as the wildcard value "*" designates
+         default interceptors (interceptors that apply to all session and
+         message-driven beans contained in the ejb-jar).
+
+         2.
+         <interceptor-binding>
+           <ejb-name>EJBNAME</ejb-name>
+           <interceptor-class>INTERCEPTOR</interceptor-class>
+         </interceptor-binding>
+
+         This style is used to refer to interceptors associated with the
+         specified enterprise bean(class-level interceptors).
+
+         3.
+         <interceptor-binding>
+           <ejb-name>EJBNAME</ejb-name>
+           <interceptor-class>INTERCEPTOR</interceptor-class>
+           <method>
+             <method-name>METHOD</method-name>
+           </method>
+         </interceptor-binding>
+
+         This style is used to associate a method-level interceptor with
+         the specified enterprise bean.  If there are multiple methods
+         with the same overloaded name, the element of this style refers
+         to all the methods with the overloaded name.  Method-level
+         interceptors can only be associated with business methods of the
+         bean class.   Note that the wildcard value "*" cannot be used
+         to specify method-level interceptors.
+
+         4.
+         <interceptor-binding>
+           <ejb-name>EJBNAME</ejb-name>
+           <interceptor-class>INTERCEPTOR</interceptor-class>
+           <method>
+             <method-name>METHOD</method-name>
+             <method-params>
+               <method-param>PARAM-1</method-param>
+               <method-param>PARAM-2</method-param>
+               ...
+               <method-param>PARAM-N</method-param>
+             </method-params>
+           </method>
+         </interceptor-binding>
+
+         This style is used to associate a method-level interceptor with
+         the specified method of the specified enterprise bean.  This
+         style is used to refer to a single method within a set of methods
+         with an overloaded name.  The values PARAM-1 through PARAM-N
+         are the fully-qualified Java types of the method's input parameters
+         (if the method has no input arguments, the method-params element
+         contains no method-param elements). Arrays are specified by the
+         array element's type, followed by one or more pair of square
+         brackets (e.g. int[][]).
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+		   type="javaee:string"/>
+      <xsd:choice>
+        <xsd:element name="interceptor-class"
+                     type="javaee:fully-qualified-classType"
+		     minOccurs="0"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="interceptor-order"
+		     type="javaee:interceptor-orderType"
+		     minOccurs="1"/>
+      </xsd:choice>
+      <xsd:element name="exclude-default-interceptors"
+		   type="javaee:true-falseType"
+		   minOccurs="0"/>
+      <xsd:element name="exclude-class-interceptors"
+		   type="javaee:true-falseType"
+		   minOccurs="0"/>
+      <xsd:element name="method"
+		   type="javaee:named-methodType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-orderType">
+    <xsd:annotation>
+      <xsd:documentation>
+        The interceptor-orderType element describes a total ordering
+        of interceptor classes.
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+
+      <xsd:element name="interceptor-class"
+                   type="javaee:fully-qualified-classType"
+		   minOccurs="1"
+                   maxOccurs="unbounded"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorType element declares information about a single
+        interceptor class.  It consists of :
+
+            - An optional description.
+            - The fully-qualified name of the interceptor class.
+            - An optional list of around invoke methods declared on the
+              interceptor class and/or its super-classes.
+            - An optional list environment dependencies for the interceptor
+              class and/or its super-classes.
+            - An optional list of post-activate methods declared on the
+              interceptor class and/or its super-classes.
+            - An optional list of pre-passivate methods declared on the
+              interceptor class and/or its super-classes.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-class"
+		   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorsType element declares one or more interceptor
+        classes used by components within this ejb-jar.  The declaration
+        consists of :
+
+            - An optional description.
+            - One or more interceptor elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor"
+		   type="javaee:interceptorType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-driven-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The message-driven element declares a message-driven
+	bean. The declaration consists of:
+
+	    - an optional description
+	    - an optional display name
+	    - an optional icon element that contains a small and a large
+	      icon file name.
+	    - a name assigned to the enterprise bean in
+	      the deployment descriptor
+            - an optional mapped-name element that can be used to provide
+              vendor-specific deployment information such as the physical
+              jndi-name of destination from which this message-driven bean
+              should consume.  This element is not required to be supported
+              by all implementations.  Any use of this element is non-portable.
+	    - the message-driven bean's implementation class
+	    - an optional declaration of the bean's messaging
+	      type
+            - an optional declaration of the bean's timeout method.
+	    - the optional message-driven bean's transaction management
+              type. If it is not defined, it is defaulted to Container.
+	    - an optional declaration of the bean's
+	      message-destination-type
+	    - an optional declaration of the bean's
+	      message-destination-link
+	    - an optional declaration of the message-driven bean's
+	      activation configuration properties
+            - an optional list of the message-driven bean class and/or
+              superclass around-invoke methods.
+	    - an optional declaration of the bean's environment
+	      entries
+	    - an optional declaration of the bean's EJB references
+	    - an optional declaration of the bean's local EJB
+	      references
+	    - an optional declaration of the bean's web service
+	      references
+	    - an optional declaration of the security
+	      identity to be used for the execution of the bean's
+	      methods
+	    - an optional declaration of the bean's
+	      resource manager connection factory
+	      references
+	    - an optional declaration of the bean's resource
+	      environment references.
+	    - an optional declaration of the bean's message
+	      destination references
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+		   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+		   type="javaee:xsdStringType"
+		   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+		   type="javaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+             The ejb-class element specifies the fully qualified name
+             of the bean class for this ejb.  It is required unless
+             there is a component-defining annotation for the same
+             ejb-name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="messaging-type"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The messaging-type element specifies the message
+	    listener interface of the message-driven bean.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="transaction-type"
+		   type="javaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-type"
+		   type="javaee:message-destination-typeType"
+		   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+		   type="javaee:message-destination-linkType"
+		   minOccurs="0"/>
+      <xsd:element name="activation-config"
+		   type="javaee:activation-configType"
+		   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-identity"
+		   type="javaee:security-identityType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-intfType">
+
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-intf element allows a method element to
+	differentiate between the methods with the same name and
+	signature that are multiply defined across the home and
+	component interfaces (e.g, in both an enterprise bean's
+	remote and local interfaces or in both an enterprise bean's
+	home and remote interfaces, etc.); the component and web
+	service endpoint interfaces, and so on. The Local applies to
+        both local component interface and local business interface.
+        Similarly, Remote applies to both remote component interface
+        and the remote business interface.
+
+	The method-intf element must be one of the following:
+
+	    Home
+	    Remote
+	    LocalHome
+	    Local
+	    ServiceEndpoint
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Home"/>
+	<xsd:enumeration value="Remote"/>
+	<xsd:enumeration value="LocalHome"/>
+	<xsd:enumeration value="Local"/>
+	<xsd:enumeration value="ServiceEndpoint"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-nameType contains a name of an enterprise
+	bean method or the asterisk (*) character. The asterisk is
+	used when the element denotes all the methods of an
+	enterprise bean's client view interfaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-paramsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-paramsType defines a list of the
+	fully-qualified Java type names of the method parameters.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="method-param"
+		   type="javaee:java-typeType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The method-param element contains a primitive
+	    or a fully-qualified Java type name of a method
+	    parameter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-permissionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-permissionType specifies that one or more
+	security roles are allowed to invoke one or more enterprise
+	bean methods. The method-permissionType consists of an
+	optional description, a list of security role names or an
+	indicator to state that the method is unchecked for
+	authorization, and a list of method elements.
+
+	The security roles used in the method-permissionType
+	must be defined in the security-role elements of the
+	deployment descriptor, and the methods must be methods
+	defined in the enterprise bean's business, home, component
+        and/or web service endpoint interfaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:choice>
+	<xsd:element name="role-name"
+		     type="javaee:role-nameType"
+		     maxOccurs="unbounded"/>
+	<xsd:element name="unchecked"
+		     type="javaee:emptyType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The unchecked element specifies that a method is
+	      not checked for authorization by the container
+	      prior to invocation of the method.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+      <xsd:element name="method"
+		   type="javaee:methodType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The methodType is used to denote a method of an enterprise
+	  bean's business, home, component, and/or web service endpoint
+	  interface, or, in the case of a message-driven bean, the
+	  bean's message listener method, or a set of such
+	  methods. The ejb-name element must be the name of one of the
+	  enterprise beans declared in the deployment descriptor; the
+	  optional method-intf element allows to distinguish between a
+	  method with the same signature that is multiply defined
+	  across the business, home, component, and/or web service
+          endpoint nterfaces; the method-name element specifies the
+          method name; and the optional method-params elements identify
+          a single method among multiple methods with an overloaded
+	  method name.
+
+	  There are three possible styles of using methodType element
+	  within a method element:
+
+	  1.
+	  <method>
+	      <ejb-name>EJBNAME</ejb-name>
+	      <method-name>*</method-name>
+	  </method>
+
+	     This style is used to refer to all the methods of the
+	     specified enterprise bean's business, home, component,
+             and/or web service endpoint interfaces.
+
+	  2.
+	  <method>
+	      <ejb-name>EJBNAME</ejb-name>
+	      <method-name>METHOD</method-name>
+	  </method>
+
+	     This style is used to refer to the specified method of
+	     the specified enterprise bean. If there are multiple
+	     methods with the same overloaded name, the element of
+	     this style refers to all the methods with the overloaded
+	     name.
+
+	  3.
+	  <method>
+	      <ejb-name>EJBNAME</ejb-name>
+	      <method-name>METHOD</method-name>
+	      <method-params>
+		  <method-param>PARAM-1</method-param>
+		  <method-param>PARAM-2</method-param>
+		  ...
+		  <method-param>PARAM-n</method-param>
+	      </method-params>
+	  </method>
+
+	     This style is used to refer to a single method within a
+	     set of methods with an overloaded name. PARAM-1 through
+	     PARAM-n are the fully-qualified Java types of the
+	     method's input parameters (if the method has no input
+	     arguments, the method-params element contains no
+	     method-param elements). Arrays are specified by the
+	     array element's type, followed by one or more pair of
+	     square brackets (e.g. int[][]). If there are multiple
+	     methods with the same overloaded name, this style refers
+	     to all of the overloaded methods.
+
+	  Examples:
+
+	  Style 1: The following method element refers to all the
+	  methods of the EmployeeService bean's business, home,
+          component, and/or web service endpoint interfaces:
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>*</method-name>
+	  </method>
+
+	  Style 2: The following method element refers to all the
+	  create methods of the EmployeeService bean's home
+	  interface(s).
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>create</method-name>
+	  </method>
+
+	  Style 3: The following method element refers to the
+	  create(String firstName, String LastName) method of the
+	  EmployeeService bean's home interface(s).
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  The following example illustrates a Style 3 element with
+	  more complex parameter types. The method
+	  foobar(char s, int i, int[] iar, mypackage.MyClass mycl,
+	  mypackage.MyClass[][] myclaar) would be specified as:
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-name>foobar</method-name>
+	      <method-params>
+		  <method-param>char</method-param>
+		  <method-param>int</method-param>
+		  <method-param>int[]</method-param>
+		  <method-param>mypackage.MyClass</method-param>
+		  <method-param>mypackage.MyClass[][]</method-param>
+	      </method-params>
+	  </method>
+
+	  The optional method-intf element can be used when it becomes
+	  necessary to differentiate between a method that is multiply
+	  defined across the enterprise bean's business, home, component,
+          and/or web service endpoint interfaces with the same name and
+	  signature. However, if the same method is a method of both the
+          local business interface, and the local component interface,
+          the same attribute applies to the method for both interfaces.
+          Likewise, if the same method is a method of both the remote
+          business interface and the remote component interface, the same
+          attribute applies to the method for both interfaces.
+
+	  For example, the method element
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>Remote</method-intf>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  can be used to differentiate the create(String, String)
+	  method defined in the remote interface from the
+	  create(String, String) method defined in the remote home
+	  interface, which would be defined as
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>Home</method-intf>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  and the create method that is defined in the local home
+	  interface which would be defined as
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>LocalHome</method-intf>
+	      <method-name>create</method-name>
+	      <method-params>
+		  <method-param>java.lang.String</method-param>
+		  <method-param>java.lang.String</method-param>
+	      </method-params>
+	  </method>
+
+	  The method-intf element can be used with all three Styles
+	  of the method element usage. For example, the following
+	  method element example could be used to refer to all the
+	  methods of the EmployeeService bean's remote home interface
+          and the remote business interface.
+
+	  <method>
+	      <ejb-name>EmployeeService</ejb-name>
+	      <method-intf>Home</method-intf>
+	      <method-name>*</method-name>
+	  </method>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+		   type="javaee:ejb-nameType"/>
+      <xsd:element name="method-intf"
+		   type="javaee:method-intfType"
+		   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="method-name"
+		   type="javaee:method-nameType"/>
+      <xsd:element name="method-params"
+		   type="javaee:method-paramsType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multiplicityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The multiplicityType describes the multiplicity of the
+	role that participates in a relation.
+
+	The value must be one of the two following:
+
+	    One
+	    Many
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="One"/>
+	<xsd:enumeration value="Many"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-methodType">
+    <xsd:sequence>
+      <xsd:element name="method-name"
+		   type="javaee:string"/>
+      <xsd:element name="method-params"
+		   type="javaee:method-paramsType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The persistence-typeType specifies an entity bean's persistence
+	management type.
+
+	The persistence-type element must be one of the two following:
+
+	    Bean
+	    Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Bean"/>
+	<xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="query-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The query-method specifies the method for a finder or select
+	  query.
+
+	  The method-name element specifies the name of a finder or select
+	  method in the entity bean's implementation class.
+
+	  Each method-param must be defined for a query-method using the
+	  method-params element.
+
+	  It is used by the query-method element.
+
+	  Example:
+
+	  <query>
+	      <description>Method finds large orders</description>
+	      <query-method>
+		  <method-name>findLargeOrders</method-name>
+		  <method-params></method-params>
+	      </query-method>
+	      <ejb-ql>
+		SELECT OBJECT(o) FROM Order o
+		  WHERE o.amount &gt; 1000
+	      </ejb-ql>
+	  </query>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="method-name"
+		   type="javaee:method-nameType"/>
+      <xsd:element name="method-params"
+		   type="javaee:method-paramsType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="queryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The queryType defines a finder or select
+	query. It contains
+	    - an optional description of the query
+	    - the specification of the finder or select
+	      method it is used by
+		- an optional specification of the result type
+		  mapping, if the query is for a select method
+		  and entity objects are returned.
+		- the EJB QL query string that defines the query.
+
+	Queries that are expressible in EJB QL must use the ejb-ql
+	element to specify the query. If a query is not expressible
+	in EJB QL, the description element should be used to
+	describe the semantics of the query and the ejb-ql element
+	should be empty.
+
+	The result-type-mapping is an optional element. It can only
+	be present if the query-method specifies a select method
+	that returns entity objects.  The default value for the
+	result-type-mapping element is "Local".
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType" minOccurs="0"/>
+      <xsd:element name="query-method"
+		   type="javaee:query-methodType"/>
+      <xsd:element name="result-type-mapping"
+		   type="javaee:result-type-mappingType"
+		   minOccurs="0"/>
+      <xsd:element name="ejb-ql"
+		   type="javaee:xsdStringType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationship-role-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The relationship-role-sourceType designates the source of a
+	role that participates in a relationship. A
+	relationship-role-sourceType is used by
+	relationship-role-source elements to uniquely identify an
+	entity bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+		   type="javaee:ejb-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationshipsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The relationshipsType describes the relationships in
+	which entity beans with container-managed persistence
+	participate. The relationshipsType contains an optional
+	description; and a list of ejb-relation elements, which
+	specify the container managed relationships.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation"
+		   type="javaee:ejb-relationType"
+		   maxOccurs="unbounded">
+
+	<xsd:unique name="role-name-uniqueness">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The ejb-relationship-role-name contains the name of a
+	      relationship role. The name must be unique within
+	      a relationship, but can be reused in different
+	      relationships.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector
+	       xpath=".//javaee:ejb-relationship-role-name"/>
+	  <xsd:field
+	       xpath="."/>
+	</xsd:unique>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remove-methodType">
+    <xsd:sequence>
+      <xsd:element name="bean-method"
+		   type="javaee:named-methodType"/>
+      <xsd:element name="retain-if-exception"
+		   type="javaee:true-falseType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="result-type-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The result-type-mappingType is used in the query element to
+	specify whether an abstract schema type returned by a query
+	for a select method is to be mapped to an EJBLocalObject or
+	EJBObject type.
+
+	The value must be one of the following:
+
+	    Local
+	    Remote
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Local"/>
+	<xsd:enumeration value="Remote"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-identityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The security-identityType specifies whether the caller's
+	security identity is to be used for the execution of the
+	methods of the enterprise bean or whether a specific run-as
+	identity is to be used. It contains an optional description
+	and a specification of the security identity to be used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:choice>
+	<xsd:element name="use-caller-identity"
+		     type="javaee:emptyType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The use-caller-identity element specifies that
+	      the caller's security identity be used as the
+	      security identity for the execution of the
+	      enterprise bean's methods.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="run-as"
+		     type="javaee:run-asType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The session-beanType declares an session bean. The
+	declaration consists of:
+
+	    - an optional description
+	    - an optional display name
+	    - an optional icon element that contains a small and a large
+	      icon file name
+	    - a name assigned to the enterprise bean
+	      in the deployment description
+            - an optional mapped-name element that can be used to provide
+              vendor-specific deployment information such as the physical
+              jndi-name of the session bean's remote home/business interface.
+              This element is not required to be supported by all
+              implementations. Any use of this element is non-portable.
+            - the names of all the remote or local business interfaces,
+              if any
+	    - the names of the session bean's remote home and
+	      remote interfaces, if any
+	    - the names of the session bean's local home and
+	      local interfaces, if any
+	    - the name of the session bean's web service endpoint
+	      interface, if any
+	    - the session bean's implementation class
+	    - the session bean's state management type
+            - an optional declaration of the session bean's timeout method.
+	    - the optional session bean's transaction management type.
+              If it is not present, it is defaulted to Container.
+            - an optional list of the session bean class and/or
+              superclass around-invoke methods.
+	    - an optional declaration of the bean's
+	      environment entries
+	    - an optional declaration of the bean's EJB references
+	    - an optional declaration of the bean's local
+	      EJB references
+	    - an optional declaration of the bean's web
+	      service references
+	    - an optional declaration of the security role
+	      references
+	    - an optional declaration of the security identity
+	      to be used for the execution of the bean's methods
+	    - an optional declaration of the bean's resource
+	      manager connection factory references
+	    - an optional declaration of the bean's resource
+	      environment references.
+	    - an optional declaration of the bean's message
+	      destination references
+
+	The elements that are optional are "optional" in the sense
+	that they are omitted when if lists represented by them are
+	empty.
+
+	Either both the local-home and the local elements or both
+	the home and the remote elements must be specified for the
+	session bean.
+
+	The service-endpoint element may only be specified if the
+	bean is a stateless session bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+		   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+		   type="javaee:xsdStringType"
+		   minOccurs="0"/>
+      <xsd:element name="home"
+		   type="javaee:homeType"
+		   minOccurs="0"/>
+      <xsd:element name="remote"
+		   type="javaee:remoteType"
+		   minOccurs="0"/>
+      <xsd:element name="local-home"
+		   type="javaee:local-homeType"
+		   minOccurs="0"/>
+      <xsd:element name="local"
+		   type="javaee:localType"
+		   minOccurs="0"/>
+      <xsd:element name="business-local"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="business-remote"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="service-endpoint"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-endpoint element contains the
+	    fully-qualified name of the enterprise bean's web
+	    service endpoint interface. The service-endpoint
+	    element may only be specified for a stateless
+	    session bean. The specified interface must be a
+	    valid JAX-RPC service endpoint interface.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-class"
+		   type="javaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+             The ejb-class element specifies the fully qualified name
+             of the bean class for this ejb.  It is required unless
+             there is a component-defining annotation for the same
+             ejb-name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="session-type"
+		   type="javaee:session-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="init-method"
+                   type="javaee:init-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+	  <xsd:documentation>
+
+	    The init-method element specifies the mappings for
+	    EJB 2.x style create methods for an EJB 3.0 bean.
+	    This element can only be specified for stateful
+            session beans.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="remove-method"
+                   type="javaee:remove-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+	  <xsd:documentation>
+
+	    The remove-method element specifies the mappings for
+	    EJB 2.x style remove methods for an EJB 3.0 bean.
+	    This element can only be specified for stateful
+            session beans.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transaction-type"
+		   type="javaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-role-ref"
+		   type="javaee:security-role-refType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="security-identity"
+		   type="javaee:security-identityType"
+		   minOccurs="0">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The session-typeType describes whether the session bean is a
+	stateful session or stateless session. It is used by
+	session-type elements.
+
+	The value must be one of the two following:
+
+	    Stateful
+	    Stateless
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Stateful"/>
+	<xsd:enumeration value="Stateless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="trans-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The trans-attributeType specifies how the container must
+	manage the transaction boundaries when delegating a method
+	invocation to an enterprise bean's business method.
+
+	The value must be one of the following:
+
+	    NotSupported
+	    Supports
+	    Required
+	    RequiresNew
+	    Mandatory
+	    Never
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="NotSupported"/>
+	<xsd:enumeration value="Supports"/>
+	<xsd:enumeration value="Required"/>
+	<xsd:enumeration value="RequiresNew"/>
+	<xsd:enumeration value="Mandatory"/>
+	<xsd:enumeration value="Never"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The transaction-typeType specifies an enterprise bean's
+	transaction management type.
+
+	The transaction-type must be one of the two following:
+
+	    Bean
+	    Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Bean"/>
+	<xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/ejb-jar_3_1.xsd b/wildfly/docs/schema/ejb-jar_3_1.xsd
new file mode 100644
index 0000000..e85d346
--- /dev/null
+++ b/wildfly/docs/schema/ejb-jar_3_1.xsd
@@ -0,0 +1,3260 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.1">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+      
+      Portions Copyrighted 2009 Red Hat
+      
+      Red Hat elects to include this software in this
+      distribution under the GPL Version 2 license.
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+<![CDATA[[
+      This is the XML Schema for the EJB 3.1 deployment descriptor.
+      
+      All EJB deployment descriptors must indicate
+      the schema by using the Java EE namespace:
+      
+      http://java.sun.com/xml/ns/javaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <ejb-jar xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+      	  http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd"
+      version="3.1">
+      ...
+      </ejb-jar>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for the
+      Java EE namespace with the following location:
+      
+      http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd
+      
+]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_6.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="ejb-jar"
+               type="javaee:ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is the root of the ejb-jar deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:key name="ejb-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-name element contains the name of an enterprise
+          bean. The name must be unique within the ejb-jar or
+          .war file.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:enterprise-beans/*"/>
+      <xsd:field xpath="javaee:ejb-name"/>
+    </xsd:key>
+    <xsd:keyref name="ejb-name-references"
+                refer="javaee:ejb-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          relationship-role-source must be to a specific ejb-name
+          defined within the scope of enterprise-beans element. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath=".//javaee:ejb-relationship-role/javaee:relationship-role-source"/>
+      <xsd:field xpath="javaee:ejb-name"/>
+    </xsd:keyref>
+    <xsd:key name="role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:assembly-descriptor/javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="role-name-references"
+                refer="javaee:role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:enterprise-beans/*/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="access-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The access-timeoutType represents the maximum amount of
+        time (in a given time unit) that the container should wait for
+        a concurrency lock before throwing a timeout exception to the
+        client.
+        
+        A timeout value of 0 means concurrent access is not permitted.
+        
+        A timeout value of -1 means wait indefinitely to acquire a lock.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="timeout"
+                   type="javaee:xsdIntegerType"/>
+      <xsd:element name="unit"
+                   type="javaee:time-unit-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="async-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The async-methodType element specifies that a session
+        bean method has asynchronous invocation semantics.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="javaee:string"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The activation-configType defines information about the
+        expected configuration properties of the message-driven bean
+        in its operational environment. This may include information
+        about message acknowledgement, message selector, expected
+        destination type, etc.
+        
+        The configuration information is expressed in terms of
+        name/value configuration properties.
+        
+        The properties that are recognized for a particular
+        message-driven bean are determined by the messaging type.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="activation-config-property"
+                   type="javaee:activation-config-propertyType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The activation-config-propertyType contains a name/value
+        configuration property pair for a message-driven bean.
+        
+        The properties that are recognized for a particular
+        message-driven bean are determined by the messaging type.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="activation-config-property-name"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The activation-config-property-name element contains
+            the name for an activation configuration property of
+            a message-driven bean.
+            
+            For JMS message-driven beans, the following property
+            names are recognized: acknowledgeMode,
+            messageSelector, destinationType, subscriptionDurability
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="activation-config-property-value"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The activation-config-property-value element
+            contains the value for an activation configuration
+            property of a message-driven bean.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-invokeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-invoke type specifies a method on a
+        class to be called during the around invoke portion of an 
+        ejb invocation.  Note that each class may have only one
+        around invoke method and that the method may not be
+        overloaded.
+        
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around invoke
+        definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-timeout type specifies a method on a
+        class to be called during the around-timeout portion of
+        a timer timeout callback.  Note that each class may have 
+        only one around-timeout method and that the method may not 
+        be overloaded.
+        
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around-timeout
+        definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="assembly-descriptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The assembly-descriptorType defines
+        application-assembly information.
+        
+        The application-assembly information consists of the
+        following parts: the definition of security roles, the
+        definition of method permissions, the definition of
+        transaction attributes for enterprise beans with
+        container-managed transaction demarcation, the definition
+        of interceptor bindings, a list of
+        methods to be excluded from being invoked, and a list of
+        exception types that should be treated as application exceptions.
+        
+        All the parts are optional in the sense that they are
+        omitted if the lists represented by them are empty.
+        
+        Providing an assembly-descriptor in the deployment
+        descriptor is optional for the ejb-jar or .war file producer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method-permission"
+                   type="javaee:method-permissionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="container-transaction"
+                   type="javaee:container-transactionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-binding"
+                   type="javaee:interceptor-bindingType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="exclude-list"
+                   type="javaee:exclude-listType"
+                   minOccurs="0"/>
+      <xsd:element name="application-exception"
+                   type="javaee:application-exceptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmp-fieldType describes a container-managed field. The
+        cmp-fieldType contains an optional description of the field,
+        and the name of the field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="field-name"
+                   type="javaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The field-name element specifies the name of a
+            container managed field.
+            
+            The name of the cmp-field of an entity bean with
+            cmp-version 2.x must begin with a lowercase
+            letter. This field is accessed by methods whose
+            names consists of the name of the field specified by
+            field-name in which the first letter is uppercased,
+            prefixed by "get" or "set".
+            
+            The name of the cmp-field of an entity bean with
+            cmp-version 1.x must denote a public field of the
+            enterprise bean class or one of its superclasses.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmp-versionType specifies the version of an entity bean
+        with container-managed persistence. It is used by
+        cmp-version elements.
+        
+        The value must be one of the two following:
+        
+        1.x
+        2.x
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="1.x"/>
+        <xsd:enumeration value="2.x"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmr-fieldType describes the bean provider's view of
+        a relationship. It consists of an optional description, and
+        the name and the class type of a field in the source of a
+        role of a relationship. The cmr-field-name element
+        corresponds to the name used for the get and set accessor
+        methods for the relationship. The cmr-field-type element is
+        used only for collection-valued cmr-fields. It specifies the
+        type of the collection that is used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="cmr-field-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cmr-field-name element specifies the name of a
+            logical relationship field in the entity bean
+            class. The name of the cmr-field must begin with a
+            lowercase letter. This field is accessed by methods
+            whose names consist of the name of the field
+            specified by cmr-field-name in which the first
+            letter is uppercased, prefixed by "get" or "set".
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmr-field-type"
+                   type="javaee:cmr-field-typeType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-field-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmr-field-type element specifies the class of a
+        collection-valued logical relationship field in the entity
+        bean class. The value of an element using cmr-field-typeType
+        must be either: java.util.Collection or java.util.Set.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="java.util.Collection"/>
+        <xsd:enumeration value="java.util.Set"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrency-management-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrency-management-typeType specifies the way concurrency
+        is managed for a singleton or stateful session bean.  
+        
+        The concurrency management type must be one of the following:
+        
+        Bean
+        Container
+        
+        Bean managed concurrency can only be specified for a singleton bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrent-lock-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrent-lock-typeType specifies how the container must
+        manage concurrent access to a method of a Singleton bean 
+        with container-managed concurrency.
+        
+        The container managed concurrency lock type must be one 
+        of the following :
+        
+        Read
+        Write
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Read"/>
+        <xsd:enumeration value="Write"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrent-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrent-methodType specifies information about a method
+        of a bean with container managed concurrency.
+        
+        The optional lock element specifies the kind of concurrency 
+        lock asssociated with the method.
+        
+        The optional access-timeout element specifies the amount of
+        time (in a given time unit) the container should wait for a
+        concurrency lock before throwing an exception to the client.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="lock"
+                   type="javaee:concurrent-lock-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="access-timeout"
+                   type="javaee:access-timeoutType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="container-transactionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The container-transactionType specifies how the container
+        must manage transaction scopes for the enterprise bean's
+        method invocations. It defines an optional description, a
+        list of method elements, and a transaction attribute. The
+        transaction attribute is to be applied to all the specified
+        methods.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+                   type="javaee:methodType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="trans-attribute"
+                   type="javaee:trans-attributeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="depends-onType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The depends-onType is used to express initialization 
+        ordering dependencies between Singleton components.
+        The depends-onType specifies the names of one or more
+        Singleton beans in the same application as the referring
+        Singleton, each of which must be initialized before
+        the referring bean.  
+        
+        Each dependent bean is expressed using ejb-link syntax.
+        The order in which dependent beans are initialized at 
+        runtime is not guaranteed to match the order in which
+        they are listed.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-linkType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The ejb-classType contains the fully-qualified name of the
+        enterprise bean's class. It is used by ejb-class elements. 
+        
+        Example:
+        
+        <ejb-class>com.wombat.empl.EmployeeServiceBean</ejb-class>
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-jarType defines the root element of the EJB
+        deployment descriptor. It contains
+        
+        - an optional description of the ejb-jar file
+        - an optional display name
+        - an optional icon that contains a small and a large
+        icon file name
+        - an optional module name. Only applicable to
+        stand-alone ejb-jars or ejb-jars packaged in an ear.
+        Ignored if specified for an ejb-jar.xml within a .war.
+        In that case, standard .war module-name rules apply.
+        - structural information about all included
+        enterprise beans that is not specified through
+        annotations
+        - structural information about interceptor classes
+        - a descriptor for container managed relationships, 
+        if any. 
+        - an optional application-assembly descriptor
+        - an optional name of an ejb-client-jar file for the 
+        ejb-jar.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="enterprise-beans"
+                   type="javaee:enterprise-beansType"
+                   minOccurs="0"/>
+      <xsd:element name="interceptors"
+                   type="javaee:interceptorsType"
+                   minOccurs="0"/>
+      <xsd:element name="relationships"
+                   type="javaee:relationshipsType"
+                   minOccurs="0">
+        <xsd:unique name="relationship-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-relation-name contains the name of a
+              relation. The name must be unique within
+              relationships.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-relation"/>
+          <xsd:field xpath="javaee:ejb-relation-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="assembly-descriptor"
+                   type="javaee:assembly-descriptorType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Providing an assembly-descriptor in the deployment
+            descriptor is optional for the ejb-jar or .war file
+            producer.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-client-jar"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[[
+            The optional ejb-client-jar element specifies a JAR
+            file that contains the class files necessary for a
+            client program to access the
+            enterprise beans in the ejb-jar file.
+            
+            Example:
+            
+            	  <ejb-client-jar>employee_service_client.jar
+            	  </ejb-client-jar>
+            
+]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="3.1"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The version specifies the version of the
+          EJB specification that the instance document must 
+          comply with. This information enables deployment tools
+          to validate a particular EJB Deployment
+          Descriptor with respect to a specific version of the EJB
+          schema. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The ejb-nameType specifies an enterprise bean's name. It is
+        used by ejb-name elements. This name is assigned by the
+        file producer to name the enterprise bean in the
+        ejb-jar or .war file's deployment descriptor. The name must be
+        unique among the names of the enterprise beans in the same
+        ejb-jar or .war file.
+        
+        There is no architected relationship between the used
+        ejb-name in the deployment descriptor and the JNDI name that
+        the Deployer will assign to the enterprise bean's home.
+        
+        The name for an entity bean must conform to the lexical
+        rules for an NMTOKEN.
+        
+        Example:
+        
+        <ejb-name>EmployeeService</ejb-name>
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-relationType describes a relationship between two
+        entity beans with container-managed persistence.  It is used
+        by ejb-relation elements. It contains a description; an
+        optional ejb-relation-name element; and exactly two
+        relationship role declarations, defined by the
+        ejb-relationship-role elements. The name of the
+        relationship, if specified, is unique within the ejb-jar
+        file.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-relation-name element provides a unique name
+            within the ejb-jar file for a relationship.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-relationship-role"
+                   type="javaee:ejb-relationship-roleType"/>
+      <xsd:element name="ejb-relationship-role"
+                   type="javaee:ejb-relationship-roleType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationship-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The ejb-relationship-roleType describes a role within a
+        relationship. There are two roles in each relationship.
+        
+        The ejb-relationship-roleType contains an optional
+        description; an optional name for the relationship role; a
+        specification of the multiplicity of the role; an optional
+        specification of cascade-delete functionality for the role;
+        the role source; and a declaration of the cmr-field, if any,
+        by means of which the other side of the relationship is
+        accessed from the perspective of the role source.
+        
+        The multiplicity and role-source element are mandatory.
+        
+        The relationship-role-source element designates an entity
+        bean by means of an ejb-name element. For bidirectional
+        relationships, both roles of a relationship must declare a
+        relationship-role-source element that specifies a cmr-field
+        in terms of which the relationship is accessed. The lack of
+        a cmr-field element in an ejb-relationship-role specifies
+        that the relationship is unidirectional in navigability and
+        the entity bean that participates in the relationship is
+        "not aware" of the relationship.
+        
+        Example:
+        
+        <ejb-relation>
+        <ejb-relation-name>Product-LineItem</ejb-relation-name>
+        <ejb-relationship-role>
+        	  <ejb-relationship-role-name>product-has-lineitems
+        	  </ejb-relationship-role-name>
+        	  <multiplicity>One</multiplicity>
+        	  <relationship-role-source>
+        	  <ejb-name>ProductEJB</ejb-name>
+        	  </relationship-role-source>
+        </ejb-relationship-role>
+        </ejb-relation>
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relationship-role-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-relationship-role-name element defines a
+            name for a role that is unique within an
+            ejb-relation. Different relationships can use the
+            same name for a role.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="multiplicity"
+                   type="javaee:multiplicityType"/>
+      <xsd:element name="cascade-delete"
+                   type="javaee:emptyType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cascade-delete element specifies that, within a
+            particular relationship, the lifetime of one or more
+            entity beans is dependent upon the lifetime of
+            another entity bean. The cascade-delete element can
+            only be specified for an ejb-relationship-role
+            element contained in an ejb-relation element in
+            which the other ejb-relationship-role
+            element specifies a multiplicity of One.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="relationship-role-source"
+                   type="javaee:relationship-role-sourceType"/>
+      <xsd:element name="cmr-field"
+                   type="javaee:cmr-fieldType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="enterprise-beansType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The enterprise-beansType declares one or more enterprise
+        beans. Each bean can be a session, entity or message-driven
+        bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:element name="session"
+                   type="javaee:session-beanType">
+        <xsd:unique name="session-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an EJB reference. The EJB reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-local-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an EJB
+              reference. The EJB reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-env-ref"/>
+          <xsd:field xpath="javaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:message-destination-ref"/>
+          <xsd:field xpath="javaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-ref"/>
+          <xsd:field xpath="javaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:env-entry"/>
+          <xsd:field xpath="javaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="entity"
+                   type="javaee:entity-beanType">
+        <xsd:unique name="entity-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an EJB reference. The EJB reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-local-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an EJB
+              reference. The EJB reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-env-ref"/>
+          <xsd:field xpath="javaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:message-destination-ref"/>
+          <xsd:field xpath="javaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-ref"/>
+          <xsd:field xpath="javaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:env-entry"/>
+          <xsd:field xpath="javaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="message-driven"
+                   type="javaee:message-driven-beanType">
+        <xsd:unique name="messaged-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an EJB reference. The EJB reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-local-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an EJB
+              reference. The EJB reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-env-ref"/>
+          <xsd:field xpath="javaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:message-destination-ref"/>
+          <xsd:field xpath="javaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-ref"/>
+          <xsd:field xpath="javaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:env-entry"/>
+          <xsd:field xpath="javaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The entity-beanType declares an entity bean. The declaration
+        consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name
+        - a unique name assigned to the enterprise bean
+        in the deployment descriptor
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of the entity bean's remote home interface. This 
+        element is not required to be supported by all implementations.
+        Any use of this element is non-portable.
+        - the names of the entity bean's remote home 
+        and remote interfaces, if any
+        - the names of the entity bean's local home and local
+        interfaces, if any
+        - the entity bean's implementation class
+        - the optional entity bean's persistence management type. If 
+        this element is not specified it is defaulted to Container.
+        - the entity bean's primary key class name
+        - an indication of the entity bean's reentrancy
+        - an optional specification of the 
+        entity bean's cmp-version
+        - an optional specification of the entity bean's
+        abstract schema name
+        - an optional list of container-managed fields
+        - an optional specification of the primary key 
+        field
+        - an optional declaration of the bean's environment 
+        entries
+        - an optional declaration of the bean's EJB 
+        references
+        - an optional declaration of the bean's local 
+        EJB references
+        - an optional declaration of the bean's web 
+        service references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security identity
+        to be used for the execution of the bean's methods
+        - an optional declaration of the bean's 
+        resource manager connection factory references
+        - an optional declaration of the bean's
+        resource environment references
+        - an optional declaration of the bean's message 
+        destination references
+        - an optional set of query declarations
+        for finder and select methods for an entity
+        bean with cmp-version 2.x.
+        
+        The optional abstract-schema-name element must be specified
+        for an entity bean with container-managed persistence and
+        cmp-version 2.x.
+        
+        The optional primkey-field may be present in the descriptor
+        if the entity's persistence-type is Container.
+        
+        The optional cmp-version element may be present in the
+        descriptor if the entity's persistence-type is Container. If
+        the persistence-type is Container and the cmp-version
+        element is not specified, its value defaults to 2.x.
+        
+        The optional home and remote elements must be specified if
+        the entity bean cmp-version is 1.x.
+        
+        The optional home and remote elements must be specified if
+        the entity bean has a remote home and remote interface.
+        
+        The optional local-home and local elements must be specified
+        if the entity bean has a local home and local interface.
+        
+        Either both the local-home and the local elements or both
+        the home and the remote elements must be specified.
+        
+        The optional query elements must be present if the
+        persistence-type is Container and the cmp-version is 2.x and
+        query methods other than findByPrimaryKey have been defined
+        for the entity bean.
+        
+        The other elements that are optional are "optional" in the
+        sense that they are omitted if the lists represented by them
+        are empty.
+        
+        At least one cmp-field element must be present in the
+        descriptor if the entity's persistence-type is Container and
+        the cmp-version is 1.x, and none must not be present if the
+        entity's persistence-type is Bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+                   type="javaee:ejb-classType"/>
+      <xsd:element name="persistence-type"
+                   type="javaee:persistence-typeType"/>
+      <xsd:element name="prim-key-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The prim-key-class element contains the
+            fully-qualified name of an
+            entity bean's primary key class.
+            
+            If the definition of the primary key class is
+            deferred to deployment time, the prim-key-class 
+            element should specify java.lang.Object.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="reentrant"
+                   type="javaee:true-falseType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The reentrant element specifies whether an entity
+            bean is reentrant or not.
+            
+            The reentrant element must be one of the two
+            following: true or false
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-version"
+                   type="javaee:cmp-versionType"
+                   minOccurs="0"/>
+      <xsd:element name="abstract-schema-name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The abstract-schema-name element specifies the name
+            of the abstract schema type of an entity bean with 
+            cmp-version 2.x. It is used in EJB QL queries. 
+            
+            For example, the abstract-schema-name for an entity 
+            bean whose local interface is 
+            com.acme.commerce.Order might be Order. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-field"
+                   type="javaee:cmp-fieldType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="primkey-field"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The primkey-field element is used to specify the
+            name of the primary key field for an entity with
+            container-managed persistence.
+            
+            The primkey-field must be one of the fields declared
+            in the cmp-field element, and the type of the field
+            must be the same as the primary key type.
+            
+            The primkey-field element is not used if the primary
+            key maps to multiple container-managed fields
+            (i.e. the key is a compound key). In this case, the
+            fields of the primary key class must be public, and
+            their names must correspond to the field names of
+            the entity bean class that comprise the key.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+                   type="javaee:security-identityType"
+                   minOccurs="0"/>
+      <xsd:element name="query"
+                   type="javaee:queryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="exclude-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The exclude-listType specifies one or more methods which
+        the Assembler marks to be uncallable.
+        
+        If the method permission relation contains methods that are
+        in the exclude list, the Deployer should consider those
+        methods to be uncallable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+                   type="javaee:methodType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-exceptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-exceptionType declares an application
+        exception. The declaration consists of:
+        
+        - the exception class. When the container receives
+        an exception of this type, it is required to 
+        forward this exception as an applcation exception 
+        to the client regardless of whether it is a checked
+        or unchecked exception.
+        - an optional rollback element. If this element is 
+        set to true, the container must rollback the current 
+        transaction before forwarding the exception to the
+        client.  If not specified, it defaults to false.
+        - an optional inherited element. If this element is 
+        set to true, subclasses of the exception class type
+        are also automatically considered application 
+        exceptions (unless overriden at a lower level).
+        If set to false, only the exception class type is
+        considered an application-exception, not its
+        exception subclasses. If not specified, this
+        value defaults to true.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="exception-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="rollback"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="inherited"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorsType element declares one or more interceptor
+        classes used by components within this ejb-jar or .war.  The declaration
+        consists of :
+        
+        - An optional description.
+        - One or more interceptor elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor"
+                   type="javaee:interceptorType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorType element declares information about a single
+        interceptor class.  It consists of :
+        
+        - An optional description.
+        - The fully-qualified name of the interceptor class.
+        - An optional list of around invoke methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list of around timeout methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list environment dependencies for the interceptor
+        class and/or its super-classes.
+        - An optional list of post-activate methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list of pre-passivate methods declared on the
+        interceptor class and/or its super-classes.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="javaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The interceptor-bindingType element describes the binding of
+        interceptor classes to beans within the ejb-jar or .war.
+        It consists of :
+        
+        - An optional description.
+        - The name of an ejb within the module or the wildcard value "*",
+        which is used to define interceptors that are bound to all
+        beans in the ejb-jar or .war.
+        - A list of interceptor classes that are bound to the contents of
+        the ejb-name element or a specification of the total ordering
+        over the interceptors defined for the given level and above.
+        - An optional exclude-default-interceptors element.  If set to true,
+        specifies that default interceptors are not to be applied to 
+        a bean-class and/or business method.
+        - An optional exclude-class-interceptors element.  If set to true,
+        specifies that class interceptors are not to be applied to 
+        a business method.
+        - An optional set of method elements for describing the name/params
+        of a method-level interceptor.
+        
+        Interceptors bound to all classes using the wildcard syntax
+        "*" are default interceptors for the components in the ejb-jar or .war. 
+        In addition, interceptors may be bound at the level of the bean
+        class (class-level interceptors) or business methods (method-level
+        interceptors ).
+        
+        The binding of interceptors to classes is additive.  If interceptors
+        are bound at the class-level and/or default-level as well as the
+        method-level, both class-level and/or default-level as well as
+        method-level will apply. 
+        
+        There are four possible styles of the interceptor element syntax :
+        
+        1.
+        <interceptor-binding>
+        <ejb-name>*</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        </interceptor-binding>
+        
+        Specifying the ejb-name as the wildcard value "*" designates
+        default interceptors (interceptors that apply to all session and
+        message-driven beans contained in the ejb-jar or .war).
+        
+        2. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        </interceptor-binding>
+        
+        This style is used to refer to interceptors associated with the
+        specified enterprise bean(class-level interceptors).
+        
+        3. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        <method>
+        <method-name>METHOD</method-name>
+        </method>
+        </interceptor-binding>
+        
+        This style is used to associate a method-level interceptor with 
+        the specified enterprise bean.  If there are multiple methods
+        with the same overloaded name, the element of this style refers
+        to all the methods with the overloaded name.  Method-level
+        interceptors can only be associated with business methods of the
+        bean class.   Note that the wildcard value "*" cannot be used
+        to specify method-level interceptors.
+        
+        4. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        <method>
+        <method-name>METHOD</method-name>
+        <method-params>
+        <method-param>PARAM-1</method-param>
+        <method-param>PARAM-2</method-param>
+        ...
+        <method-param>PARAM-N</method-param>
+        </method-params>
+        </method>
+        </interceptor-binding>
+        
+        This style is used to associate a method-level interceptor with 
+        the specified method of the specified enterprise bean.  This 
+        style is used to refer to a single method within a set of methods
+        with an overloaded name.  The values PARAM-1 through PARAM-N
+        are the fully-qualified Java types of the method's input parameters
+        (if the method has no input arguments, the method-params element
+        contains no method-param elements). Arrays are specified by the
+        array element's type, followed by one or more pair of square 
+        brackets (e.g. int[][]).
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:string"/>
+      <xsd:choice>
+        <xsd:element name="interceptor-class"
+                     type="javaee:fully-qualified-classType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="interceptor-order"
+                     type="javaee:interceptor-orderType"
+                     minOccurs="1"/>
+      </xsd:choice>
+      <xsd:element name="exclude-default-interceptors"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="exclude-class-interceptors"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-orderType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptor-orderType element describes a total ordering
+        of interceptor classes.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="interceptor-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-methodType">
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="javaee:string"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="init-methodType">
+    <xsd:sequence>
+      <xsd:element name="create-method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="bean-method"
+                   type="javaee:named-methodType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remove-methodType">
+    <xsd:sequence>
+      <xsd:element name="bean-method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="retain-if-exception"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-driven-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-driven element declares a message-driven
+        bean. The declaration consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name. 
+        - a name assigned to the enterprise bean in
+        the deployment descriptor
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of destination from which this message-driven bean
+        should consume.  This element is not required to be supported 
+        by all implementations.  Any use of this element is non-portable.
+        - the message-driven bean's implementation class
+        - an optional declaration of the bean's messaging 
+        type 
+        - an optional declaration of the bean's timeout method for
+        handling programmatically created timers
+        - an optional declaration of timers to be automatically created at
+        deployment time
+        - the optional message-driven bean's transaction management 
+        type. If it is not defined, it is defaulted to Container.
+        - an optional declaration of the bean's 
+        message-destination-type
+        - an optional declaration of the bean's 
+        message-destination-link
+        - an optional declaration of the message-driven bean's
+        activation configuration properties
+        - an optional list of the message-driven bean class and/or
+        superclass around-invoke methods.
+        - an optional list of the message-driven bean class and/or
+        superclass around-timeout methods.
+        - an optional declaration of the bean's environment
+        entries
+        - an optional declaration of the bean's EJB references
+        - an optional declaration of the bean's local EJB
+        references
+        - an optional declaration of the bean's web service
+        references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security
+        identity to be used for the execution of the bean's
+        methods
+        - an optional declaration of the bean's 
+        resource manager connection factory 
+        references
+        - an optional declaration of the bean's resource
+        environment references.
+        - an optional declaration of the bean's message 
+        destination references
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+                   type="javaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-class element specifies the fully qualified name
+            of the bean class for this ejb.  It is required unless
+            there is a component-defining annotation for the same
+            ejb-name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="messaging-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The messaging-type element specifies the message
+            listener interface of the message-driven bean. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The timeout-method element specifies the method that
+            will receive callbacks for programmatically
+            created timers.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timer"
+                   type="javaee:timerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transaction-type"
+                   type="javaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-type"
+                   type="javaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="javaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:element name="activation-config"
+                   type="javaee:activation-configType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="javaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="security-identity"
+                   type="javaee:security-identityType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The methodType is used to denote a method of an enterprise
+        bean's business, home, component, and/or web service endpoint
+        interface, or, in the case of a message-driven bean, the
+        bean's message listener method, or a set of such
+        methods. The ejb-name element must be the name of one of the
+        enterprise beans declared in the deployment descriptor; the
+        optional method-intf element allows to distinguish between a
+        method with the same signature that is multiply defined
+        across the business, home, component, and/or web service 
+        endpoint nterfaces; the method-name element specifies the 
+        method name; and the optional method-params elements identify 
+        a single method among multiple methods with an overloaded
+        method name.
+        
+        There are three possible styles of using methodType element
+        within a method element:
+        
+        1.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>*</method-name>
+        </method>
+        
+        This style is used to refer to all the methods of the
+        specified enterprise bean's business, home, component, 
+        and/or web service endpoint interfaces.
+        
+        2.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>METHOD</method-name>
+        </method>
+        
+        This style is used to refer to the specified method of
+        the specified enterprise bean. If there are multiple
+        methods with the same overloaded name, the element of
+        this style refers to all the methods with the overloaded
+        name.
+        
+        3.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>METHOD</method-name>
+        <method-params>
+        	  <method-param>PARAM-1</method-param>
+        	  <method-param>PARAM-2</method-param>
+        	  ...
+        	  <method-param>PARAM-n</method-param>
+        </method-params>
+        </method>
+        
+        This style is used to refer to a single method within a
+        set of methods with an overloaded name. PARAM-1 through
+        PARAM-n are the fully-qualified Java types of the
+        method's input parameters (if the method has no input
+        arguments, the method-params element contains no
+        method-param elements). Arrays are specified by the
+        array element's type, followed by one or more pair of
+        square brackets (e.g. int[][]). If there are multiple
+        methods with the same overloaded name, this style refers
+        to all of the overloaded methods. 
+        
+        Examples:
+        
+        Style 1: The following method element refers to all the
+        methods of the EmployeeService bean's business, home, 
+        component, and/or web service endpoint interfaces:
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>*</method-name>
+        </method>
+        
+        Style 2: The following method element refers to all the
+        create methods of the EmployeeService bean's home
+        interface(s).
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>create</method-name>
+        </method>
+        
+        Style 3: The following method element refers to the
+        create(String firstName, String LastName) method of the
+        EmployeeService bean's home interface(s).
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        The following example illustrates a Style 3 element with
+        more complex parameter types. The method 
+        foobar(char s, int i, int[] iar, mypackage.MyClass mycl, 
+        mypackage.MyClass[][] myclaar) would be specified as:
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>foobar</method-name>
+        <method-params>
+        	  <method-param>char</method-param>
+        	  <method-param>int</method-param>
+        	  <method-param>int[]</method-param>
+        	  <method-param>mypackage.MyClass</method-param>
+        	  <method-param>mypackage.MyClass[][]</method-param>
+        </method-params>
+        </method>
+        
+        The optional method-intf element can be used when it becomes
+        necessary to differentiate between a method that is multiply
+        defined across the enterprise bean's business, home, component,
+        and/or web service endpoint interfaces with the same name and
+        signature. However, if the same method is a method of both the
+        local business interface, and the local component interface, 
+        the same attribute applies to the method for both interfaces.
+        Likewise, if the same method is a method of both the remote 
+        business interface and the remote component interface, the same
+        attribute applies to the method for both interfaces.
+        
+        For example, the method element
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Remote</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        can be used to differentiate the create(String, String)
+        method defined in the remote interface from the
+        create(String, String) method defined in the remote home
+        interface, which would be defined as
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Home</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        and the create method that is defined in the local home
+        interface which would be defined as
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>LocalHome</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        The method-intf element can be used with all three Styles
+        of the method element usage. For example, the following
+        method element example could be used to refer to all the
+        methods of the EmployeeService bean's remote home interface
+        and the remote business interface.
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Home</method-intf>
+        <method-name>*</method-name>
+        </method>
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="method-intf"
+                   type="javaee:method-intfType"
+                   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="method-name"
+                   type="javaee:method-nameType"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-intfType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-intf element allows a method element to
+        differentiate between the methods with the same name and
+        signature that are multiply defined across the home and
+        component interfaces (e.g, in both an enterprise bean's
+        remote and local interfaces or in both an enterprise bean's
+        home and remote interfaces, etc.); the component and web
+        service endpoint interfaces, and so on. 
+        
+        Local applies to the local component interface, local business 
+        interfaces, and the no-interface view. 
+        
+        Remote applies to both remote component interface and the remote 
+        business interfaces.  
+        
+        ServiceEndpoint refers to methods exposed through a web service
+        endpoint.
+        
+        Timer refers to the bean's timeout callback methods.
+        
+        MessageEndpoint refers to the methods of a message-driven bean's
+        message-listener interface.
+        
+        The method-intf element must be one of the following:
+        
+        Home
+        Remote
+        LocalHome
+        Local
+        ServiceEndpoint
+        Timer
+        MessageEndpoint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Home"/>
+        <xsd:enumeration value="Remote"/>
+        <xsd:enumeration value="LocalHome"/>
+        <xsd:enumeration value="Local"/>
+        <xsd:enumeration value="ServiceEndpoint"/>
+        <xsd:enumeration value="Timer"/>
+        <xsd:enumeration value="MessageEndpoint"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-nameType contains a name of an enterprise
+        bean method or the asterisk (*) character. The asterisk is
+        used when the element denotes all the methods of an
+        enterprise bean's client view interfaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-paramsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-paramsType defines a list of the
+        fully-qualified Java type names of the method parameters.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-param"
+                   type="javaee:java-typeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The method-param element contains a primitive
+            or a fully-qualified Java type name of a method
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-permissionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-permissionType specifies that one or more
+        security roles are allowed to invoke one or more enterprise
+        bean methods. The method-permissionType consists of an
+        optional description, a list of security role names or an
+        indicator to state that the method is unchecked for
+        authorization, and a list of method elements.
+        
+        The security roles used in the method-permissionType
+        must be defined in the security-role elements of the
+        deployment descriptor, and the methods must be methods
+        defined in the enterprise bean's business, home, component 
+        and/or web service endpoint interfaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="role-name"
+                     type="javaee:role-nameType"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="unchecked"
+                     type="javaee:emptyType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The unchecked element specifies that a method is
+              not checked for authorization by the container
+              prior to invocation of the method.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="method"
+                   type="javaee:methodType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multiplicityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The multiplicityType describes the multiplicity of the
+        role that participates in a relation.
+        
+        The value must be one of the two following:
+        
+        One
+        Many
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="One"/>
+        <xsd:enumeration value="Many"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-typeType specifies an entity bean's persistence
+        management type.
+        
+        The persistence-type element must be one of the two following:
+        
+        Bean
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="queryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The queryType defines a finder or select
+        query. It contains
+        - an optional description of the query
+        - the specification of the finder or select
+        method it is used by
+        	- an optional specification of the result type 
+        	  mapping, if the query is for a select method 
+        	  and entity objects are returned.
+        	- the EJB QL query string that defines the query.
+        
+        Queries that are expressible in EJB QL must use the ejb-ql
+        element to specify the query. If a query is not expressible
+        in EJB QL, the description element should be used to
+        describe the semantics of the query and the ejb-ql element
+        should be empty.
+        
+        The result-type-mapping is an optional element. It can only
+        be present if the query-method specifies a select method
+        that returns entity objects.  The default value for the
+        result-type-mapping element is "Local".
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"/>
+      <xsd:element name="query-method"
+                   type="javaee:query-methodType"/>
+      <xsd:element name="result-type-mapping"
+                   type="javaee:result-type-mappingType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-ql"
+                   type="javaee:xsdStringType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="query-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The query-method specifies the method for a finder or select
+        query.
+        
+        The method-name element specifies the name of a finder or select
+        method in the entity bean's implementation class.
+        
+        Each method-param must be defined for a query-method using the
+        method-params element.
+        
+        It is used by the query-method element. 
+        
+        Example:
+        
+        <query>
+        <description>Method finds large orders</description>
+        <query-method>
+        	  <method-name>findLargeOrders</method-name>
+        	  <method-params></method-params>
+        </query-method>
+        <ejb-ql>
+        	SELECT OBJECT(o) FROM Order o
+        	  WHERE o.amount &gt; 1000
+        </ejb-ql>
+        </query>
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="javaee:method-nameType"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationship-role-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The relationship-role-sourceType designates the source of a
+        role that participates in a relationship. A
+        relationship-role-sourceType is used by
+        relationship-role-source elements to uniquely identify an
+        entity bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationshipsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The relationshipsType describes the relationships in
+        which entity beans with container-managed persistence
+        participate. The relationshipsType contains an optional
+        description; and a list of ejb-relation elements, which
+        specify the container managed relationships.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation"
+                   type="javaee:ejb-relationType"
+                   maxOccurs="unbounded">
+        <xsd:unique name="role-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-relationship-role-name contains the name of a
+              relationship role. The name must be unique within 
+              a relationship, but can be reused in different
+              relationships.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath=".//javaee:ejb-relationship-role-name"/>
+          <xsd:field xpath="."/>
+        </xsd:unique>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="result-type-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The result-type-mappingType is used in the query element to
+        specify whether an abstract schema type returned by a query
+        for a select method is to be mapped to an EJBLocalObject or
+        EJBObject type.
+        
+        The value must be one of the following:
+        
+        Local
+        Remote
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Local"/>
+        <xsd:enumeration value="Remote"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-identityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-identityType specifies whether the caller's
+        security identity is to be used for the execution of the
+        methods of the enterprise bean or whether a specific run-as
+        identity is to be used. It contains an optional description
+        and a specification of the security identity to be used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="use-caller-identity"
+                     type="javaee:emptyType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The use-caller-identity element specifies that
+              the caller's security identity be used as the
+              security identity for the execution of the
+              enterprise bean's methods.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="run-as"
+                     type="javaee:run-asType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-beanType declares an session bean. The
+        declaration consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name
+        - a name assigned to the enterprise bean
+        in the deployment description
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of the session bean's remote home/business interface. 
+        This element is not required to be supported by all 
+        implementations. Any use of this element is non-portable.
+        - the names of all the remote or local business interfaces, 
+        if any
+        - the names of the session bean's remote home and
+        remote interfaces, if any
+        - the names of the session bean's local home and
+        local interfaces, if any
+        - an optional declaration that this bean exposes a
+        no-interface view
+        - the name of the session bean's web service endpoint
+        interface, if any
+        - the session bean's implementation class
+        - the session bean's state management type
+        - an optional declaration of a stateful session bean's timeout value
+        - an optional declaration of the session bean's timeout method for
+        handling programmatically created timers
+        - an optional declaration of timers to be automatically created at
+        deployment time
+        - an optional declaration that a Singleton bean has eager
+        initialization
+        - an optional declaration of a Singleton/Stateful bean's concurrency 
+        management type
+        - an optional declaration of the method locking metadata
+        for a Singleton with container managed concurrency
+        - an optional declaration of the other Singleton beans in the
+        application that must be initialized before this bean
+        - an optional declaration of the session bean's asynchronous 
+        methods
+        - the optional session bean's transaction management type. 
+        If it is not present, it is defaulted to Container.
+        - an optional declaration of a stateful session bean's 
+        afterBegin, beforeCompletion, and/or afterCompletion methods
+        - an optional list of the session bean class and/or
+        superclass around-invoke methods.
+        - an optional list of the session bean class and/or
+        superclass around-timeout methods.
+        - an optional declaration of the bean's 
+        environment entries
+        - an optional declaration of the bean's EJB references
+        - an optional declaration of the bean's local 
+        EJB references
+        - an optional declaration of the bean's web 
+        service references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security identity 
+        to be used for the execution of the bean's methods
+        - an optional declaration of the bean's resource 
+        manager connection factory references
+        - an optional declaration of the bean's resource 
+        environment references.
+        - an optional declaration of the bean's message 
+        destination references
+        
+        The elements that are optional are "optional" in the sense
+        that they are omitted when if lists represented by them are
+        empty.
+        
+        The service-endpoint element may only be specified if the
+        bean is a stateless session bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="business-local"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="business-remote"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="local-bean"
+                   type="javaee:emptyType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The local-bean element declares that this
+            session bean exposes a no-interface Local client view.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-endpoint element contains the
+            fully-qualified name of the enterprise bean's web
+            service endpoint interface. The service-endpoint
+            element may only be specified for a stateless
+            session bean. The specified interface must be a
+            valid JAX-RPC service endpoint interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-class"
+                   type="javaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-class element specifies the fully qualified name
+            of the bean class for this ejb.  It is required unless
+            there is a component-defining annotation for the same
+            ejb-name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="session-type"
+                   type="javaee:session-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="stateful-timeout"
+                   type="javaee:stateful-timeoutType"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The timeout-method element specifies the method that
+            will receive callbacks for programmatically
+            created timers.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timer"
+                   type="javaee:timerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="init-on-startup"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-on-startup element specifies that a Singleton
+            bean has eager initialization.
+            This element can only be specified for singleton session
+            beans.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="concurrency-management-type"
+                   type="javaee:concurrency-management-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="concurrent-method"
+                   type="javaee:concurrent-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="depends-on"
+                   type="javaee:depends-onType"
+                   minOccurs="0"/>
+      <xsd:element name="init-method"
+                   type="javaee:init-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-method element specifies the mappings for
+            EJB 2.x style create methods for an EJB 3.x bean.
+            This element can only be specified for stateful 
+            session beans. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="remove-method"
+                   type="javaee:remove-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The remove-method element specifies the mappings for
+            EJB 2.x style remove methods for an EJB 3.x bean.
+            This element can only be specified for stateful 
+            session beans. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-method"
+                   type="javaee:async-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transaction-type"
+                   type="javaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="after-begin-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="before-completion-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="after-completion-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="javaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="security-identity"
+                   type="javaee:security-identityType"
+                   minOccurs="0">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-typeType describes whether the session bean is a
+        singleton, stateful or stateless session. It is used by
+        session-type elements.
+        
+        The value must be one of the three following:
+        
+        Singleton
+        Stateful
+        Stateless
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Singleton"/>
+        <xsd:enumeration value="Stateful"/>
+        <xsd:enumeration value="Stateless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="stateful-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The stateful-timeoutType represents the amount of time
+        a stateful session bean can be idle(not receive any client
+        invocations) before it is eligible for removal by the container.
+        
+        A timeout value of 0 means the bean is immediately eligible for removal.
+        
+        A timeout value of -1 means the bean will never be removed due to timeout.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="timeout"
+                   type="javaee:xsdIntegerType"/>
+      <xsd:element name="unit"
+                   type="javaee:time-unit-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="time-unit-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The time-unit-typeType represents a time duration at a given
+        unit of granularity.  
+        
+        The time unit type must be one of the following :
+        
+        Days
+        Hours
+        Minutes
+        Seconds
+        Milliseconds
+        Microseconds
+        Nanoseconds
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Days"/>
+        <xsd:enumeration value="Hours"/>
+        <xsd:enumeration value="Minutes"/>
+        <xsd:enumeration value="Seconds"/>
+        <xsd:enumeration value="Milliseconds"/>
+        <xsd:enumeration value="Microseconds"/>
+        <xsd:enumeration value="Nanoseconds"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="timer-scheduleType">
+    <xsd:sequence>
+      <xsd:element name="second"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="minute"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="hour"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="day-of-month"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="month"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="day-of-week"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="year"
+                   type="javaee:string"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="timerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The timerType specifies an enterprise bean timer.  Each
+        timer is automatically created by the container upon
+        deployment.  Timer callbacks occur based on the 
+        schedule attributes.  All callbacks are made to the
+        timeout-method associated with the timer.  
+        
+        A timer can have an optional start and/or end date. If
+        a start date is specified, it takes precedence over the
+        associated timer schedule such that any matching
+        expirations prior to the start time will not occur.
+        Likewise, no matching expirations will occur after any
+        end date.   Start/End dates are specified using the
+        XML Schema dateTime type, which follows the ISO-8601
+        standard for date(and optional time-within-the-day) 
+        representation.
+        
+        An optional flag can be used to control whether
+        this timer has persistent(true) delivery semantics or
+        non-persistent(false) delivery semantics.  If not specified,
+        the value defaults to persistent(true).
+        
+        A time zone can optionally be associated with a timer.
+        If specified, the timer's schedule is evaluated in the context
+        of that time zone, regardless of the default time zone in which
+        the container is executing.   Time zones are specified as an
+        ID string.  The set of required time zone IDs is defined by
+        the Zone Name(TZ) column of the public domain zoneinfo database.
+        
+        An optional info string can be assigned to the timer and 
+        retrieved at runtime through the Timer.getInfo() method.
+        
+        The timerType can only be specified on stateless session
+        beans, singleton session beans, and message-driven beans.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="schedule"
+                   type="javaee:timer-scheduleType"/>
+      <xsd:element name="start"
+                   type="xsd:dateTime"
+                   minOccurs="0"/>
+      <xsd:element name="end"
+                   type="xsd:dateTime"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="persistent"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="timezone"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="info"
+                   type="javaee:string"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="trans-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The trans-attributeType specifies how the container must
+        manage the transaction boundaries when delegating a method 
+        invocation to an enterprise bean's business method. 
+        
+        The value must be one of the following: 
+        
+        NotSupported 
+        Supports 
+        Required  
+        RequiresNew 
+        Mandatory 
+        Never 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NotSupported"/>
+        <xsd:enumeration value="Supports"/>
+        <xsd:enumeration value="Required"/>
+        <xsd:enumeration value="RequiresNew"/>
+        <xsd:enumeration value="Mandatory"/>
+        <xsd:enumeration value="Never"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-typeType specifies an enterprise bean's
+        transaction management type.
+        
+        The transaction-type must be one of the two following:
+        
+        Bean
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/ejb-jar_3_2.xsd b/wildfly/docs/schema/ejb-jar_3_2.xsd
new file mode 100644
index 0000000..62e9ffd
--- /dev/null
+++ b/wildfly/docs/schema/ejb-jar_3_2.xsd
@@ -0,0 +1,3375 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.2">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the EJB 3.2 deployment descriptor.
+      
+      All EJB deployment descriptors must indicate
+      the schema by using the Java EE namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <ejb-jar xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
+      	  http://xmlns.jcp.org/xml/ns/javaee/ejb-jar_3_2.xsd"
+      version="3.2">
+      ...
+      </ejb-jar>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for the
+      Java EE namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/ejb-jar_3_2.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="ejb-jar"
+               type="javaee:ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is the root of the ejb-jar deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:key name="ejb-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-name element contains the name of an enterprise
+          bean. The name must be unique within the ejb-jar file or
+          .war file.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:enterprise-beans/*"/>
+      <xsd:field xpath="javaee:ejb-name"/>
+    </xsd:key>
+    <xsd:keyref name="ejb-name-references"
+                refer="javaee:ejb-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          relationship-role-source must be to a specific ejb-name
+          defined within the scope of enterprise-beans element. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath=".//javaee:ejb-relationship-role/javaee:relationship-role-source"/>
+      <xsd:field xpath="javaee:ejb-name"/>
+    </xsd:keyref>
+    <xsd:key name="role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:assembly-descriptor/javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="role-name-references"
+                refer="javaee:role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:enterprise-beans/*/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="access-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The access-timeoutType represents the maximum amount of
+        time (in a given time unit) that the container should wait for
+        a concurrency lock before throwing a timeout exception to the
+        client.
+        
+        A timeout value of 0 means concurrent access is not permitted.
+        
+        A timeout value of -1 means wait indefinitely to acquire a lock.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="timeout"
+                   type="javaee:xsdIntegerType"/>
+      <xsd:element name="unit"
+                   type="javaee:time-unit-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="async-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The async-methodType element specifies that a session
+        bean method has asynchronous invocation semantics.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="javaee:string"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The activation-configType defines information about the
+        expected configuration properties of the message-driven bean
+        in its operational environment. This may include information
+        about message acknowledgement, message selector, expected
+        destination type, destination or connection factory lookup
+        string, subscription name, etc.
+        
+        The configuration information is expressed in terms of
+        name/value configuration properties.
+        
+        The properties that are recognized for a particular
+        message-driven bean are determined by the messaging type.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="activation-config-property"
+                   type="javaee:activation-config-propertyType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The activation-config-propertyType contains a name/value
+        configuration property pair for a message-driven bean.
+        
+        The properties that are recognized for a particular
+        message-driven bean are determined by the messaging type.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="activation-config-property-name"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The activation-config-property-name element contains
+            the name for an activation configuration property of
+            a message-driven bean.
+            
+            For JMS message-driven beans, the following property
+            names are recognized: acknowledgeMode,
+            messageSelector, destinationType, subscriptionDurability,
+            destinationLookup, connectionFactoryLookup, subscriptionName,
+            and clientId.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="activation-config-property-value"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The activation-config-property-value element
+            contains the value for an activation configuration
+            property of a message-driven bean.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-invokeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-invoke type specifies a method on a
+        class to be called during the around invoke portion of an 
+        ejb invocation.  Note that each class may have only one
+        around invoke method and that the method may not be
+        overloaded.
+        
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around invoke
+        definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-timeout type specifies a method on a
+        class to be called during the around-timeout portion of
+        a timer timeout callback.  Note that each class may have 
+        only one around-timeout method and that the method may not 
+        be overloaded.
+        
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around-timeout
+        definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="assembly-descriptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The assembly-descriptorType defines
+        application-assembly information.
+        
+        The application-assembly information consists of the
+        following parts: the definition of security roles, the
+        definition of method permissions, the definition of
+        transaction attributes for enterprise beans with
+        container-managed transaction demarcation, the definition
+        of interceptor bindings, a list of
+        methods to be excluded from being invoked, and a list of
+        exception types that should be treated as application exceptions.
+        
+        All the parts are optional in the sense that they are
+        omitted if the lists represented by them are empty.
+        
+        Providing an assembly-descriptor in the deployment
+        descriptor is optional for the ejb-jar file or .war file producer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method-permission"
+                   type="javaee:method-permissionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="container-transaction"
+                   type="javaee:container-transactionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-binding"
+                   type="javaee:interceptor-bindingType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="exclude-list"
+                   type="javaee:exclude-listType"
+                   minOccurs="0"/>
+      <xsd:element name="application-exception"
+                   type="javaee:application-exceptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmp-fieldType describes a container-managed field. The
+        cmp-fieldType contains an optional description of the field,
+        and the name of the field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="field-name"
+                   type="javaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The field-name element specifies the name of a
+            container managed field.
+            
+            The name of the cmp-field of an entity bean with
+            cmp-version 2.x must begin with a lowercase
+            letter. This field is accessed by methods whose
+            names consists of the name of the field specified by
+            field-name in which the first letter is uppercased,
+            prefixed by "get" or "set".
+            
+            The name of the cmp-field of an entity bean with
+            cmp-version 1.x must denote a public field of the
+            enterprise bean class or one of its superclasses.
+            
+            Support for entity beans is optional as of EJB 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmp-versionType specifies the version of an entity bean
+        with container-managed persistence. It is used by
+        cmp-version elements.
+        
+        The value must be one of the two following:
+        
+        1.x
+        2.x
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="1.x"/>
+        <xsd:enumeration value="2.x"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmr-fieldType describes the Bean Provider's view of
+        a relationship. It consists of an optional description, and
+        the name and the class type of a field in the source of a
+        role of a relationship. The cmr-field-name element
+        corresponds to the name used for the get and set accessor
+        methods for the relationship. The cmr-field-type element is
+        used only for collection-valued cmr-fields. It specifies the
+        type of the collection that is used.
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="cmr-field-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cmr-field-name element specifies the name of a
+            logical relationship field in the entity bean
+            class. The name of the cmr-field must begin with a
+            lowercase letter. This field is accessed by methods
+            whose names consist of the name of the field
+            specified by cmr-field-name in which the first
+            letter is uppercased, prefixed by "get" or "set".
+            
+            Support for entity beans is optional as of EJB 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmr-field-type"
+                   type="javaee:cmr-field-typeType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-field-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmr-field-type element specifies the class of a
+        collection-valued logical relationship field in the entity
+        bean class. The value of an element using cmr-field-typeType
+        must be either: java.util.Collection or java.util.Set.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="java.util.Collection"/>
+        <xsd:enumeration value="java.util.Set"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrency-management-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrency-management-typeType specifies the way concurrency
+        is managed for a singleton or stateful session bean.  
+        
+        The concurrency management type must be one of the following:
+        
+        Bean
+        Container
+        
+        Bean managed concurrency can only be specified for a singleton bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrent-lock-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrent-lock-typeType specifies how the container must
+        manage concurrent access to a method of a Singleton bean 
+        with container-managed concurrency.
+        
+        The container managed concurrency lock type must be one 
+        of the following :
+        
+        Read
+        Write
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Read"/>
+        <xsd:enumeration value="Write"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrent-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrent-methodType specifies information about a method
+        of a bean with container managed concurrency.
+        
+        The optional lock element specifies the kind of concurrency 
+        lock asssociated with the method.
+        
+        The optional access-timeout element specifies the amount of
+        time (in a given time unit) the container should wait for a
+        concurrency lock before throwing an exception to the client.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="lock"
+                   type="javaee:concurrent-lock-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="access-timeout"
+                   type="javaee:access-timeoutType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="container-transactionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The container-transactionType specifies how the container
+        must manage transaction scopes for the enterprise bean's
+        method invocations. It defines an optional description, a
+        list of method elements, and a transaction attribute. The
+        transaction attribute is to be applied to all the specified
+        methods.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+                   type="javaee:methodType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="trans-attribute"
+                   type="javaee:trans-attributeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="depends-onType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The depends-onType is used to express initialization 
+        ordering dependencies between Singleton components.
+        The depends-onType specifies the names of one or more
+        Singleton beans in the same application as the referring
+        Singleton, each of which must be initialized before
+        the referring bean.  
+        
+        Each dependent bean is expressed using ejb-link syntax.
+        The order in which dependent beans are initialized at 
+        runtime is not guaranteed to match the order in which
+        they are listed.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-linkType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-classType contains the fully-qualified name of the
+        enterprise bean's class. It is used by ejb-class elements. 
+        
+        Example:
+        
+        <ejb-class>com.wombat.empl.EmployeeServiceBean</ejb-class>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-jarType defines the root element of the EJB
+        deployment descriptor. It contains
+        
+        - an optional description of the ejb-jar file
+        - an optional display name
+        - an optional icon that contains a small and a large
+        icon file name
+        - an optional module name. Only applicable to
+        stand-alone ejb-jars or ejb-jars packaged in an ear.
+        Ignored if specified for an ejb-jar.xml within a .war file.
+        In that case, standard .war file module-name rules apply.
+        - structural information about all included
+        enterprise beans that is not specified through
+        annotations
+        - structural information about interceptor classes
+        - a descriptor for container managed relationships, 
+        if any. 
+        - an optional application-assembly descriptor
+        - an optional name of an ejb-client-jar file for the 
+        ejb-jar.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="enterprise-beans"
+                   type="javaee:enterprise-beansType"
+                   minOccurs="0"/>
+      <xsd:element name="interceptors"
+                   type="javaee:interceptorsType"
+                   minOccurs="0"/>
+      <xsd:element name="relationships"
+                   type="javaee:relationshipsType"
+                   minOccurs="0">
+        <xsd:unique name="relationship-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-relation-name contains the name of a
+              relation. The name must be unique within
+              relationships.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-relation"/>
+          <xsd:field xpath="javaee:ejb-relation-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="assembly-descriptor"
+                   type="javaee:assembly-descriptorType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Providing an assembly-descriptor in the deployment
+            descriptor is optional for the ejb-jar file or .war file
+            producer.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-client-jar"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The optional ejb-client-jar element specifies a JAR
+            file that contains the class files necessary for a
+            client program to access the
+            enterprise beans in the ejb-jar file.
+            
+            Example:
+            
+            	  <ejb-client-jar>employee_service_client.jar
+            	  </ejb-client-jar>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="3.2"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The version specifies the version of the
+          EJB specification that the instance document must 
+          comply with. This information enables deployment tools
+          to validate a particular EJB Deployment
+          Descriptor with respect to a specific version of the EJB
+          schema. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-nameType specifies an enterprise bean's name. It is
+        used by ejb-name elements. This name is assigned by the
+        file producer to name the enterprise bean in the
+        ejb-jar file or .war file's deployment descriptor. The name must be
+        unique among the names of the enterprise beans in the same
+        ejb-jar file or .war file.
+        
+        There is no architected relationship between the used
+        ejb-name in the deployment descriptor and the JNDI name that
+        the Deployer will assign to the enterprise bean's home.
+        
+        The name for an entity bean must conform to the lexical
+        rules for an NMTOKEN.
+        
+        Example:
+        
+        <ejb-name>EmployeeService</ejb-name>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-relationType describes a relationship between two
+        entity beans with container-managed persistence.  It is used
+        by ejb-relation elements. It contains a description; an
+        optional ejb-relation-name element; and exactly two
+        relationship role declarations, defined by the
+        ejb-relationship-role elements. The name of the
+        relationship, if specified, is unique within the ejb-jar
+        file.
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-relation-name element provides a unique name
+            within the ejb-jar file for a relationship.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-relationship-role"
+                   type="javaee:ejb-relationship-roleType"
+                   minOccurs="2"
+                   maxOccurs="2"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationship-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-relationship-roleType describes a role within a
+        relationship. There are two roles in each relationship.
+        
+        The ejb-relationship-roleType contains an optional
+        description; an optional name for the relationship role; a
+        specification of the multiplicity of the role; an optional
+        specification of cascade-delete functionality for the role;
+        the role source; and a declaration of the cmr-field, if any,
+        by means of which the other side of the relationship is
+        accessed from the perspective of the role source.
+        
+        The multiplicity and role-source element are mandatory.
+        
+        The relationship-role-source element designates an entity
+        bean by means of an ejb-name element. For bidirectional
+        relationships, both roles of a relationship must declare a
+        relationship-role-source element that specifies a cmr-field
+        in terms of which the relationship is accessed. The lack of
+        a cmr-field element in an ejb-relationship-role specifies
+        that the relationship is unidirectional in navigability and
+        the entity bean that participates in the relationship is
+        "not aware" of the relationship.
+        
+        Example:
+        
+        <ejb-relation>
+        <ejb-relation-name>Product-LineItem</ejb-relation-name>
+        <ejb-relationship-role>
+        	  <ejb-relationship-role-name>product-has-lineitems
+        	  </ejb-relationship-role-name>
+        	  <multiplicity>One</multiplicity>
+        	  <relationship-role-source>
+        	  <ejb-name>ProductEJB</ejb-name>
+        	  </relationship-role-source>
+        </ejb-relationship-role>
+        </ejb-relation>
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relationship-role-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-relationship-role-name element defines a
+            name for a role that is unique within an
+            ejb-relation. Different relationships can use the
+            same name for a role.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="multiplicity"
+                   type="javaee:multiplicityType"/>
+      <xsd:element name="cascade-delete"
+                   type="javaee:emptyType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cascade-delete element specifies that, within a
+            particular relationship, the lifetime of one or more
+            entity beans is dependent upon the lifetime of
+            another entity bean. The cascade-delete element can
+            only be specified for an ejb-relationship-role
+            element contained in an ejb-relation element in
+            which the other ejb-relationship-role
+            element specifies a multiplicity of One.
+            
+            Support for entity beans is optional as of EJB 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="relationship-role-source"
+                   type="javaee:relationship-role-sourceType"/>
+      <xsd:element name="cmr-field"
+                   type="javaee:cmr-fieldType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="enterprise-beansType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The enterprise-beansType declares one or more enterprise
+        beans. Each bean can be a session, entity or message-driven
+        bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:element name="session"
+                   type="javaee:session-beanType">
+        <xsd:unique name="session-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an EJB reference. The EJB reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-local-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an EJB
+              reference. The EJB reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-env-ref"/>
+          <xsd:field xpath="javaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:message-destination-ref"/>
+          <xsd:field xpath="javaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-ref"/>
+          <xsd:field xpath="javaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:env-entry"/>
+          <xsd:field xpath="javaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="entity"
+                   type="javaee:entity-beanType">
+        <xsd:unique name="entity-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an EJB reference. The EJB reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-local-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an EJB
+              reference. The EJB reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-env-ref"/>
+          <xsd:field xpath="javaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:message-destination-ref"/>
+          <xsd:field xpath="javaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-ref"/>
+          <xsd:field xpath="javaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:env-entry"/>
+          <xsd:field xpath="javaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="message-driven"
+                   type="javaee:message-driven-beanType">
+        <xsd:unique name="messaged-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an EJB reference. The EJB reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-local-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an EJB
+              reference. The EJB reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:ejb-ref"/>
+          <xsd:field xpath="javaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-env-ref"/>
+          <xsd:field xpath="javaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:message-destination-ref"/>
+          <xsd:field xpath="javaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:resource-ref"/>
+          <xsd:field xpath="javaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:env-entry"/>
+          <xsd:field xpath="javaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Support for entity beans is optional as of EJB 3.2.
+        
+        The entity-beanType declares an entity bean. The declaration
+        consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name
+        - a unique name assigned to the enterprise bean
+        in the deployment descriptor
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of the entity bean's remote home interface. This 
+        element is not required to be supported by all implementations.
+        Any use of this element is non-portable.
+        - the names of the entity bean's remote home 
+        and remote interfaces, if any
+        - the names of the entity bean's local home and local
+        interfaces, if any
+        - the entity bean's implementation class
+        - the optional entity bean's persistence management type. If 
+        this element is not specified it is defaulted to Container.
+        - the entity bean's primary key class name
+        - an indication of the entity bean's reentrancy
+        - an optional specification of the 
+        entity bean's cmp-version
+        - an optional specification of the entity bean's
+        abstract schema name
+        - an optional list of container-managed fields
+        - an optional specification of the primary key 
+        field
+        - an optional declaration of the bean's environment 
+        entries
+        - an optional declaration of the bean's EJB 
+        references
+        - an optional declaration of the bean's local 
+        EJB references
+        - an optional declaration of the bean's web 
+        service references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security identity
+        to be used for the execution of the bean's methods
+        - an optional declaration of the bean's 
+        resource manager connection factory references
+        - an optional declaration of the bean's
+        resource environment references
+        - an optional declaration of the bean's message 
+        destination references
+        - an optional set of query declarations
+        for finder and select methods for an entity
+        bean with cmp-version 2.x.
+        
+        The optional abstract-schema-name element must be specified
+        for an entity bean with container-managed persistence and
+        cmp-version 2.x.
+        
+        The optional primkey-field may be present in the descriptor
+        if the entity's persistence-type is Container.
+        
+        The optional cmp-version element may be present in the
+        descriptor if the entity's persistence-type is Container. If
+        the persistence-type is Container and the cmp-version
+        element is not specified, its value defaults to 2.x.
+        
+        The optional home and remote elements must be specified if
+        the entity bean cmp-version is 1.x.
+        
+        The optional home and remote elements must be specified if
+        the entity bean has a remote home and remote interface.
+        
+        The optional local-home and local elements must be specified
+        if the entity bean has a local home and local interface.
+        
+        Either both the local-home and the local elements or both
+        the home and the remote elements must be specified.
+        
+        The optional query elements must be present if the
+        persistence-type is Container and the cmp-version is 2.x and
+        query methods other than findByPrimaryKey have been defined
+        for the entity bean.
+        
+        The other elements that are optional are "optional" in the
+        sense that they are omitted if the lists represented by them
+        are empty.
+        
+        At least one cmp-field element must be present in the
+        descriptor if the entity's persistence-type is Container and
+        the cmp-version is 1.x, and none must not be present if the
+        entity's persistence-type is Bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+                   type="javaee:ejb-classType"/>
+      <xsd:element name="persistence-type"
+                   type="javaee:persistence-typeType"/>
+      <xsd:element name="prim-key-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The prim-key-class element contains the
+            fully-qualified name of an
+            entity bean's primary key class.
+            
+            If the definition of the primary key class is
+            deferred to deployment time, the prim-key-class 
+            element should specify java.lang.Object.
+            
+            Support for entity beans is optional as of EJB 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="reentrant"
+                   type="javaee:true-falseType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The reentrant element specifies whether an entity
+            bean is reentrant or not.
+            
+            The reentrant element must be one of the two
+            following: true or false
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-version"
+                   type="javaee:cmp-versionType"
+                   minOccurs="0"/>
+      <xsd:element name="abstract-schema-name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The abstract-schema-name element specifies the name
+            of the abstract schema type of an entity bean with 
+            cmp-version 2.x. It is used in EJB QL queries. 
+            
+            For example, the abstract-schema-name for an entity 
+            bean whose local interface is 
+            com.acme.commerce.Order might be Order. 
+            
+            Support for entity beans is optional as of EJB 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-field"
+                   type="javaee:cmp-fieldType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="primkey-field"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The primkey-field element is used to specify the
+            name of the primary key field for an entity with
+            container-managed persistence.
+            
+            The primkey-field must be one of the fields declared
+            in the cmp-field element, and the type of the field
+            must be the same as the primary key type.
+            
+            The primkey-field element is not used if the primary
+            key maps to multiple container-managed fields
+            (i.e. the key is a compound key). In this case, the
+            fields of the primary key class must be public, and
+            their names must correspond to the field names of
+            the entity bean class that comprise the key.
+            
+            Support for entity beans is optional as of EJB 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+                   type="javaee:security-identityType"
+                   minOccurs="0"/>
+      <xsd:element name="query"
+                   type="javaee:queryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="exclude-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The exclude-listType specifies one or more methods which
+        the Assembler marks to be uncallable.
+        
+        If the method permission relation contains methods that are
+        in the exclude list, the Deployer should consider those
+        methods to be uncallable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+                   type="javaee:methodType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-exceptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-exceptionType declares an application
+        exception. The declaration consists of:
+        
+        - the exception class. When the container receives
+        an exception of this type, it is required to 
+        forward this exception as an applcation exception 
+        to the client regardless of whether it is a checked
+        or unchecked exception.
+        - an optional rollback element. If this element is 
+        set to true, the container must rollback the current 
+        transaction before forwarding the exception to the
+        client.  If not specified, it defaults to false.
+        - an optional inherited element. If this element is 
+        set to true, subclasses of the exception class type
+        are also automatically considered application 
+        exceptions (unless overriden at a lower level).
+        If set to false, only the exception class type is
+        considered an application-exception, not its
+        exception subclasses. If not specified, this
+        value defaults to true.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="exception-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="rollback"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="inherited"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorsType element declares one or more interceptor
+        classes used by components within this ejb-jar file or .war file.  The declaration
+        consists of :
+        
+        - An optional description.
+        - One or more interceptor elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor"
+                   type="javaee:interceptorType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorType element declares information about a single
+        interceptor class.  It consists of :
+        
+        - An optional description.
+        - The fully-qualified name of the interceptor class.
+        - An optional list of around invoke methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list of around timeout methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list environment dependencies for the interceptor
+        class and/or its super-classes.
+        - An optional list of post-activate methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list of pre-passivate methods declared on the
+        interceptor class and/or its super-classes.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="javaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The interceptor-bindingType element describes the binding of
+        interceptor classes to beans within the ejb-jar file or .war file.
+        It consists of :
+        
+        - An optional description.
+        - The name of an ejb within the module or the wildcard value "*",
+        which is used to define interceptors that are bound to all
+        beans in the ejb-jar file or .war file.
+        - A list of interceptor classes that are bound to the contents of
+        the ejb-name element or a specification of the total ordering
+        over the interceptors defined for the given level and above.
+        - An optional exclude-default-interceptors element.  If set to true,
+        specifies that default interceptors are not to be applied to 
+        a bean-class and/or business method.
+        - An optional exclude-class-interceptors element.  If set to true,
+        specifies that class interceptors are not to be applied to 
+        a business method.
+        - An optional set of method elements for describing the name/params
+        of a method-level interceptor.
+        
+        Interceptors bound to all classes using the wildcard syntax
+        "*" are default interceptors for the components in the ejb-jar file or .war file. 
+        In addition, interceptors may be bound at the level of the bean
+        class (class-level interceptors) or business methods (method-level
+        interceptors ).
+        
+        The binding of interceptors to classes is additive.  If interceptors
+        are bound at the class-level and/or default-level as well as the
+        method-level, both class-level and/or default-level as well as
+        method-level will apply. 
+        
+        The method-name element may be used to bind a constructor-level 
+        interceptor using the unqualified name of the bean class as the value; 
+        the optional method-params elements identify the constructor if a bean 
+        class has a constructor annotated with the Inject annotation in addition 
+        to a no-arg constructor.
+        
+        There are four possible styles of the interceptor element syntax :
+        
+        1.
+        <interceptor-binding>
+        <ejb-name>*</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        </interceptor-binding>
+        
+        Specifying the ejb-name as the wildcard value "*" designates
+        default interceptors (interceptors that apply to all session and
+        message-driven beans contained in the ejb-jar file or .war file).
+        
+        2. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        </interceptor-binding>
+        
+        This style is used to refer to interceptors associated with the
+        specified enterprise bean(class-level interceptors).
+        
+        3. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        <method>
+        <method-name>METHOD</method-name>
+        </method>
+        </interceptor-binding>
+        
+        This style is used to associate a method-level interceptor with 
+        the specified enterprise bean.  If there are multiple methods
+        with the same overloaded name, the element of this style refers
+        to all the methods with the overloaded name.  Method-level
+        interceptors can only be associated with business methods of the
+        bean class.   Note that the wildcard value "*" cannot be used
+        to specify method-level interceptors.
+        
+        4. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        <method>
+        <method-name>METHOD</method-name>
+        <method-params>
+        <method-param>PARAM-1</method-param>
+        <method-param>PARAM-2</method-param>
+        ...
+        <method-param>PARAM-N</method-param>
+        </method-params>
+        </method>
+        </interceptor-binding>
+        
+        This style is used to associate a method-level interceptor with 
+        the specified method of the specified enterprise bean.  This 
+        style is used to refer to a single method within a set of methods
+        with an overloaded name.  The values PARAM-1 through PARAM-N
+        are the fully-qualified Java types of the method's input parameters
+        (if the method has no input arguments, the method-params element
+        contains no method-param elements). Arrays are specified by the
+        array element's type, followed by one or more pair of square 
+        brackets (e.g. int[][]).
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:string"/>
+      <xsd:choice>
+        <xsd:element name="interceptor-class"
+                     type="javaee:fully-qualified-classType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="interceptor-order"
+                     type="javaee:interceptor-orderType"
+                     minOccurs="1"/>
+      </xsd:choice>
+      <xsd:element name="exclude-default-interceptors"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="exclude-class-interceptors"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-orderType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptor-orderType element describes a total ordering
+        of interceptor classes.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="interceptor-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-methodType">
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="javaee:string"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="init-methodType">
+    <xsd:sequence>
+      <xsd:element name="create-method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="bean-method"
+                   type="javaee:named-methodType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remove-methodType">
+    <xsd:sequence>
+      <xsd:element name="bean-method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="retain-if-exception"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-driven-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-driven element declares a message-driven
+        bean. The declaration consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name. 
+        - a name assigned to the enterprise bean in
+        the deployment descriptor
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of destination from which this message-driven bean
+        should consume.  This element is not required to be supported 
+        by all implementations.  Any use of this element is non-portable.
+        - the message-driven bean's implementation class
+        - an optional declaration of the bean's messaging 
+        type 
+        - an optional declaration of the bean's timeout method for
+        handling programmatically created timers
+        - an optional declaration of timers to be automatically created at
+        deployment time
+        - the optional message-driven bean's transaction management 
+        type. If it is not defined, it is defaulted to Container.
+        - an optional declaration of the bean's 
+        message-destination-type
+        - an optional declaration of the bean's 
+        message-destination-link
+        - an optional declaration of the message-driven bean's
+        activation configuration properties
+        - an optional list of the message-driven bean class and/or
+        superclass around-invoke methods.
+        - an optional list of the message-driven bean class and/or
+        superclass around-timeout methods.
+        - an optional declaration of the bean's environment
+        entries
+        - an optional declaration of the bean's EJB references
+        - an optional declaration of the bean's local EJB
+        references
+        - an optional declaration of the bean's web service
+        references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security
+        identity to be used for the execution of the bean's
+        methods
+        - an optional declaration of the bean's 
+        resource manager connection factory 
+        references
+        - an optional declaration of the bean's resource
+        environment references.
+        - an optional declaration of the bean's message 
+        destination references
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+                   type="javaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-class element specifies the fully qualified name
+            of the bean class for this ejb.  It is required unless
+            there is a component-defining annotation for the same
+            ejb-name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="messaging-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The messaging-type element specifies the message
+            listener interface of the message-driven bean. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The timeout-method element specifies the method that
+            will receive callbacks for programmatically
+            created timers.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timer"
+                   type="javaee:timerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transaction-type"
+                   type="javaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-type"
+                   type="javaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="javaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:element name="activation-config"
+                   type="javaee:activation-configType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="javaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="security-identity"
+                   type="javaee:security-identityType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The methodType is used to denote a method of an enterprise
+        bean.  The method may be any of the following or a set of
+        any of the following methods may be designated:
+        business interface method
+        home interface method
+        component interface method
+        web service endpoint interface method
+        no-interface view method
+        singleton session bean lifecycle callback method
+        stateful session bean lifecycle callback method (see 
+        limitations)
+        timeout callback method
+        message-driven bean message listener method
+        
+        The ejb-name element must be the name of one of the enterprise 
+        beans declared in the deployment descriptor.
+        The optional method-intf element allows distinguishing between a
+        method with the same signature that is multiply defined
+        across any of the above.
+        The method-name element specifies the method name.
+        The optional method-params elements identify a single method 
+        among multiple methods with an overloaded method name.
+        
+        There are three possible styles of using methodType element
+        within a method element:
+        
+        1.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>*</method-name>
+        </method>
+        
+        This style is used to refer to all of the following methods 
+        of the specified enterprise bean:
+        business interface methods
+        home interface methods
+        component interface methods
+        web service endpoint interface methods
+        no-interface view methods
+        singleton session bean lifecycle callback methods
+        timeout callback methods
+        message-driven bean message listener method
+        
+        This style may also be used in combination with the 
+        method-intf element that contains LifecycleCallback as 
+        the value to specify transaction attributes of a stateful 
+        session bean PostConstruct, PreDestroy, PrePassivate, 
+        and PostActivate lifecycle callback methods or to override 
+        transaction attributes of a singleton session bean 
+        PostConstruct and PreDestroy lifecycle callback methods.
+        
+        2.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>METHOD</method-name>
+        </method>
+        
+        This style is used to refer to the specified method of
+        the specified enterprise bean. If there are multiple
+        methods with the same overloaded name, the element of
+        this style refers to all the methods with the overloaded
+        name.
+        
+        This style may be used to refer to stateful session bean
+        PostConstruct, PreDestroy, PrePassivate, and PostActivate 
+        lifecycle callback methods to specify their transaction
+        attributes if any of the following is true:
+        there is only one method with this name in the specified 
+        enterprise bean
+        all overloaded methods with this name in the specified 
+        enterprise bean are lifecycle callback methods
+        method-intf element is specified and it contains 
+        LifecycleCallback as the value 
+        
+        3.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>METHOD</method-name>
+        <method-params>
+        	  <method-param>PARAM-1</method-param>
+        	  <method-param>PARAM-2</method-param>
+        	  ...
+        	  <method-param>PARAM-n</method-param>
+        </method-params>
+        </method>
+        
+        This style is used to refer to a single method within a
+        set of methods with an overloaded name. PARAM-1 through
+        PARAM-n are the fully-qualified Java types of the
+        method's input parameters (if the method has no input
+        arguments, the method-params element contains no
+        method-param elements). Arrays are specified by the
+        array element's type, followed by one or more pair of
+        square brackets (e.g. int[][]). 
+        If a method with the same name and signature is defined 
+        on more than one interface of an enterprise bean, this 
+        style refers to all those methods. 
+        
+        Examples:
+        
+        Style 1: The following method element refers to all of the
+        following methods of the EmployeeService bean:
+        no interface view methods
+        business interface methods   
+        home interface methods   
+        component business interface methods   
+        singleton session bean lifecycle callback methods, if any
+        timeout callback methods
+        web service endpoint interface methods
+        message-driven bean message listener methods (if the bean
+        a message-driven bean)
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>*</method-name>
+        </method>
+        
+        Style 2: The following method element refers to all the
+        create methods of the EmployeeService bean's home
+        interface(s).
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>create</method-name>
+        </method>
+        
+        Style 3: The following method element refers to the
+        create(String firstName, String LastName) method of the
+        EmployeeService bean's home interface(s).
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        The following example illustrates a Style 3 element with
+        more complex parameter types. The method 
+        foobar(char s, int i, int[] iar, mypackage.MyClass mycl, 
+        mypackage.MyClass[][] myclaar) would be specified as:
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>foobar</method-name>
+        <method-params>
+        	  <method-param>char</method-param>
+        	  <method-param>int</method-param>
+        	  <method-param>int[]</method-param>
+        	  <method-param>mypackage.MyClass</method-param>
+        	  <method-param>mypackage.MyClass[][]</method-param>
+        </method-params>
+        </method>
+        
+        The optional method-intf element can be used when it becomes
+        necessary to differentiate between a method that is defined
+        multiple times with the same name and signature across any
+        of the following methods of an enterprise bean:
+        business interface methods
+        home interface methods
+        component interface methods
+        web service endpoint methods
+        no-interface view methods
+        singleton or stateful session bean lifecycle callback methods
+        timeout callback methods
+        message-driven bean message listener methods
+        
+        However, if the same method is a method of both the local 
+        business interface, and the local component interface, 
+        the same attribute applies to the method for both interfaces.
+        Likewise, if the same method is a method of both the remote 
+        business interface and the remote component interface, the same
+        attribute applies to the method for both interfaces.
+        
+        For example, the method element
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Remote</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        can be used to differentiate the create(String, String)
+        method defined in the remote interface from the
+        create(String, String) method defined in the remote home
+        interface, which would be defined as
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Home</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        and the create method that is defined in the local home
+        interface which would be defined as
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>LocalHome</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        The method-intf element can be used with all three Styles
+        of the method element usage. For example, the following
+        method element example could be used to refer to all the
+        methods of the EmployeeService bean's remote home interface
+        and the remote business interface.
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Home</method-intf>
+        <method-name>*</method-name>
+        </method>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="method-intf"
+                   type="javaee:method-intfType"
+                   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="method-name"
+                   type="javaee:method-nameType"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-intfType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-intf element allows a method element to
+        differentiate between the methods with the same name and
+        signature that are multiply defined across the home and
+        component interfaces (e.g, in both an enterprise bean's
+        remote and local interfaces or in both an enterprise bean's
+        home and remote interfaces, etc.); the component and web
+        service endpoint interfaces, and so on. 
+        
+        Local applies to the local component interface, local business 
+        interfaces, and the no-interface view. 
+        
+        Remote applies to both remote component interface and the remote 
+        business interfaces.  
+        
+        ServiceEndpoint refers to methods exposed through a web service
+        endpoint.
+        
+        Timer refers to the bean's timeout callback methods.
+        
+        MessageEndpoint refers to the methods of a message-driven bean's
+        message-listener interface.
+        
+        LifecycleCallback refers to the PostConstruct and PreDestroy
+        lifecycle callback methods of a singleton session bean and
+        to the PostConstruct, PreDestroy, PrePassivate, and PostActivate
+        lifecycle callback methods of a stateful session bean.
+        
+        The method-intf element must be one of the following:
+        
+        Home
+        Remote
+        LocalHome
+        Local
+        ServiceEndpoint
+        Timer
+        MessageEndpoint
+        LifecycleCallback
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Home"/>
+        <xsd:enumeration value="Remote"/>
+        <xsd:enumeration value="LocalHome"/>
+        <xsd:enumeration value="Local"/>
+        <xsd:enumeration value="ServiceEndpoint"/>
+        <xsd:enumeration value="Timer"/>
+        <xsd:enumeration value="MessageEndpoint"/>
+        <xsd:enumeration value="LifecycleCallback"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-nameType contains a name of an enterprise
+        bean method or the asterisk (*) character. The asterisk is
+        used when the element denotes all the methods of an
+        enterprise bean's client view interfaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-paramsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-paramsType defines a list of the
+        fully-qualified Java type names of the method parameters.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-param"
+                   type="javaee:java-typeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The method-param element contains a primitive
+            or a fully-qualified Java type name of a method
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-permissionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-permissionType specifies that one or more
+        security roles are allowed to invoke one or more enterprise
+        bean methods. The method-permissionType consists of an
+        optional description, a list of security role names or an
+        indicator to state that the method is unchecked for
+        authorization, and a list of method elements.
+        
+        Except as noted below the security roles used in the
+        method-permissionType must be defined in the security-role
+        elements of the deployment descriptor, and the methods
+        must be methods defined in the enterprise bean's no-interface
+        view, business, home, component and/or web service endpoint
+        interfaces. 
+        
+        If the role name "**" is included in the list of allowed 
+        roles, and the application has not defined in its deployment 
+        descriptor an application security role with this name, 
+        then the list of allowed roles includes every and any 
+        authenticated user.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="role-name"
+                     type="javaee:role-nameType"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="unchecked"
+                     type="javaee:emptyType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The unchecked element specifies that a method is
+              not checked for authorization by the container
+              prior to invocation of the method.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="method"
+                   type="javaee:methodType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multiplicityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The multiplicityType describes the multiplicity of the
+        role that participates in a relation.
+        
+        The value must be one of the two following:
+        
+        One
+        Many
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="One"/>
+        <xsd:enumeration value="Many"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-typeType specifies an entity bean's persistence
+        management type.
+        
+        The persistence-type element must be one of the two following:
+        
+        Bean
+        Container
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="queryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The queryType defines a finder or select
+        query. It contains
+        - an optional description of the query
+        - the specification of the finder or select
+        method it is used by
+        	- an optional specification of the result type 
+        	  mapping, if the query is for a select method 
+        	  and entity objects are returned.
+        	- the EJB QL query string that defines the query.
+        
+        Queries that are expressible in EJB QL must use the ejb-ql
+        element to specify the query. If a query is not expressible
+        in EJB QL, the description element should be used to
+        describe the semantics of the query and the ejb-ql element
+        should be empty.
+        
+        The result-type-mapping is an optional element. It can only
+        be present if the query-method specifies a select method
+        that returns entity objects.  The default value for the
+        result-type-mapping element is "Local".
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"/>
+      <xsd:element name="query-method"
+                   type="javaee:query-methodType"/>
+      <xsd:element name="result-type-mapping"
+                   type="javaee:result-type-mappingType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-ql"
+                   type="javaee:xsdStringType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="query-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The query-method specifies the method for a finder or select
+        query.
+        
+        The method-name element specifies the name of a finder or select
+        method in the entity bean's implementation class.
+        
+        Each method-param must be defined for a query-method using the
+        method-params element.
+        
+        It is used by the query-method element. 
+        
+        Example:
+        
+        <query>
+        <description>Method finds large orders</description>
+        <query-method>
+        	  <method-name>findLargeOrders</method-name>
+        	  <method-params></method-params>
+        </query-method>
+        <ejb-ql>
+        	SELECT OBJECT(o) FROM Order o
+        	  WHERE o.amount &gt; 1000
+        </ejb-ql>
+        </query>
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="javaee:method-nameType"/>
+      <xsd:element name="method-params"
+                   type="javaee:method-paramsType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationship-role-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The relationship-role-sourceType designates the source of a
+        role that participates in a relationship. A
+        relationship-role-sourceType is used by
+        relationship-role-source elements to uniquely identify an
+        entity bean.
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationshipsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The relationshipsType describes the relationships in
+        which entity beans with container-managed persistence
+        participate. The relationshipsType contains an optional
+        description; and a list of ejb-relation elements, which
+        specify the container managed relationships.
+        
+        Support for entity beans is optional as of EJB 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation"
+                   type="javaee:ejb-relationType"
+                   maxOccurs="unbounded">
+        <xsd:unique name="role-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-relationship-role-name contains the name of a
+              relationship role. The name must be unique within 
+              a relationship, but can be reused in different
+              relationships.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath=".//javaee:ejb-relationship-role-name"/>
+          <xsd:field xpath="."/>
+        </xsd:unique>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="result-type-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The result-type-mappingType is used in the query element to
+        specify whether an abstract schema type returned by a query
+        for a select method is to be mapped to an EJBLocalObject or
+        EJBObject type.
+        
+        The value must be one of the following:
+        
+        Local
+        Remote
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Local"/>
+        <xsd:enumeration value="Remote"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-identityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-identityType specifies whether the caller's
+        security identity is to be used for the execution of the
+        methods of the enterprise bean or whether a specific run-as
+        identity is to be used. It contains an optional description
+        and a specification of the security identity to be used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="use-caller-identity"
+                     type="javaee:emptyType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The use-caller-identity element specifies that
+              the caller's security identity be used as the
+              security identity for the execution of the
+              enterprise bean's methods.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="run-as"
+                     type="javaee:run-asType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-beanType declares an session bean. The
+        declaration consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name
+        - a name assigned to the enterprise bean
+        in the deployment description
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of the session bean's remote home/business interface. 
+        This element is not required to be supported by all 
+        implementations. Any use of this element is non-portable.
+        - the names of all the remote or local business interfaces, 
+        if any
+        - the names of the session bean's remote home and
+        remote interfaces, if any
+        - the names of the session bean's local home and
+        local interfaces, if any
+        - an optional declaration that this bean exposes a
+        no-interface view
+        - the name of the session bean's web service endpoint
+        interface, if any
+        - the session bean's implementation class
+        - the session bean's state management type
+        - an optional declaration of a stateful session bean's timeout value
+        - an optional declaration of the session bean's timeout method for
+        handling programmatically created timers
+        - an optional declaration of timers to be automatically created at
+        deployment time
+        - an optional declaration that a Singleton bean has eager
+        initialization
+        - an optional declaration of a Singleton/Stateful bean's concurrency 
+        management type
+        - an optional declaration of the method locking metadata
+        for a Singleton with container managed concurrency
+        - an optional declaration of the other Singleton beans in the
+        application that must be initialized before this bean
+        - an optional declaration of the session bean's asynchronous 
+        methods
+        - the optional session bean's transaction management type. 
+        If it is not present, it is defaulted to Container.
+        - an optional declaration of a stateful session bean's 
+        afterBegin, beforeCompletion, and/or afterCompletion methods
+        - an optional list of the session bean class and/or
+        superclass around-invoke methods.
+        - an optional list of the session bean class and/or
+        superclass around-timeout methods.
+        - an optional declaration of the bean's 
+        environment entries
+        - an optional declaration of the bean's EJB references
+        - an optional declaration of the bean's local 
+        EJB references
+        - an optional declaration of the bean's web 
+        service references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security identity 
+        to be used for the execution of the bean's methods
+        - an optional declaration of the bean's resource 
+        manager connection factory references
+        - an optional declaration of the bean's resource 
+        environment references.
+        - an optional declaration of the bean's message 
+        destination references
+        - an optional specification as to whether the stateful 
+        session bean is passivation capable or not. If not 
+        specified, the bean is assumed to be passivation capable
+        
+        The elements that are optional are "optional" in the sense
+        that they are omitted when if lists represented by them are
+        empty.
+        
+        The service-endpoint element may only be specified if the
+        bean is a stateless session bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="javaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="business-local"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="business-remote"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="local-bean"
+                   type="javaee:emptyType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The local-bean element declares that this
+            session bean exposes a no-interface Local client view.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-endpoint element contains the
+            fully-qualified name of the enterprise bean's web
+            service endpoint interface. The service-endpoint
+            element may only be specified for a stateless
+            session bean. The specified interface must be a
+            valid JAX-RPC service endpoint interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-class"
+                   type="javaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-class element specifies the fully qualified name
+            of the bean class for this ejb.  It is required unless
+            there is a component-defining annotation for the same
+            ejb-name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="session-type"
+                   type="javaee:session-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="stateful-timeout"
+                   type="javaee:stateful-timeoutType"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The timeout-method element specifies the method that
+            will receive callbacks for programmatically
+            created timers.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timer"
+                   type="javaee:timerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="init-on-startup"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-on-startup element specifies that a Singleton
+            bean has eager initialization.
+            This element can only be specified for singleton session
+            beans.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="concurrency-management-type"
+                   type="javaee:concurrency-management-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="concurrent-method"
+                   type="javaee:concurrent-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="depends-on"
+                   type="javaee:depends-onType"
+                   minOccurs="0"/>
+      <xsd:element name="init-method"
+                   type="javaee:init-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-method element specifies the mappings for
+            EJB 2.x style create methods for an EJB 3.x bean.
+            This element can only be specified for stateful 
+            session beans. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="remove-method"
+                   type="javaee:remove-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The remove-method element specifies the mappings for
+            EJB 2.x style remove methods for an EJB 3.x bean.
+            This element can only be specified for stateful 
+            session beans. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-method"
+                   type="javaee:async-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transaction-type"
+                   type="javaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="after-begin-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="before-completion-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="after-completion-method"
+                   type="javaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="javaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="javaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+                   type="javaee:security-identityType"
+                   minOccurs="0"/>
+      <xsd:element name="passivation-capable"
+                   type="xsd:boolean"
+                   default="true"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The passivation-capable element specifies whether the 
+            stateful session bean is passivation capable or not. 
+            If not specified, the bean is assumed to be passivation 
+            capable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-typeType describes whether the session bean is a
+        singleton, stateful or stateless session. It is used by
+        session-type elements.
+        
+        The value must be one of the three following:
+        
+        Singleton
+        Stateful
+        Stateless
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Singleton"/>
+        <xsd:enumeration value="Stateful"/>
+        <xsd:enumeration value="Stateless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="stateful-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The stateful-timeoutType represents the amount of time
+        a stateful session bean can be idle(not receive any client
+        invocations) before it is eligible for removal by the container.
+        
+        A timeout value of 0 means the bean is immediately eligible for removal.
+        
+        A timeout value of -1 means the bean will never be removed due to timeout.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="timeout"
+                   type="javaee:xsdIntegerType"/>
+      <xsd:element name="unit"
+                   type="javaee:time-unit-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="time-unit-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The time-unit-typeType represents a time duration at a given
+        unit of granularity.  
+        
+        The time unit type must be one of the following :
+        
+        Days
+        Hours
+        Minutes
+        Seconds
+        Milliseconds
+        Microseconds
+        Nanoseconds
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Days"/>
+        <xsd:enumeration value="Hours"/>
+        <xsd:enumeration value="Minutes"/>
+        <xsd:enumeration value="Seconds"/>
+        <xsd:enumeration value="Milliseconds"/>
+        <xsd:enumeration value="Microseconds"/>
+        <xsd:enumeration value="Nanoseconds"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="timer-scheduleType">
+    <xsd:sequence>
+      <xsd:element name="second"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="minute"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="hour"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="day-of-month"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="month"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="day-of-week"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="year"
+                   type="javaee:string"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="timerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The timerType specifies an enterprise bean timer.  Each
+        timer is automatically created by the container upon
+        deployment.  Timer callbacks occur based on the 
+        schedule attributes.  All callbacks are made to the
+        timeout-method associated with the timer.  
+        
+        A timer can have an optional start and/or end date. If
+        a start date is specified, it takes precedence over the
+        associated timer schedule such that any matching
+        expirations prior to the start time will not occur.
+        Likewise, no matching expirations will occur after any
+        end date.   Start/End dates are specified using the
+        XML Schema dateTime type, which follows the ISO-8601
+        standard for date(and optional time-within-the-day) 
+        representation.
+        
+        An optional flag can be used to control whether
+        this timer has persistent(true) delivery semantics or
+        non-persistent(false) delivery semantics.  If not specified,
+        the value defaults to persistent(true).
+        
+        A time zone can optionally be associated with a timer.
+        If specified, the timer's schedule is evaluated in the context
+        of that time zone, regardless of the default time zone in which
+        the container is executing.   Time zones are specified as an
+        ID string.  The set of required time zone IDs is defined by
+        the Zone Name(TZ) column of the public domain zoneinfo database.
+        
+        An optional info string can be assigned to the timer and 
+        retrieved at runtime through the Timer.getInfo() method.
+        
+        The timerType can only be specified on stateless session
+        beans, singleton session beans, and message-driven beans.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="schedule"
+                   type="javaee:timer-scheduleType"/>
+      <xsd:element name="start"
+                   type="xsd:dateTime"
+                   minOccurs="0"/>
+      <xsd:element name="end"
+                   type="xsd:dateTime"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="javaee:named-methodType"/>
+      <xsd:element name="persistent"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="timezone"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="info"
+                   type="javaee:string"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="trans-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The trans-attributeType specifies how the container must
+        manage the transaction boundaries when delegating a method 
+        invocation to an enterprise bean's business method. 
+        
+        The value must be one of the following: 
+        
+        NotSupported 
+        Supports 
+        Required  
+        RequiresNew 
+        Mandatory 
+        Never 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NotSupported"/>
+        <xsd:enumeration value="Supports"/>
+        <xsd:enumeration value="Required"/>
+        <xsd:enumeration value="RequiresNew"/>
+        <xsd:enumeration value="Mandatory"/>
+        <xsd:enumeration value="Never"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-typeType specifies an enterprise bean's
+        transaction management type.
+        
+        The transaction-type must be one of the two following:
+        
+        Bean
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/ejb-jar_4_0.xsd b/wildfly/docs/schema/ejb-jar_4_0.xsd
new file mode 100644
index 0000000..e779c4b
--- /dev/null
+++ b/wildfly/docs/schema/ejb-jar_4_0.xsd
@@ -0,0 +1,3351 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Enterprise Beans 4.0 deployment descriptor.
+      
+      All Enterprise Beans deployment descriptors must indicate
+      the schema by using the Jakarta EE namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <ejb-jar xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee
+      	  https://jakarta.ee/xml/ns/jakartaee/ejb-jar_4_0.xsd"
+      version="4.0">
+      ...
+      </ejb-jar>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for the
+      Jakarta EE namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/ejb-jar_4_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="ejb-jar"
+               type="jakartaee:ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is the root of the ejb-jar deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:key name="ejb-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-name element contains the name of an enterprise
+          bean. The name must be unique within the ejb-jar file or
+          .war file.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:enterprise-beans/*"/>
+      <xsd:field xpath="jakartaee:ejb-name"/>
+    </xsd:key>
+    <xsd:keyref name="ejb-name-references"
+                refer="jakartaee:ejb-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          relationship-role-source must be to a specific ejb-name
+          defined within the scope of enterprise-beans element. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath=".//jakartaee:ejb-relationship-role/jakartaee:relationship-role-source"/>
+      <xsd:field xpath="jakartaee:ejb-name"/>
+    </xsd:keyref>
+    <xsd:key name="role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:assembly-descriptor/jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="role-name-references"
+                refer="jakartaee:role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:enterprise-beans/*/jakartaee:security-role-ref"/>
+      <xsd:field xpath="jakartaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="access-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The access-timeoutType represents the maximum amount of
+        time (in a given time unit) that the container should wait for
+        a concurrency lock before throwing a timeout exception to the
+        client.
+        
+        A timeout value of 0 means concurrent access is not permitted.
+        
+        A timeout value of -1 means wait indefinitely to acquire a lock.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="timeout"
+                   type="jakartaee:xsdIntegerType"/>
+      <xsd:element name="unit"
+                   type="jakartaee:time-unit-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="async-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The async-methodType element specifies that a session
+        bean method has asynchronous invocation semantics.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="jakartaee:string"/>
+      <xsd:element name="method-params"
+                   type="jakartaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The activation-configType defines information about the
+        expected configuration properties of the message-driven bean
+        in its operational environment. This may include information
+        about message acknowledgement, message selector, expected
+        destination type, destination or connection factory lookup
+        string, subscription name, etc.
+        
+        The configuration information is expressed in terms of
+        name/value configuration properties.
+        
+        The properties that are recognized for a particular
+        message-driven bean are determined by the messaging type.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="activation-config-property"
+                   type="jakartaee:activation-config-propertyType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="activation-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The activation-config-propertyType contains a name/value
+        configuration property pair for a message-driven bean.
+        
+        The properties that are recognized for a particular
+        message-driven bean are determined by the messaging type.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="activation-config-property-name"
+                   type="jakartaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The activation-config-property-name element contains
+            the name for an activation configuration property of
+            a message-driven bean.
+            
+            For Jakarta Messaging message-driven beans, the following property
+            names are recognized: acknowledgeMode,
+            messageSelector, destinationType, subscriptionDurability,
+            destinationLookup, connectionFactoryLookup, subscriptionName,
+            and clientId.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="activation-config-property-value"
+                   type="jakartaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The activation-config-property-value element
+            contains the value for an activation configuration
+            property of a message-driven bean.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-invokeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-invoke type specifies a method on a
+        class to be called during the around invoke portion of an 
+        ejb invocation.  Note that each class may have only one
+        around invoke method and that the method may not be
+        overloaded.
+        
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around invoke
+        definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="jakartaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="around-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The around-timeout type specifies a method on a
+        class to be called during the around-timeout portion of
+        a timer timeout callback.  Note that each class may have 
+        only one around-timeout method and that the method may not 
+        be overloaded.
+        
+        If the class element is missing then
+        the class defining the callback is assumed to be the
+        interceptor class or component class in scope at the
+        location in the descriptor in which the around-timeout
+        definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="method-name"
+                   type="jakartaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="assembly-descriptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The assembly-descriptorType defines
+        application-assembly information.
+        
+        The application-assembly information consists of the
+        following parts: the definition of security roles, the
+        definition of method permissions, the definition of
+        transaction attributes for enterprise beans with
+        container-managed transaction demarcation, the definition
+        of interceptor bindings, a list of
+        methods to be excluded from being invoked, and a list of
+        exception types that should be treated as application exceptions.
+        
+        All the parts are optional in the sense that they are
+        omitted if the lists represented by them are empty.
+        
+        Providing an assembly-descriptor in the deployment
+        descriptor is optional for the ejb-jar file or .war file producer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="security-role"
+                   type="jakartaee:security-roleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method-permission"
+                   type="jakartaee:method-permissionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="container-transaction"
+                   type="jakartaee:container-transactionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-binding"
+                   type="jakartaee:interceptor-bindingType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="exclude-list"
+                   type="jakartaee:exclude-listType"
+                   minOccurs="0"/>
+      <xsd:element name="application-exception"
+                   type="jakartaee:application-exceptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmp-fieldType describes a container-managed field. The
+        cmp-fieldType contains an optional description of the field,
+        and the name of the field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="field-name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The field-name element specifies the name of a
+            container managed field.
+            
+            The name of the cmp-field of an entity bean with
+            cmp-version 2.x must begin with a lowercase
+            letter. This field is accessed by methods whose
+            names consists of the name of the field specified by
+            field-name in which the first letter is uppercased,
+            prefixed by "get" or "set".
+            
+            The name of the cmp-field of an entity bean with
+            cmp-version 1.x must denote a public field of the
+            enterprise bean class or one of its superclasses.
+            
+            Support for entity beans is optional as of Enterprise Beans 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmp-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmp-versionType specifies the version of an entity bean
+        with container-managed persistence. It is used by
+        cmp-version elements.
+        
+        The value must be one of the two following:
+        
+        1.x
+        2.x
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="1.x"/>
+        <xsd:enumeration value="2.x"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-fieldType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmr-fieldType describes the Bean Provider's view of
+        a relationship. It consists of an optional description, and
+        the name and the class type of a field in the source of a
+        role of a relationship. The cmr-field-name element
+        corresponds to the name used for the get and set accessor
+        methods for the relationship. The cmr-field-type element is
+        used only for collection-valued cmr-fields. It specifies the
+        type of the collection that is used.
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="cmr-field-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cmr-field-name element specifies the name of a
+            logical relationship field in the entity bean
+            class. The name of the cmr-field must begin with a
+            lowercase letter. This field is accessed by methods
+            whose names consist of the name of the field
+            specified by cmr-field-name in which the first
+            letter is uppercased, prefixed by "get" or "set".
+            
+            Support for entity beans is optional as of Enterprise Beans 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmr-field-type"
+                   type="jakartaee:cmr-field-typeType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cmr-field-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cmr-field-type element specifies the class of a
+        collection-valued logical relationship field in the entity
+        bean class. The value of an element using cmr-field-typeType
+        must be either: java.util.Collection or java.util.Set.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="java.util.Collection"/>
+        <xsd:enumeration value="java.util.Set"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrency-management-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrency-management-typeType specifies the way concurrency
+        is managed for a singleton or stateful session bean.  
+        
+        The concurrency management type must be one of the following:
+        
+        Bean
+        Container
+        
+        Bean managed concurrency can only be specified for a singleton bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrent-lock-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrent-lock-typeType specifies how the container must
+        manage concurrent access to a method of a Singleton bean 
+        with container-managed concurrency.
+        
+        The container managed concurrency lock type must be one 
+        of the following :
+        
+        Read
+        Write
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Read"/>
+        <xsd:enumeration value="Write"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="concurrent-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The concurrent-methodType specifies information about a method
+        of a bean with container managed concurrency.
+        
+        The optional lock element specifies the kind of concurrency 
+        lock asssociated with the method.
+        
+        The optional access-timeout element specifies the amount of
+        time (in a given time unit) the container should wait for a
+        concurrency lock before throwing an exception to the client.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method"
+                   type="jakartaee:named-methodType"/>
+      <xsd:element name="lock"
+                   type="jakartaee:concurrent-lock-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="access-timeout"
+                   type="jakartaee:access-timeoutType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="container-transactionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The container-transactionType specifies how the container
+        must manage transaction scopes for the enterprise bean's
+        method invocations. It defines an optional description, a
+        list of method elements, and a transaction attribute. The
+        transaction attribute is to be applied to all the specified
+        methods.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+                   type="jakartaee:methodType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="trans-attribute"
+                   type="jakartaee:trans-attributeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="depends-onType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The depends-onType is used to express initialization 
+        ordering dependencies between Singleton components.
+        The depends-onType specifies the names of one or more
+        Singleton beans in the same application as the referring
+        Singleton, each of which must be initialized before
+        the referring bean.  
+        
+        Each dependent bean is expressed using ejb-link syntax.
+        The order in which dependent beans are initialized at 
+        runtime is not guaranteed to match the order in which
+        they are listed.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:ejb-linkType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-classType contains the fully-qualified name of the
+        enterprise bean's class. It is used by ejb-class elements. 
+        
+        Example:
+        
+        <ejb-class>com.wombat.empl.EmployeeServiceBean</ejb-class>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-jarType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-jarType defines the root element of the Enterprise Beans
+        deployment descriptor. It contains
+        
+        - an optional description of the ejb-jar file
+        - an optional display name
+        - an optional icon that contains a small and a large
+        icon file name
+        - an optional module name. Only applicable to
+        stand-alone ejb-jars or ejb-jars packaged in an ear.
+        Ignored if specified for an ejb-jar.xml within a .war file.
+        In that case, standard .war file module-name rules apply.
+        - structural information about all included
+        enterprise beans that is not specified through
+        annotations
+        - structural information about interceptor classes
+        - a descriptor for container managed relationships, 
+        if any. 
+        - an optional application-assembly descriptor
+        - an optional name of an ejb-client-jar file for the 
+        ejb-jar.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="module-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="enterprise-beans"
+                   type="jakartaee:enterprise-beansType"
+                   minOccurs="0"/>
+      <xsd:element name="interceptors"
+                   type="jakartaee:interceptorsType"
+                   minOccurs="0"/>
+      <xsd:element name="relationships"
+                   type="jakartaee:relationshipsType"
+                   minOccurs="0">
+        <xsd:unique name="relationship-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-relation-name contains the name of a
+              relation. The name must be unique within
+              relationships.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-relation"/>
+          <xsd:field xpath="jakartaee:ejb-relation-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="assembly-descriptor"
+                   type="jakartaee:assembly-descriptorType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Providing an assembly-descriptor in the deployment
+            descriptor is optional for the ejb-jar file or .war file
+            producer.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-client-jar"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The optional ejb-client-jar element specifies a JAR
+            file that contains the class files necessary for a
+            client program to access the
+            enterprise beans in the ejb-jar file.
+            
+            Example:
+            
+            	  <ejb-client-jar>employee_service_client.jar
+            	  </ejb-client-jar>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="4.0"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The version specifies the version of the
+          Enterprise Beans specification that the instance document must 
+          comply with. This information enables deployment tools
+          to validate a particular Enterprise Beans Deployment
+          Descriptor with respect to a specific version of the Enterprise Beans
+          schema. 
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-nameType specifies an enterprise bean's name. It is
+        used by ejb-name elements. This name is assigned by the
+        file producer to name the enterprise bean in the
+        ejb-jar file or .war file's deployment descriptor. The name must be
+        unique among the names of the enterprise beans in the same
+        ejb-jar file or .war file.
+        
+        There is no architected relationship between the used
+        ejb-name in the deployment descriptor and the JNDI name that
+        the Deployer will assign to the enterprise bean's home.
+        
+        The name for an entity bean must conform to the lexical
+        rules for an NMTOKEN.
+        
+        Example:
+        
+        <ejb-name>EmployeeService</ejb-name>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-relationType describes a relationship between two
+        entity beans with container-managed persistence.  It is used
+        by ejb-relation elements. It contains a description; an
+        optional ejb-relation-name element; and exactly two
+        relationship role declarations, defined by the
+        ejb-relationship-role elements. The name of the
+        relationship, if specified, is unique within the ejb-jar
+        file.
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-relation-name element provides a unique name
+            within the ejb-jar file for a relationship.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-relationship-role"
+                   type="jakartaee:ejb-relationship-roleType"
+                   minOccurs="2"
+                   maxOccurs="2"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-relationship-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-relationship-roleType describes a role within a
+        relationship. There are two roles in each relationship.
+        
+        The ejb-relationship-roleType contains an optional
+        description; an optional name for the relationship role; a
+        specification of the multiplicity of the role; an optional
+        specification of cascade-delete functionality for the role;
+        the role source; and a declaration of the cmr-field, if any,
+        by means of which the other side of the relationship is
+        accessed from the perspective of the role source.
+        
+        The multiplicity and role-source element are mandatory.
+        
+        The relationship-role-source element designates an entity
+        bean by means of an ejb-name element. For bidirectional
+        relationships, both roles of a relationship must declare a
+        relationship-role-source element that specifies a cmr-field
+        in terms of which the relationship is accessed. The lack of
+        a cmr-field element in an ejb-relationship-role specifies
+        that the relationship is unidirectional in navigability and
+        the entity bean that participates in the relationship is
+        "not aware" of the relationship.
+        
+        Example:
+        
+        <ejb-relation>
+        <ejb-relation-name>Product-LineItem</ejb-relation-name>
+        <ejb-relationship-role>
+        	  <ejb-relationship-role-name>product-has-lineitems
+        	  </ejb-relationship-role-name>
+        	  <multiplicity>One</multiplicity>
+        	  <relationship-role-source>
+        	  <ejb-name>ProductEJB</ejb-name>
+        	  </relationship-role-source>
+        </ejb-relationship-role>
+        </ejb-relation>
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relationship-role-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-relationship-role-name element defines a
+            name for a role that is unique within an
+            ejb-relation. Different relationships can use the
+            same name for a role.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="multiplicity"
+                   type="jakartaee:multiplicityType"/>
+      <xsd:element name="cascade-delete"
+                   type="jakartaee:emptyType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cascade-delete element specifies that, within a
+            particular relationship, the lifetime of one or more
+            entity beans is dependent upon the lifetime of
+            another entity bean. The cascade-delete element can
+            only be specified for an ejb-relationship-role
+            element contained in an ejb-relation element in
+            which the other ejb-relationship-role
+            element specifies a multiplicity of One.
+            
+            Support for entity beans is optional as of Enterprise Beans 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="relationship-role-source"
+                   type="jakartaee:relationship-role-sourceType"/>
+      <xsd:element name="cmr-field"
+                   type="jakartaee:cmr-fieldType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="enterprise-beansType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The enterprise-beansType declares one or more enterprise
+        beans. Each bean can be a session, entity or message-driven
+        bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice maxOccurs="unbounded">
+      <xsd:element name="session"
+                   type="jakartaee:session-beanType">
+        <xsd:unique name="session-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an enterprise bean reference. The enterprise bean reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+          <xsd:field xpath="jakartaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an enterprise bean
+              reference. The enterprise bean reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-ref"/>
+          <xsd:field xpath="jakartaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:resource-env-ref"/>
+          <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:message-destination-ref"/>
+          <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:resource-ref"/>
+          <xsd:field xpath="jakartaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="session-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:env-entry"/>
+          <xsd:field xpath="jakartaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="entity"
+                   type="jakartaee:entity-beanType">
+        <xsd:unique name="entity-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an enterprise bean reference. The enterprise bean reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+          <xsd:field xpath="jakartaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an enterprise bean
+              reference. The enterprise bean reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-ref"/>
+          <xsd:field xpath="jakartaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:resource-env-ref"/>
+          <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:message-destination-ref"/>
+          <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:resource-ref"/>
+          <xsd:field xpath="jakartaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="entity-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:env-entry"/>
+          <xsd:field xpath="jakartaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+      <xsd:element name="message-driven"
+                   type="jakartaee:message-driven-beanType">
+        <xsd:unique name="messaged-ejb-local-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of
+              an enterprise bean reference. The enterprise bean reference is an entry in
+              the component's environment and is relative to the
+              java:comp/env context.  The name must be unique within
+              the component.
+              
+              It is recommended that name be prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+          <xsd:field xpath="jakartaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-ejb-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-ref-name element contains the name of an enterprise bean
+              reference. The enterprise bean reference is an entry in the
+              component's environment and is relative to the
+              java:comp/env context. The name must be unique
+              within the component.
+              
+              It is recommended that name is prefixed with "ejb/".
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:ejb-ref"/>
+          <xsd:field xpath="jakartaee:ejb-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-resource-env-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-env-ref-name element specifies the name
+              of a resource environment reference; its value is
+              the environment entry name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:resource-env-ref"/>
+          <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-message-destination-ref-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The message-destination-ref-name element specifies the name
+              of a message destination reference; its value is
+              the message destination reference name used in the component
+              code. The name is a JNDI name relative to the
+              java:comp/env context and must be unique within an
+              component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:message-destination-ref"/>
+          <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-res-ref-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The res-ref-name element specifies the name of a
+              resource manager connection factory reference.  The name
+              is a JNDI name relative to the java:comp/env context.
+              The name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:resource-ref"/>
+          <xsd:field xpath="jakartaee:res-ref-name"/>
+        </xsd:unique>
+        <xsd:unique name="messaged-env-entry-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The env-entry-name element contains the name of a
+              component's environment entry.  The name is a JNDI
+              name relative to the java:comp/env context.  The
+              name must be unique within an component.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:env-entry"/>
+          <xsd:field xpath="jakartaee:env-entry-name"/>
+        </xsd:unique>
+      </xsd:element>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+        The entity-beanType declares an entity bean. The declaration
+        consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name
+        - a unique name assigned to the enterprise bean
+        in the deployment descriptor
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of the entity bean's remote home interface. This 
+        element is not required to be supported by all implementations.
+        Any use of this element is non-portable.
+        - the names of the entity bean's remote home 
+        and remote interfaces, if any
+        - the names of the entity bean's local home and local
+        interfaces, if any
+        - the entity bean's implementation class
+        - the optional entity bean's persistence management type. If 
+        this element is not specified it is defaulted to Container.
+        - the entity bean's primary key class name
+        - an indication of the entity bean's reentrancy
+        - an optional specification of the 
+        entity bean's cmp-version
+        - an optional specification of the entity bean's
+        abstract schema name
+        - an optional list of container-managed fields
+        - an optional specification of the primary key 
+        field
+        - an optional declaration of the bean's environment 
+        entries
+        - an optional declaration of the bean's enterprise bean 
+        references
+        - an optional declaration of the bean's local enterprise bean 
+        references
+        - an optional declaration of the bean's web 
+        service references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security identity
+        to be used for the execution of the bean's methods
+        - an optional declaration of the bean's 
+        resource manager connection factory references
+        - an optional declaration of the bean's
+        resource environment references
+        - an optional declaration of the bean's message 
+        destination references
+        - an optional set of query declarations
+        for finder and select methods for an entity
+        bean with cmp-version 2.x.
+        
+        The optional abstract-schema-name element must be specified
+        for an entity bean with container-managed persistence and
+        cmp-version 2.x.
+        
+        The optional primkey-field may be present in the descriptor
+        if the entity's persistence-type is Container.
+        
+        The optional cmp-version element may be present in the
+        descriptor if the entity's persistence-type is Container. If
+        the persistence-type is Container and the cmp-version
+        element is not specified, its value defaults to 2.x.
+        
+        The optional home and remote elements must be specified if
+        the entity bean cmp-version is 1.x.
+        
+        The optional home and remote elements must be specified if
+        the entity bean has a remote home and remote interface.
+        
+        The optional local-home and local elements must be specified
+        if the entity bean has a local home and local interface.
+        
+        Either both the local-home and the local elements or both
+        the home and the remote elements must be specified.
+        
+        The optional query elements must be present if the
+        persistence-type is Container and the cmp-version is 2.x and
+        query methods other than findByPrimaryKey have been defined
+        for the entity bean.
+        
+        The other elements that are optional are "optional" in the
+        sense that they are omitted if the lists represented by them
+        are empty.
+        
+        At least one cmp-field element must be present in the
+        descriptor if the entity's persistence-type is Container and
+        the cmp-version is 1.x, and none must not be present if the
+        entity's persistence-type is Bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="jakartaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="jakartaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="jakartaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="jakartaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+                   type="jakartaee:ejb-classType"/>
+      <xsd:element name="persistence-type"
+                   type="jakartaee:persistence-typeType"/>
+      <xsd:element name="prim-key-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The prim-key-class element contains the
+            fully-qualified name of an
+            entity bean's primary key class.
+            
+            If the definition of the primary key class is
+            deferred to deployment time, the prim-key-class 
+            element should specify java.lang.Object.
+            
+            Support for entity beans is optional as of Enterprise Beans 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="reentrant"
+                   type="jakartaee:true-falseType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The reentrant element specifies whether an entity
+            bean is reentrant or not.
+            
+            The reentrant element must be one of the two
+            following: true or false
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-version"
+                   type="jakartaee:cmp-versionType"
+                   minOccurs="0"/>
+      <xsd:element name="abstract-schema-name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The abstract-schema-name element specifies the name
+            of the abstract schema type of an entity bean with 
+            cmp-version 2.x. It is used in Enterprise Beans QL queries. 
+            
+            For example, the abstract-schema-name for an entity 
+            bean whose local interface is 
+            com.acme.commerce.Order might be Order. 
+            
+            Support for entity beans is optional as of Enterprise Beans 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cmp-field"
+                   type="jakartaee:cmp-fieldType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="primkey-field"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The primkey-field element is used to specify the
+            name of the primary key field for an entity with
+            container-managed persistence.
+            
+            The primkey-field must be one of the fields declared
+            in the cmp-field element, and the type of the field
+            must be the same as the primary key type.
+            
+            The primkey-field element is not used if the primary
+            key maps to multiple container-managed fields
+            (i.e. the key is a compound key). In this case, the
+            fields of the primary key class must be public, and
+            their names must correspond to the field names of
+            the entity bean class that comprise the key.
+            
+            Support for entity beans is optional as of Enterprise Beans 3.2.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+                   type="jakartaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+                   type="jakartaee:security-identityType"
+                   minOccurs="0"/>
+      <xsd:element name="query"
+                   type="jakartaee:queryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="exclude-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The exclude-listType specifies one or more methods which
+        the Assembler marks to be uncallable.
+        
+        If the method permission relation contains methods that are
+        in the exclude list, the Deployer should consider those
+        methods to be uncallable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method"
+                   type="jakartaee:methodType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="application-exceptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The application-exceptionType declares an application
+        exception. The declaration consists of:
+        
+        - the exception class. When the container receives
+        an exception of this type, it is required to 
+        forward this exception as an applcation exception 
+        to the client regardless of whether it is a checked
+        or unchecked exception.
+        - an optional rollback element. If this element is 
+        set to true, the container must rollback the current 
+        transaction before forwarding the exception to the
+        client.  If not specified, it defaults to false.
+        - an optional inherited element. If this element is 
+        set to true, subclasses of the exception class type
+        are also automatically considered application 
+        exceptions (unless overriden at a lower level).
+        If set to false, only the exception class type is
+        considered an application-exception, not its
+        exception subclasses. If not specified, this
+        value defaults to true.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="exception-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="rollback"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="inherited"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorsType element declares one or more interceptor
+        classes used by components within this ejb-jar file or .war file.  The declaration
+        consists of :
+        
+        - An optional description.
+        - One or more interceptor elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor"
+                   type="jakartaee:interceptorType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptorType element declares information about a single
+        interceptor class.  It consists of :
+        
+        - An optional description.
+        - The fully-qualified name of the interceptor class.
+        - An optional list of around invoke methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list of around timeout methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list environment dependencies for the interceptor
+        class and/or its super-classes.
+        - An optional list of post-activate methods declared on the
+        interceptor class and/or its super-classes.
+        - An optional list of pre-passivate methods declared on the
+        interceptor class and/or its super-classes.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="interceptor-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="around-invoke"
+                   type="jakartaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="jakartaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-construct"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The interceptor-bindingType element describes the binding of
+        interceptor classes to beans within the ejb-jar file or .war file.
+        It consists of :
+        
+        - An optional description.
+        - The name of an ejb within the module or the wildcard value "*",
+        which is used to define interceptors that are bound to all
+        beans in the ejb-jar file or .war file.
+        - A list of interceptor classes that are bound to the contents of
+        the ejb-name element or a specification of the total ordering
+        over the interceptors defined for the given level and above.
+        - An optional exclude-default-interceptors element.  If set to true,
+        specifies that default interceptors are not to be applied to 
+        a bean-class and/or business method.
+        - An optional exclude-class-interceptors element.  If set to true,
+        specifies that class interceptors are not to be applied to 
+        a business method.
+        - An optional set of method elements for describing the name/params
+        of a method-level interceptor.
+        
+        Interceptors bound to all classes using the wildcard syntax
+        "*" are default interceptors for the components in the ejb-jar file or .war file. 
+        In addition, interceptors may be bound at the level of the bean
+        class (class-level interceptors) or business methods (method-level
+        interceptors ).
+        
+        The binding of interceptors to classes is additive.  If interceptors
+        are bound at the class-level and/or default-level as well as the
+        method-level, both class-level and/or default-level as well as
+        method-level will apply. 
+        
+        The method-name element may be used to bind a constructor-level 
+        interceptor using the unqualified name of the bean class as the value; 
+        the optional method-params elements identify the constructor if a bean 
+        class has a constructor annotated with the Inject annotation in addition 
+        to a no-arg constructor.
+        
+        There are four possible styles of the interceptor element syntax :
+        
+        1.
+        <interceptor-binding>
+        <ejb-name>*</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        </interceptor-binding>
+        
+        Specifying the ejb-name as the wildcard value "*" designates
+        default interceptors (interceptors that apply to all session and
+        message-driven beans contained in the ejb-jar file or .war file).
+        
+        2. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        </interceptor-binding>
+        
+        This style is used to refer to interceptors associated with the
+        specified enterprise bean(class-level interceptors).
+        
+        3. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        <method>
+        <method-name>METHOD</method-name>
+        </method>
+        </interceptor-binding>
+        
+        This style is used to associate a method-level interceptor with 
+        the specified enterprise bean.  If there are multiple methods
+        with the same overloaded name, the element of this style refers
+        to all the methods with the overloaded name.  Method-level
+        interceptors can only be associated with business methods of the
+        bean class.   Note that the wildcard value "*" cannot be used
+        to specify method-level interceptors.
+        
+        4. 
+        <interceptor-binding>
+        <ejb-name>EJBNAME</ejb-name>
+        <interceptor-class>INTERCEPTOR</interceptor-class>
+        <method>
+        <method-name>METHOD</method-name>
+        <method-params>
+        <method-param>PARAM-1</method-param>
+        <method-param>PARAM-2</method-param>
+        ...
+        <method-param>PARAM-N</method-param>
+        </method-params>
+        </method>
+        </interceptor-binding>
+        
+        This style is used to associate a method-level interceptor with 
+        the specified method of the specified enterprise bean.  This 
+        style is used to refer to a single method within a set of methods
+        with an overloaded name.  The values PARAM-1 through PARAM-N
+        are the fully-qualified Java types of the method's input parameters
+        (if the method has no input arguments, the method-params element
+        contains no method-param elements). Arrays are specified by the
+        array element's type, followed by one or more pair of square 
+        brackets (e.g. int[][]).
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:string"/>
+      <xsd:choice>
+        <xsd:element name="interceptor-class"
+                     type="jakartaee:fully-qualified-classType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="interceptor-order"
+                     type="jakartaee:interceptor-orderType"
+                     minOccurs="1"/>
+      </xsd:choice>
+      <xsd:element name="exclude-default-interceptors"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="exclude-class-interceptors"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="method"
+                   type="jakartaee:named-methodType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="interceptor-orderType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The interceptor-orderType element describes a total ordering
+        of interceptor classes.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="interceptor-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-methodType">
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="jakartaee:string"/>
+      <xsd:element name="method-params"
+                   type="jakartaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="init-methodType">
+    <xsd:sequence>
+      <xsd:element name="create-method"
+                   type="jakartaee:named-methodType"/>
+      <xsd:element name="bean-method"
+                   type="jakartaee:named-methodType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remove-methodType">
+    <xsd:sequence>
+      <xsd:element name="bean-method"
+                   type="jakartaee:named-methodType"/>
+      <xsd:element name="retain-if-exception"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-driven-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-driven element declares a message-driven
+        bean. The declaration consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name. 
+        - a name assigned to the enterprise bean in
+        the deployment descriptor
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of destination from which this message-driven bean
+        should consume.  This element is not required to be supported 
+        by all implementations.  Any use of this element is non-portable.
+        - the message-driven bean's implementation class
+        - an optional declaration of the bean's messaging 
+        type 
+        - an optional declaration of the bean's timeout method for
+        handling programmatically created timers
+        - an optional declaration of timers to be automatically created at
+        deployment time
+        - the optional message-driven bean's transaction management 
+        type. If it is not defined, it is defaulted to Container.
+        - an optional declaration of the bean's 
+        message-destination-type
+        - an optional declaration of the bean's 
+        message-destination-link
+        - an optional declaration of the message-driven bean's
+        activation configuration properties
+        - an optional list of the message-driven bean class and/or
+        superclass around-invoke methods.
+        - an optional list of the message-driven bean class and/or
+        superclass around-timeout methods.
+        - an optional declaration of the bean's environment
+        entries
+        - an optional declaration of the bean's enterprise bean references
+        - an optional declaration of the bean's local enterprise bean 
+        	  references
+        - an optional declaration of the bean's web service
+        references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security
+        identity to be used for the execution of the bean's
+        methods
+        - an optional declaration of the bean's 
+        resource manager connection factory 
+        references
+        - an optional declaration of the bean's resource
+        environment references.
+        - an optional declaration of the bean's message 
+        destination references
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-class"
+                   type="jakartaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-class element specifies the fully qualified name
+            of the bean class for this ejb.  It is required unless
+            there is a component-defining annotation for the same
+            ejb-name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="messaging-type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The messaging-type element specifies the message
+            listener interface of the message-driven bean. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timeout-method"
+                   type="jakartaee:named-methodType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The timeout-method element specifies the method that
+            will receive callbacks for programmatically
+            created timers.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timer"
+                   type="jakartaee:timerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transaction-type"
+                   type="jakartaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-type"
+                   type="jakartaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="jakartaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:element name="activation-config"
+                   type="jakartaee:activation-configType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="jakartaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="jakartaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="security-role-ref"
+                   type="jakartaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="security-identity"
+                   type="jakartaee:security-identityType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The methodType is used to denote a method of an enterprise
+        bean.  The method may be any of the following or a set of
+        any of the following methods may be designated:
+        business interface method
+        home interface method
+        component interface method
+        web service endpoint interface method
+        no-interface view method
+        singleton session bean lifecycle callback method
+        stateful session bean lifecycle callback method (see 
+        limitations)
+        timeout callback method
+        message-driven bean message listener method
+        
+        The ejb-name element must be the name of one of the enterprise 
+        beans declared in the deployment descriptor.
+        The optional method-intf element allows distinguishing between a
+        method with the same signature that is multiply defined
+        across any of the above.
+        The method-name element specifies the method name.
+        The optional method-params elements identify a single method 
+        among multiple methods with an overloaded method name.
+        
+        There are three possible styles of using methodType element
+        within a method element:
+        
+        1.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>*</method-name>
+        </method>
+        
+        This style is used to refer to all of the following methods 
+        of the specified enterprise bean:
+        business interface methods
+        home interface methods
+        component interface methods
+        web service endpoint interface methods
+        no-interface view methods
+        singleton session bean lifecycle callback methods
+        timeout callback methods
+        message-driven bean message listener method
+        
+        This style may also be used in combination with the 
+        method-intf element that contains LifecycleCallback as 
+        the value to specify transaction attributes of a stateful 
+        session bean PostConstruct, PreDestroy, PrePassivate, 
+        and PostActivate lifecycle callback methods or to override 
+        transaction attributes of a singleton session bean 
+        PostConstruct and PreDestroy lifecycle callback methods.
+        
+        2.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>METHOD</method-name>
+        </method>
+        
+        This style is used to refer to the specified method of
+        the specified enterprise bean. If there are multiple
+        methods with the same overloaded name, the element of
+        this style refers to all the methods with the overloaded
+        name.
+        
+        This style may be used to refer to stateful session bean
+        PostConstruct, PreDestroy, PrePassivate, and PostActivate 
+        lifecycle callback methods to specify their transaction
+        attributes if any of the following is true:
+        there is only one method with this name in the specified 
+        enterprise bean
+        all overloaded methods with this name in the specified 
+        enterprise bean are lifecycle callback methods
+        method-intf element is specified and it contains 
+        LifecycleCallback as the value 
+        
+        3.
+        <method>
+        <ejb-name>EJBNAME</ejb-name>
+        <method-name>METHOD</method-name>
+        <method-params>
+        	  <method-param>PARAM-1</method-param>
+        	  <method-param>PARAM-2</method-param>
+        	  ...
+        	  <method-param>PARAM-n</method-param>
+        </method-params>
+        </method>
+        
+        This style is used to refer to a single method within a
+        set of methods with an overloaded name. PARAM-1 through
+        PARAM-n are the fully-qualified Java types of the
+        method's input parameters (if the method has no input
+        arguments, the method-params element contains no
+        method-param elements). Arrays are specified by the
+        array element's type, followed by one or more pair of
+        square brackets (e.g. int[][]). 
+        If a method with the same name and signature is defined 
+        on more than one interface of an enterprise bean, this 
+        style refers to all those methods. 
+        
+        Examples:
+        
+        Style 1: The following method element refers to all of the
+        following methods of the EmployeeService bean:
+        no interface view methods
+        business interface methods   
+        home interface methods   
+        component business interface methods   
+        singleton session bean lifecycle callback methods, if any
+        timeout callback methods
+        web service endpoint interface methods
+        message-driven bean message listener methods (if the bean
+        a message-driven bean)
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>*</method-name>
+        </method>
+        
+        Style 2: The following method element refers to all the
+        create methods of the EmployeeService bean's home
+        interface(s).
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>create</method-name>
+        </method>
+        
+        Style 3: The following method element refers to the
+        create(String firstName, String LastName) method of the
+        EmployeeService bean's home interface(s).
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        The following example illustrates a Style 3 element with
+        more complex parameter types. The method 
+        foobar(char s, int i, int[] iar, mypackage.MyClass mycl, 
+        mypackage.MyClass[][] myclaar) would be specified as:
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-name>foobar</method-name>
+        <method-params>
+        	  <method-param>char</method-param>
+        	  <method-param>int</method-param>
+        	  <method-param>int[]</method-param>
+        	  <method-param>mypackage.MyClass</method-param>
+        	  <method-param>mypackage.MyClass[][]</method-param>
+        </method-params>
+        </method>
+        
+        The optional method-intf element can be used when it becomes
+        necessary to differentiate between a method that is defined
+        multiple times with the same name and signature across any
+        of the following methods of an enterprise bean:
+        business interface methods
+        home interface methods
+        component interface methods
+        web service endpoint methods
+        no-interface view methods
+        singleton or stateful session bean lifecycle callback methods
+        timeout callback methods
+        message-driven bean message listener methods
+        
+        However, if the same method is a method of both the local 
+        business interface, and the local component interface, 
+        the same attribute applies to the method for both interfaces.
+        Likewise, if the same method is a method of both the remote 
+        business interface and the remote component interface, the same
+        attribute applies to the method for both interfaces.
+        
+        For example, the method element
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Remote</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        can be used to differentiate the create(String, String)
+        method defined in the remote interface from the
+        create(String, String) method defined in the remote home
+        interface, which would be defined as
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Home</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        and the create method that is defined in the local home
+        interface which would be defined as
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>LocalHome</method-intf>
+        <method-name>create</method-name>
+        <method-params>
+        	  <method-param>java.lang.String</method-param>
+        	  <method-param>java.lang.String</method-param>
+        </method-params>
+        </method>
+        
+        The method-intf element can be used with all three Styles
+        of the method element usage. For example, the following
+        method element example could be used to refer to all the
+        methods of the EmployeeService bean's remote home interface
+        and the remote business interface.
+        
+        <method>
+        <ejb-name>EmployeeService</ejb-name>
+        <method-intf>Home</method-intf>
+        <method-name>*</method-name>
+        </method>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:ejb-nameType"/>
+      <xsd:element name="method-intf"
+                   type="jakartaee:method-intfType"
+                   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="method-name"
+                   type="jakartaee:method-nameType"/>
+      <xsd:element name="method-params"
+                   type="jakartaee:method-paramsType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-intfType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-intf element allows a method element to
+        differentiate between the methods with the same name and
+        signature that are multiply defined across the home and
+        component interfaces (e.g, in both an enterprise bean's
+        remote and local interfaces or in both an enterprise bean's
+        home and remote interfaces, etc.); the component and web
+        service endpoint interfaces, and so on. 
+        
+        Local applies to the local component interface, local business 
+        interfaces, and the no-interface view. 
+        
+        Remote applies to both remote component interface and the remote 
+        business interfaces.  
+        
+        ServiceEndpoint refers to methods exposed through a web service
+        endpoint.
+        
+        Timer refers to the bean's timeout callback methods.
+        
+        MessageEndpoint refers to the methods of a message-driven bean's
+        message-listener interface.
+        
+        LifecycleCallback refers to the PostConstruct and PreDestroy
+        lifecycle callback methods of a singleton session bean and
+        to the PostConstruct, PreDestroy, PrePassivate, and PostActivate
+        lifecycle callback methods of a stateful session bean.
+        
+        The method-intf element must be one of the following:
+        
+        Home
+        Remote
+        LocalHome
+        Local
+        ServiceEndpoint
+        Timer
+        MessageEndpoint
+        LifecycleCallback
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Home"/>
+        <xsd:enumeration value="Remote"/>
+        <xsd:enumeration value="LocalHome"/>
+        <xsd:enumeration value="Local"/>
+        <xsd:enumeration value="ServiceEndpoint"/>
+        <xsd:enumeration value="Timer"/>
+        <xsd:enumeration value="MessageEndpoint"/>
+        <xsd:enumeration value="LifecycleCallback"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-nameType contains a name of an enterprise
+        bean method or the asterisk (*) character. The asterisk is
+        used when the element denotes all the methods of an
+        enterprise bean's client view interfaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-paramsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-paramsType defines a list of the
+        fully-qualified Java type names of the method parameters.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-param"
+                   type="jakartaee:java-typeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The method-param element contains a primitive
+            or a fully-qualified Java type name of a method
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-permissionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The method-permissionType specifies that one or more
+        security roles are allowed to invoke one or more enterprise
+        bean methods. The method-permissionType consists of an
+        optional description, a list of security role names or an
+        indicator to state that the method is unchecked for
+        authorization, and a list of method elements.
+        
+        Except as noted below the security roles used in the
+        method-permissionType must be defined in the security-role
+        elements of the deployment descriptor, and the methods
+        must be methods defined in the enterprise bean's no-interface
+        view, business, home, component and/or web service endpoint
+        interfaces. 
+        
+        If the role name "**" is included in the list of allowed 
+        roles, and the application has not defined in its deployment 
+        descriptor an application security role with this name, 
+        then the list of allowed roles includes every and any 
+        authenticated user.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="role-name"
+                     type="jakartaee:role-nameType"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="unchecked"
+                     type="jakartaee:emptyType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The unchecked element specifies that a method is
+              not checked for authorization by the container
+              prior to invocation of the method.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="method"
+                   type="jakartaee:methodType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multiplicityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The multiplicityType describes the multiplicity of the
+        role that participates in a relation.
+        
+        The value must be one of the two following:
+        
+        One
+        Many
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="One"/>
+        <xsd:enumeration value="Many"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-typeType specifies an entity bean's persistence
+        management type.
+        
+        The persistence-type element must be one of the two following:
+        
+        Bean
+        Container
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="queryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The queryType defines a finder or select
+        query. It contains
+        - an optional description of the query
+        - the specification of the finder or select
+        method it is used by
+        	- an optional specification of the result type 
+        	  mapping, if the query is for a select method 
+        	  and entity objects are returned.
+        	- the Enterprise Beans QL query string that defines the query.
+        
+        Queries that are expressible in Enterprise Beans QL must use the ejb-ql
+        element to specify the query. If a query is not expressible
+        in Enterprise Beans QL, the description element should be used to
+        describe the semantics of the query and the ejb-ql element
+        should be empty.
+        
+        The result-type-mapping is an optional element. It can only
+        be present if the query-method specifies a select method
+        that returns entity objects.  The default value for the
+        result-type-mapping element is "Local".
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"/>
+      <xsd:element name="query-method"
+                   type="jakartaee:query-methodType"/>
+      <xsd:element name="result-type-mapping"
+                   type="jakartaee:result-type-mappingType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-ql"
+                   type="jakartaee:xsdStringType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="query-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The query-method specifies the method for a finder or select
+        query.
+        
+        The method-name element specifies the name of a finder or select
+        method in the entity bean's implementation class.
+        
+        Each method-param must be defined for a query-method using the
+        method-params element.
+        
+        It is used by the query-method element. 
+        
+        Example:
+        
+        <query>
+        <description>Method finds large orders</description>
+        <query-method>
+        	  <method-name>findLargeOrders</method-name>
+        	  <method-params></method-params>
+        </query-method>
+        <ejb-ql>
+        	SELECT OBJECT(o) FROM Order o
+        	  WHERE o.amount &gt; 1000
+        </ejb-ql>
+        </query>
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-name"
+                   type="jakartaee:method-nameType"/>
+      <xsd:element name="method-params"
+                   type="jakartaee:method-paramsType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationship-role-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The relationship-role-sourceType designates the source of a
+        role that participates in a relationship. A
+        relationship-role-sourceType is used by
+        relationship-role-source elements to uniquely identify an
+        entity bean.
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:ejb-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="relationshipsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The relationshipsType describes the relationships in
+        which entity beans with container-managed persistence
+        participate. The relationshipsType contains an optional
+        description; and a list of ejb-relation elements, which
+        specify the container managed relationships.
+        
+        Support for entity beans is optional as of Enterprise Beans 3.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-relation"
+                   type="jakartaee:ejb-relationType"
+                   maxOccurs="unbounded">
+        <xsd:unique name="role-name-uniqueness">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The ejb-relationship-role-name contains the name of a
+              relationship role. The name must be unique within 
+              a relationship, but can be reused in different
+              relationships.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath=".//jakartaee:ejb-relationship-role-name"/>
+          <xsd:field xpath="."/>
+        </xsd:unique>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="result-type-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The result-type-mappingType is used in the query element to
+        specify whether an abstract schema type returned by a query
+        for a select method is to be mapped to an EJBLocalObject or
+        EJBObject type.
+        
+        The value must be one of the following:
+        
+        Local
+        Remote
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Local"/>
+        <xsd:enumeration value="Remote"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-identityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-identityType specifies whether the caller's
+        security identity is to be used for the execution of the
+        methods of the enterprise bean or whether a specific run-as
+        identity is to be used. It contains an optional description
+        and a specification of the security identity to be used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="use-caller-identity"
+                     type="jakartaee:emptyType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The use-caller-identity element specifies that
+              the caller's security identity be used as the
+              security identity for the execution of the
+              enterprise bean's methods.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="run-as"
+                     type="jakartaee:run-asType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-beanType declares an session bean. The
+        declaration consists of:
+        
+        - an optional description
+        - an optional display name
+        - an optional icon element that contains a small and a large 
+        icon file name
+        - a name assigned to the enterprise bean
+        in the deployment description
+        - an optional mapped-name element that can be used to provide
+        vendor-specific deployment information such as the physical
+        jndi-name of the session bean's remote home/business interface. 
+        This element is not required to be supported by all 
+        implementations. Any use of this element is non-portable.
+        - the names of all the remote or local business interfaces, 
+        if any
+        - the names of the session bean's remote home and
+        remote interfaces, if any
+        - the names of the session bean's local home and
+        local interfaces, if any
+        - an optional declaration that this bean exposes a
+        no-interface view
+        - the name of the session bean's web service endpoint
+        interface, if any
+        - the session bean's implementation class
+        - the session bean's state management type
+        - an optional declaration of a stateful session bean's timeout value
+        - an optional declaration of the session bean's timeout method for
+        handling programmatically created timers
+        - an optional declaration of timers to be automatically created at
+        deployment time
+        - an optional declaration that a Singleton bean has eager
+        initialization
+        - an optional declaration of a Singleton/Stateful bean's concurrency 
+        management type
+        - an optional declaration of the method locking metadata
+        for a Singleton with container managed concurrency
+        - an optional declaration of the other Singleton beans in the
+        application that must be initialized before this bean
+        - an optional declaration of the session bean's asynchronous 
+        methods
+        - the optional session bean's transaction management type. 
+        If it is not present, it is defaulted to Container.
+        - an optional declaration of a stateful session bean's 
+        afterBegin, beforeCompletion, and/or afterCompletion methods
+        - an optional list of the session bean class and/or
+        superclass around-invoke methods.
+        - an optional list of the session bean class and/or
+        superclass around-timeout methods.
+        - an optional declaration of the bean's 
+        environment entries
+        - an optional declaration of the bean's enterprise bean references
+        - an optional declaration of the bean's local enterprise bean
+        references
+        - an optional declaration of the bean's web 
+        service references
+        - an optional declaration of the security role 
+        references
+        - an optional declaration of the security identity 
+        to be used for the execution of the bean's methods
+        - an optional declaration of the bean's resource 
+        manager connection factory references
+        - an optional declaration of the bean's resource 
+        environment references.
+        - an optional declaration of the bean's message 
+        destination references
+        - an optional specification as to whether the stateful 
+        session bean is passivation capable or not. If not 
+        specified, the bean is assumed to be passivation capable
+        
+        The elements that are optional are "optional" in the sense
+        that they are omitted when if lists represented by them are
+        empty.
+        
+        The service-endpoint element may only be specified if the
+        bean is a stateless session bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="ejb-name"
+                   type="jakartaee:ejb-nameType"/>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="jakartaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="jakartaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="jakartaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="jakartaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="business-local"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="business-remote"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="local-bean"
+                   type="jakartaee:emptyType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The local-bean element declares that this
+            session bean exposes a no-interface Local client view.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-endpoint element contains the
+            fully-qualified name of the enterprise bean's web
+            service endpoint interface. The service-endpoint
+            element may only be specified for a stateless
+            session bean. The specified interface must be a
+            valid Jakarta XML RPC service endpoint interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="ejb-class"
+                   type="jakartaee:ejb-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The ejb-class element specifies the fully qualified name
+            of the bean class for this ejb.  It is required unless
+            there is a component-defining annotation for the same
+            ejb-name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="session-type"
+                   type="jakartaee:session-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="stateful-timeout"
+                   type="jakartaee:stateful-timeoutType"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="jakartaee:named-methodType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The timeout-method element specifies the method that
+            will receive callbacks for programmatically
+            created timers.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="timer"
+                   type="jakartaee:timerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="init-on-startup"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-on-startup element specifies that a Singleton
+            bean has eager initialization.
+            This element can only be specified for singleton session
+            beans.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="concurrency-management-type"
+                   type="jakartaee:concurrency-management-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="concurrent-method"
+                   type="jakartaee:concurrent-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="depends-on"
+                   type="jakartaee:depends-onType"
+                   minOccurs="0"/>
+      <xsd:element name="init-method"
+                   type="jakartaee:init-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-method element specifies the mappings for
+            Enterprise Beans 2.x style create methods for an Enterprise Beans 3.x bean.
+            This element can only be specified for stateful 
+            session beans. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="remove-method"
+                   type="jakartaee:remove-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The remove-method element specifies the mappings for
+            Enterprise Beans 2.x style remove methods for an Enterprise Beans 3.x bean.
+            This element can only be specified for stateful 
+            session beans. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-method"
+                   type="jakartaee:async-methodType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transaction-type"
+                   type="jakartaee:transaction-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="after-begin-method"
+                   type="jakartaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="before-completion-method"
+                   type="jakartaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="after-completion-method"
+                   type="jakartaee:named-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="around-invoke"
+                   type="jakartaee:around-invokeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="around-timeout"
+                   type="jakartaee:around-timeoutType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="post-activate"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-passivate"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-role-ref"
+                   type="jakartaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="security-identity"
+                   type="jakartaee:security-identityType"
+                   minOccurs="0"/>
+      <xsd:element name="passivation-capable"
+                   type="xsd:boolean"
+                   default="true"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The passivation-capable element specifies whether the 
+            stateful session bean is passivation capable or not. 
+            If not specified, the bean is assumed to be passivation 
+            capable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-typeType describes whether the session bean is a
+        singleton, stateful or stateless session. It is used by
+        session-type elements.
+        
+        The value must be one of the three following:
+        
+        Singleton
+        Stateful
+        Stateless
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Singleton"/>
+        <xsd:enumeration value="Stateful"/>
+        <xsd:enumeration value="Stateless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="stateful-timeoutType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The stateful-timeoutType represents the amount of time
+        a stateful session bean can be idle(not receive any client
+        invocations) before it is eligible for removal by the container.
+        
+        A timeout value of 0 means the bean is immediately eligible for removal.
+        
+        A timeout value of -1 means the bean will never be removed due to timeout.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="timeout"
+                   type="jakartaee:xsdIntegerType"/>
+      <xsd:element name="unit"
+                   type="jakartaee:time-unit-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="time-unit-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The time-unit-typeType represents a time duration at a given
+        unit of granularity.  
+        
+        The time unit type must be one of the following :
+        
+        Days
+        Hours
+        Minutes
+        Seconds
+        Milliseconds
+        Microseconds
+        Nanoseconds
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Days"/>
+        <xsd:enumeration value="Hours"/>
+        <xsd:enumeration value="Minutes"/>
+        <xsd:enumeration value="Seconds"/>
+        <xsd:enumeration value="Milliseconds"/>
+        <xsd:enumeration value="Microseconds"/>
+        <xsd:enumeration value="Nanoseconds"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="timer-scheduleType">
+    <xsd:sequence>
+      <xsd:element name="second"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="minute"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="hour"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="day-of-month"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="month"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="day-of-week"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="year"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="timerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The timerType specifies an enterprise bean timer.  Each
+        timer is automatically created by the container upon
+        deployment.  Timer callbacks occur based on the 
+        schedule attributes.  All callbacks are made to the
+        timeout-method associated with the timer.  
+        
+        A timer can have an optional start and/or end date. If
+        a start date is specified, it takes precedence over the
+        associated timer schedule such that any matching
+        expirations prior to the start time will not occur.
+        Likewise, no matching expirations will occur after any
+        end date.   Start/End dates are specified using the
+        XML Schema dateTime type, which follows the ISO-8601
+        standard for date(and optional time-within-the-day) 
+        representation.
+        
+        An optional flag can be used to control whether
+        this timer has persistent(true) delivery semantics or
+        non-persistent(false) delivery semantics.  If not specified,
+        the value defaults to persistent(true).
+        
+        A time zone can optionally be associated with a timer.
+        If specified, the timer's schedule is evaluated in the context
+        of that time zone, regardless of the default time zone in which
+        the container is executing.   Time zones are specified as an
+        ID string.  The set of required time zone IDs is defined by
+        the Zone Name(TZ) column of the public domain zoneinfo database.
+        
+        An optional info string can be assigned to the timer and 
+        retrieved at runtime through the Timer.getInfo() method.
+        
+        The timerType can only be specified on stateless session
+        beans, singleton session beans, and message-driven beans.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="schedule"
+                   type="jakartaee:timer-scheduleType"/>
+      <xsd:element name="start"
+                   type="xsd:dateTime"
+                   minOccurs="0"/>
+      <xsd:element name="end"
+                   type="xsd:dateTime"
+                   minOccurs="0"/>
+      <xsd:element name="timeout-method"
+                   type="jakartaee:named-methodType"/>
+      <xsd:element name="persistent"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="timezone"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:element name="info"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="trans-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The trans-attributeType specifies how the container must
+        manage the transaction boundaries when delegating a method 
+        invocation to an enterprise bean's business method. 
+        
+        The value must be one of the following: 
+        
+        NotSupported 
+        Supports 
+        Required  
+        RequiresNew 
+        Mandatory 
+        Never 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NotSupported"/>
+        <xsd:enumeration value="Supports"/>
+        <xsd:enumeration value="Required"/>
+        <xsd:enumeration value="RequiresNew"/>
+        <xsd:enumeration value="Mandatory"/>
+        <xsd:enumeration value="Never"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-typeType specifies an enterprise bean's
+        transaction management type.
+        
+        The transaction-type must be one of the two following:
+        
+        Bean
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Bean"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-1_0.xsd b/wildfly/docs/schema/elytron-1_0.xsd
new file mode 100644
index 0000000..c41ad87
--- /dev/null
+++ b/wildfly/docs/schema/elytron-1_0.xsd
@@ -0,0 +1,432 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:1.0"
+            xmlns="urn:elytron:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="selector-type" minOccurs="0"/>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0"/>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-host" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-path" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0"/>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type"/>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type"/>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required"/>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0"/>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0"/>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0"/>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0"/>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string"/>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string"/>
+            <xsd:element name="private-key-pem" type="xsd:string"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string"/>
+            <xsd:element name="pem" type="xsd:string"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required"/>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type" />
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type" />
+
+    <xsd:complexType name="providers-type">
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0" />
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0" />
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type" />
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type" />
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:attribute name="path" type="xsd:string" use="optional"/>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="resource" type="name-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+        <xsd:attribute name="type" type="xsd:string" use="required"/>
+        <xsd:attribute name="provider" type="xsd:string" use="optional"/>
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required"/>
+        <xsd:attribute name="alias" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:attribute name="store" type="xsd:string"/>
+        <xsd:attribute name="alias" type="xsd:string"/>
+        <xsd:attribute name="clear-text" type="xsd:string"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:attribute name="value" type="xsd:string" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:attribute name="client-id" type="xsd:string" use="required" />
+        <xsd:attribute name="client-secret" type="xsd:string" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:attribute name="name" type="xsd:string" use="required" />
+        <xsd:attribute name="password" type="xsd:string" use="required" />
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required" />
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to
+                    instantiate the CredentialStoreSpi, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- File-backed realm elements -->
+
+    <xsd:element name="identity" type="identity-type"/>
+
+    <xsd:complexType name="identity-type">
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="credentials" type="credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentials-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="password" type="credential-type"/>
+            <xsd:element name="otp" type="otp-credential-type"/>
+            <xsd:element name="public-key" type="credential-type"/>
+            <xsd:element name="certificate" type="credential-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributes-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="format" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="otp-credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="hash" type="xsd:string" use="optional"/>
+                <xsd:attribute name="seed" type="xsd:string" use="optional"/>
+                <xsd:attribute name="sequence" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+        <xsd:attribute name="value" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:attribute name="name" type="xsd:string" use="optional"/>
+        <xsd:attribute name="authority" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:attribute name="module-name" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:attribute name="pattern" type="xsd:string" use="required"/>
+        <xsd:attribute name="replacement" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:attribute name="password" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required" />
+                    <xsd:attribute name="value" type="xsd:string" use="required" />
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-1_0_1.xsd b/wildfly/docs/schema/elytron-1_0_1.xsd
new file mode 100644
index 0000000..17c0adf
--- /dev/null
+++ b/wildfly/docs/schema/elytron-1_0_1.xsd
@@ -0,0 +1,434 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:1.0.1"
+            xmlns="urn:elytron:1.0.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="selector-type" minOccurs="0"/>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0"/>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-host" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-path" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0"/>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0"/>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type"/>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type"/>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required"/>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0"/>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0"/>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0"/>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0"/>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string"/>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string"/>
+            <xsd:element name="private-key-pem" type="xsd:string"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string"/>
+            <xsd:element name="pem" type="xsd:string"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required"/>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type" />
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type" />
+
+    <xsd:complexType name="providers-type">
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0" />
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0" />
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type" />
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type" />
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:attribute name="path" type="xsd:string" use="optional"/>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="resource" type="name-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+        <xsd:attribute name="type" type="xsd:string" use="required"/>
+        <xsd:attribute name="provider" type="xsd:string" use="optional"/>
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required"/>
+        <xsd:attribute name="alias" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:attribute name="store" type="xsd:string"/>
+        <xsd:attribute name="alias" type="xsd:string"/>
+        <xsd:attribute name="clear-text" type="xsd:string"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:attribute name="value" type="xsd:string" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:attribute name="client-id" type="xsd:string" use="required" />
+        <xsd:attribute name="client-secret" type="xsd:string" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:attribute name="name" type="xsd:string" use="required" />
+        <xsd:attribute name="password" type="xsd:string" use="required" />
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required" />
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to
+                    instantiate the CredentialStoreSpi, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- File-backed realm elements -->
+
+    <xsd:element name="identity" type="identity-type"/>
+
+    <xsd:complexType name="identity-type">
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="credentials" type="credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentials-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="password" type="credential-type"/>
+            <xsd:element name="otp" type="otp-credential-type"/>
+            <xsd:element name="public-key" type="credential-type"/>
+            <xsd:element name="certificate" type="credential-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributes-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="format" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="otp-credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="hash" type="xsd:string" use="optional"/>
+                <xsd:attribute name="seed" type="xsd:string" use="optional"/>
+                <xsd:attribute name="sequence" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+        <xsd:attribute name="value" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:attribute name="name" type="xsd:string" use="optional"/>
+        <xsd:attribute name="authority" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:attribute name="module-name" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:attribute name="pattern" type="xsd:string" use="required"/>
+        <xsd:attribute name="replacement" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:attribute name="password" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required" />
+                    <xsd:attribute name="value" type="xsd:string" use="required" />
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_1.xsd b/wildfly/docs/schema/elytron-client-1_1.xsd
new file mode 100644
index 0000000..99431de
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_1.xsd
@@ -0,0 +1,1046 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.1"
+            xmlns="urn:elytron:client:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The default SSLContext.
+                </xsd:documentation>
+            </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites. 
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified, 
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>     
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore, 
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi. 
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+   <xsd:complexType name="attributes-type">
+           <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                The value of the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                A password specified in the clear.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression replacement used for re-write.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A Uniform Resource Identifier (URI).
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_2.xsd b/wildfly/docs/schema/elytron-client-1_2.xsd
new file mode 100644
index 0000000..d91c58e
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_2.xsd
@@ -0,0 +1,1090 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.2"
+            xmlns="urn:elytron:client:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The default SSLContext.
+                </xsd:documentation>
+            </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ssl-certificate-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites. 
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified, 
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>     
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore, 
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ssl-certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Key manager definition. Provides credentials to authenticate against the peer.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the KeyManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the key to filter from the referenced KeyStore.
+
+                    A comma separated list of aliases or one of the following formats can be used: ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi. 
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+   <xsd:complexType name="attributes-type">
+           <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                The value of the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                A password specified in the clear.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression replacement used for re-write.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A Uniform Resource Identifier (URI).
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_3.xsd b/wildfly/docs/schema/elytron-client-1_3.xsd
new file mode 100644
index 0000000..2278826
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_3.xsd
@@ -0,0 +1,1090 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.3"
+            xmlns="urn:elytron:client:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The default SSLContext.
+                </xsd:documentation>
+            </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ssl-certificate-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites. 
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified, 
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>     
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore, 
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ssl-certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Key manager definition. Provides credentials to authenticate against the peer.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the KeyManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the key to filter from the referenced KeyStore.
+
+                    A comma separated list of aliases or one of the following formats can be used: ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi. 
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+   <xsd:complexType name="attributes-type">
+           <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                The value of the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                A password specified in the clear.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression replacement used for re-write.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A Uniform Resource Identifier (URI).
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_4.xsd b/wildfly/docs/schema/elytron-client-1_4.xsd
new file mode 100644
index 0000000..629b33a
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_4.xsd
@@ -0,0 +1,1241 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.4"
+            xmlns="urn:elytron:client:1.4"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The default SSLContext.
+                </xsd:documentation>
+            </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ssl-certificate-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites. 
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+            <xsd:element name="ocsp" type="ocsp-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified, 
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                    This attribute is deprecated and maximum-cert-path attribute in trust-manager should be used instead.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ocsp-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate using online certificate status protocol.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="responder" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-certificate" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias of OCSP Responder certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-keystore" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Keystore for OCSP Responder certificate. trust-manager keystore is used by default and responder-certificate has to be defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="prefer-crls" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>     
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore, 
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ssl-certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Key manager definition. Provides credentials to authenticate against the peer.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the KeyManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the key to filter from the referenced KeyStore.
+
+                    A comma separated list of aliases or one of the following formats can be used: ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:int" use="optional" default="5">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="only-leaf-cert" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Check revocation status only of leaf certificates.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="soft-fail" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-resource-owner-credentials" type="masked-resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-client-credentials" type="masked-oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-client-secret" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-password" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi. 
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+   <xsd:complexType name="attributes-type">
+           <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                The value of the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                A password specified in the clear.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A masked password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="algorithm" type="xsd:string" default="masked-MD5-DES">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The algorithm that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="key-material" type="xsd:string" default="somearbitrarycrazystringthatdoesnotmatter">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initial key material that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="iteration-count" type="xsd:positiveInteger" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The iteration count that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="salt" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The salt that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="masked-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The base64 encrypted password. (without the "MASK-" prefix)
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="initialization-vector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initialization vector that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression replacement used for re-write.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A Uniform Resource Identifier (URI).
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_5.xsd b/wildfly/docs/schema/elytron-client-1_5.xsd
new file mode 100644
index 0000000..ab8fba6
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_5.xsd
@@ -0,0 +1,1288 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.5"
+            xmlns="urn:elytron:client:1.5"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The default SSLContext.
+                </xsd:documentation>
+            </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ssl-certificate-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="cipher-suite-selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites. 
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+            <xsd:element name="ocsp" type="ocsp-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+            <xsd:element name="webservices" type="webservices-type" minOccurs="0" />
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified, 
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="webservices-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how the Webservices client will authenticate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="set-http-mechanism" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        WS client will use the credentials with this HTTP mechanism.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-ws-security-type" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        WS client will use the credentials with this WS-Security authentication type.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                    This attribute is deprecated and maximum-cert-path attribute in trust-manager should be used instead.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ocsp-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate using online certificate status protocol.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="responder" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-certificate" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias of OCSP Responder certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-keystore" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Keystore for OCSP Responder certificate. trust-manager keystore is used by default and responder-certificate has to be defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="prefer-crls" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>     
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore, 
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ssl-certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Key manager definition. Provides credentials to authenticate against the peer.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the KeyManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the key to filter from the referenced KeyStore.
+
+                    A comma separated list of aliases or one of the following formats can be used: ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:int" use="optional" default="5">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="only-leaf-cert" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Check revocation status only of leaf certificates.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="soft-fail" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-resource-owner-credentials" type="masked-resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-client-credentials" type="masked-oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-client-secret" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-password" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi. 
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+   <xsd:complexType name="attributes-type">
+           <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                Name used for referencing the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                The value of the attribute.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+        <xsd:annotation>
+            <xsd:documentation>
+                A password specified in the clear.
+            </xsd:documentation>
+        </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A masked password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="algorithm" type="xsd:string" default="masked-MD5-DES">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The algorithm that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="key-material" type="xsd:string" default="somearbitrarycrazystringthatdoesnotmatter">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initial key material that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="iteration-count" type="xsd:positiveInteger" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The iteration count that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="salt" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The salt that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="masked-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The base64 encrypted password. (without the "MASK-" prefix)
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="initialization-vector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initialization vector that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression replacement used for re-write.
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A Uniform Resource Identifier (URI).
+                    </xsd:documentation>
+                </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="cipher-suite-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Cipher suite selector type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="names" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The format of the names is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromNamesString(names).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_6.xsd b/wildfly/docs/schema/elytron-client-1_6.xsd
new file mode 100644
index 0000000..e7456f5
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_6.xsd
@@ -0,0 +1,1352 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.6"
+            xmlns="urn:elytron:client:1.6"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The default SSLContext.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ssl-certificate-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="cipher-suite-selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0"/>
+            <xsd:element name="ocsp" type="ocsp-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+            <xsd:element name="webservices" type="webservices-type" minOccurs="0" />
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the authentication configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="ssh-credential" type="ssh-credential-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssh-credential-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The location of a private ssh key to be used as credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- The Passphrase used to decrypt the private key file if needed -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+        </xsd:choice>
+        <xsd:attribute name="ssh-directory" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The directory containing the SSH key file. Set to "[user.home]/.ssh" by default
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="private-key-file" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the private key file. Set to "id_rsa", "id_dsa, and "id_ecdsa" by default.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="known-hosts-file" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the file containing the known SSH hosts. Set to "known_hosts" by default.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="openssh-private-key" type="openssh-private-key-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A PEM encoded private key in OpenSSH format. The public key to be used will be obtained from the encoded private key
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="openssh-private-key-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A PEM encoded private key in OpenSSH format. The public key to be used will be obtained from the encoded private key
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- The Passphrase used to decrypt the private key if needed -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+        </xsd:choice>
+        <xsd:attribute name="pem" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The PEM encoded private key in OpenSSH format.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified,
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="webservices-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how the Webservices client will authenticate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="set-http-mechanism" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        WS client will use the credentials with this HTTP mechanism.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-ws-security-type" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        WS client will use the credentials with this WS-Security authentication type.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                    This attribute is deprecated and maximum-cert-path attribute in trust-manager should be used instead.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ocsp-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate using online certificate status protocol.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="responder" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-certificate" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias of OCSP Responder certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-keystore" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Keystore for OCSP Responder certificate. trust-manager keystore is used by default and responder-certificate has to be defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="prefer-crls" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore,
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ssl-certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Key manager definition. Provides credentials to authenticate against the peer.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the KeyManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the key to filter from the referenced KeyStore.
+
+                    A comma separated list of aliases or one of the following formats can be used: ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:int" use="optional" default="5">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="only-leaf-cert" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Check revocation status only of leaf certificates.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="soft-fail" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-resource-owner-credentials" type="masked-resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-client-credentials" type="masked-oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-client-secret" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-password" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributes-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A password specified in the clear.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A masked password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="algorithm" type="xsd:string" default="masked-MD5-DES">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The algorithm that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="key-material" type="xsd:string" default="somearbitrarycrazystringthatdoesnotmatter">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initial key material that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="iteration-count" type="xsd:positiveInteger" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The iteration count that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="salt" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The salt that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="masked-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The base64 encrypted password. (without the "MASK-" prefix)
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="initialization-vector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initialization vector that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A regular expression pattern.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A regular expression replacement used for re-write.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A Uniform Resource Identifier (URI).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="cipher-suite-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Cipher suite selector type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="names" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The format of the names is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromNamesString(names).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-client-1_7.xsd b/wildfly/docs/schema/elytron-client-1_7.xsd
new file mode 100644
index 0000000..31a03e2
--- /dev/null
+++ b/wildfly/docs/schema/elytron-client-1_7.xsd
@@ -0,0 +1,1395 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2020 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:client:1.7"
+            xmlns="urn:elytron:client:1.7"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Authentication client elements -->
+
+    <xsd:element name="authentication-client" type="authentication-client-type"/>
+
+    <xsd:complexType name="authentication-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication configuration for outbound connections and SSL configuration for outbound connections.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="credential-stores" type="credential-stores-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-stores" type="key-stores-type" minOccurs="0"/>
+            <xsd:element name="authentication-rules" type="authentication-rules-type" minOccurs="0"/>
+            <xsd:element name="authentication-configurations" type="authentication-configurations-type" minOccurs="0"/>
+            <xsd:element name="net-authenticator" type="empty-type" minOccurs="0"/>
+            <xsd:element name="ssl-context-rules" type="ssl-context-rules-type" minOccurs="0"/>
+            <xsd:element name="ssl-contexts" type="ssl-contexts-type" minOccurs="0"/>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-contexts-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain SSLContext definitions that can subsequently be matched by the ssl context rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ssl-context" type="ssl-context-type"/>
+            <xsd:element name="default-ssl-context" type="name-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The default SSLContext.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SSLContext definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="key-store-ssl-certificate" type="key-store-ssl-certificate-type" minOccurs="0"/>
+            <xsd:element name="trust-store" type="trust-store-ref-type" minOccurs="0"/>
+            <xsd:element name="trust-manager" type="trust-manager-type" minOccurs="0"/>
+            <xsd:element name="cipher-suite" type="cipher-suite-selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configuration to filter the enabled cipher suites.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="protocol" type="names-list-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Define a space separated list of SSLContext protocols to be supported.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="provider-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Once the available providers have been identified only the provider with the name defined on this element will be used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-type" minOccurs="0" />
+            <xsd:element name="certificate-revocation-lists" type="certificate-revocation-lists-type" minOccurs="0" />
+            <xsd:element name="ocsp" type="ocsp-type" minOccurs="0"/>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing SSLContext from other parts of the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssl-context-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules used to determine which SSLContext should be used for individual resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="ssl-context-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-match-rule-type" abstract="true">
+        <xsd:all>
+            <xsd:element ref="abstract-match-user" minOccurs="0"/>
+            <xsd:element name="match-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the protocol within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the host name from within the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-path" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the path from the URI against the name specified in this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the port number specified within the URI against the number in this match element.
+                        This only matches against the number specified within the URI and not against any default derived from the protocol.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-urn" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches the scheme specific part of the URI against the name specified within this element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-domain" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Matches where the protocol of the URI is 'domain' and the scheme specific part of the URI is the name specified within this match element.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="match-abstract-type" type="abstract-type-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-match-user" abstract="true"/>
+    <xsd:element name="match-no-user" substitutionGroup="abstract-match-user" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                User info can be embedded within a URI, this rule matches when there is no user-info.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="match-user" substitutionGroup="abstract-match-user" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches when the user-info embedded in the URI matches the name specified within this element.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="ssl-context-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of rule for assigning SSLContexts to resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-ssl-context" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A name of SSLContext, which should be used if given rule match.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configurations-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Named configurations to be referenced from authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="configuration" type="authentication-configuration-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-configuration-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A configuration that can then be matched from the authentication rules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="set-host" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination host name for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-port" type="port-number-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the destination port number for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-protocol" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Override the protocol for the authenticated call.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element ref="abstract-user-spec" minOccurs="0"/>
+            <xsd:element name="set-mechanism-realm" type="optional-name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name of the realm that will be selected by the SASL mechanism if required.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="rewrite-user-name-regex" type="regex-substitution-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A regular expression pattern and replacement to re-write the user name used for authentication.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="sasl-mechanism-selector" type="selector-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A SASL mechanism selector using the syntax from org.wildfly.security.sasl.SaslMechanismSelector,fromString().
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-mechanism-properties" type="properties-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        One or more properties to be passed to the authentication mechanisms.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="credentials" type="client-credentials-type" minOccurs="0"/>
+            <xsd:element name="set-authorization-name" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The name that should be used for authorization if different from the authentication identity.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+            <xsd:element ref="abstract-sasl-factories" minOccurs="0"/>
+            <xsd:element name="webservices" type="webservices-type" minOccurs="0" />
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the authentication configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                One or more credentials to be assembled into a protection parameter when initialising the credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store-reference" type="key-store-ref-type"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+            <xsd:element name="key-pair" type="key-pair-type"/>
+            <xsd:element name="certificate" type="certificate-type"/>
+            <xsd:element name="ssh-credential" type="ssh-credential-type"/>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="bearer-token" type="bearer-token-type"/>
+            <xsd:element name="oauth2-bearer-token" type="oauth2-bearer-token-type"/>
+            <xsd:element name="local-kerberos" type="local-kerberos-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        DEPRECATED. Credential obtained from local kerberos ticket cache.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="ssh-credential-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The location of a private ssh key to be used as credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- The Passphrase used to decrypt the private key file if needed -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+        </xsd:choice>
+        <xsd:attribute name="ssh-directory" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The directory containing the SSH key file. Set to "[user.home]/.ssh" by default
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="private-key-file" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the private key file. Set to "id_rsa", "id_dsa, and "id_ecdsa" by default.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="known-hosts-file" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the file containing the known SSH hosts. Set to "known_hosts" by default.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-pair-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A public and private key pair.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="public-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded public key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="openssh-private-key" type="openssh-private-key-type">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A PEM encoded private key in OpenSSH format. The public key to be used will be obtained from the encoded private key
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="openssh-private-key-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A PEM encoded private key in OpenSSH format. The public key to be used will be obtained from the encoded private key
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- The Passphrase used to decrypt the private key if needed -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type"/>
+            <xsd:element name="clear-password" type="clear-password-type"/>
+            <xsd:element name="masked-password" type="masked-password-type"/>
+        </xsd:choice>
+        <xsd:attribute name="pem" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The PEM encoded private key in OpenSSH format.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A pem encoded private key and corresponding certificate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="private-key-pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A pem encoded private key.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="pem" type="xsd:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Corresponding certificate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-rules-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Rules to be applied for outbound connections to match against an appropriate authentication configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="rule" type="authentication-client-rule-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="authentication-client-rule-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Authentication client rule definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="abstract-match-rule-type">
+                <xsd:attribute name="use-configuration" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            A configuration to use for the rule.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-user-spec" abstract="true"/>
+    <xsd:element name="set-user-name" substitutionGroup="abstract-user-spec" type="name-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The user name to use for authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="set-anonymous" substitutionGroup="abstract-user-spec" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Switch to anonymous authentication.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="providers-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how java.security.Provider instances are located when required.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="global" type="empty-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The providers from java.security.Security.getProviders()
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="use-service-loader" type="module-ref-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Providers loaded using service loader discovery from the module specified,
+                        if no module is specified the ClassLoader which loaded the authentication client is used.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="webservices-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Define how the Webservices client will authenticate.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="set-http-mechanism" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        WS client will use the credentials with this HTTP mechanism.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="set-ws-security-type" type="name-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        WS client will use the credentials with this WS-Security authentication type.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:element name="abstract-sasl-factories" abstract="true"/>
+    <xsd:element name="use-provider-sasl-factory" substitutionGroup="abstract-sasl-factories" type="empty-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The java.security.Provider instances either inherited or defined in this configuration will be used to locate the available SASL client factories.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+    <xsd:element name="use-service-loader-sasl-factory" substitutionGroup="abstract-sasl-factories" type="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                SASL client factories will be discovered using service loader discovery on the specified module or if not specified using the ClassLoader loading the configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="certificate-revocation-lists-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="certificate-revocation-list" type="certificate-revocation-list-no-max-cert-path-type" minOccurs="0"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-revocation-list-no-max-cert-path-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="certificate-revocation-list-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate against a certificate revocation list.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="uri" type="uri-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        URI of certificate revocation list file. Alternative to "path" and "resource".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="resource" type="resource-type" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The module resource to use as certificate revocation list. Alternative to "path" and "uri".
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Path to the certificate revocation list. Alternative to "resource" and "uri".
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:positiveInteger" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                    This attribute is deprecated and maximum-cert-path attribute in trust-manager should be used instead.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ocsp-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The presence of this element enabled checking the peer's certificate using online certificate status protocol.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="responder" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-certificate" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias of OCSP Responder certificate.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="responder-keystore" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Keystore for OCSP Responder certificate. trust-manager keystore is used by default and responder-certificate has to be defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="prefer-crls" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the key stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="key-store" type="key-store-type"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual key store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="1">
+            <!-- Access source type -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="file" type="name-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load from file.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="uri" type="uri-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load the file from the URI specified.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+                <xsd:element name="resource" type="resource-type" minOccurs="1" maxOccurs="1">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Load as a resource from the Thread context classloader.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+            <!-- Protection parameter -->
+            <xsd:choice minOccurs="0" maxOccurs="1">
+                <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+                <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+            </xsd:choice>
+            <xsd:element name="providers" type="providers-type" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the key store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The key store provider.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="wrap-passwords" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Whether to wrap keystore to allow storing two-way passwords in it.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a reference to an entry within a KeyStore for an entry to use.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name of the KeyStore being referenced to load the entry from.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the entry to load from the referenced KeyStore,
+                    this can only be omitted for KeyStores that contain only a single entry.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-reference-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Reference to a credential stored in a credential store.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="store" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store name.
+                    When used, attribute "alias" need to be specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Alias in the credential store.
+                    Ignored if "store" is not specified.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="clear-text" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Credential store password in clear text.
+                    Supersedes "store" and "alias" attributes.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="key-store-ssl-certificate-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Key manager definition. Provides credentials to authenticate against the peer.
+            </xsd:documentation>
+        </xsd:annotation>
+        <!-- Protection parameter -->
+        <xsd:choice minOccurs="0" maxOccurs="1">
+            <xsd:element name="key-store-credential" type="key-store-ref-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-clear-password" type="clear-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="key-store-masked-password" type="masked-password-type" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="1" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the KeyManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="alias" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The alias of the key to filter from the referenced KeyStore.
+
+                    A comma separated list of aliases or one of the following formats can be used: ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Key manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-manager-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust manager definition. Decides whether credentials presented by a peer should be accepted.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="provider-name" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager provider name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="algorithm" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Trust manager algorithm.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="maximum-cert-path" type="xsd:int" use="optional" default="5">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="only-leaf-cert" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Check revocation status only of leaf certificates.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="soft-fail" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trust-store-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Trust store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="key-store-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A reference to a KeyStore that will be used to initialise the TrustManager.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A bearer token value.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-bearer-token-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice maxOccurs="unbounded">
+            <xsd:element name="resource-owner-credentials" type="resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-resource-owner-credentials" type="masked-resource-owner-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="client-credentials" type="oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="masked-client-credentials" type="masked-oauth2-client-credentials-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:choice>
+        <xsd:attribute name="token-endpoint-uri" type="xsd:anyURI" use="required" />
+    </xsd:complexType>
+
+    <xsd:complexType name="oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="client-secret" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client secret.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-oauth2-client-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token client credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-client-secret" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="client-id" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The client identifier.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="credential-store-reference" type="credential-store-reference-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="password" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The resource owner password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-resource-owner-credentials-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An OAuth 2 bearer token resource owner credentials.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice>
+            <xsd:element name="masked-password" type="masked-password-type" minOccurs="0"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource owner.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Credential Stores elements -->
+    <xsd:complexType name="credential-stores-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-store" type="credential-store-type" minOccurs="0" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-store-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual credential store definition.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:all minOccurs="0" maxOccurs="1">
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" />
+            <xsd:element name="protection-parameter-credentials" type="client-credentials-type" minOccurs="0" />
+            <xsd:element name="providers" type="providers-type" minOccurs="0" />
+        </xsd:all>
+
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the credential store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="type" type="xsd:string" default="KeyStoreCredentialStore" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="provider" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can create an instance of the specified 'type' will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Matches the abstract type and/or authority against the values specified within this match element.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the abstract type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="authority" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Abstract type authority.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributes-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Complex type to contain the definitions of the attributes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                An individual attribute definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A clear password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A password specified in the clear.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="masked-password-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A masked password definition.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="algorithm" type="xsd:string" default="masked-MD5-DES">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The algorithm that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="key-material" type="xsd:string" default="somearbitrarycrazystringthatdoesnotmatter">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initial key material that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="iteration-count" type="xsd:positiveInteger" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The iteration count that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="salt" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The salt that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="masked-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The base64 encrypted password. (without the "MASK-" prefix)
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="initialization-vector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The initialization vector that was used to encrypt the password.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Module reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="resource-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Resource reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Name used for referencing the resource.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Module name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Port number.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Representation of a key/value property pair.
+                    </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The key for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                    <xsd:attribute name="value" type="xsd:string" use="required">
+                        <xsd:annotation>
+                            <xsd:documentation>
+                                The value for this property.
+                            </xsd:documentation>
+                        </xsd:annotation>
+                    </xsd:attribute>
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A regular expression substitution type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="pattern" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A regular expression pattern.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="replacement" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A regular expression replacement used for re-write.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                A Uniform Resource Identifier (URI) reference.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A Uniform Resource Identifier (URI).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="cipher-suite-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Cipher suite selector type.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="selector" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The format of the selector is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromString(selector).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="names" type="xsd:string">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The format of the names is described in Javadoc of org.wildfly.security.ssl.CipherSuiteSelector.fromNamesString(names).
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="local-kerberos-type">
+        <xsd:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism names the credential should be usable with.
+                    Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="mechanism-oids" type="stringListType">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The mechanism OIDs the credential should be usable with.
+                    Will be used together with OIDs derived from names from mechanism-names attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="stringListType">
+        <xsd:annotation>
+            <xsd:documentation>A list of String.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-identity-1_1.xsd b/wildfly/docs/schema/elytron-identity-1_1.xsd
new file mode 100644
index 0000000..2e0d8cf
--- /dev/null
+++ b/wildfly/docs/schema/elytron-identity-1_1.xsd
@@ -0,0 +1,147 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2021 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:identity:1.1"
+            xmlns="urn:elytron:identity:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- File-backed realm elements -->
+
+    <xsd:element name="identity" type="identity-type"/>
+
+    <xsd:complexType name="identity-type">
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="credentials" type="credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentials-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="password" type="credential-type"/>
+            <xsd:element name="otp" type="otp-credential-type"/>
+            <xsd:element name="public-key" type="credential-type"/>
+            <xsd:element name="certificate" type="credential-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributes-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="format" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="otp-credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="hash" type="xsd:string" use="optional"/>
+                <xsd:attribute name="seed" type="xsd:string" use="optional"/>
+                <xsd:attribute name="sequence" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+        <xsd:attribute name="value" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:attribute name="name" type="xsd:string" use="optional"/>
+        <xsd:attribute name="authority" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:attribute name="module-name" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:attribute name="pattern" type="xsd:string" use="required"/>
+        <xsd:attribute name="replacement" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:attribute name="password" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required" />
+                    <xsd:attribute name="value" type="xsd:string" use="required" />
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/elytron-identity-1_2.xsd b/wildfly/docs/schema/elytron-identity-1_2.xsd
new file mode 100644
index 0000000..e2cfd61
--- /dev/null
+++ b/wildfly/docs/schema/elytron-identity-1_2.xsd
@@ -0,0 +1,152 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2022 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:elytron:identity:1.2"
+            xmlns="urn:elytron:identity:1.2"
+            xmlns:xmldsig="http://www.w3.org/2000/09/xmldsig#"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- File-backed realm elements -->
+
+    <xsd:element name="identity" type="identity-type"/>
+    <xsd:import namespace="http://www.w3.org/2000/09/xmldsig#" schemaLocation="https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/xmldsig-core-schema.xsd" />
+
+    <xsd:complexType name="identity-type">
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="principal" type="name-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="credentials" type="credentials-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attributes" type="attributes-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="Signature" type="xmldsig:SignatureType" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentials-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="password" type="credential-type"/>
+            <xsd:element name="otp" type="otp-credential-type"/>
+            <xsd:element name="public-key" type="credential-type"/>
+            <xsd:element name="certificate" type="credential-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributes-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="attribute" type="attribute-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="format" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="otp-credential-type">
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:string">
+                <xsd:attribute name="algorithm" type="xsd:string" use="optional"/>
+                <xsd:attribute name="hash" type="xsd:string" use="optional"/>
+                <xsd:attribute name="seed" type="xsd:string" use="optional"/>
+                <xsd:attribute name="sequence" type="xsd:string" use="optional"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="attribute-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+        <xsd:attribute name="value" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <!-- Common types -->
+
+    <xsd:complexType name="empty-type"/>
+
+    <xsd:complexType name="name-type">
+        <xsd:attribute name="name" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="abstract-type-type">
+        <xsd:attribute name="name" type="xsd:string" use="optional"/>
+        <xsd:attribute name="authority" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="optional-name-type">
+        <xsd:attribute name="name" type="xsd:string" />
+    </xsd:complexType>
+
+    <xsd:complexType name="selector-type">
+        <xsd:attribute name="selector" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="module-ref-type">
+        <xsd:attribute name="module-name" type="xsd:string" use="optional"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="port-number-type">
+        <xsd:attribute name="number" type="port-number-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="port-number-simple-type">
+        <xsd:restriction base="xsd:positiveInteger">
+            <xsd:minInclusive value="1"/>
+            <xsd:maxInclusive value="65535"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="regex-substitution-type">
+        <xsd:attribute name="pattern" type="xsd:string" use="required"/>
+        <xsd:attribute name="replacement" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="names-list-type">
+        <xsd:attribute name="names" type="names-list-simple-type" use="required"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="names-list-simple-type">
+        <xsd:list itemType="xsd:string"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="uri-type">
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="clear-password-type">
+        <xsd:attribute name="password" type="xsd:string" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="properties-type">
+        <xsd:sequence>
+            <xsd:element name="property" maxOccurs="unbounded">
+                <xsd:complexType>
+                    <xsd:attribute name="key" type="xsd:string" use="required" />
+                    <xsd:attribute name="value" type="xsd:string" use="required" />
+                </xsd:complexType>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/j2ee_1_4.xsd b/wildfly/docs/schema/j2ee_1_4.xsd
new file mode 100644
index 0000000..3955cef
--- /dev/null
+++ b/wildfly/docs/schema/j2ee_1_4.xsd
@@ -0,0 +1,1607 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema
+     targetNamespace="http://java.sun.com/xml/ns/j2ee"
+     xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+     xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+     elementFormDefault="qualified"
+     attributeFormDefault="unqualified"
+     version="1.4">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)j2ee_1_4.xsds	1.43 03/09/16
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+<xsd:annotation>
+<xsd:documentation>
+
+The following definitions that appear in the common
+shareable schema(s) of J2EE deployment descriptors should be
+interpreted with respect to the context they are included:
+
+Deployment Component may indicate one of the following:
+    j2ee application;
+    application client;
+    web application;
+    enterprise bean;
+    resource adapter;
+
+Deployment File may indicate one of the following:
+    ear file;
+    war file;
+    jar file;
+    rar file;
+
+</xsd:documentation>
+</xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+	      schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation=
+	"http://www.ibm.com/webservices/xsd/j2ee_web_services_client_1_1.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This group keeps the usage of the contained description related
+	elements consistent across J2EE deployment descriptors.
+
+	All elements may occur multiple times with different languages,
+	to support localization of the content.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+		   type="j2ee:display-nameType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+		   type="j2ee:iconType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The description type is used by a description element to
+	provide text describing the parent element.  The elements
+	that use this type should include any information that the
+	Deployment Component's Deployment File file producer wants
+	to provide to the consumer of the Deployment Component's
+	Deployment File (i.e., to the Deployer). Typically, the
+	tools used by such a Deployment File consumer will display
+	the description when processing the parent element that
+	contains the description.
+
+	The lang attribute defines the language that the
+	description is provided in. The default value is "en" (English).
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="j2ee:xsdStringType">
+	<xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type defines a dewey decimal which is used
+	to describe versions of documents.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:restriction base="xsd:decimal">
+      <xsd:whiteSpace value="collapse"/>
+    </xsd:restriction>
+
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The display-name type contains a short name that is intended
+	  to be displayed by tools. It is used by display-name
+	  elements.  The display name need not be unique.
+
+	  Example:
+
+	  ...
+	     <display-name xml:lang="en">Employee Self Service</display-name>
+
+	  The value of the xml:lang attribute is "en" (English) by default.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="j2ee:string">
+	<xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-linkType is used by ejb-link
+	  elements in the ejb-ref or ejb-local-ref elements to specify
+	  that an EJB reference is linked to enterprise bean.
+
+	  The value of the ejb-link element must be the ejb-name of an
+	  enterprise bean in the same ejb-jar file or in another ejb-jar
+	  file in the same J2EE application unit.
+
+	  Alternatively, the name in the ejb-link element may be
+	  composed of a path name specifying the ejb-jar containing the
+	  referenced enterprise bean with the ejb-name of the target
+	  bean appended and separated from the path name by "#".  The
+	  path name is relative to the Deployment File containing
+	  Deployment Component that is referencing the enterprise
+	  bean.  This allows multiple enterprise beans with the same
+	  ejb-name to be uniquely identified.
+
+	  Examples:
+
+	      <ejb-link>EmployeeRecord</ejb-link>
+
+	      <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-local-refType is used by ejb-local-ref elements for
+	the declaration of a reference to an enterprise bean's local
+	home. The declaration consists of:
+
+	    - an optional description
+	    - the EJB reference name used in the code of the Deployment
+	      Component that's referencing the enterprise bean
+	    - the expected type of the referenced enterprise bean
+	    - the expected local home and local interfaces of the
+	      referenced enterprise bean
+	    - optional ejb-link information, used to specify the
+	      referenced enterprise bean
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+		   type="j2ee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+		   type="j2ee:ejb-ref-typeType"/>
+      <xsd:element name="local-home"
+		   type="j2ee:local-homeType"/>
+      <xsd:element name="local"
+		   type="j2ee:localType"/>
+      <xsd:element name="ejb-link"
+		   type="j2ee:ejb-linkType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-ref-name element contains the name of an EJB
+	  reference. The EJB reference is an entry in the
+	  Deployment Component's environment and is relative to the
+	  java:comp/env context.  The name must be unique within the
+	  Deployment Component.
+
+	  It is recommended that name is prefixed with "ejb/".
+
+	  Example:
+
+	  <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-ref-typeType contains the expected type of the
+	referenced enterprise bean.
+
+	The ejb-ref-type designates a value
+	that must be one of the following:
+
+	    Entity
+	    Session
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Entity"/>
+	<xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-refType is used by ejb-ref elements for the
+	declaration of a reference to an enterprise bean's home. The
+	declaration consists of:
+
+	    - an optional description
+	    - the EJB reference name used in the code of
+	      the Deployment Component that's referencing the enterprise
+	      bean
+	    - the expected type of the referenced enterprise bean
+	    - the expected home and remote interfaces of the referenced
+	      enterprise bean
+	    - optional ejb-link information, used to specify the
+	      referenced enterprise bean
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+		   type="j2ee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+		   type="j2ee:ejb-ref-typeType"/>
+
+      <xsd:element name="home"
+		   type="j2ee:homeType"/>
+      <xsd:element name="remote"
+		   type="j2ee:remoteType"/>
+      <xsd:element name="ejb-link"
+		   type="j2ee:ejb-linkType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type is used to designate an empty
+	element when used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  This type contains the fully-qualified Java type of the
+	  environment entry value that is expected by the
+	  application's code.
+
+	  The following are the legal values of env-entry-type-valuesType:
+
+	      java.lang.Boolean
+	      java.lang.Byte
+	      java.lang.Character
+	      java.lang.String
+	      java.lang.Short
+	      java.lang.Integer
+	      java.lang.Long
+	      java.lang.Float
+	      java.lang.Double
+
+	  Example:
+
+	  <env-entry-type>java.lang.Boolean</env-entry-type>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="java.lang.Boolean"/>
+	<xsd:enumeration value="java.lang.Byte"/>
+	<xsd:enumeration value="java.lang.Character"/>
+	<xsd:enumeration value="java.lang.String"/>
+	<xsd:enumeration value="java.lang.Short"/>
+	<xsd:enumeration value="java.lang.Integer"/>
+	<xsd:enumeration value="java.lang.Long"/>
+	<xsd:enumeration value="java.lang.Float"/>
+	<xsd:enumeration value="java.lang.Double"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The env-entryType is used to declare an application's
+	environment entry. The declaration consists of an optional
+	description, the name of the environment entry, and an
+	optional value.  If a value is not specified, one must be
+	supplied during deployment.
+
+	It is used by env-entry elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+		   type="j2ee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The env-entry-name element contains the name of a
+	      Deployment Component's environment entry.  The name
+	      is a JNDI name relative to the java:comp/env
+	      context.  The name must be unique within a
+	      Deployment Component. The uniqueness
+	      constraints must be defined within the declared
+	      context.
+
+	      Example:
+
+	      <env-entry-name>minAmount</env-entry-name>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="env-entry-type"
+		   type="j2ee:env-entry-type-valuesType"/>
+
+      <xsd:element name="env-entry-value"
+		   type="j2ee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The env-entry-value designates the value of a
+	      Deployment Component's environment entry. The value
+	      must be a String that is valid for the
+	      constructor of the specified type that takes a
+	      single String parameter, or for java.lang.Character,
+	      a single character.
+
+	      Example:
+
+	      <env-entry-value>100.00</env-entry-value>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The elements that use this type designate the name of a
+	Java class or interface.  The name is in the form of a
+	"binary name", as defined in the JLS.  This is the form
+	of name used in Class.forName().  Tools that need the
+	canonical name (the name used in source code) will need
+	to convert this binary name to the canonical name.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type defines four different values which can designate
+	boolean values. This includes values yes and no which are
+	not designated by xsd:boolean
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="true"/>
+	<xsd:enumeration value="false"/>
+	<xsd:enumeration value="yes"/>
+	<xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The homeType defines the fully-qualified name of
+	  an enterprise bean's home interface.
+
+	  Example:
+
+	      <home>com.aardvark.payroll.PayrollHome</home>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The icon type contains small-icon and large-icon elements
+	that specify the file names for small and large GIF or
+	JPEG icon images used to represent the parent element in a
+	GUI tool.
+
+	The xml:lang attribute defines the language that the
+	icon file names are provided in. Its value is "en" (English)
+	by default.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="small-icon" type="j2ee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The small-icon element contains the name of a file
+	      containing a small (16 x 16) icon image. The file
+	      name is a relative path within the Deployment
+	      Component's Deployment File.
+
+	      The image may be either in the JPEG or GIF format.
+	      The icon can be used by tools.
+
+	      Example:
+
+	      <small-icon>employee-service-icon16x16.jpg</small-icon>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon" type="j2ee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The large-icon element contains the name of a file
+	      containing a large
+	      (32 x 32) icon image. The file name is a relative
+	      path within the Deployment Component's Deployment
+	      File.
+
+	      The image may be either in the JPEG or GIF format.
+	      The icon can be used by tools.
+
+	      Example:
+
+	      <large-icon>employee-service-icon32x32.jpg</large-icon>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The java-identifierType defines a Java identifier.
+	The users of this type should further verify that
+	the content does not contain Java reserved keywords.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is a generic type that designates a Java primitive
+	type or a fully qualified name of a Java interface/type,
+	or an array of such types.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jndi-nameType type designates a JNDI name in the
+	Deployment Component's environment and is relative to the
+	java:comp/env context.  A JNDI name must be unique within the
+	Deployment Component.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This group keeps the usage of the contained JNDI environment
+	reference elements consistent across J2EE deployment descriptors.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+		   type="j2ee:env-entryType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+		   type="j2ee:ejb-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+		   type="j2ee:ejb-local-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:group ref="j2ee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+		   type="j2ee:resource-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+		   type="j2ee:resource-env-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+		   type="j2ee:message-destination-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The listenerType indicates the deployment properties for a web
+	application listener bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The listener-class element declares a class in the
+	    application must be registered as a web
+	    application listener bean. The value is the fully
+	    qualified classname of the listener class.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The local-homeType defines the fully-qualified
+	name of an enterprise bean's local home interface.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The localType defines the fully-qualified name of an
+	enterprise bean's local interface.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The message-destination-linkType is used to link a message
+	destination reference or message-driven bean to a message
+	destination.
+
+	The Assembler sets the value to reflect the flow of messages
+	between producers and consumers in the application.
+
+	The value must be the message-destination-name of a message
+	destination in the same Deployment File or in another
+	Deployment File in the same J2EE application unit.
+
+	Alternatively, the value may be composed of a path name
+	specifying a Deployment File containing the referenced
+	message destination with the message-destination-name of the
+	destination appended and separated from the path name by
+	"#". The path name is relative to the Deployment File
+	containing Deployment Component that is referencing the
+	message destination.  This allows multiple message
+	destinations with the same name to be uniquely identified.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The message-destination-ref element contains a declaration
+	  of Deployment Component's reference to a message destination
+	  associated with a resource in Deployment Component's
+	  environment. It consists of:
+
+		  - an optional description
+		  - the message destination reference name
+		  - the message destination type
+		  - a specification as to whether the
+		    destination is used for
+		    consuming or producing messages, or both
+		  - a link to the message destination
+
+	  Examples:
+
+	  <message-destination-ref>
+		  <message-destination-ref-name>jms/StockQueue
+		  </message-destination-ref-name>
+		  <message-destination-type>javax.jms.Queue
+		  </message-destination-type>
+		  <message-destination-usage>Consumes
+		  </message-destination-usage>
+		  <message-destination-link>CorporateStocks
+		  </message-destination-link>
+	  </message-destination-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+		   type="j2ee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The message-destination-ref-name element specifies
+	    the name of a message destination reference; its
+	    value is the environment entry name used in
+	    Deployment Component code.  The name is a JNDI name
+	    relative to the java:comp/env context and must be
+	    unique within an ejb-jar (for enterprise beans) or a
+	    Deployment File (for others).
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+		   type="j2ee:message-destination-typeType"/>
+      <xsd:element name="message-destination-usage"
+		   type="j2ee:message-destination-usageType"/>
+      <xsd:element name="message-destination-link"
+		   type="j2ee:message-destination-linkType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The message-destination-typeType specifies the type of
+	  the destination. The type is specified by the Java interface
+	  expected to be implemented by the destination.
+
+	  Example:
+
+	    <message-destination-type>javax.jms.Queue
+	    </message-destination-type>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The message-destination-usageType specifies the use of the
+	message destination indicated by the reference.  The value
+	indicates whether messages are consumed from the message
+	destination, produced for the destination, or both.  The
+	Assembler makes use of this information in linking producers
+	of a destination with its consumers.
+
+	The value of the message-destination-usage element must be
+	one of the following:
+	    Consumes
+	    Produces
+	    ConsumesProduces
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Consumes"/>
+	<xsd:enumeration value="Produces"/>
+	<xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The message-destinationType specifies a message
+	  destination. The logical destination described by this
+	  element is mapped to a physical destination by the Deployer.
+
+	  The message destination element contains:
+
+		  - an optional description
+		  - an optional display-name
+		  - an optional icon
+		  - a message destination name which must be unique
+		    among message destination names within the same
+		    Deployment File.
+
+	  Example:
+
+	  <message-destination>
+		  <message-destination-name>CorporateStocks
+		  </message-destination-name>
+	  </message-destination>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The message-destination-name element specifies a
+	    name for a message destination.  This name must be
+	    unique among the names of message destinations
+	    within the Deployment File.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type is a general type that can be used to declare
+	parameter/value lists.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The param-name element contains the name of a
+	    parameter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="param-value"
+		   type="j2ee:xsdStringType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The param-value element contains the value of a
+	    parameter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The elements that use this type designate either a relative
+	path or an absolute path starting with a "/".
+
+	In elements that specify a pathname to a file within the
+	same Deployment File, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the Deployment File's namespace.  Absolute filenames (i.e.,
+	those starting with "/") also specify names in the root of
+	the Deployment File's namespace.  In general, relative names
+	are preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The remote element contains the fully-qualified name
+	  of the enterprise bean's remote interface.
+
+	  Example:
+
+	      <remote>com.wombat.empl.EmployeeService</remote>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The res-authType specifies whether the Deployment Component
+	code signs on programmatically to the resource manager, or
+	whether the Container will sign on to the resource manager
+	on behalf of the Deployment Component. In the latter case,
+	the Container uses information that is supplied by the
+	Deployer.
+
+	The value must be one of the two following:
+
+	    Application
+	    Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Application"/>
+	<xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The res-sharing-scope type specifies whether connections
+	obtained through the given resource manager connection
+	factory reference can be shared. The value, if specified,
+	must be one of the two following:
+
+	    Shareable
+	    Unshareable
+
+	The default value is Shareable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="Shareable"/>
+	<xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The resource-env-refType is used to define
+	  resource-env-type elements.  It contains a declaration of a
+	  Deployment Component's reference to an administered object
+	  associated with a resource in the Deployment Component's
+	  environment.  It consists of an optional description, the
+	  resource environment reference name, and an indication of
+	  the resource environment reference type expected by the
+	  Deployment Component code.
+
+	  Example:
+
+	  <resource-env-ref>
+	      <resource-env-ref-name>jms/StockQueue
+	      </resource-env-ref-name>
+	      <resource-env-ref-type>javax.jms.Queue
+	      </resource-env-ref-type>
+	  </resource-env-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+		   type="j2ee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The resource-env-ref-name element specifies the name
+	    of a resource environment reference; its value is
+	    the environment entry name used in
+	    the Deployment Component code.  The name is a JNDI
+	    name relative to the java:comp/env context and must
+	    be unique within a Deployment Component.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="resource-env-ref-type"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The resource-env-ref-type element specifies the type
+	    of a resource environment reference.  It is the
+	    fully qualified name of a Java language class or
+	    interface.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The resource-refType contains a declaration of a
+	  Deployment Component's reference to an external resource. It
+	  consists of an optional description, the resource manager
+	  connection factory reference name, the indication of the
+	  resource manager connection factory type expected by the
+	  Deployment Component code, the type of authentication
+	  (Application or Container), and an optional specification of
+	  the shareability of connections obtained from the resource
+	  (Shareable or Unshareable).
+
+	  Example:
+
+	  <resource-ref>
+	      <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+	      <res-type>javax.sql.DataSource</res-type>
+	      <res-auth>Container</res-auth>
+	      <res-sharing-scope>Shareable</res-sharing-scope>
+	  </resource-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+		   type="j2ee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The res-ref-name element specifies the name of a
+	    resource manager connection factory reference.
+	    The name is a JNDI name relative to the
+	    java:comp/env context.
+	    The name must be unique within a Deployment File.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="res-type"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The res-type element specifies the type of the data
+	    source. The type is specified by the fully qualified
+	    Java language class or interface
+	    expected to be implemented by the data source.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="res-auth"
+		   type="j2ee:res-authType"/>
+
+      <xsd:element name="res-sharing-scope"
+		   type="j2ee:res-sharing-scopeType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The role-nameType designates the name of a security role.
+
+	The name must conform to the lexical rules for a token.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The run-asType specifies the run-as identity to be
+	used for the execution of a component. It contains an
+	optional description, and the name of a security role.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="j2ee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The security-role-refType contains the declaration of a
+	security role reference in a component's or a
+	Deployment Component's code. The declaration consists of an
+	optional description, the security role name used in the
+	code, and an optional link to a security role. If the
+	security role is not specified, the Deployer must choose an
+	appropriate security role.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="j2ee:role-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The value of the role-name element must be the String used
+	    as the parameter to the
+	    EJBContext.isCallerInRole(String roleName) method or the
+	    HttpServletRequest.isUserInRole(String role) method.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="role-link"
+		   type="j2ee:role-nameType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The role-link element is a reference to a defined
+	    security role. The role-link element must contain
+	    the name of one of the security roles defined in the
+	    security-role elements.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The security-roleType contains the definition of a security
+	  role. The definition consists of an optional description of the
+	  security role, and the security role name.
+
+	  Example:
+
+	      <security-role>
+	      <description>
+		  This role includes all employees who are authorized
+		  to access the employee service application.
+	      </description>
+	      <role-name>employee</role-name>
+	      </security-role>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="j2ee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is a special string datatype that is defined by J2EE as
+	a base type for defining collapsed strings. When schemas
+	require trailing/leading space elimination as well as
+	collapsing the existing whitespace, this base type may be
+	used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This simple type designates a boolean with only two
+	permissible values
+
+	- true
+	- false
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:xsdBooleanType">
+	<xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The url-patternType contains the url pattern of the mapping.
+	It must follow the rules specified in Section 11.2 of the
+	Servlet API Specification. This pattern is assumed to be in
+	URL-decoded form and must not contain CR(#xD) or LF(#xA).
+	If it contains those characters, the container must inform
+	the developer with a descriptive error message.
+	The container must preserve all characters including whitespaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:anyURI.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:boolean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:integer.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:NMTOKEN.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:nonNegativeInteger.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:positiveInteger.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:QName.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:string.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/j2ee_jaxrpc_mapping_1_1.xsd b/wildfly/docs/schema/j2ee_jaxrpc_mapping_1_1.xsd
new file mode 100644
index 0000000..8720ace
--- /dev/null
+++ b/wildfly/docs/schema/j2ee_jaxrpc_mapping_1_1.xsd
@@ -0,0 +1,885 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="1.1">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)j2ee_jaxrpc_mapping_1_1.xsds	1.11 09/03/03
+
+      Based on j2ee_jaxrpc_mapping_1_0.dtd, Last updated: 09/19/2002 10:26
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	The element describes the Java mapping to a known WSDL document.
+
+	It contains the mapping between package names and XML namespaces,
+	WSDL root types and Java artifacts, and the set of mappings for
+	services.
+
+	All java-wsdl-mapping deployment descriptors must indicate the
+	schema by using the J2EE namespace:
+
+	http://java.sun.com/xml/ns/j2ee
+
+	and by indicating the version of the schema by using the
+	version element as shown below:
+
+	    <java-wsdl-mapping xmlns="http://java.sun.com/xml/ns/j2ee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
+		http://www.ibm.com/webservices/xsd/j2ee_jaxrpc_mapping_1_1.xsd"
+	      version="1.1">
+	      ...
+	    </java-wsdl-mapping>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for J2EE
+	namespace with the following location:
+
+	http://www.ibm.com/webservices/xsd/j2ee_jaxrpc_mapping_1_1.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all J2EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+
+
+<!-- **************************************************** -->
+
+
+  <xsd:element name="java-wsdl-mapping" type="j2ee:java-wsdl-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is the root of the java-wsdl-mapping deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="constructor-parameter-orderType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The constructor-parameter-order element defines the order
+	that complexType element values are applied to a Java
+	exception constructor. Element names are specified for each
+	parameter of the constructor, including element names of
+	inherited types if necessary.
+
+	Used in: exception-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="element-name"
+		   type="j2ee:string"
+		   minOccurs="1" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The element-name element defines the name of a complexType
+	    element name attribute value.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="exception-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The exception-mapping element defines the mapping between the
+	service specific exception types and wsdl faults and
+	SOAP headerfaults.
+
+	This element should be interpreted with respect to the
+	mapping between a method and an operation which provides the
+	mapping context.
+
+	Used in: service-endpoint-method-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="exception-type"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The exception-type element defines Java type of the exception.
+	    It may be a service specific exception.
+
+	    It must be a fully qualified class name.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-message"
+		   type="j2ee:wsdl-messageType"/>
+      <xsd:element name="wsdl-message-part-name"
+		   type="j2ee:wsdl-message-part-nameType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+            The wsdl-message-part-name element is required only
+            when the message referenced by the wsdl-message element
+            has more than one part.
+
+            This only occurs when multiple headerfaults use the
+            same message.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="constructor-parameter-order"
+		   type="j2ee:constructor-parameter-orderType"
+		   minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-wsdl-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The element describes the Java mapping to a known WSDL document.
+
+	It contains the mapping between package names and XML namespaces,
+	WSDL root types and Java artifacts, and the set of mappings for
+	services.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="package-mapping"
+		   type="j2ee:package-mappingType"
+		   minOccurs="1" maxOccurs="unbounded"/>
+      <xsd:element name="java-xml-type-mapping"
+		   type="j2ee:java-xml-type-mappingType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="exception-mapping"
+		   type="j2ee:exception-mappingType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+        <xsd:element name="service-interface-mapping"
+		     type="j2ee:service-interface-mappingType"
+		     minOccurs="0" maxOccurs="1"/>
+        <xsd:element name="service-endpoint-interface-mapping"
+		     type="j2ee:service-endpoint-interface-mappingType"
+		     minOccurs="1" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:sequence>
+
+    <xsd:attribute name="version"
+		   type="j2ee:dewey-versionType"
+		   fixed="1.1"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The required value for the version is 1.1.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-xml-type-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The java-xml-type-mapping element contains a java-type that is the
+	fully qualified name of the Java class, primitive type, or array
+	type, QName of the XML root type or anonymous type, the WSDL type
+	scope the QName applies to and the set of variable mappings for
+	each public variable within the Java class.
+
+	Used in: java-wsdl-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="java-type"
+		   type="j2ee:java-typeType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The java-type element is the fully qualified class name of
+	    a Java class, primitive, or array type.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <choice>
+        <xsd:element name="root-type-qname"
+		   type="j2ee:xsdQNameType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The root-type-qname identifies the WSDL QName of an XML type.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="anonymous-type-qname"
+		   type="j2ee:string">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The anonymous-type-qname identifies the WSDL QName of an
+	      anonymous XML type.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+        </xsd:element>
+      </choice>
+      <xsd:element name="qname-scope"
+		   type="j2ee:qname-scopeType"/>
+      <xsd:element name="variable-mapping"
+		   type="j2ee:variable-mappingType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="method-param-parts-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The method-param-parts-mapping element defines the mapping between a
+	Java method parameters and a wsdl-message.
+
+	Used in: service-endpoint-method-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="param-position"
+		   type="j2ee:xsdNonNegativeIntegerType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The param-position element defines the position of a
+	    parameter within a Java method.  It must be an integer
+	    starting from 0.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="param-type"
+		   type="j2ee:java-typeType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The param-type element defines the fully qualified
+	    class name of a Java class, primitive, or array type.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-message-mapping"
+		   type="j2ee:wsdl-message-mappingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="package-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The package-mapping indicates the mapping between java-package-name
+	and XML namespace in the WSDL document.
+
+	Used in: java-wsdl-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="package-type"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The package-type indicates the Java package name. It must be a fully
+	    qualified package name, even though the XML schema type is
+	    fully-qualified-classType.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="namespaceURI"
+		   type="j2ee:xsdAnyURIType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The namespaceURI element indicates a URI.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="parameter-modeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The parameter-mode element defines the mode of the parameter.
+	It can have only three values, IN, OUT, INOUT.
+
+	Used in: java-xml-type-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="IN"/>
+	<xsd:enumeration value="OUT"/>
+	<xsd:enumeration value="INOUT"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The port-mapping defines the mapping of the WSDL port name attribute
+	to the Java name used to generate the Generated Service Interface
+	method get{java-name}.
+
+	Used in: service-interface-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="port-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-mapping defines the mapping of the WSDL port name
+	    attribute to the Java name used to generate the Generated
+	    Service Interface method get{java-name}.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="java-port-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The java-port-name element is the string to use as the port
+	    name in Java.  It is used in generating the Generated
+	    Service Interface method get{java-port-name}.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="qname-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The qname-scope elements scopes the reference of a QName to the WSDL
+	element type it applies to. The value of qname-scope may be
+	simpleType, complexType, or element.
+
+	Used in: java-xml-type-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="simpleType"/>
+	<xsd:enumeration value="complexType"/>
+	<xsd:enumeration value="element"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-endpoint-interface-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-endpoint-interface-mapping defines a tuple
+	to specify Service Endpoint Interfaces to
+	WSDL port types and WSDL bindings.
+
+	An interface may be mapped to a port-type and binding multiple
+	times. This happens rarely.
+
+	Used in: java-wsdl-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="service-endpoint-interface"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-endpoint-interface element defines the Java
+	    type for the endpoint interface. The name must be a fully
+	    qualified class name.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-port-type"
+		   type="j2ee:xsdQNameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-port-type element defines the wsdl port type
+	    by a QNAME which uniquely identifies  the port type.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-binding"
+		   type="j2ee:xsdQNameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-binding element defines the wsdl binding
+	    by a QNAME which uniquely identifies  the binding.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint-method-mapping"
+		   type="j2ee:service-endpoint-method-mappingType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-endpoint-method-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-endpoint-method-mapping element defines the mapping of
+	Java methods to operations (which are not uniquely qualified by
+	qnames).
+
+	The wsdl-operation should be interpreted with respect to the
+	portType and binding in which this definition is embedded within.
+	See the definitions for service-endpoint-interface-mapping and
+	service-interface-mapping to acquire the proper context.  The
+	wrapped-element indicator should only be specified when a WSDL
+	message wraps an element type.  The wsdl-return-value-mapping is
+	not specified for one-way operations.
+
+	Used in: service-endpoint-interface-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="java-method-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The java-method-name element defines the name of a Java method
+	    within an interface.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-operation"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-operation element defines an operation within a WSDL
+	    document.  It must be interpreted with respect to a port type.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wrapped-element"
+		   type="j2ee:emptyType"
+		   minOccurs="0"
+		   maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wrapped-element element is defined when a WSDL message
+	    with a single part is used to wrap an element type and the
+	    element's name matches the operation name.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="method-param-parts-mapping"
+		   type="j2ee:method-param-parts-mappingType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="wsdl-return-value-mapping"
+		   type="j2ee:wsdl-return-value-mappingType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-interface-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-interface-mapping element defines how a Java type for
+	the service interface maps to a WSDL service.
+
+	Used in: java-wsdl-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="service-interface"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-interface element defines the Java type for the service.
+	    For static services, it is javax.xml.rpc.Service interface. For
+	    generated service, it would be the generated interface name.
+
+	    The name must be a fully qualified class name.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-service-name"
+		   type="j2ee:xsdQNameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-service-name element defines the wsdl service name
+	    by a QNAME which uniquely identifies  the service.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-mapping"
+		   type="j2ee:port-mappingType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variable-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The variable-mapping element defines the correlation between a
+	Java class data member or JavaBeans property to an XML element
+	or attribute name of an XML root type. If the data-member
+	element is present, the Java variable name is a public data
+	member.  If data-member	is not present, the Java variable name
+	is a JavaBeans property.
+
+	Used in: java-xml-type-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="java-variable-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The java-variable-name defines the name of a public data member or
+	    JavaBeans property within a Java class.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="data-member"
+		   type="j2ee:emptyType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The data-member element is a boolean indicator that a Java
+	    variable is a public data member and not a JavaBeans property.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="xml-attribute-name"
+		     type="j2ee:string">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The xml-attribute-name element defines name attribute value
+	      of a WSDL attribute element within a root type.  The value
+	      of an xml-attribute-name element must match the value of
+	      the ref attribute if mapping an attribute reference.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="xml-element-name"
+		     type="j2ee:string">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The xml-element-name element defines name attribute value of
+	      a WSDL element within a root type.  The value of an
+	      xml-element-name element must match the value of the ref
+	      attribute if mapping an element reference.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+        </xsd:element>
+        <xsd:element name="xml-wildcard"
+		     type="j2ee:emptyType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The xml-wildcard element associates the variable-mapping with
+	      an xsd:any element within a root type.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="wsdl-message-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The wsdl-message-mapping element defines the mapping to a
+	specific message and its part. Together they define uniquely
+	the mapping for a specific parameter. Parts within a message
+	context are uniquely identified with their names.
+
+	The parameter-mode is defined by the mapping to indicate
+	whether the mapping will be IN, OUT, or INOUT..  The presence
+	of the soap-header element indicates that the parameter is
+	mapped to a soap header only.  When absent, it means that the
+	wsdl-message is mapped to a Java parameter. The soap headers
+	are interpreted in the order they are provided in the mapping.
+
+	Used in: method-param-parts-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="wsdl-message"
+		   type="j2ee:wsdl-messageType"/>
+      <xsd:element name="wsdl-message-part-name"
+		   type="j2ee:wsdl-message-part-nameType"/>
+      <xsd:element name="parameter-mode"
+		   type="j2ee:parameter-modeType"/>
+      <xsd:element name="soap-header"
+		   type="j2ee:emptyType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The soap-header element is a boolean element indicating that
+	    a parameter is mapped to a SOAP header.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="wsdl-message-part-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Interpretation of the wsdl-message-part-name element depends on
+	whether or not wrapped-element has been defined in the
+	service-endpoint-method-mapping.  If wrapped-element is not
+	specified, wsdl-message-part-name defines a WSDL message part. It
+	should always be interpreted with respect to a wsdl-message
+	element. If wrapped-element is specified, wsdl-message-part-name
+	refers to an element name of the element type.
+
+	Used in: wsdl-message-mapping, wsdl-return-value-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="wsdl-messageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The wsdl-message element defines a WSDL message by a QNAME.
+
+	Used in: wsdl-message-mapping, wsdl-return-value-mapping,
+	exception-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:xsdQNameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="wsdl-return-value-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The wsdl-return-value-mapping  element defines the mapping for the
+	method's return value. It defines the mapping to a specific message
+	and its part.  Together they define uniquely the mapping for a
+	specific parameter. Parts within a message context are uniquely
+	identified with their names. The wsdl-message-part-name is not
+	specified if there is no return value or OUT parameters.
+
+	Used in: service-endpoint-method-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-return-value"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The method-return-value  element defines a fully qualified
+	    class name or void type for the method's return value
+	    type.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-message"
+		   type="j2ee:wsdl-messageType"/>
+      <xsd:element name="wsdl-message-part-name"
+		   type="j2ee:wsdl-message-part-nameType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/j2ee_web_services_1_1.xsd b/wildfly/docs/schema/j2ee_web_services_1_1.xsd
new file mode 100644
index 0000000..b96529f
--- /dev/null
+++ b/wildfly/docs/schema/j2ee_web_services_1_1.xsd
@@ -0,0 +1,490 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+  targetNamespace="http://java.sun.com/xml/ns/j2ee"
+  xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified"
+  version="1.1">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)j2ee_web_services_1_1.xsds	1.11 02/11/03
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	The webservices element is the root element for the web services
+	deployment descriptor.  It specifies the set of web service
+	descriptions that are to be deployed into the J2EE Application
+	Server and the dependencies they have on container resources and
+	services.  The deployment descriptor must be named
+	"META-INF/webservices.xml" in the web services' jar file.
+
+	Used in: webservices.xml
+
+	All webservices deployment descriptors must indicate the
+	webservices schema by using the J2EE namespace:
+
+	http://java.sun.com/xml/ns/j2ee
+
+	and by indicating the version of the schema by using the version
+	element as shown below:
+
+	    <webservices xmlns="http://java.sun.com/xml/ns/j2ee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/j2ee
+		http://www.ibm.com/webservices/xsd/j2ee_web_services_1_1.xsd"
+	      version="1.1">
+	      ...
+	    </webservices>
+
+	The instance documents may indicate the published version of the
+	schema using the xsi:schemaLocation attribute for the J2EE
+	namespace with the following location:
+
+	http://www.ibm.com/webservices/xsd/j2ee_web_services_1_1.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all J2EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+
+
+  <!-- **************************************************** -->
+
+
+  <xsd:element name="webservices" type="j2ee:webservicesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The webservices element is the root element for the web services
+	deployment descriptor.  It specifies the set of web service
+	descriptions that are to be deployed into the J2EE Application Server
+	and the dependencies they have on container resources and services.
+
+	Used in: webservices.xml
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:key name="webservice-description-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+	  The webservice-description-name identifies the collection of
+	  port-components associated with a WSDL file and JAX-RPC mapping. The
+	  name must be unique within the deployment descriptor.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:webservice-description"/>
+      <xsd:field xpath="j2ee:webservice-description-name"/>
+    </xsd:key>
+  </xsd:element>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="port-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The port-component element associates a WSDL port with a web service
+	interface and implementation.  It defines the name of the port as a
+	component, optional description, optional display name, optional iconic
+	representations, WSDL port QName, Service Endpoint Interface, Service
+	Implementation Bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+        type="j2ee:descriptionType"
+        minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="display-name"
+        type="j2ee:display-nameType"
+        minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="icon"
+        type="j2ee:iconType"
+        minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="port-component-name"
+        type="j2ee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+
+	      The port-component-name element specifies a port component's
+	      name.  This name is assigned by the module producer to name
+	      the service implementation bean in the module's deployment
+	      descriptor. The name must be unique among the port component
+	      names defined in the same module.
+
+	      Used in: port-component
+
+	      Example:
+		      <port-component-name>EmployeeService
+		      </port-component-name>
+
+              ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-port"
+        type="j2ee:xsdQNameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    Defines the name space and local name part of the WSDL port QName.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint-interface"
+        type="j2ee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+
+	      The service-endpoint-interface element contains the
+	      fully-qualified name of the port component's Service Endpoint
+	      Interface.
+
+	      Used in: port-component
+
+	      Example:
+		      <remote>com.wombat.empl.EmployeeService</remote>
+
+              ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-impl-bean"
+        type="j2ee:service-impl-beanType"/>
+
+      <xsd:element name="handler"
+        type="j2ee:port-component_handlerType"
+        minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="port-component_handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Declares the handler for a port-component. Handlers can access the
+	init-param name/value pairs using the HandlerInfo interface.
+
+	Used in: port-component
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+        type="j2ee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    Defines the name of the handler. The name must be unique within the
+	    module.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+        type="j2ee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    Defines a fully qualified class name for the handler implementation.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+        type="j2ee:param-valueType"
+        minOccurs="0" maxOccurs="unbounded"/>
+
+      <xsd:element name="soap-header"
+        type="j2ee:xsdQNameType"
+        minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    Defines the QName of a SOAP header that will be processed by the
+	    handler.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-role"
+        type="j2ee:string"
+        minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    The soap-role element contains a SOAP actor definition that the
+	    Handler will play as a role.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="service-impl-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-impl-bean element defines the web service implementation.
+	A service implementation can be an EJB bean class or JAX-RPC web
+	component.  Existing EJB implementations are exposed as a web service
+	using an ejb-link.
+
+	Used in: port-component
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice>
+      <xsd:element name="ejb-link"
+        type="j2ee:ejb-linkType"/>
+      <xsd:element name="servlet-link"
+        type="j2ee:servlet-linkType"/>
+    </xsd:choice>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+
+	  The servlet-link element is used in the service-impl-bean element
+	  to specify that a Service Implementation Bean is defined as a
+	  JAX-RPC Service Endpoint.
+
+	  The value of the servlet-link element must be the servlet-name of
+	  a JAX-RPC Service Endpoint in the same WAR file.
+
+	  Used in: service-impl-bean
+
+	  Example:
+		  <servlet-link>StockQuoteService</servlet-link>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="webservice-descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The webservice-description element defines a WSDL document file
+	and the set of Port components associated with the WSDL ports
+	defined in the WSDL document.  There may be multiple
+	webservice-descriptions defined within a module.
+
+	All WSDL file ports must have a corresponding port-component element
+	defined.
+
+	Used in: webservices
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+        type="j2ee:descriptionType"
+        minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="display-name"
+        type="j2ee:display-nameType"
+        minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="icon"
+        type="j2ee:iconType"
+        minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="webservice-description-name"
+        type="j2ee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    The webservice-description-name identifies the collection of
+	    port-components associated with a WSDL file and JAX-RPC
+	    mapping. The name must be unique within the deployment descriptor.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+        type="j2ee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    The wsdl-file element contains the name of a WSDL file in the
+	    module.  The file name is a relative path within the module.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+        type="j2ee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+	    The jaxrpc-mapping-file element contains the name of a file that
+	    describes the JAX-RPC mapping between the Java interaces used by
+	    the application and the WSDL description in the wsdl-file.  The
+	    file name is a relative path within the module.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component"
+        type="j2ee:port-componentType"
+        minOccurs="1" maxOccurs="unbounded">
+        <xsd:key name="port-component_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+	      Defines the name of the handler. The name must be unique
+	      within the module.
+
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="j2ee:handler"/>
+          <xsd:field xpath="j2ee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="webservicesType">
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="webservice-description"
+        type="j2ee:webservice-descriptionType"
+        minOccurs="1" maxOccurs="unbounded">
+        <xsd:key name="port-component-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+
+		The port-component-name element specifies a port
+		component's name.  This name is assigned by the module
+		producer to name the service implementation bean in the
+		module's deployment descriptor. The name must be unique
+		among the port component names defined in the same module.
+
+		Used in: port-component
+
+		Example:
+			<port-component-name>EmployeeService
+			</port-component-name>
+
+          ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="j2ee:port-component"/>
+          <xsd:field xpath="j2ee:port-component-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+
+    <xsd:attribute name="version"
+      type="j2ee:dewey-versionType"
+      fixed="1.1"
+      use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+	  The required value for the version is 1.1.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/j2ee_web_services_client_1_1.xsd b/wildfly/docs/schema/j2ee_web_services_client_1_1.xsd
new file mode 100644
index 0000000..aa30d51
--- /dev/null
+++ b/wildfly/docs/schema/j2ee_web_services_client_1_1.xsd
@@ -0,0 +1,344 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="1.1">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)j2ee_web_services_client_1_1.xsds	1.10 02/11/03
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-component-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The port-component-ref element declares a client dependency
+	on the container for resolving a Service Endpoint Interface
+	to a WSDL port. It optionally associates the Service Endpoint
+	Interface with a particular port-component. This is only used
+	by the container for a Service.getPort(Class) method call.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="service-endpoint-interface"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-endpoint-interface element defines a fully qualified
+	    Java class that represents the Service Endpoint Interface of a
+	    WSDL port.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="port-component-link"
+		   type="j2ee:string"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-component-link element links a port-component-ref
+	    to a specific port-component required to be made available
+	    by a service reference.
+
+	    The value of a port-component-link must be the
+	    port-component-name of a port-component in the same module
+	    or another module in the same application unit. The syntax
+	    for specification follows the syntax defined for ejb-link
+	    in the EJB 2.0 specification.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:group name="service-refGroup">
+    <xsd:sequence>
+      <xsd:element name="service-ref"
+		   type="j2ee:service-refType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:key name="service-ref_handler-name-key">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      Defines the name of the handler. The name must be unique
+	      within the module.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="j2ee:handler"/>
+	  <xsd:field xpath="j2ee:handler-name"/>
+	</xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-ref element declares a reference to a Web
+	service. It contains optional description, display name and
+	icons, a declaration of the required Service interface,
+	an optional WSDL document location, an optional set
+	of JAX-RPC mappings, an optional QName for the service element,
+	an optional set of Service Endpoint Interfaces to be resolved
+	by the container to a WSDL port, and an optional set of handlers.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="service-ref-name"
+		   type="j2ee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-ref-name element declares logical name that the
+	    components in the module use to look up the Web service. It
+	    is recommended that all service reference names start with
+	    "service/".
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="service-interface"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-interface element declares the fully qualified class
+	    name of the JAX-RPC Service interface the client depends on.
+	    In most cases the value will be javax.xml.rpc.Service.  A JAX-RPC
+	    generated Service Interface class may also be specified.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="wsdl-file"
+		   type="j2ee:xsdAnyURIType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-file element contains the URI location of a WSDL
+	    file. The location is relative to the root of the module.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="jaxrpc-mapping-file"
+		   type="j2ee:pathType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The jaxrpc-mapping-file element contains the name of a file that
+	    describes the JAX-RPC mapping between the Java interaces used by
+	    the application and the WSDL description in the wsdl-file.  The
+	    file name is a relative path within the module file.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="service-qname"
+		   type="j2ee:xsdQNameType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-qname element declares the specific WSDL service
+	    element that is being refered to.  It is not specified if no
+	    wsdl-file is declared.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="port-component-ref"
+		   type="j2ee:port-component-refType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-component-ref element declares a client dependency
+	    on the container for resolving a Service Endpoint Interface
+	    to a WSDL port. It optionally associates the Service Endpoint
+	    Interface with a particular port-component. This is only used
+	    by the container for a Service.getPort(Class) method call.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="handler"
+		   type="j2ee:service-ref_handlerType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Declares the handler for a port-component. Handlers can
+	    access the init-param name/value pairs using the
+	    HandlerInfo interface. If port-name is not specified, the
+	    handler is assumed to be associated with all ports of the
+	    service.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-ref_handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Declares the handler for a port-component. Handlers can access the
+	init-param name/value pairs using the HandlerInfo interface. If
+	port-name is not specified, the handler is assumed to be associated
+	with all ports of the service.
+
+	Used in: service-ref
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the name of the handler. The name must be unique
+	    within the module.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a fully qualified class name for the handler
+	    implementation.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+		   type="j2ee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+
+      <xsd:element name="soap-header"
+		   type="j2ee:xsdQNameType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the QName of a SOAP header that will be processed
+	    by the handler.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="soap-role"
+		   type="j2ee:string"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The soap-role element contains a SOAP actor definition that
+	    the Handler will play as a role.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="port-name"
+		   type="j2ee:string"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-name element defines the WSDL port-name that a
+	    handler should be associated with.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jakartaee_10.xsd b/wildfly/docs/schema/jakartaee_10.xsd
new file mode 100644
index 0000000..ca99508
--- /dev/null
+++ b/wildfly/docs/schema/jakartaee_10.xsd
@@ -0,0 +1,3521 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="10">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following definitions that appear in the common
+      shareable schema(s) of Jakarta EE deployment descriptors should be
+      interpreted with respect to the context they are included:
+      
+      Deployment Component may indicate one of the following:
+      Jakarta EE application;
+      application client;
+      web application;
+      enterprise bean;
+      resource adapter; 
+      
+      Deployment File may indicate one of the following:
+      ear file;
+      war file;
+      jar file;
+      rar file;
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+              schemaLocation="https://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation="jakartaee_web_services_client_2_0.xsd"/>
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained description related
+        elements consistent across Jakarta EE deployment descriptors.
+        
+        All elements may occur multiple times with different languages,
+        to support localization of the content.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+                   type="jakartaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+                   type="jakartaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained JNDI environment
+        reference elements consistent across Jakarta EE deployment descriptors.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+                   type="jakartaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="jakartaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="jakartaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="jakartaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="jakartaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="jakartaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="jakartaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="jakartaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="jakartaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="jakartaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="jakartaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="jakartaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="jakartaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="jakartaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="context-service"
+                   type="jakartaee:context-serviceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="managed-executor"
+                   type="jakartaee:managed-executorType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="managed-scheduled-executor"
+                   type="jakartaee:managed-scheduled-executorType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="managed-thread-factory"
+                   type="jakartaee:managed-thread-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to most
+        JNDI resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:resourceBaseGroup"/>
+      <xsd:element name="lookup-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve a resource reference.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceBaseGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to all the
+        JNDI resource elements. It does not include the lookup-name
+        element, that is only applicable to some resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this resource should be
+            mapped to.  The name of this resource, as defined by the
+            resource's name element or defaulted, is a name that is
+            local to the application component using the resource.
+            (It's a name in the JNDI java:comp/env namespace.)  Many
+            application servers provide a way to map these local
+            names to names of resources known to the application
+            server.  This mapped name is often a global JNDI name,
+            but may be a name of any form.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="injection-target"
+                   type="jakartaee:injection-targetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="administered-objectType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of an administered object.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this administered object.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            administered object being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's interface type.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's class name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Property of the administered object property.  This may be a 
+            vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="connection-factory-resourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Connector Connection Factory resource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this resource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            resource being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified class name of the connection factory 
+            interface. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transaction-support"
+                   type="jakartaee:transaction-supportType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The level of transaction support the connection factory 
+            needs to support. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource property.  This may be a vendor-specific
+            property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="context-serviceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a ContextService.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this ContextService.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JNDI name of the ContextService instance being defined.
+            The JNDI name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cleared"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Types of context to clear whenever a thread runs a
+            contextual task or action. The thread's previous context
+            is restored afterward. Context types that are defined by
+            the Jakarta EE Concurrency specification include:
+            Application, Security, Transaction,
+            and Remaining, which means all available thread context
+            types that are not specified elsewhere. You can also specify
+            vendor-specific context types. Absent other configuration,
+            cleared context defaults to Transaction. You can specify
+            a single cleared element with no value to indicate an
+            empty list of context types to clear. If neither
+            propagated nor unchanged specify (or default to) Remaining,
+            then Remaining is automatically appended to the list of
+            cleared context types.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="propagated"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Types of context to capture from the requesting thread
+            and propagate to a thread that runs a contextual task
+            or action. The captured context is re-established
+            when threads run the contextual task or action,
+            with the respective thread's previous context being
+            restored afterward. Context types that are defined by
+            the Jakarta EE Concurrency specification include:
+            Application, Security,
+            and Remaining, which means all available thread context
+            types that are not specified elsewhere. You can also specify
+            vendor-specific context types. Absent other configuration,
+            propagated context defaults to Remaining. You can specify
+            a single propagated element with no value to indicate that
+            no context types should be propagated.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="unchanged"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Types of context that are left alone when a thread runs a
+            contextual task or action. Context types that are defined
+            by the Jakarta EE Concurrency specification include:
+            Application, Security, Transaction,
+            and Remaining, which means all available thread context
+            types that are not specified elsewhere. You can also specify
+            vendor-specific context types. Absent other configuration,
+            unchanged context defaults to empty. You can specify
+            a single unchanged element with no value to indicate that
+            no context types should be left unchanged.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a DataSource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this DataSource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            data source being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            DataSource, XADataSource or ConnectionPoolDataSource
+            implementation class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="server-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Database server name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-number"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Port number where a server is listening for requests.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="database-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of a database on a server.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="url"
+                   type="jakartaee:jdbc-urlType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            A JDBC URL. If the <code>url</code> property is specified
+            along with other standard <code>DataSource</code> properties
+            such as <code>serverName</code>, <code>databaseName</code>
+            and <code>portNumber</code>, the more specific properties will
+            take precedence and <code>url</code> will be ignored.
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JDBC DataSource property.  This may be a vendor-specific
+            property or a less commonly used DataSource property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="login-timeout"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Sets the maximum time in seconds that this data source
+            will wait while attempting to connect to a database.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="jakartaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="isolation-level"
+                   type="jakartaee:isolation-levelType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Isolation level for connections.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="initial-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Number of connections that should be created when a
+            connection pool is initialized.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-idle-time"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The number of seconds that a physical connection should
+            remain unused in the pool before the connection is
+            closed for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-statements"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The total number of statements that a connection pool
+            should keep open.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The description type is used by a description element to
+        provide text describing the parent element.  The elements
+        that use this type should include any information that the
+        Deployment Component's Deployment File file producer wants
+        to provide to the consumer of the Deployment Component's
+        Deployment File (i.e., to the Deployer). Typically, the
+        tools used by such a Deployment File consumer will display
+        the description when processing the parent element that
+        contains the description.
+        
+        The lang attribute defines the language that the
+        description is provided in. The default value is "en" (English). 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:xsdStringType">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a dewey decimal that is used
+        to describe versions of documents. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\.?[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The display-name type contains a short name that is intended
+        to be displayed by tools. It is used by display-name
+        elements.  The display name need not be unique.
+        
+        Example: 
+        
+        ...
+        <display-name xml:lang="en">
+        Employee Self Service
+        </display-name>
+        
+        The value of the xml:lang attribute is "en" (English) by default. 
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:string">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-linkType is used by ejb-link
+        elements in the ejb-ref or ejb-local-ref elements to specify
+        that an enterprise bean reference is linked to enterprise bean.
+        
+        The value of the ejb-link element must be the ejb-name of an
+        enterprise bean in the same ejb-jar file or in another ejb-jar
+        file in the same Jakarta EE application unit. 
+        
+        Alternatively, the name in the ejb-link element may be
+        composed of a path name specifying the ejb-jar containing the
+        referenced enterprise bean with the ejb-name of the target
+        bean appended and separated from the path name by "#".  The
+        path name is relative to the Deployment File containing
+        Deployment Component that is referencing the enterprise
+        bean.  This allows multiple enterprise beans with the same
+        ejb-name to be uniquely identified.
+        
+        Examples:
+        
+        <ejb-link>EmployeeRecord</ejb-link>
+        
+        <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-local-refType is used by ejb-local-ref elements for
+        the declaration of a reference to an enterprise bean's local
+        home or to the local business interface of a 3.0 bean.
+        The declaration consists of:
+        
+        - an optional description
+        - the enterprise bean's reference name used in the code of the 
+        Deployment Component that's referencing the enterprise bean.
+        - the optional expected type of the referenced enterprise bean
+        - the optional expected local interface of the referenced 
+        enterprise bean or the local business interface of the 
+        referenced enterprise bean.
+        - the optional expected local home interface of the referenced 
+        enterprise bean. Not applicable if this ejb-local-ref refers
+        to the local business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the 
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise  
+        bean into a component field or property.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="jakartaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="jakartaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="jakartaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="jakartaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="jakartaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-ref-name element contains the name of an enterprise bean reference. 
+        The enterprise bean reference is an entry in the Deployment Component's 
+        environment and is relative to the java:comp/env context.  The name must 
+        be unique within the Deployment Component.
+        
+        It is recommended that name is prefixed with "ejb/".
+        
+        Example:
+        
+        <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-refType is used by ejb-ref elements for the
+        declaration of a reference to an enterprise bean's home or
+        to the remote business interface of a 3.0 bean.  
+        The declaration consists of:
+        
+        - an optional description
+        - the enterprise bean's reference name used in the code of
+        the Deployment Component that's referencing the enterprise
+        bean. 
+        - the optional expected type of the referenced enterprise bean
+        - the optional remote interface of the referenced enterprise bean
+        or the remote business interface of the referenced enterprise 
+        bean
+        - the optional expected home interface of the referenced 
+        enterprise bean.  Not applicable if this ejb-ref
+        refers to the remote business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise
+        bean into a component field or property
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="jakartaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="jakartaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="jakartaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="jakartaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="jakartaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-ref-typeType contains the expected type of the
+        referenced enterprise bean.
+        
+        The ejb-ref-type designates a value
+        that must be one of the following:
+        
+        Entity
+        Session
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Entity"/>
+        <xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is used to designate an empty
+        element when used. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The env-entryType is used to declare an application's
+        environment entry. The declaration consists of an optional
+        description, the name of the environment entry, a type
+        (optional if the value is injected, otherwise required), and
+        an optional value.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        If a value is not specified and injection is requested,
+        no injection will occur and no entry of the specified name
+        will be created.  This allows an initial value to be
+        specified in the source code without being incorrectly
+        changed when no override has been specified.
+        
+        If a value is not specified and no injection is requested,
+        a value must be supplied during deployment. 
+        
+        This type is used by env-entry elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-name element contains the name of a
+            Deployment Component's environment entry.  The name
+            is a JNDI name relative to the java:comp/env
+            context.  The name must be unique within a 
+            Deployment Component. The uniqueness
+            constraints must be defined within the declared
+            context.
+            
+            Example:
+            
+            <env-entry-name>minAmount</env-entry-name>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-type"
+                   type="jakartaee:env-entry-type-valuesType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-type element contains the Java language
+            type of the environment entry.  If an injection target
+            is specified for the environment entry, the type may
+            be omitted, or must match the type of the injection
+            target.  If no injection target is specified, the type
+            is required.
+            
+            Example:
+            
+            <env-entry-type>java.lang.Integer</env-entry-type>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-value"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-value designates the value of a
+            Deployment Component's environment entry. The value
+            must be a String that is valid for the
+            constructor of the specified type that takes a
+            single String parameter, or for java.lang.Character,
+            a single character.
+            
+            Example:
+            
+            <env-entry-value>100.00</env-entry-value>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        This type contains the fully-qualified Java type of the
+        environment entry value that is expected by the
+        application's code.
+        
+        The following are the legal values of env-entry-type-valuesType:
+        
+        java.lang.Boolean
+        java.lang.Byte
+        java.lang.Character
+        java.lang.String
+        java.lang.Short
+        java.lang.Integer
+        java.lang.Long
+        java.lang.Float
+        java.lang.Double
+        		  java.lang.Class
+        		  any enumeration type (i.e. a subclass of java.lang.Enum)
+        
+        Examples:
+        
+        <env-entry-type>java.lang.Boolean</env-entry-type>
+        <env-entry-type>java.lang.Class</env-entry-type>
+        <env-entry-type>com.example.Color</env-entry-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate the name of a
+        Java class or interface.  The name is in the form of a
+        "binary name", as defined in the JLS.  This is the form
+        of name used in Class.forName().  Tools that need the
+        canonical name (the name used in source code) will need
+        to convert this binary name to the canonical name.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines four different values which can designate
+        boolean values. This includes values yes and no which are 
+        not designated by xsd:boolean
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="true"/>
+        <xsd:enumeration value="false"/>
+        <xsd:enumeration value="yes"/>
+        <xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The icon type contains small-icon and large-icon elements
+        that specify the file names for small and large GIF, JPEG,
+        or PNG icon images used to represent the parent element in a
+        GUI tool. 
+        
+        The xml:lang attribute defines the language that the
+        icon file names are provided in. Its value is "en" (English)
+        by default. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="small-icon"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The small-icon element contains the name of a file
+            containing a small (16 x 16) icon image. The file
+            name is a relative path within the Deployment
+            Component's Deployment File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <small-icon>employee-service-icon16x16.jpg</small-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The large-icon element contains the name of a file
+            containing a large
+            (32 x 32) icon image. The file name is a relative 
+            path within the Deployment Component's Deployment
+            File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <large-icon>employee-service-icon32x32.jpg</large-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="injection-targetType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        An injection target specifies a class and a name within
+        that class into which a resource should be injected.
+        
+        The injection target class specifies the fully qualified
+        class name that is the target of the injection.  The
+        Jakarta EE specifications describe which classes can be an
+        injection target.
+        
+        The injection target name specifies the target within
+        the specified class.  The target is first looked for as a
+        JavaBeans property name.  If not found, the target is
+        looked for as a field name.
+        
+        The specified resource will be injected into the target
+        during initialization of the class by either calling the
+        set method for the target property or by setting a value
+        into the named field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="injection-target-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="injection-target-name"
+                   type="jakartaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:simpleType name="isolation-levelType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        	The following transaction isolation levels are allowed
+        	(see documentation for the java.sql.Connection interface):
+        TRANSACTION_READ_UNCOMMITTED
+        TRANSACTION_READ_COMMITTED
+        TRANSACTION_REPEATABLE_READ
+        TRANSACTION_SERIALIZABLE
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="TRANSACTION_READ_UNCOMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_READ_COMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_REPEATABLE_READ"/>
+      <xsd:enumeration value="TRANSACTION_SERIALIZABLE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The java-identifierType defines a Java identifier.
+        The users of this type should further verify that 
+        the content does not contain Java reserved keywords.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a generic type that designates a Java primitive
+        type or a fully qualified name of a Java interface/type,
+        or an array of such types.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jdbc-urlType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The jdbc-urlType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 9.3 of the
+        JDBC Specification where the format is:
+        
+        jdbc:<subprotocol>:<subname>
+        
+        Example:
+        
+        <url>jdbc:mysql://localhost:3307/testdb</url>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="jdbc:(.*):(.*)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-connection-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Messaging Connection Factory.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Messaging Connection Factory.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            messaging connection factory being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging connection factory
+            interface.  Permitted values are jakarta.jms.ConnectionFactory,
+            jakarta.jms.QueueConnectionFactory, or 
+            jakarta.jms.TopicConnectionFactory.  If not specified,
+            jakarta.jms.ConnectionFactory will be used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging connection factory 
+            implementation class.  Ignored if a resource adapter  
+            is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-id"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Client id to use for connection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Messaging Connection Factory property.  This may be a vendor-specific
+            property or a less commonly used ConnectionFactory property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="jakartaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Messaging Destination.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Messaging Destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            messaging destination being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging destination interface.
+            Permitted values are jakarta.jms.Queue and jakarta.jms.Topic
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging destination implementation
+            class.  Ignored if a resource adapter is used unless the
+            resource adapter defines more than one destination implementation
+            class for the specified interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="destination-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of the queue or topic.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Messaging Destination property.  This may be a vendor-specific
+            property or a less commonly used Destination property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jndi-nameType type designates a JNDI name in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  A JNDI name must be unique within the
+        Deployment Component.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The homeType defines the fully-qualified name of
+        an enterprise bean's home interface. 
+        
+        Example:
+        
+        <home>com.aardvark.payroll.PayrollHome</home>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lifecycle-callbackType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The lifecycle-callback type specifies a method on a
+        class to be called when a lifecycle event occurs.
+        Note that each class may have only one lifecycle callback
+        method for any given event and that the method may not
+        be overloaded.
+        
+        If the lifefycle-callback-class element is missing then
+        the class defining the callback is assumed to be the
+        component class in scope at the place in the descriptor
+        in which the callback definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="lifecycle-callback-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="lifecycle-callback-method"
+                   type="jakartaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The listenerType indicates the deployment properties for a web
+        application listener bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The listener-class element declares a class in the
+            application must be registered as a web
+            application listener bean. The value is the fully
+            qualified classname of the listener class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localType defines the fully-qualified name of an
+        enterprise bean's local interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The local-homeType defines the fully-qualified
+        name of an enterprise bean's local home interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mail-sessionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Mail Session resource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Mail Session resource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            Mail Session resource being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Storage protocol.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider store protocol implementation class
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Transport protocol.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider transport protocol implementation class
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="host"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server host name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server user name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Email address to indicate the message sender.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server property.  This may be a vendor-specific
+            property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="managed-executorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a ManagedExecutorService.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this ManagedExecutorService.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JNDI name of the ManagedExecutorService instance being defined.
+            The JNDI name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-service-ref"
+                   type="jakartaee:jndi-nameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Refers to the name of a ContextServiceDefinition or
+            context-service deployment descriptor element,
+            which determines how context is applied to tasks and actions
+            that run on this executor.
+            The name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            In the absence of a configured value,
+            java:comp/DefaultContextService is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-async"
+                   type="jakartaee:xsdPositiveIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Upper bound on contextual tasks and actions that this executor
+            will simultaneously execute asynchronously. This constraint does
+            not apply to tasks and actions that the executor runs inline,
+            such as when a thread requests CompletableFuture.join and the
+            action runs inline if it has not yet started.
+            The default is unbounded, although still subject to
+            resource constraints of the system.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="hung-task-threshold"
+                   type="jakartaee:xsdPositiveIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The amount of time in milliseconds that a task or action
+            can execute before it is considered hung.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="managed-scheduled-executorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a ManagedScheduledExecutorService.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this ManagedScheduledExecutorService.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JNDI name of the ManagedScheduledExecutorService instance
+            being defined.
+            The JNDI name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-service-ref"
+                   type="jakartaee:jndi-nameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Refers to the name of a ContextServiceDefinition or
+            context-service deployment descriptor element,
+            which determines how context is applied to tasks and actions
+            that run on this executor.
+            The name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            In the absence of a configured value,
+            java:comp/DefaultContextService is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-async"
+                   type="jakartaee:xsdPositiveIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Upper bound on contextual tasks and actions that this executor
+            will simultaneously execute asynchronously. This constraint does
+            not apply to tasks and actions that the executor runs inline,
+            such as when a thread requests CompletableFuture.join and the
+            action runs inline if it has not yet started. This constraint also
+            does not apply to tasks that are scheduled via the schedule methods.
+            The default is unbounded, although still subject to
+            resource constraints of the system.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="hung-task-threshold"
+                   type="jakartaee:xsdPositiveIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The amount of time in milliseconds that a task or action
+            can execute before it is considered hung.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="managed-thread-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a ManagedThreadFactory.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this ManagedThreadFactory.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JNDI name of the ManagedThreadFactory instance being defined.
+            The JNDI name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="context-service-ref"
+                   type="jakartaee:jndi-nameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Refers to the name of a ContextServiceDefinition or
+            context-service deployment descriptor element,
+            which determines how context is applied to threads
+            from this thread factory.
+            The name must be in a valid Jakarta EE namespace,
+            such as java:comp, java:module, java:app, or java:global.
+            In the absence of a configured value,
+            java:comp/DefaultContextService is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="priority"
+                   type="jakartaee:priorityType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Priority for threads created by this thread factory.
+            The default is 5 (java.lang.Thread.NORM_PRIORITY).
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is a general type that can be used to declare
+        parameter/value lists.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-name element contains the name of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="param-value"
+                   type="jakartaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-value element contains the value of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate either a relative
+        path or an absolute path starting with a "/".
+        
+        In elements that specify a pathname to a file within the
+        same Deployment File, relative filenames (i.e., those not
+        starting with "/") are considered relative to the root of
+        the Deployment File's namespace.  Absolute filenames (i.e.,
+        those starting with "/") also specify names in the root of
+        the Deployment File's namespace.  In general, relative names
+        are preferred.  The exception is .war files where absolute
+        names are preferred for consistency with the Servlet API.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The persistence-context-ref element contains a declaration
+        of Deployment Component's reference to a persistence context
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence context reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - an optional specification as to whether
+        the persistence context type is Transaction or
+        Extended.  If not specified, Transaction is assumed.
+        - an optional specification as to whether
+        the persistence context synchronization with the current
+        transaction is Synchronized or Unsynchronized. If not
+        specified, Synchronized is assumed.
+        - an optional list of persistence properties
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        </persistence-context-ref>
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        <persistence-context-type>Extended</persistence-context-type>
+        </persistence-context-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-context-ref-name element specifies
+            the name of a persistence context reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Jakarta EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-context-type"
+                   type="jakartaee:persistence-context-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-context-synchronization"
+                   type="jakartaee:persistence-context-synchronizationType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify properties for the container or persistence
+            provider.  Vendor-specific properties may be included in
+            the set of properties.  Properties that are not recognized
+            by a vendor must be ignored.  Entries that make use of the 
+            namespace jakarta.persistence and its subnamespaces must not
+            be used for vendor-specific properties.  The namespace
+            jakarta.persistence is reserved for use by the specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-synchronizationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-synchronizationType specifies 
+        whether a container-managed persistence context is automatically
+        synchronized with the current transaction.
+        
+        The value of the persistence-context-synchronization element 
+        must be one of the following:
+        Synchronized
+        Unsynchronized
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Synchronized"/>
+        <xsd:enumeration value="Unsynchronized"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-typeType specifies the transactional
+        nature of a persistence context reference.  
+        
+        The value of the persistence-context-type element must be
+        one of the following:
+        Transaction
+        Extended
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Transaction"/>
+        <xsd:enumeration value="Extended"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="priorityType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies a thread priority value in the range of
+        1 (java.lang.Thread.MIN_PRIORITY) to 10 (java.lang.Thread.MAX_PRIORITY).
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdPositiveIntegerType">
+        <xsd:maxInclusive value="10"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies a name/value pair.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:xsdStringType">
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:xsdStringType">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The persistence-unit-ref element contains a declaration
+        of Deployment Component's reference to a persistence unit
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence unit reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        </persistence-unit-ref>
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        </persistence-unit-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-unit-ref-name element specifies
+            the name of a persistence unit reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Jakarta EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The remote element contains the fully-qualified name
+        of the enterprise bean's remote interface.
+        
+        Example:
+        
+        <remote>com.wombat.empl.EmployeeService</remote>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The resource-env-refType is used to define
+        resource-env-ref elements.  It contains a declaration of a
+        Deployment Component's reference to an administered object
+        associated with a resource in the Deployment Component's
+        environment.  It consists of an optional description, the
+        resource environment reference name, and an optional
+        indication of the resource environment reference type
+        expected by the Deployment Component code.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The resource environment type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-env-ref>
+        <resource-env-ref-name>jms/StockQueue
+        </resource-env-ref-name>
+        <resource-env-ref-type>jakarta.jms.Queue
+        </resource-env-ref-type>
+        </resource-env-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-name element specifies the name
+            of a resource environment reference; its value is
+            the environment entry name used in
+            the Deployment Component code.  The name is a JNDI 
+            name relative to the java:comp/env context and must 
+            be unique within a Deployment Component.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-env-ref-type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-type element specifies the type
+            of a resource environment reference.  It is the
+            fully qualified name of a Java language class or
+            interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The resource-refType contains a declaration of a
+        Deployment Component's reference to an external resource. It
+        consists of an optional description, the resource manager
+        connection factory reference name, an optional indication of
+        the resource manager connection factory type expected by the
+        Deployment Component code, an optional type of authentication
+        (Application or Container), and an optional specification of
+        the shareability of connections obtained from the resource
+        (Shareable or Unshareable).
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The connection factory type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-ref>
+        <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+        <res-type>javax.sql.DataSource</res-type>
+        <res-auth>Container</res-auth>
+        <res-sharing-scope>Shareable</res-sharing-scope>
+        </resource-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-ref-name element specifies the name of a
+            resource manager connection factory reference.
+            The name is a JNDI name relative to the
+            java:comp/env context.  
+            The name must be unique within a Deployment File. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-type element specifies the type of the data
+            source. The type is specified by the fully qualified
+            Java language class or interface
+            expected to be implemented by the data source.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-auth"
+                   type="jakartaee:res-authType"
+                   minOccurs="0"/>
+      <xsd:element name="res-sharing-scope"
+                   type="jakartaee:res-sharing-scopeType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-authType specifies whether the Deployment Component
+        code signs on programmatically to the resource manager, or
+        whether the Container will sign on to the resource manager
+        on behalf of the Deployment Component. In the latter case,
+        the Container uses information that is supplied by the
+        Deployer.
+        
+        The value must be one of the two following:
+        
+        Application
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Application"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-sharing-scope type specifies whether connections
+        obtained through the given resource manager connection
+        factory reference can be shared. The value, if specified,
+        must be one of the two following:
+        
+        Shareable
+        Unshareable
+        
+        The default value is Shareable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Shareable"/>
+        <xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The run-asType specifies the run-as identity to be
+        used for the execution of a component. It contains an 
+        optional description, and the name of a security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The role-nameType designates the name of a security role.
+        
+        The name must conform to the lexical rules for a token.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The security-roleType contains the definition of a security
+        role. The definition consists of an optional description of
+        the security role, and the security role name.
+        
+        Example:
+        
+        <security-role>
+        <description>
+        This role includes all employees who are authorized
+        to access the employee service application.
+        </description>
+        <role-name>employee</role-name>
+        </security-role>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-role-refType contains the declaration of a
+        security role reference in a component's or a
+        Deployment Component's code. The declaration consists of an
+        optional description, the security role name used in the
+        code, and an optional link to a security role. If the
+        security role is not specified, the Deployer must choose an
+        appropriate security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The value of the role-name element must be the String used
+            as the parameter to the 
+            EJBContext.isCallerInRole(String roleName) method or the
+            HttpServletRequest.isUserInRole(String role) method.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="role-link"
+                   type="jakartaee:role-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The role-link element is a reference to a defined
+            security role. The role-link element must contain
+            the name of one of the security roles defined in the
+            security-role elements.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:QName.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:boolean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:NMTOKEN.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:anyURI.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:integer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:positiveInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:nonNegativeInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:string.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a special string datatype that is defined by Jakarta EE as
+        a base type for defining collapsed strings. When schemas
+        require trailing/leading space elimination as well as
+        collapsing the existing whitespace, this base type may be
+        used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This simple type designates a boolean with only two
+        permissible values
+        
+        - true
+        - false
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdBooleanType">
+        <xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The url-patternType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 11.2 of the
+        Servlet API Specification. This pattern is assumed to be in
+        URL-decoded form and must not contain CR(#xD) or LF(#xA).
+        If it contains those characters, the container must inform
+        the developer with a descriptive error message.
+        The container must preserve all characters including whitespaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destinationType specifies a message
+        destination. The logical destination described by this
+        element is mapped to a physical destination by the Deployer.
+        
+        The message destination element contains: 
+        
+        - an optional description
+        - an optional display-name
+        - an optional icon
+        - a message destination name which must be unique
+        among message destination names within the same 
+        Deployment File. 
+        - an optional mapped name
+        - an optional lookup name
+        
+        Example: 
+        
+        <message-destination>
+        <message-destination-name>CorporateStocks
+        </message-destination-name>
+        </message-destination>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-name element specifies a
+            name for a message destination.  This name must be
+            unique among the names of message destinations
+            within the Deployment File.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this message destination
+            should be mapped to.  Each message-destination-ref
+            element that references this message destination will
+            define a name in the namespace of the referencing
+            component or in one of the other predefined namespaces. 
+            Many application servers provide a way to map these
+            local names to names of resources known to the
+            application server.  This mapped name is often a global
+            JNDI name, but may be a name of any form.  Each of the
+            local names should be mapped to this same global name.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lookup-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve the message destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destination-ref element contains a declaration
+        of Deployment Component's reference to a message destination
+        associated with a resource in Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the message destination reference name
+        - an optional message destination type
+        - an optional specification as to whether
+        the destination is used for 
+        consuming or producing messages, or both.
+        if not specified, "both" is assumed.
+        - an optional link to the message destination
+        - optional injection targets
+        
+        The message destination type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Examples:
+        
+        <message-destination-ref>
+        <message-destination-ref-name>jms/StockQueue
+        </message-destination-ref-name>
+        <message-destination-type>jakarta.jms.Queue
+        </message-destination-type>
+        <message-destination-usage>Consumes
+        </message-destination-usage>
+        <message-destination-link>CorporateStocks
+        </message-destination-link>
+        </message-destination-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-ref-name element specifies
+            the name of a message destination reference; its
+            value is the environment entry name used in
+            Deployment Component code.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+                   type="jakartaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-usage"
+                   type="jakartaee:message-destination-usageType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="jakartaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-usageType specifies the use of the
+        message destination indicated by the reference.  The value
+        indicates whether messages are consumed from the message
+        destination, produced for the destination, or both.  The
+        Assembler makes use of this information in linking producers
+        of a destination with its consumers.
+        
+        The value of the message-destination-usage element must be
+        one of the following:
+        Consumes
+        Produces
+        ConsumesProduces
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Consumes"/>
+        <xsd:enumeration value="Produces"/>
+        <xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destination-typeType specifies the type of
+        the destination. The type is specified by the Java interface
+        expected to be implemented by the destination.
+        
+        Example: 
+        
+        <message-destination-type>jakarta.jms.Queue
+        </message-destination-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-linkType is used to link a message
+        destination reference or message-driven bean to a message
+        destination.
+        
+        The Assembler sets the value to reflect the flow of messages
+        between producers and consumers in the application.
+        
+        The value must be the message-destination-name of a message
+        destination in the same Deployment File or in another
+        Deployment File in the same Jakarta EE application unit.
+        
+        Alternatively, the value may be composed of a path name
+        specifying a Deployment File containing the referenced
+        message destination with the message-destination-name of the
+        destination appended and separated from the path name by
+        "#". The path name is relative to the Deployment File
+        containing Deployment Component that is referencing the
+        message destination.  This allows multiple message
+        destinations with the same name to be uniquely identified.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-supportType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-supportType specifies the level of
+        transaction support provided by the resource adapter. It is
+        used by transaction-support elements.
+        
+        The value must be one of the following:
+        
+        NoTransaction
+        LocalTransaction
+        XATransaction
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NoTransaction"/>
+        <xsd:enumeration value="LocalTransaction"/>
+        <xsd:enumeration value="XATransaction"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jakartaee_9.xsd b/wildfly/docs/schema/jakartaee_9.xsd
new file mode 100644
index 0000000..16136f9
--- /dev/null
+++ b/wildfly/docs/schema/jakartaee_9.xsd
@@ -0,0 +1,3073 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following definitions that appear in the common
+      shareable schema(s) of Jakarta EE deployment descriptors should be
+      interpreted with respect to the context they are included:
+      
+      Deployment Component may indicate one of the following:
+      Jakarta EE application;
+      application client;
+      web application;
+      enterprise bean;
+      resource adapter; 
+      
+      Deployment File may indicate one of the following:
+      ear file;
+      war file;
+      jar file;
+      rar file;
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+              schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation="jakartaee_web_services_client_2_0.xsd"/>
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained description related
+        elements consistent across Jakarta EE deployment descriptors.
+        
+        All elements may occur multiple times with different languages,
+        to support localization of the content.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+                   type="jakartaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+                   type="jakartaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained JNDI environment
+        reference elements consistent across Jakarta EE deployment descriptors.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+                   type="jakartaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="jakartaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="jakartaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="jakartaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="jakartaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="jakartaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="jakartaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="jakartaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="jakartaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="jakartaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="jakartaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="jakartaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="jakartaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="jakartaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="jakartaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="jakartaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to most
+        JNDI resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:resourceBaseGroup"/>
+      <xsd:element name="lookup-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve a resource reference.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceBaseGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to all the
+        JNDI resource elements. It does not include the lookup-name
+        element, that is only applicable to some resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this resource should be
+            mapped to.  The name of this resource, as defined by the
+            resource's name element or defaulted, is a name that is
+            local to the application component using the resource.
+            (It's a name in the JNDI java:comp/env namespace.)  Many
+            application servers provide a way to map these local
+            names to names of resources known to the application
+            server.  This mapped name is often a global JNDI name,
+            but may be a name of any form.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="injection-target"
+                   type="jakartaee:injection-targetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="administered-objectType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of an administered object.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this administered object.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            administered object being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's interface type.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's class name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Property of the administered object property.  This may be a 
+            vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="connection-factory-resourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Connector Connection Factory resource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this resource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            resource being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified class name of the connection factory 
+            interface. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transaction-support"
+                   type="jakartaee:transaction-supportType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The level of transaction support the connection factory 
+            needs to support. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource property.  This may be a vendor-specific
+            property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a DataSource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this DataSource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            data source being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            DataSource, XADataSource or ConnectionPoolDataSource
+            implementation class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="server-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Database server name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-number"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Port number where a server is listening for requests.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="database-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of a database on a server.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="url"
+                   type="jakartaee:jdbc-urlType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            A JDBC URL. If the <code>url</code> property is specified
+            along with other standard <code>DataSource</code> properties
+            such as <code>serverName</code>, <code>databaseName</code>
+            and <code>portNumber</code>, the more specific properties will
+            take precedence and <code>url</code> will be ignored.
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JDBC DataSource property.  This may be a vendor-specific
+            property or a less commonly used DataSource property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="login-timeout"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Sets the maximum time in seconds that this data source
+            will wait while attempting to connect to a database.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="jakartaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="isolation-level"
+                   type="jakartaee:isolation-levelType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Isolation level for connections.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="initial-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Number of connections that should be created when a
+            connection pool is initialized.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-idle-time"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The number of seconds that a physical connection should
+            remain unused in the pool before the connection is
+            closed for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-statements"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The total number of statements that a connection pool
+            should keep open.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The description type is used by a description element to
+        provide text describing the parent element.  The elements
+        that use this type should include any information that the
+        Deployment Component's Deployment File file producer wants
+        to provide to the consumer of the Deployment Component's
+        Deployment File (i.e., to the Deployer). Typically, the
+        tools used by such a Deployment File consumer will display
+        the description when processing the parent element that
+        contains the description.
+        
+        The lang attribute defines the language that the
+        description is provided in. The default value is "en" (English). 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:xsdStringType">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a dewey decimal that is used
+        to describe versions of documents. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\.?[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The display-name type contains a short name that is intended
+        to be displayed by tools. It is used by display-name
+        elements.  The display name need not be unique.
+        
+        Example: 
+        
+        ...
+        <display-name xml:lang="en">
+        Employee Self Service
+        </display-name>
+        
+        The value of the xml:lang attribute is "en" (English) by default. 
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:string">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-linkType is used by ejb-link
+        elements in the ejb-ref or ejb-local-ref elements to specify
+        that an enterprise bean reference is linked to enterprise bean.
+        
+        The value of the ejb-link element must be the ejb-name of an
+        enterprise bean in the same ejb-jar file or in another ejb-jar
+        file in the same Jakarta EE application unit. 
+        
+        Alternatively, the name in the ejb-link element may be
+        composed of a path name specifying the ejb-jar containing the
+        referenced enterprise bean with the ejb-name of the target
+        bean appended and separated from the path name by "#".  The
+        path name is relative to the Deployment File containing
+        Deployment Component that is referencing the enterprise
+        bean.  This allows multiple enterprise beans with the same
+        ejb-name to be uniquely identified.
+        
+        Examples:
+        
+        <ejb-link>EmployeeRecord</ejb-link>
+        
+        <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-local-refType is used by ejb-local-ref elements for
+        the declaration of a reference to an enterprise bean's local
+        home or to the local business interface of a 3.0 bean.
+        The declaration consists of:
+        
+        - an optional description
+        - the enterprise bean's reference name used in the code of the 
+        Deployment Component that's referencing the enterprise bean.
+        - the optional expected type of the referenced enterprise bean
+        - the optional expected local interface of the referenced 
+        enterprise bean or the local business interface of the 
+        referenced enterprise bean.
+        - the optional expected local home interface of the referenced 
+        enterprise bean. Not applicable if this ejb-local-ref refers
+        to the local business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the 
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise  
+        bean into a component field or property.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="jakartaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="jakartaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="jakartaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="jakartaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="jakartaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-ref-name element contains the name of an enterprise bean reference. 
+        The enterprise bean reference is an entry in the Deployment Component's 
+        environment and is relative to the java:comp/env context.  The name must 
+        be unique within the Deployment Component.
+        
+        It is recommended that name is prefixed with "ejb/".
+        
+        Example:
+        
+        <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-refType is used by ejb-ref elements for the
+        declaration of a reference to an enterprise bean's home or
+        to the remote business interface of a 3.0 bean.  
+        The declaration consists of:
+        
+        - an optional description
+        - the enterprise bean's reference name used in the code of
+        the Deployment Component that's referencing the enterprise
+        bean. 
+        - the optional expected type of the referenced enterprise bean
+        - the optional remote interface of the referenced enterprise bean
+        or the remote business interface of the referenced enterprise 
+        bean
+        - the optional expected home interface of the referenced 
+        enterprise bean.  Not applicable if this ejb-ref
+        refers to the remote business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise
+        bean into a component field or property
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="jakartaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="jakartaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="jakartaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="jakartaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="jakartaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-ref-typeType contains the expected type of the
+        referenced enterprise bean.
+        
+        The ejb-ref-type designates a value
+        that must be one of the following:
+        
+        Entity
+        Session
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Entity"/>
+        <xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is used to designate an empty
+        element when used. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The env-entryType is used to declare an application's
+        environment entry. The declaration consists of an optional
+        description, the name of the environment entry, a type
+        (optional if the value is injected, otherwise required), and
+        an optional value.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        If a value is not specified and injection is requested,
+        no injection will occur and no entry of the specified name
+        will be created.  This allows an initial value to be
+        specified in the source code without being incorrectly
+        changed when no override has been specified.
+        
+        If a value is not specified and no injection is requested,
+        a value must be supplied during deployment. 
+        
+        This type is used by env-entry elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-name element contains the name of a
+            Deployment Component's environment entry.  The name
+            is a JNDI name relative to the java:comp/env
+            context.  The name must be unique within a 
+            Deployment Component. The uniqueness
+            constraints must be defined within the declared
+            context.
+            
+            Example:
+            
+            <env-entry-name>minAmount</env-entry-name>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-type"
+                   type="jakartaee:env-entry-type-valuesType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-type element contains the Java language
+            type of the environment entry.  If an injection target
+            is specified for the environment entry, the type may
+            be omitted, or must match the type of the injection
+            target.  If no injection target is specified, the type
+            is required.
+            
+            Example:
+            
+            <env-entry-type>java.lang.Integer</env-entry-type>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-value"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-value designates the value of a
+            Deployment Component's environment entry. The value
+            must be a String that is valid for the
+            constructor of the specified type that takes a
+            single String parameter, or for java.lang.Character,
+            a single character.
+            
+            Example:
+            
+            <env-entry-value>100.00</env-entry-value>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        This type contains the fully-qualified Java type of the
+        environment entry value that is expected by the
+        application's code.
+        
+        The following are the legal values of env-entry-type-valuesType:
+        
+        java.lang.Boolean
+        java.lang.Byte
+        java.lang.Character
+        java.lang.String
+        java.lang.Short
+        java.lang.Integer
+        java.lang.Long
+        java.lang.Float
+        java.lang.Double
+        		  java.lang.Class
+        		  any enumeration type (i.e. a subclass of java.lang.Enum)
+        
+        Examples:
+        
+        <env-entry-type>java.lang.Boolean</env-entry-type>
+        <env-entry-type>java.lang.Class</env-entry-type>
+        <env-entry-type>com.example.Color</env-entry-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate the name of a
+        Java class or interface.  The name is in the form of a
+        "binary name", as defined in the JLS.  This is the form
+        of name used in Class.forName().  Tools that need the
+        canonical name (the name used in source code) will need
+        to convert this binary name to the canonical name.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines four different values which can designate
+        boolean values. This includes values yes and no which are 
+        not designated by xsd:boolean
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="true"/>
+        <xsd:enumeration value="false"/>
+        <xsd:enumeration value="yes"/>
+        <xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The icon type contains small-icon and large-icon elements
+        that specify the file names for small and large GIF, JPEG,
+        or PNG icon images used to represent the parent element in a
+        GUI tool. 
+        
+        The xml:lang attribute defines the language that the
+        icon file names are provided in. Its value is "en" (English)
+        by default. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="small-icon"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The small-icon element contains the name of a file
+            containing a small (16 x 16) icon image. The file
+            name is a relative path within the Deployment
+            Component's Deployment File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <small-icon>employee-service-icon16x16.jpg</small-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon"
+                   type="jakartaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The large-icon element contains the name of a file
+            containing a large
+            (32 x 32) icon image. The file name is a relative 
+            path within the Deployment Component's Deployment
+            File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <large-icon>employee-service-icon32x32.jpg</large-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="injection-targetType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        An injection target specifies a class and a name within
+        that class into which a resource should be injected.
+        
+        The injection target class specifies the fully qualified
+        class name that is the target of the injection.  The
+        Jakarta EE specifications describe which classes can be an
+        injection target.
+        
+        The injection target name specifies the target within
+        the specified class.  The target is first looked for as a
+        JavaBeans property name.  If not found, the target is
+        looked for as a field name.
+        
+        The specified resource will be injected into the target
+        during initialization of the class by either calling the
+        set method for the target property or by setting a value
+        into the named field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="injection-target-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="injection-target-name"
+                   type="jakartaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:simpleType name="isolation-levelType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        	The following transaction isolation levels are allowed
+        	(see documentation for the java.sql.Connection interface):
+        TRANSACTION_READ_UNCOMMITTED
+        TRANSACTION_READ_COMMITTED
+        TRANSACTION_REPEATABLE_READ
+        TRANSACTION_SERIALIZABLE
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="TRANSACTION_READ_UNCOMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_READ_COMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_REPEATABLE_READ"/>
+      <xsd:enumeration value="TRANSACTION_SERIALIZABLE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The java-identifierType defines a Java identifier.
+        The users of this type should further verify that 
+        the content does not contain Java reserved keywords.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a generic type that designates a Java primitive
+        type or a fully qualified name of a Java interface/type,
+        or an array of such types.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jdbc-urlType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The jdbc-urlType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 9.3 of the
+        JDBC Specification where the format is:
+        
+        jdbc:<subprotocol>:<subname>
+        
+        Example:
+        
+        <url>jdbc:mysql://localhost:3307/testdb</url>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="jdbc:(.*):(.*)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-connection-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Messaging Connection Factory.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Messaging Connection Factory.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            messaging connection factory being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging connection factory
+            interface.  Permitted values are jakarta.jms.ConnectionFactory,
+            jakarta.jms.QueueConnectionFactory, or 
+            jakarta.jms.TopicConnectionFactory.  If not specified,
+            jakarta.jms.ConnectionFactory will be used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging connection factory 
+            implementation class.  Ignored if a resource adapter  
+            is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-id"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Client id to use for connection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Messaging Connection Factory property.  This may be a vendor-specific
+            property or a less commonly used ConnectionFactory property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="jakartaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Messaging Destination.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Messaging Destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            messaging destination being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging destination interface.
+            Permitted values are jakarta.jms.Queue and jakarta.jms.Topic
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the messaging destination implementation
+            class.  Ignored if a resource adapter is used unless the
+            resource adapter defines more than one destination implementation
+            class for the specified interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="destination-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of the queue or topic.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Messaging Destination property.  This may be a vendor-specific
+            property or a less commonly used Destination property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jndi-nameType type designates a JNDI name in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  A JNDI name must be unique within the
+        Deployment Component.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The homeType defines the fully-qualified name of
+        an enterprise bean's home interface. 
+        
+        Example:
+        
+        <home>com.aardvark.payroll.PayrollHome</home>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lifecycle-callbackType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The lifecycle-callback type specifies a method on a
+        class to be called when a lifecycle event occurs.
+        Note that each class may have only one lifecycle callback
+        method for any given event and that the method may not
+        be overloaded.
+        
+        If the lifefycle-callback-class element is missing then
+        the class defining the callback is assumed to be the
+        component class in scope at the place in the descriptor
+        in which the callback definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="lifecycle-callback-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="lifecycle-callback-method"
+                   type="jakartaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The listenerType indicates the deployment properties for a web
+        application listener bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The listener-class element declares a class in the
+            application must be registered as a web
+            application listener bean. The value is the fully
+            qualified classname of the listener class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localType defines the fully-qualified name of an
+        enterprise bean's local interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The local-homeType defines the fully-qualified
+        name of an enterprise bean's local home interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mail-sessionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Mail Session resource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Mail Session resource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            Mail Session resource being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Storage protocol.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider store protocol implementation class
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Transport protocol.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider transport protocol implementation class
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="host"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server host name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server user name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Email address to indicate the message sender.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server property.  This may be a vendor-specific
+            property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is a general type that can be used to declare
+        parameter/value lists.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-name element contains the name of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="param-value"
+                   type="jakartaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-value element contains the value of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate either a relative
+        path or an absolute path starting with a "/".
+        
+        In elements that specify a pathname to a file within the
+        same Deployment File, relative filenames (i.e., those not
+        starting with "/") are considered relative to the root of
+        the Deployment File's namespace.  Absolute filenames (i.e.,
+        those starting with "/") also specify names in the root of
+        the Deployment File's namespace.  In general, relative names
+        are preferred.  The exception is .war files where absolute
+        names are preferred for consistency with the Servlet API.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The persistence-context-ref element contains a declaration
+        of Deployment Component's reference to a persistence context
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence context reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - an optional specification as to whether
+        the persistence context type is Transaction or
+        Extended.  If not specified, Transaction is assumed.
+        - an optional specification as to whether
+        the persistence context synchronization with the current
+        transaction is Synchronized or Unsynchronized. If not
+        specified, Synchronized is assumed.
+        - an optional list of persistence properties
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        </persistence-context-ref>
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        <persistence-context-type>Extended</persistence-context-type>
+        </persistence-context-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-context-ref-name element specifies
+            the name of a persistence context reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Jakarta EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-context-type"
+                   type="jakartaee:persistence-context-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-context-synchronization"
+                   type="jakartaee:persistence-context-synchronizationType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-property"
+                   type="jakartaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify properties for the container or persistence
+            provider.  Vendor-specific properties may be included in
+            the set of properties.  Properties that are not recognized
+            by a vendor must be ignored.  Entries that make use of the 
+            namespace jakarta.persistence and its subnamespaces must not
+            be used for vendor-specific properties.  The namespace
+            jakarta.persistence is reserved for use by the specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-synchronizationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-synchronizationType specifies 
+        whether a container-managed persistence context is automatically
+        synchronized with the current transaction.
+        
+        The value of the persistence-context-synchronization element 
+        must be one of the following:
+        Synchronized
+        Unsynchronized
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Synchronized"/>
+        <xsd:enumeration value="Unsynchronized"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-typeType specifies the transactional
+        nature of a persistence context reference.  
+        
+        The value of the persistence-context-type element must be
+        one of the following:
+        Transaction
+        Extended
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Transaction"/>
+        <xsd:enumeration value="Extended"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies a name/value pair.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:xsdStringType">
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:xsdStringType">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The persistence-unit-ref element contains a declaration
+        of Deployment Component's reference to a persistence unit
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence unit reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        </persistence-unit-ref>
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        </persistence-unit-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-unit-ref-name element specifies
+            the name of a persistence unit reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Jakarta EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The remote element contains the fully-qualified name
+        of the enterprise bean's remote interface.
+        
+        Example:
+        
+        <remote>com.wombat.empl.EmployeeService</remote>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The resource-env-refType is used to define
+        resource-env-ref elements.  It contains a declaration of a
+        Deployment Component's reference to an administered object
+        associated with a resource in the Deployment Component's
+        environment.  It consists of an optional description, the
+        resource environment reference name, and an optional
+        indication of the resource environment reference type
+        expected by the Deployment Component code.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The resource environment type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-env-ref>
+        <resource-env-ref-name>jms/StockQueue
+        </resource-env-ref-name>
+        <resource-env-ref-type>jakarta.jms.Queue
+        </resource-env-ref-type>
+        </resource-env-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-name element specifies the name
+            of a resource environment reference; its value is
+            the environment entry name used in
+            the Deployment Component code.  The name is a JNDI 
+            name relative to the java:comp/env context and must 
+            be unique within a Deployment Component.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-env-ref-type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-type element specifies the type
+            of a resource environment reference.  It is the
+            fully qualified name of a Java language class or
+            interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The resource-refType contains a declaration of a
+        Deployment Component's reference to an external resource. It
+        consists of an optional description, the resource manager
+        connection factory reference name, an optional indication of
+        the resource manager connection factory type expected by the
+        Deployment Component code, an optional type of authentication
+        (Application or Container), and an optional specification of
+        the shareability of connections obtained from the resource
+        (Shareable or Unshareable).
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The connection factory type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-ref>
+        <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+        <res-type>javax.sql.DataSource</res-type>
+        <res-auth>Container</res-auth>
+        <res-sharing-scope>Shareable</res-sharing-scope>
+        </resource-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-ref-name element specifies the name of a
+            resource manager connection factory reference.
+            The name is a JNDI name relative to the
+            java:comp/env context.  
+            The name must be unique within a Deployment File. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-type element specifies the type of the data
+            source. The type is specified by the fully qualified
+            Java language class or interface
+            expected to be implemented by the data source.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-auth"
+                   type="jakartaee:res-authType"
+                   minOccurs="0"/>
+      <xsd:element name="res-sharing-scope"
+                   type="jakartaee:res-sharing-scopeType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-authType specifies whether the Deployment Component
+        code signs on programmatically to the resource manager, or
+        whether the Container will sign on to the resource manager
+        on behalf of the Deployment Component. In the latter case,
+        the Container uses information that is supplied by the
+        Deployer.
+        
+        The value must be one of the two following:
+        
+        Application
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Application"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-sharing-scope type specifies whether connections
+        obtained through the given resource manager connection
+        factory reference can be shared. The value, if specified,
+        must be one of the two following:
+        
+        Shareable
+        Unshareable
+        
+        The default value is Shareable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Shareable"/>
+        <xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The run-asType specifies the run-as identity to be
+        used for the execution of a component. It contains an 
+        optional description, and the name of a security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The role-nameType designates the name of a security role.
+        
+        The name must conform to the lexical rules for a token.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The security-roleType contains the definition of a security
+        role. The definition consists of an optional description of
+        the security role, and the security role name.
+        
+        Example:
+        
+        <security-role>
+        <description>
+        This role includes all employees who are authorized
+        to access the employee service application.
+        </description>
+        <role-name>employee</role-name>
+        </security-role>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-role-refType contains the declaration of a
+        security role reference in a component's or a
+        Deployment Component's code. The declaration consists of an
+        optional description, the security role name used in the
+        code, and an optional link to a security role. If the
+        security role is not specified, the Deployer must choose an
+        appropriate security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The value of the role-name element must be the String used
+            as the parameter to the 
+            EJBContext.isCallerInRole(String roleName) method or the
+            HttpServletRequest.isUserInRole(String role) method.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="role-link"
+                   type="jakartaee:role-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The role-link element is a reference to a defined
+            security role. The role-link element must contain
+            the name of one of the security roles defined in the
+            security-role elements.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:QName.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:boolean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:NMTOKEN.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:anyURI.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:integer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:positiveInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:nonNegativeInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:string.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a special string datatype that is defined by Jakarta EE as
+        a base type for defining collapsed strings. When schemas
+        require trailing/leading space elimination as well as
+        collapsing the existing whitespace, this base type may be
+        used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This simple type designates a boolean with only two
+        permissible values
+        
+        - true
+        - false
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdBooleanType">
+        <xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The url-patternType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 11.2 of the
+        Servlet API Specification. This pattern is assumed to be in
+        URL-decoded form and must not contain CR(#xD) or LF(#xA).
+        If it contains those characters, the container must inform
+        the developer with a descriptive error message.
+        The container must preserve all characters including whitespaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destinationType specifies a message
+        destination. The logical destination described by this
+        element is mapped to a physical destination by the Deployer.
+        
+        The message destination element contains: 
+        
+        - an optional description
+        - an optional display-name
+        - an optional icon
+        - a message destination name which must be unique
+        among message destination names within the same 
+        Deployment File. 
+        - an optional mapped name
+        - an optional lookup name
+        
+        Example: 
+        
+        <message-destination>
+        <message-destination-name>CorporateStocks
+        </message-destination-name>
+        </message-destination>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-name element specifies a
+            name for a message destination.  This name must be
+            unique among the names of message destinations
+            within the Deployment File.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mapped-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this message destination
+            should be mapped to.  Each message-destination-ref
+            element that references this message destination will
+            define a name in the namespace of the referencing
+            component or in one of the other predefined namespaces. 
+            Many application servers provide a way to map these
+            local names to names of resources known to the
+            application server.  This mapped name is often a global
+            JNDI name, but may be a name of any form.  Each of the
+            local names should be mapped to this same global name.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lookup-name"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve the message destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destination-ref element contains a declaration
+        of Deployment Component's reference to a message destination
+        associated with a resource in Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the message destination reference name
+        - an optional message destination type
+        - an optional specification as to whether
+        the destination is used for 
+        consuming or producing messages, or both.
+        if not specified, "both" is assumed.
+        - an optional link to the message destination
+        - optional injection targets
+        
+        The message destination type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Examples:
+        
+        <message-destination-ref>
+        <message-destination-ref-name>jms/StockQueue
+        </message-destination-ref-name>
+        <message-destination-type>jakarta.jms.Queue
+        </message-destination-type>
+        <message-destination-usage>Consumes
+        </message-destination-usage>
+        <message-destination-link>CorporateStocks
+        </message-destination-link>
+        </message-destination-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-ref-name element specifies
+            the name of a message destination reference; its
+            value is the environment entry name used in
+            Deployment Component code.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+                   type="jakartaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-usage"
+                   type="jakartaee:message-destination-usageType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="jakartaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-usageType specifies the use of the
+        message destination indicated by the reference.  The value
+        indicates whether messages are consumed from the message
+        destination, produced for the destination, or both.  The
+        Assembler makes use of this information in linking producers
+        of a destination with its consumers.
+        
+        The value of the message-destination-usage element must be
+        one of the following:
+        Consumes
+        Produces
+        ConsumesProduces
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="Consumes"/>
+        <xsd:enumeration value="Produces"/>
+        <xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destination-typeType specifies the type of
+        the destination. The type is specified by the Java interface
+        expected to be implemented by the destination.
+        
+        Example: 
+        
+        <message-destination-type>jakarta.jms.Queue
+        </message-destination-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-linkType is used to link a message
+        destination reference or message-driven bean to a message
+        destination.
+        
+        The Assembler sets the value to reflect the flow of messages
+        between producers and consumers in the application.
+        
+        The value must be the message-destination-name of a message
+        destination in the same Deployment File or in another
+        Deployment File in the same Jakarta EE application unit.
+        
+        Alternatively, the value may be composed of a path name
+        specifying a Deployment File containing the referenced
+        message destination with the message-destination-name of the
+        destination appended and separated from the path name by
+        "#". The path name is relative to the Deployment File
+        containing Deployment Component that is referencing the
+        message destination.  This allows multiple message
+        destinations with the same name to be uniquely identified.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-supportType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-supportType specifies the level of
+        transaction support provided by the resource adapter. It is
+        used by transaction-support elements.
+        
+        The value must be one of the following:
+        
+        NoTransaction
+        LocalTransaction
+        XATransaction
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NoTransaction"/>
+        <xsd:enumeration value="LocalTransaction"/>
+        <xsd:enumeration value="XATransaction"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jakartaee_web_services_2_0.xsd b/wildfly/docs/schema/jakartaee_web_services_2_0.xsd
new file mode 100644
index 0000000..846a805
--- /dev/null
+++ b/wildfly/docs/schema/jakartaee_web_services_2_0.xsd
@@ -0,0 +1,551 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      The webservices element is the root element for the web services
+      deployment descriptor.  It specifies the set of web service
+      descriptions that are to be deployed into the Jakarta EE Application
+      Server and the dependencies they have on container resources and
+      services.  The deployment descriptor must be named
+      "META-INF/webservices.xml" in the web services' jar file.
+      
+      Used in: webservices.xml
+      
+      All webservices deployment descriptors must indicate the
+      webservices schema by using the Jakarta EE namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by using the version
+      element as shown below:
+      
+      <webservices xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee
+      	https://jakarta.ee/xml/ns/jakartaee/jakartaee_web_services_2_0.xsd"
+      version="2.0">
+      ...
+      </webservices>
+      
+      The instance documents may indicate the published version of the
+      schema using the xsi:schemaLocation attribute for the Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/jakartaee_web_services_2_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="webservices"
+               type="jakartaee:webservicesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webservices element is the root element for the web services
+        deployment descriptor.  It specifies the set of web service
+        descriptions that are to be deployed into the Jakarta EE Application Server
+        and the dependencies they have on container resources and services.
+        
+        Used in: webservices.xml
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:key name="webservice-description-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The webservice-description-name identifies the collection of
+          port-components associated with a WSDL file and Jakarta XML RPC mapping. 
+          The name must be unique within the deployment descriptor.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:webservice-description"/>
+      <xsd:field xpath="jakartaee:webservice-description-name"/>
+    </xsd:key>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The port-component element associates a WSDL port with a web service
+        interface and implementation.  It defines the name of the port as a
+        component, optional description, optional display name, optional iconic
+        representations, WSDL port QName, Service Endpoint Interface, Service
+        Implementation Bean.
+        
+        This element also associates a WSDL service with a Jakarta XML Web Services 
+        Provider implementation.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="display-name"
+                   type="jakartaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="icon"
+                   type="jakartaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="port-component-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The port-component-name element specifies a port component's
+            name.  This name is assigned by the module producer to name
+            the service implementation bean in the module's deployment
+            descriptor. The name must be unique among the port component
+            names defined in the same module.
+            
+            Used in: port-component
+            
+            Example:
+            	      <port-component-name>EmployeeService
+            	      </port-component-name>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-service"
+                   type="jakartaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name space and local name part of the WSDL
+            service QName. This is required to be specified for
+            port components that are Jakarta XML Web Services 
+            	Provider implementations.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-port"
+                   type="jakartaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name space and local name part of the WSDL
+            port QName. This is not required to be specified for port
+            components that are Jakarta XML Web Services Provider
+            	implementations
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism for an
+            endpoint implementation.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mtom-threshold"
+                   type="jakartaee:xsdNonNegativeIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When MTOM is enabled, binary data above this size in bytes
+            will be XOP encoded or sent as attachment. Default value is 0.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="addressing"
+                   type="jakartaee:addressingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            This specifies the WS-Addressing requirements for a Jakarta XML  
+            		web service. It corresponds to jakarta.xml.ws.soap.Addressing
+            annotation or its feature jakarta.xml.ws.soap.AddressingFeature.
+            
+            See the addressingType for more information.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="respect-binding"
+                   type="jakartaee:respect-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Corresponds to the jakarta.xml.ws.RespectBinding annotation
+            or its corresponding jakarta.xml.ws.RespectBindingFeature web
+            service feature. This is used to control whether a Jakarta XML Web 
+            		Services implementation must respect/honor the contents of the
+            wsdl:binding in the WSDL that is associated with the service.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="protocol-binding"
+                   type="jakartaee:protocol-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify the protocol binding used by the port-component.
+            If this element is not specified, then the default binding is
+            used (SOAP 1.1 over HTTP)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint-interface"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The service-endpoint-interface element contains the
+            fully-qualified name of the port component's Service Endpoint
+            Interface.
+            
+            Used in: port-component
+            
+            Example:
+            	      <remote>com.wombat.empl.EmployeeService</remote>
+            
+            This may not be specified in case there is no Service
+            Enpoint Interface as is the case with directly using an
+            implementation class with the @WebService annotation.
+            
+            When the port component is a Provider implementation
+            this is not specified.
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-impl-bean"
+                   type="jakartaee:service-impl-beanType"/>
+      <xsd:choice>
+        <xsd:element name="handler"
+                     type="jakartaee:handlerType"
+                     minOccurs="0"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with Jakarta XML RPC based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="handler-chains"
+                     type="jakartaee:handler-chainsType"
+                     minOccurs="0"
+                     maxOccurs="1">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with Jakarta XML Web Services based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-impl-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The service-impl-bean element defines the web service implementation.
+        A service implementation can be an enterprise bean class or Jakarta
+        XML RPC web component.  Existing enterprise bean implementations 
+        are exposed as a web service using an ejb-link.
+        
+        Used in: port-component
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice>
+      <xsd:element name="ejb-link"
+                   type="jakartaee:ejb-linkType"/>
+      <xsd:element name="servlet-link"
+                   type="jakartaee:servlet-linkType"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The servlet-link element is used in the service-impl-bean element
+        to specify that a Service Implementation Bean is defined as a
+        Jakarta XML RPC Service Endpoint.
+        
+        The value of the servlet-link element must be the servlet-name of
+        a Jakarta XML RPC Service Endpoint in the same WAR file.
+        
+        Used in: service-impl-bean
+        
+        Example:
+        	  <servlet-link>StockQuoteService</servlet-link>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservice-descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webservice-description element defines a WSDL document file
+        and the set of Port components associated with the WSDL ports
+        defined in the WSDL document.  There may be multiple
+        webservice-descriptions defined within a module.
+        
+        All WSDL file ports must have a corresponding port-component element
+        defined.
+        
+        Used in: webservices
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="display-name"
+                   type="jakartaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="icon"
+                   type="jakartaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="webservice-description-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The webservice-description-name identifies the collection of
+            port-components associated with a WSDL file and Jakarta XML RPC
+            mapping. The name must be unique within the deployment descriptor.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The wsdl-file element contains the name of a WSDL file in the
+            module.  The file name is a relative path within the module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The jaxrpc-mapping-file element contains the name of a file that
+            describes the Jakarta XML RPC mapping between the Java interaces used by
+            the application and the WSDL description in the wsdl-file.  The
+            file name is a relative path within the module.
+            
+            This is not required when JAX-Jakarta Enterprise Web Services based 
+            	runtime is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component"
+                   type="jakartaee:port-componentType"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+        <xsd:key name="port-component_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Defines the name of the handler. The name must be unique
+              within the module.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:handler"/>
+          <xsd:field xpath="jakartaee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservicesType">
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="webservice-description"
+                   type="jakartaee:webservice-descriptionType"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+        <xsd:key name="port-component-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              	The port-component-name element specifies a port
+              	component's name.  This name is assigned by the module
+              	producer to name the service implementation bean in the
+              	module's deployment descriptor. The name must be unique
+              	among the port component names defined in the same module.
+              
+              	Used in: port-component
+              
+              	Example:
+              		<port-component-name>EmployeeService
+              		</port-component-name>
+              
+              	
+              
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:port-component"/>
+          <xsd:field xpath="jakartaee:port-component-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="2.0"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 2.0.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jakartaee_web_services_client_2_0.xsd b/wildfly/docs/schema/jakartaee_web_services_client_2_0.xsd
new file mode 100644
index 0000000..4e3fd5e
--- /dev/null
+++ b/wildfly/docs/schema/jakartaee_web_services_client_2_0.xsd
@@ -0,0 +1,714 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The service-ref element declares a reference to a Web
+        service. It contains optional description, display name and
+        icons, a declaration of the required Service interface,
+        an optional WSDL document location, an optional set
+        of Jakarta XML RPC mappings, an optional QName for the service element,
+        an optional set of Service Endpoint Interfaces to be resolved 
+        by the container to a WSDL port, and an optional set of handlers.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="service-ref-name"
+                   type="jakartaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-ref-name element declares logical name that the
+            components in the module use to look up the Web service. It 
+            is recommended that all service reference names start with 
+            "service/".
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-interface"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-interface element declares the fully qualified class
+            name of the Jakarta XML RPC Service interface the client depends on. 
+            In most cases the value will be jakarta.xml.rpc.Service.  A Jakarta XML 
+            RPC generated Service Interface class may also be specified.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-ref-type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-ref-type element declares the type of the service-ref 
+            element that is injected or returned when a JNDI lookup is done.
+            This must be either a fully qualified name of Service class or 
+            the fully qualified name of service endpoint interface class. 
+            This is only used with Jakarta XML Web Services runtime where
+            the corresponding @WebServiceRef annotation can be used to denote both 
+            a Service or a Port.
+            
+            If this is not specified, then the type of service-ref element 
+            that is injected or returned when a JNDI lookup is done is 
+            always a Service interface/class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+                   type="jakartaee:xsdAnyURIType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The wsdl-file element contains the URI location of a WSDL
+            file. The location is relative to the root of the module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The jaxrpc-mapping-file element contains the name of a file that
+            describes the Jakarta XML RPC mapping between the Java interaces used by
+            the application and the WSDL description in the wsdl-file.  The 
+            file name is a relative path within the module file.
+            
+            This is not required when Jakarta Enterprise Web Services based 
+            runtime is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-qname"
+                   type="jakartaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-qname element declares the specific WSDL service
+            element that is being refered to.  It is not specified if no
+            wsdl-file is declared.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component-ref"
+                   type="jakartaee:port-component-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-component-ref element declares a client dependency
+            on the container for resolving a Service Endpoint Interface
+            to a WSDL port. It optionally associates the Service Endpoint
+            Interface with a particular port-component. This is only used
+            by the container for a Service.getPort(Class) method call.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="handler"
+                     type="jakartaee:handlerType"
+                     minOccurs="0"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	Declares the handler for a port-component. Handlers can
+              	access the init-param name/value pairs using the
+              	HandlerInfo interface. If port-name is not specified, the
+              	handler is assumed to be associated with all ports of the
+              	service.
+              
+              	To be used with Jakarta XML RPC based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="handler-chains"
+                     type="jakartaee:handler-chainsType"
+                     minOccurs="0"
+                     maxOccurs="1">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with Jakarta XML Web Services based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:group ref="jakartaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-component-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The port-component-ref element declares a client dependency
+        on the container for resolving a Service Endpoint Interface
+        to a WSDL port. It optionally associates the Service Endpoint
+        Interface with a particular port-component. This is only used
+        by the container for a Service.getPort(Class) method call.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="service-endpoint-interface"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-endpoint-interface element defines a fully qualified
+            Java class that represents the Service Endpoint Interface of a
+            WSDL port.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism on the client
+            side for a port-component. 
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mtom-threshold"
+                   type="jakartaee:xsdNonNegativeIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When MTOM is enabled, binary data above this size in bytes
+            should be XOP encoded or sent as attachment. Default value is 0.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="addressing"
+                   type="jakartaee:addressingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            This specifies the WS-Addressing requirements for a Jakarta XML 
+            web service. It corresponds to jakarta.xml.ws.soap.Addressing
+            annotation or its feature jakarta.xml.ws.soap.AddressingFeature.
+            
+            See the addressingType for more information.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="respect-binding"
+                   type="jakartaee:respect-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Corresponds to the jakarta.xml.ws.RespectBinding annotation
+            or its corresponding jakarta.xml.ws.RespectBindingFeature web
+            service feature. This is used to control whether a Jakarta XML Web 
+            Services implementation must respect/honor the contents of the
+            wsdl:binding in the WSDL that is associated with the service.
+            
+            Not to be specified for Jakarta XML RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component-link"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-component-link element links a port-component-ref
+            to a specific port-component required to be made available
+            by a service reference.
+            
+            The value of a port-component-link must be the
+            port-component-name of a port-component in the same module
+            or another module in the same application unit. The syntax
+            for specification follows the syntax defined for ejb-link
+            in the EJB 2.0 specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chains element defines the handlerchains associated with this
+        service or service endpoint.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="handler-chain"
+                   type="jakartaee:handler-chainType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chain element defines the handlerchain. 
+        Handlerchain can be defined such that the handlers in the
+        handlerchain operate,all ports of a service, on a specific
+        port or on a list of protocol-bindings. The choice of elements
+        service-name-pattern, port-name-pattern and protocol-bindings
+        are used to specify whether the handlers in handler-chain are
+        for a service, port or protocol binding. If none of these 
+        choices are specified with the handler-chain element then the
+        handlers specified in the handler-chain will be applied on 
+        everything.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="service-name-pattern"
+                     type="jakartaee:qname-pattern"/>
+        <xsd:element name="port-name-pattern"
+                     type="jakartaee:qname-pattern"/>
+        <xsd:element name="protocol-bindings"
+                     type="jakartaee:protocol-bindingListType"/>
+      </xsd:choice>
+      <xsd:element name="handler"
+                   type="jakartaee:handlerType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="protocol-bindingListType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type used for specifying a list of
+        protocol-bindingType(s). For e.g.
+        
+        ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:list itemType="jakartaee:protocol-bindingType"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="protocol-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type used for specifying the URI for the
+        protocol binding used by the port-component.  For
+        portability one could use one of the following tokens that
+        alias the standard binding types: 
+        
+        ##SOAP11_HTTP
+        ##SOAP11_HTTP_MTOM
+        ##SOAP12_HTTP
+        ##SOAP12_HTTP_MTOM
+        ##XML_HTTP
+        
+        Other specifications could define tokens that start with ##
+        to alias new standard binding URIs that are introduced.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:union memberTypes="xsd:anyURI jakartaee:protocol-URIAliasType"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="protocol-URIAliasType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type that is used for specifying tokens that
+        start with ## which are used to alias existing standard
+        protocol bindings and support aliases for new standard
+        binding URIs that are introduced in future specifications.
+        
+        The following tokens alias the standard protocol binding
+        URIs:
+        
+        ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+        ##SOAP11_HTTP_MTOM = 
+        "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+        ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+        ##SOAP12_HTTP_MTOM = 
+        "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+        ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="##.+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="qname-pattern">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is used to specify the QName pattern in the
+        attribute service-name-pattern and port-name-pattern in
+        the handler-chain element
+        
+        For example, the various forms acceptable here for
+        service-name-pattern attribute in handler-chain element
+        are :
+        
+        Exact Name: service-name-pattern="ns1:EchoService"
+        
+        	 In this case, handlers specified in this
+        	 handler-chain element will apply to all ports with
+        	 this exact service name. The namespace prefix must
+        	 have been declared in a namespace declaration
+        	 attribute in either the start-tag of the element
+        	 where the prefix is used or in an an ancestor 
+        	 element (i.e. an element in whose content the 
+        	 prefixed markup occurs)
+        	 
+        
+        Pattern : service-name-pattern="ns1:EchoService*"
+        
+        	 In this case, handlers specified in this
+        	 handler-chain element will apply to all ports whose
+        	 Service names are like EchoService1, EchoServiceFoo
+        	 etc. The namespace prefix must have been declared in
+        	 a namespace declaration attribute in either the
+        	 start-tag of the element where the prefix is used or
+        	 in an an ancestor element (i.e. an element in whose 
+        	 content the prefixed markup occurs)
+        
+        Wild Card : service-name-pattern="*"
+        
+        	In this case, handlers specified in this handler-chain
+        	element will apply to ports of all service names.
+        
+        The same can be applied to port-name attribute in
+        handler-chain element.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\*|([\i-[:]][\c-[:]]*:)?[\i-[:]][\c-[:]]*\*?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="addressingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This specifies the WS-Addressing requirements for a Jakarta XML web 
+        service. It corresponds to jakarta.xml.ws.soap.Addressing annotation or its
+        feature jakarta.xml.ws.soap.AddressingFeature.
+        
+        If the "enabled" element is "true", WS-Addressing is enabled.
+        It means that the endpoint supports WS-Addressing but does not require
+        its use. The default value for "enabled" is "true".
+        
+        If the WS-Addressing is enabled and the "required" element is "true",
+        it means that the endpoint requires WS-Addressing. The default value
+        for "required" is "false".
+        
+        If WS-Addressing is enabled, the "responses" element determines
+        if an endpoint requires the use of only anonymous responses,
+        or only non-anonymous responses, or all. The value of the "responses"
+        element must be one of the following:
+        
+        ANONYMOUS
+        NON_ANONYMOUS
+        ALL
+        
+        The default value for the "responses" is ALL.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="enabled"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="required"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="responses"
+                   type="jakartaee:addressing-responsesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="addressing-responsesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        If WS-Addressing is enabled, this type determines if an endpoint
+        requires the use of only anonymous responses, or only non-anonymous
+        responses, or all.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="ANONYMOUS"/>
+        <xsd:enumeration value="NON_ANONYMOUS"/>
+        <xsd:enumeration value="ALL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="respect-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Corresponds to the jakarta.xml.ws.RespectBinding annotation
+        or its corresponding jakarta.xml.ws.RespectBindingFeature web
+        service feature. This is used to control whether a Jakarta XML 
+        Web Services implementation must respect/honor the contents of the
+        wsdl:binding in the WSDL that is associated with the service.
+        
+        If the "enabled" element is "true", wsdl:binding in the
+        associated WSDL, if any, must be respected/honored.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="enabled"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declares the handler for a port-component, service-ref. Handlers can
+        access the init-param name/value pairs using the HandlerInfo interface.
+        
+        Used in: port-component, service-ref
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name of the handler. The name must be unique within the
+            module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a fully qualified class name for the handler implementation.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Not to be specified for Jakarta XML Web Services runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-header"
+                   type="jakartaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the QName of a SOAP header that will be processed by the
+            handler.
+            
+            Not to be specified for Jakarta XML Web Services runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-role"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The soap-role element contains a SOAP actor definition that the
+            Handler will play as a role.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-name"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-name element defines the WSDL port-name that a
+            handler should be associated with. If port-name is not
+            specified, the handler is assumed to be associated with
+            all ports of the service.
+            
+            Not to be specified for Jakarta XML Web Services runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:group name="service-refGroup">
+    <xsd:sequence>
+      <xsd:element name="service-ref"
+                   type="jakartaee:service-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:key name="service-ref_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Defines the name of the handler. The name must be unique
+              within the module.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="jakartaee:handler"/>
+          <xsd:field xpath="jakartaee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jakartaee_web_services_metadata_handler_3_0.xsd b/wildfly/docs/schema/jakartaee_web_services_metadata_handler_3_0.xsd
new file mode 100644
index 0000000..5154222
--- /dev/null
+++ b/wildfly/docs/schema/jakartaee_web_services_metadata_handler_3_0.xsd
@@ -0,0 +1,70 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+
+    Copyright (c) 2020 Oracle and/or its affiliates. All rights reserved.
+
+    This program and the accompanying materials are made available under the
+    terms of the Eclipse Distribution License v. 1.0, which is available at
+    http://www.eclipse.org/org/documents/edl-v10.php.
+
+    SPDX-License-Identifier: BSD-3-Clause
+
+-->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+  <xsd:annotation>
+    <xsd:documentation>
+      This is the XML Schema for the Handler chain configuration descriptor.
+      The configuration file must be in the classpath within the JAR/WAR file.
+
+      All Handler chain configuration descriptors
+      should indicate the descriptor schema by using the Jakarta EE
+      namespace:
+
+      https://jakarta.ee/xml/ns/jakartaee
+
+      and by indicating the version of the schema by
+      using the version element as shown below:
+
+        <handler-chains xmlns="https://jakarta.ee/xml/ns/jakartaee"
+          xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+          xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee
+              https://jakarta.ee/xml/ns/jakartaee/jakartaee_web_services_metadata_handler_3_0.xsd"
+          version="3.0">
+          ...
+        </handler-chains>
+
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+
+      https://jakarta.ee/xml/ns/jakartaee/jakartaee_web_services_metadata_handler_3_0.xsd
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsds"/>
+
+  <xsd:element name="handler-chains"
+               type="jakartaee:service-ref_handler-chainsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chains element is the root element for defining
+        handlerchains.
+
+        The Jakarta Web Services Metadata
+        specification defines the @jakarta.jws.HandlerChain annotation
+        that refers to an XML descriptor conforming to this schema.
+
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/java-properties_1_0.xsd b/wildfly/docs/schema/java-properties_1_0.xsd
new file mode 100644
index 0000000..ab9a9b0
--- /dev/null
+++ b/wildfly/docs/schema/java-properties_1_0.xsd
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- $Id: java-properties_1_0.xsd 33892 2005-07-25 02:47:23Z starksm $
+-->
+<xs:schema version="1.0"
+           targetNamespace="urn:jboss:java-properties"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:jbxb="https://www.jboss.org/xml/ns/jbxb"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+        >
+   <xs:annotation>
+      <xs:documentation>A JBossXB schema for specifying how a java.util.Properties
+         object is unmarshalled.
+      </xs:documentation>
+   </xs:annotation>
+   <xs:element name="properties">
+      <xs:annotation>
+         <xs:appinfo>
+            <jbxb:class impl="java.util.Properties"/>
+         </xs:appinfo>
+      </xs:annotation>
+      <xs:complexType>
+         <xs:sequence>
+            <xs:element name="property" maxOccurs="unbounded">
+               <xs:annotation>
+                  <xs:appinfo>
+                     <jbxb:putMethod name="setProperty" keyType="java.lang.String" valueType="java.lang.String"/>
+                  </xs:appinfo>
+               </xs:annotation>
+               <xs:complexType id="propertyType">
+                  <xs:annotation>
+                     <xs:appinfo>
+                        <jbxb:mapEntry/>
+                     </xs:appinfo>
+                  </xs:annotation>
+                  <xs:sequence>
+                     <xs:element name="key" type="xs:string">
+                        <xs:annotation>
+                           <xs:appinfo>
+                              <jbxb:mapEntryKey/>
+                           </xs:appinfo>
+                        </xs:annotation>
+                     </xs:element>
+                     <xs:element name="value" type="xs:string">
+                        <xs:annotation>
+                           <xs:appinfo>
+                              <jbxb:mapEntryValue/>
+                           </xs:appinfo>
+                        </xs:annotation>
+                     </xs:element>
+                  </xs:sequence>
+               </xs:complexType>
+            </xs:element>
+         </xs:sequence>
+      </xs:complexType>
+   </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/javaee_5.xsd b/wildfly/docs/schema/javaee_5.xsd
new file mode 100644
index 0000000..9f57bd7
--- /dev/null
+++ b/wildfly/docs/schema/javaee_5.xsd
@@ -0,0 +1,2095 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema
+     targetNamespace="http://java.sun.com/xml/ns/javaee"
+     xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+     xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+     elementFormDefault="qualified"
+     attributeFormDefault="unqualified"
+     version="5">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)javaee_5.xsds	1.65 06/02/17
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2006 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+<xsd:annotation>
+<xsd:documentation>
+
+The following definitions that appear in the common
+shareable schema(s) of J2EE deployment descriptors should be
+interpreted with respect to the context they are included:
+
+Deployment Component may indicate one of the following:
+    j2ee application;
+    application client;
+    web application;
+    enterprise bean;
+    resource adapter;
+
+Deployment File may indicate one of the following:
+    ear file;
+    war file;
+    jar file;
+    rar file;
+
+</xsd:documentation>
+</xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+	      schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation="javaee_web_services_client_1_2.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This group keeps the usage of the contained description related
+	elements consistent across Java EE deployment descriptors.
+
+	All elements may occur multiple times with different languages,
+	to support localization of the content.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+		   type="javaee:display-nameType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+		   type="javaee:iconType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The description type is used by a description element to
+	provide text describing the parent element.  The elements
+	that use this type should include any information that the
+	Deployment Component's Deployment File file producer wants
+	to provide to the consumer of the Deployment Component's
+	Deployment File (i.e., to the Deployer). Typically, the
+	tools used by such a Deployment File consumer will display
+	the description when processing the parent element that
+	contains the description.
+
+	The lang attribute defines the language that the
+	description is provided in. The default value is "en" (English).
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:xsdStringType">
+	<xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type defines a dewey decimal that is used
+	to describe versions of documents.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\.?[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The display-name type contains a short name that is intended
+	  to be displayed by tools. It is used by display-name
+	  elements.  The display name need not be unique.
+
+	  Example:
+
+	  ...
+	     <display-name xml:lang="en">
+	       Employee Self Service
+	     </display-name>
+
+	  The value of the xml:lang attribute is "en" (English) by default.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:string">
+	<xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-linkType is used by ejb-link
+	  elements in the ejb-ref or ejb-local-ref elements to specify
+	  that an EJB reference is linked to enterprise bean.
+
+	  The value of the ejb-link element must be the ejb-name of an
+	  enterprise bean in the same ejb-jar file or in another ejb-jar
+	  file in the same Java EE application unit.
+
+	  Alternatively, the name in the ejb-link element may be
+	  composed of a path name specifying the ejb-jar containing the
+	  referenced enterprise bean with the ejb-name of the target
+	  bean appended and separated from the path name by "#".  The
+	  path name is relative to the Deployment File containing
+	  Deployment Component that is referencing the enterprise
+	  bean.  This allows multiple enterprise beans with the same
+	  ejb-name to be uniquely identified.
+
+	  Examples:
+
+	      <ejb-link>EmployeeRecord</ejb-link>
+
+	      <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-local-refType is used by ejb-local-ref elements for
+	the declaration of a reference to an enterprise bean's local
+	home or to the local business interface of a 3.0 bean.
+        The declaration consists of:
+
+	    - an optional description
+	    - the EJB reference name used in the code of the Deployment
+	      Component that's referencing the enterprise bean.
+	    - the optional expected type of the referenced enterprise bean
+	    - the optional expected local interface of the referenced
+              enterprise bean or the local business interface of the
+              referenced enterprise bean.
+	    - the optional expected local home interface of the referenced
+              enterprise bean. Not applicable if this ejb-local-ref refers
+              to the local business interface of a 3.0 bean.
+	    - optional ejb-link information, used to specify the
+	      referenced enterprise bean
+            - optional elements to define injection of the named enterprise
+              bean into a component field or property.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+		   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+		   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+		   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+		   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+		   type="javaee:ejb-linkType"
+		   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The ejb-ref-name element contains the name of an EJB
+	  reference. The EJB reference is an entry in the
+	  Deployment Component's environment and is relative to the
+	  java:comp/env context.  The name must be unique within the
+	  Deployment Component.
+
+	  It is recommended that name is prefixed with "ejb/".
+
+	  Example:
+
+	  <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-ref-typeType contains the expected type of the
+	referenced enterprise bean.
+
+	The ejb-ref-type designates a value
+	that must be one of the following:
+
+	    Entity
+	    Session
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Entity"/>
+	<xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The ejb-refType is used by ejb-ref elements for the
+	declaration of a reference to an enterprise bean's home or
+        to the remote business interface of a 3.0 bean.
+	The declaration consists of:
+
+	    - an optional description
+	    - the EJB reference name used in the code of
+	      the Deployment Component that's referencing the enterprise
+	      bean.
+	    - the optional expected type of the referenced enterprise bean
+            - the optional remote interface of the referenced enterprise bean
+              or the remote business interface of the referenced enterprise
+              bean
+	    - the optional expected home interface of the referenced
+              enterprise bean.  Not applicable if this ejb-ref
+              refers to the remote business interface of a 3.0 bean.
+	    - optional ejb-link information, used to specify the
+	      referenced enterprise bean
+            - optional elements to define injection of the named enterprise
+              bean into a component field or property
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+		   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+		   type="javaee:ejb-ref-typeType"
+		   minOccurs="0"/>
+      <xsd:element name="home"
+		   type="javaee:homeType"
+		   minOccurs="0"/>
+      <xsd:element name="remote"
+		   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+		   type="javaee:ejb-linkType"
+		   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type is used to designate an empty
+	element when used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  This type contains the fully-qualified Java type of the
+	  environment entry value that is expected by the
+	  application's code.
+
+	  The following are the legal values of env-entry-type-valuesType:
+
+	      java.lang.Boolean
+	      java.lang.Byte
+	      java.lang.Character
+	      java.lang.String
+	      java.lang.Short
+	      java.lang.Integer
+	      java.lang.Long
+	      java.lang.Float
+	      java.lang.Double
+
+	  Example:
+
+	  <env-entry-type>java.lang.Boolean</env-entry-type>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="java.lang.Boolean"/>
+	<xsd:enumeration value="java.lang.Byte"/>
+	<xsd:enumeration value="java.lang.Character"/>
+	<xsd:enumeration value="java.lang.String"/>
+	<xsd:enumeration value="java.lang.Short"/>
+	<xsd:enumeration value="java.lang.Integer"/>
+	<xsd:enumeration value="java.lang.Long"/>
+	<xsd:enumeration value="java.lang.Float"/>
+	<xsd:enumeration value="java.lang.Double"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The env-entryType is used to declare an application's
+	environment entry. The declaration consists of an optional
+	description, the name of the environment entry, a type
+	(optional if the value is injected, otherwise required), and
+	an optional value.
+
+	It also includes optional elements to define injection of
+	the named resource into fields or JavaBeans properties.
+
+	If a value is not specified and injection is requested,
+	no injection will occur and no entry of the specified name
+	will be created.  This allows an initial value to be
+	specified in the source code without being incorrectly
+	changed when no override has been specified.
+
+	If a value is not specified and no injection is requested,
+	a value must be supplied during deployment.
+
+	This type is used by env-entry elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The env-entry-name element contains the name of a
+	      Deployment Component's environment entry.  The name
+	      is a JNDI name relative to the java:comp/env
+	      context.  The name must be unique within a
+	      Deployment Component. The uniqueness
+	      constraints must be defined within the declared
+	      context.
+
+	      Example:
+
+	      <env-entry-name>minAmount</env-entry-name>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="env-entry-type"
+		   type="javaee:env-entry-type-valuesType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The env-entry-type element contains the Java language
+	      type of the environment entry.  If an injection target
+	      is specified for the environment entry, the type may
+	      be omitted, or must match the type of the injection
+	      target.  If no injection target is specified, the type
+	      is required.
+
+	      Example:
+
+	      <env-entry-type>java.lang.Integer</env-entry-type>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="env-entry-value"
+		   type="javaee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The env-entry-value designates the value of a
+	      Deployment Component's environment entry. The value
+	      must be a String that is valid for the
+	      constructor of the specified type that takes a
+	      single String parameter, or for java.lang.Character,
+	      a single character.
+
+	      Example:
+
+	      <env-entry-value>100.00</env-entry-value>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The elements that use this type designate the name of a
+	Java class or interface.  The name is in the form of a
+	"binary name", as defined in the JLS.  This is the form
+	of name used in Class.forName().  Tools that need the
+	canonical name (the name used in source code) will need
+	to convert this binary name to the canonical name.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type defines four different values which can designate
+	boolean values. This includes values yes and no which are
+	not designated by xsd:boolean
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="true"/>
+	<xsd:enumeration value="false"/>
+	<xsd:enumeration value="yes"/>
+	<xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The homeType defines the fully-qualified name of
+	  an enterprise bean's home interface.
+
+	  Example:
+
+	      <home>com.aardvark.payroll.PayrollHome</home>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The icon type contains small-icon and large-icon elements
+	that specify the file names for small and large GIF, JPEG,
+	or PNG icon images used to represent the parent element in a
+	GUI tool.
+
+	The xml:lang attribute defines the language that the
+	icon file names are provided in. Its value is "en" (English)
+	by default.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="small-icon" type="javaee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The small-icon element contains the name of a file
+	      containing a small (16 x 16) icon image. The file
+	      name is a relative path within the Deployment
+	      Component's Deployment File.
+
+	      The image may be in the GIF, JPEG, or PNG format.
+	      The icon can be used by tools.
+
+	      Example:
+
+	      <small-icon>employee-service-icon16x16.jpg</small-icon>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon" type="javaee:pathType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The large-icon element contains the name of a file
+	      containing a large
+	      (32 x 32) icon image. The file name is a relative
+	      path within the Deployment Component's Deployment
+	      File.
+
+	      The image may be in the GIF, JPEG, or PNG format.
+	      The icon can be used by tools.
+
+	      Example:
+
+	      <large-icon>employee-service-icon32x32.jpg</large-icon>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="injection-targetType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	An injection target specifies a class and a name within
+	that class into which a resource should be injected.
+
+	The injection target class specifies the fully qualified
+	class name that is the target of the injection.  The
+	Java EE specifications describe which classes can be an
+	injection target.
+
+	The injection target name specifies the target within
+	the specified class.  The target is first looked for as a
+	JavaBeans property name.  If not found, the target is
+	looked for as a field name.
+
+	The specified resource will be injected into the target
+	during initialization of the class by either calling the
+	set method for the target property or by setting a value
+	into the named field.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="injection-target-class"
+		   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="injection-target-name"
+		   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The java-identifierType defines a Java identifier.
+	The users of this type should further verify that
+	the content does not contain Java reserved keywords.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is a generic type that designates a Java primitive
+	type or a fully qualified name of a Java interface/type,
+	or an array of such types.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jndi-nameType type designates a JNDI name in the
+	Deployment Component's environment and is relative to the
+	java:comp/env context.  A JNDI name must be unique within the
+	Deployment Component.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This group keeps the usage of the contained JNDI environment
+	reference elements consistent across Java EE deployment descriptors.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+		   type="javaee:env-entryType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+		   type="javaee:ejb-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+		   type="javaee:ejb-local-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+		   type="javaee:resource-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+		   type="javaee:resource-env-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+		   type="javaee:message-destination-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+		   type="javaee:persistence-context-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+		   type="javaee:persistence-unit-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+		   type="javaee:lifecycle-callbackType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+		   type="javaee:lifecycle-callbackType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lifecycle-callbackType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The lifecycle-callback type specifies a method on a
+	class to be called when a lifecycle event occurs.
+	Note that each class may have only one lifecycle callback
+        method for any given event and that the method may not
+	be overloaded.
+
+        If the lifefycle-callback-class element is missing then
+        the class defining the callback is assumed to be the
+        component class in scope at the place in the descriptor
+        in which the callback definition appears.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="lifecycle-callback-class"
+		   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="lifecycle-callback-method"
+		   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The listenerType indicates the deployment properties for a web
+	application listener bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The listener-class element declares a class in the
+	    application must be registered as a web
+	    application listener bean. The value is the fully
+	    qualified classname of the listener class.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The local-homeType defines the fully-qualified
+	name of an enterprise bean's local home interface.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The localType defines the fully-qualified name of an
+	enterprise bean's local interface.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The message-destination-linkType is used to link a message
+	destination reference or message-driven bean to a message
+	destination.
+
+	The Assembler sets the value to reflect the flow of messages
+	between producers and consumers in the application.
+
+	The value must be the message-destination-name of a message
+	destination in the same Deployment File or in another
+	Deployment File in the same Java EE application unit.
+
+	Alternatively, the value may be composed of a path name
+	specifying a Deployment File containing the referenced
+	message destination with the message-destination-name of the
+	destination appended and separated from the path name by
+	"#". The path name is relative to the Deployment File
+	containing Deployment Component that is referencing the
+	message destination.  This allows multiple message
+	destinations with the same name to be uniquely identified.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The message-destination-ref element contains a declaration
+	  of Deployment Component's reference to a message destination
+	  associated with a resource in Deployment Component's
+	  environment. It consists of:
+
+		  - an optional description
+		  - the message destination reference name
+		  - an optional message destination type
+		  - an optional specification as to whether
+		    the destination is used for
+		    consuming or producing messages, or both.
+		    if not specified, "both" is assumed.
+		  - an optional link to the message destination
+		  - optional injection targets
+
+	  The message destination type must be supplied unless an
+	  injection target is specified, in which case the type
+	  of the target is used.  If both are specified, the type
+	  must be assignment compatible with the type of the injection
+	  target.
+
+	  Examples:
+
+	  <message-destination-ref>
+		  <message-destination-ref-name>jms/StockQueue
+		  </message-destination-ref-name>
+		  <message-destination-type>javax.jms.Queue
+		  </message-destination-type>
+		  <message-destination-usage>Consumes
+		  </message-destination-usage>
+		  <message-destination-link>CorporateStocks
+		  </message-destination-link>
+	  </message-destination-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The message-destination-ref-name element specifies
+	    the name of a message destination reference; its
+	    value is the environment entry name used in
+	    Deployment Component code.  The name is a JNDI name
+	    relative to the java:comp/env context and must be
+	    unique within an ejb-jar (for enterprise beans) or a
+	    Deployment File (for others).
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+		   type="javaee:message-destination-typeType"
+		   minOccurs="0"/>
+      <xsd:element name="message-destination-usage"
+		   type="javaee:message-destination-usageType"
+		   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+		   type="javaee:message-destination-linkType"
+		   minOccurs="0"/>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The message-destination-typeType specifies the type of
+	  the destination. The type is specified by the Java interface
+	  expected to be implemented by the destination.
+
+	  Example:
+
+	    <message-destination-type>javax.jms.Queue
+	    </message-destination-type>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The message-destination-usageType specifies the use of the
+	message destination indicated by the reference.  The value
+	indicates whether messages are consumed from the message
+	destination, produced for the destination, or both.  The
+	Assembler makes use of this information in linking producers
+	of a destination with its consumers.
+
+	The value of the message-destination-usage element must be
+	one of the following:
+	    Consumes
+	    Produces
+	    ConsumesProduces
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Consumes"/>
+	<xsd:enumeration value="Produces"/>
+	<xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The message-destinationType specifies a message
+	  destination. The logical destination described by this
+	  element is mapped to a physical destination by the Deployer.
+
+	  The message destination element contains:
+
+		  - an optional description
+		  - an optional display-name
+		  - an optional icon
+		  - a message destination name which must be unique
+		    among message destination names within the same
+		    Deployment File.
+		  - an optional mapped name
+
+	  Example:
+
+	  <message-destination>
+		  <message-destination-name>CorporateStocks
+		  </message-destination-name>
+	  </message-destination>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The message-destination-name element specifies a
+	    name for a message destination.  This name must be
+	    unique among the names of message destinations
+	    within the Deployment File.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mapped-name"
+		   type="javaee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      A product specific name that this message destination
+	      should be mapped to.  Each message-destination-ref
+	      element that references this message destination will
+	      define a name in the namespace of the referencing
+	      component.  (It's a name in the JNDI java:comp/env
+	      namespace.)  Many application servers provide a way to
+	      map these local names to names of resources known to the
+	      application server.  This mapped name is often a global
+	      JNDI name, but may be a name of any form.  Each of the
+	      local names should be mapped to this same global name.
+
+	      Application servers are not required to support any
+	      particular form or type of mapped name, nor the ability
+	      to use mapped names.  The mapped name is
+	      product-dependent and often installation-dependent.  No
+	      use of a mapped name is portable.
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type is a general type that can be used to declare
+	parameter/value lists.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The param-name element contains the name of a
+	    parameter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="param-value"
+		   type="javaee:xsdStringType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The param-value element contains the value of a
+	    parameter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The elements that use this type designate either a relative
+	path or an absolute path starting with a "/".
+
+	In elements that specify a pathname to a file within the
+	same Deployment File, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the Deployment File's namespace.  Absolute filenames (i.e.,
+	those starting with "/") also specify names in the root of
+	the Deployment File's namespace.  In general, relative names
+	are preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The persistence-context-ref element contains a declaration
+	  of Deployment Component's reference to a persistence context
+	  associated within a Deployment Component's
+	  environment. It consists of:
+
+		  - an optional description
+		  - the persistence context reference name
+		  - an optional persistence unit name.  If not specified,
+                    the default persistence unit is assumed.
+		  - an optional specification as to whether
+		    the persistence context type is Transaction or
+		    Extended.  If not specified, Transaction is assumed.
+                  - an optional list of persistence properties
+		  - optional injection targets
+
+	  Examples:
+
+            <persistence-context-ref>
+              <persistence-context-ref-name>myPersistenceContext
+              </persistence-context-ref-name>
+            </persistence-context-ref>
+
+            <persistence-context-ref>
+              <persistence-context-ref-name>myPersistenceContext
+                </persistence-context-ref-name>
+              <persistence-unit-name>PersistenceUnit1
+                </persistence-unit-name>
+              <persistence-context-type>Extended</persistence-context-type>
+            </persistence-context-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The persistence-context-ref-name element specifies
+	    the name of a persistence context reference; its
+	    value is the environment entry name used in
+	    Deployment Component code.  The name is a JNDI name
+	    relative to the java:comp/env context.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+		   type="javaee:string"
+		   minOccurs="0">
+        <xsd:annotation>
+	  <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file.
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the
+            Application Assembler cannot change persistence unit names.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="persistence-context-type"
+		   type="javaee:persistence-context-typeType"
+		   minOccurs="0"/>
+
+      <xsd:element name="persistence-property"
+		   type="javaee:propertyType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+        <xsd:annotation>
+	  <xsd:documentation>
+
+            Used to specify properties for the container or persistence
+            provider.  Vendor-specific properties may be included in
+            the set of properties.  Properties that are not recognized
+            by a vendor must be ignored.  Entries that make use of the
+            namespace javax.persistence and its subnamespaces must not
+            be used for vendor-specific properties.  The namespace
+            javax.persistence is reserved for use by the specification.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The persistence-context-typeType specifies the transactional
+	nature of a persistence context reference.
+
+	The value of the persistence-context-type element must be
+	one of the following:
+	    Transaction
+            Extended
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Transaction"/>
+	<xsd:enumeration value="Extended"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The persistence-unit-ref element contains a declaration
+	  of Deployment Component's reference to a persistence unit
+	  associated within a Deployment Component's
+	  environment. It consists of:
+
+		  - an optional description
+		  - the persistence unit reference name
+		  - an optional persistence unit name.  If not specified,
+                    the default persistence unit is assumed.
+		  - optional injection targets
+
+	  Examples:
+
+            <persistence-unit-ref>
+              <persistence-unit-ref-name>myPersistenceUnit
+              </persistence-unit-ref-name>
+            </persistence-unit-ref>
+
+            <persistence-unit-ref>
+              <persistence-unit-ref-name>myPersistenceUnit
+                </persistence-unit-ref-name>
+              <persistence-unit-name>PersistenceUnit1
+                </persistence-unit-name>
+            </persistence-unit-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The persistence-unit-ref-name element specifies
+	    the name of a persistence unit reference; its
+	    value is the environment entry name used in
+	    Deployment Component code.  The name is a JNDI name
+	    relative to the java:comp/env context.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+		   type="javaee:string"
+		   minOccurs="0">
+        <xsd:annotation>
+	  <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file.
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the
+            Application Assembler cannot change persistence unit names.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Specifies a name/value pair.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="name"
+		   type="javaee:xsdStringType">
+      </xsd:element>
+      <xsd:element name="value"
+		   type="javaee:xsdStringType">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The remote element contains the fully-qualified name
+	  of the enterprise bean's remote interface.
+
+	  Example:
+
+	      <remote>com.wombat.empl.EmployeeService</remote>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The res-authType specifies whether the Deployment Component
+	code signs on programmatically to the resource manager, or
+	whether the Container will sign on to the resource manager
+	on behalf of the Deployment Component. In the latter case,
+	the Container uses information that is supplied by the
+	Deployer.
+
+	The value must be one of the two following:
+
+	    Application
+	    Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Application"/>
+	<xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The res-sharing-scope type specifies whether connections
+	obtained through the given resource manager connection
+	factory reference can be shared. The value, if specified,
+	must be one of the two following:
+
+	    Shareable
+	    Unshareable
+
+	The default value is Shareable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="Shareable"/>
+	<xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The resource-env-refType is used to define
+	  resource-env-type elements.  It contains a declaration of a
+	  Deployment Component's reference to an administered object
+	  associated with a resource in the Deployment Component's
+	  environment.  It consists of an optional description, the
+	  resource environment reference name, and an optional
+	  indication of the resource environment reference type
+	  expected by the Deployment Component code.
+
+	  It also includes optional elements to define injection of
+	  the named resource into fields or JavaBeans properties.
+
+	  The resource environment type must be supplied unless an
+	  injection target is specified, in which case the type
+	  of the target is used.  If both are specified, the type
+	  must be assignment compatible with the type of the injection
+	  target.
+
+	  Example:
+
+	  <resource-env-ref>
+	      <resource-env-ref-name>jms/StockQueue
+	      </resource-env-ref-name>
+	      <resource-env-ref-type>javax.jms.Queue
+	      </resource-env-ref-type>
+	  </resource-env-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The resource-env-ref-name element specifies the name
+	    of a resource environment reference; its value is
+	    the environment entry name used in
+	    the Deployment Component code.  The name is a JNDI
+	    name relative to the java:comp/env context and must
+	    be unique within a Deployment Component.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="resource-env-ref-type"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The resource-env-ref-type element specifies the type
+	    of a resource environment reference.  It is the
+	    fully qualified name of a Java language class or
+	    interface.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The resource-refType contains a declaration of a
+	  Deployment Component's reference to an external resource. It
+	  consists of an optional description, the resource manager
+	  connection factory reference name, an optional indication of
+	  the resource manager connection factory type expected by the
+	  Deployment Component code, an optional type of authentication
+	  (Application or Container), and an optional specification of
+	  the shareability of connections obtained from the resource
+	  (Shareable or Unshareable).
+
+	  It also includes optional elements to define injection of
+	  the named resource into fields or JavaBeans properties.
+
+	  The connection factory type must be supplied unless an
+	  injection target is specified, in which case the type
+	  of the target is used.  If both are specified, the type
+	  must be assignment compatible with the type of the injection
+	  target.
+
+	  Example:
+
+	  <resource-ref>
+	      <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+	      <res-type>javax.sql.DataSource</res-type>
+	      <res-auth>Container</res-auth>
+	      <res-sharing-scope>Shareable</res-sharing-scope>
+	  </resource-ref>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The res-ref-name element specifies the name of a
+	    resource manager connection factory reference.
+	    The name is a JNDI name relative to the
+	    java:comp/env context.
+	    The name must be unique within a Deployment File.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="res-type"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The res-type element specifies the type of the data
+	    source. The type is specified by the fully qualified
+	    Java language class or interface
+	    expected to be implemented by the data source.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="res-auth"
+		   type="javaee:res-authType"
+		   minOccurs="0"/>
+
+      <xsd:element name="res-sharing-scope"
+		   type="javaee:res-sharing-scopeType"
+		   minOccurs="0"/>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:group name="resourceGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This group collects elements that are common to all the
+	JNDI resource elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="mapped-name"
+		   type="javaee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      A product specific name that this resource should be
+	      mapped to.  The name of this resource, as defined by the
+	      resource's name element or defaulted, is a name that is
+	      local to the application component using the resource.
+	      (It's a name in the JNDI java:comp/env namespace.)  Many
+	      application servers provide a way to map these local
+	      names to names of resources known to the application
+	      server.  This mapped name is often a global JNDI name,
+	      but may be a name of any form.
+
+	      Application servers are not required to support any
+	      particular form or type of mapped name, nor the ability
+	      to use mapped names.  The mapped name is
+	      product-dependent and often installation-dependent.  No
+	      use of a mapped name is portable.
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="injection-target"
+		   type="javaee:injection-targetType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The role-nameType designates the name of a security role.
+
+	The name must conform to the lexical rules for a token.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The run-asType specifies the run-as identity to be
+	used for the execution of a component. It contains an
+	optional description, and the name of a security role.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The security-role-refType contains the declaration of a
+	security role reference in a component's or a
+	Deployment Component's code. The declaration consists of an
+	optional description, the security role name used in the
+	code, and an optional link to a security role. If the
+	security role is not specified, the Deployer must choose an
+	appropriate security role.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="javaee:role-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The value of the role-name element must be the String used
+	    as the parameter to the
+	    EJBContext.isCallerInRole(String roleName) method or the
+	    HttpServletRequest.isUserInRole(String role) method.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="role-link"
+		   type="javaee:role-nameType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The role-link element is a reference to a defined
+	    security role. The role-link element must contain
+	    the name of one of the security roles defined in the
+	    security-role elements.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The security-roleType contains the definition of a security
+	  role. The definition consists of an optional description of
+	  the security role, and the security role name.
+
+	  Example:
+
+	      <security-role>
+	      <description>
+		  This role includes all employees who are authorized
+		  to access the employee service application.
+	      </description>
+	      <role-name>employee</role-name>
+	      </security-role>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This is a special string datatype that is defined by Java EE as
+	a base type for defining collapsed strings. When schemas
+	require trailing/leading space elimination as well as
+	collapsing the existing whitespace, this base type may be
+	used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This simple type designates a boolean with only two
+	permissible values
+
+	- true
+	- false
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdBooleanType">
+	<xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The url-patternType contains the url pattern of the mapping.
+	It must follow the rules specified in Section 11.2 of the
+	Servlet API Specification. This pattern is assumed to be in
+	URL-decoded form and must not contain CR(#xD) or LF(#xA).
+	If it contains those characters, the container must inform
+	the developer with a descriptive error message.
+	The container must preserve all characters including whitespaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:anyURI.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:boolean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:integer.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:NMTOKEN.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:nonNegativeInteger.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:positiveInteger.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:QName.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type adds an "id" attribute to xsd:string.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/javaee_6.xsd b/wildfly/docs/schema/javaee_6.xsd
new file mode 100644
index 0000000..2c83007
--- /dev/null
+++ b/wildfly/docs/schema/javaee_6.xsd
@@ -0,0 +1,2431 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following definitions that appear in the common
+      shareable schema(s) of Java EE deployment descriptors should be
+      interpreted with respect to the context they are included:
+      
+      Deployment Component may indicate one of the following:
+      java ee application;
+      application client;
+      web application;
+      enterprise bean;
+      resource adapter; 
+      
+      Deployment File may indicate one of the following:
+      ear file;
+      war file;
+      jar file;
+      rar file;
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+              schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation="javaee_web_services_client_1_3.xsd"/>
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained description related
+        elements consistent across Java EE deployment descriptors.
+        
+        All elements may occur multiple times with different languages,
+        to support localization of the content.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained JNDI environment
+        reference elements consistent across Java EE deployment descriptors.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="javaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="javaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to most
+        JNDI resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+      <xsd:element name="lookup-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve a resource reference.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceBaseGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to all the
+        JNDI resource elements. It does not include the lookup-name
+        element, that is only applicable to some resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this resource should be
+            mapped to.  The name of this resource, as defined by the
+            resource's name element or defaulted, is a name that is
+            local to the application component using the resource.
+            (It's a name in the JNDI java:comp/env namespace.)  Many
+            application servers provide a way to map these local
+            names to names of resources known to the application
+            server.  This mapped name is often a global JNDI name,
+            but may be a name of any form.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="injection-target"
+                   type="javaee:injection-targetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a DataSource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this DataSource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            data source being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            DataSource, XADataSource or ConnectionPoolDataSource
+            implementation class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="server-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Database server name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-number"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Port number where a server is listening for requests.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="database-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of a database on a server.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="url"
+                   type="javaee:jdbc-urlType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            A JDBC URL. If the <code>url</code> property is specified
+            along with other standard <code>DataSource</code> properties
+            such as <code>serverName</code>, <code>databaseName</code>
+            and <code>portNumber</code>, the more specific properties will
+            take precedence and <code>url</code> will be ignored.
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JDBC DataSource property.  This may be a vendor-specific
+            property or a less commonly used DataSource property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="login-timeout"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Sets the maximum time in seconds that this data source
+            will wait while attempting to connect to a database.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="javaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="isolation-level"
+                   type="javaee:isolation-levelType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Isolation level for connections.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="initial-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Number of connections that should be created when a
+            connection pool is initialized.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-idle-time"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The number of seconds that a physical connection should
+            remain unused in the pool before the connection is
+            closed for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-statements"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The total number of statements that a connection pool
+            should keep open.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The description type is used by a description element to
+        provide text describing the parent element.  The elements
+        that use this type should include any information that the
+        Deployment Component's Deployment File file producer wants
+        to provide to the consumer of the Deployment Component's
+        Deployment File (i.e., to the Deployer). Typically, the
+        tools used by such a Deployment File consumer will display
+        the description when processing the parent element that
+        contains the description.
+        
+        The lang attribute defines the language that the
+        description is provided in. The default value is "en" (English). 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:xsdStringType">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a dewey decimal that is used
+        to describe versions of documents. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\.?[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The display-name type contains a short name that is intended
+        to be displayed by tools. It is used by display-name
+        elements.  The display name need not be unique.
+        
+        Example: 
+        
+        ...
+        <display-name xml:lang="en">
+        Employee Self Service
+        </display-name>
+        
+        The value of the xml:lang attribute is "en" (English) by default. 
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:string">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-linkType is used by ejb-link
+        elements in the ejb-ref or ejb-local-ref elements to specify
+        that an EJB reference is linked to enterprise bean.
+        
+        The value of the ejb-link element must be the ejb-name of an
+        enterprise bean in the same ejb-jar file or in another ejb-jar
+        file in the same Java EE application unit. 
+        
+        Alternatively, the name in the ejb-link element may be
+        composed of a path name specifying the ejb-jar containing the
+        referenced enterprise bean with the ejb-name of the target
+        bean appended and separated from the path name by "#".  The
+        path name is relative to the Deployment File containing
+        Deployment Component that is referencing the enterprise
+        bean.  This allows multiple enterprise beans with the same
+        ejb-name to be uniquely identified.
+        
+        Examples:
+        
+        <ejb-link>EmployeeRecord</ejb-link>
+        
+        <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-local-refType is used by ejb-local-ref elements for
+        the declaration of a reference to an enterprise bean's local
+        home or to the local business interface of a 3.0 bean.
+        The declaration consists of:
+        
+        - an optional description
+        - the EJB reference name used in the code of the Deployment 
+        Component that's referencing the enterprise bean.
+        - the optional expected type of the referenced enterprise bean
+        - the optional expected local interface of the referenced 
+        enterprise bean or the local business interface of the 
+        referenced enterprise bean.
+        - the optional expected local home interface of the referenced 
+        enterprise bean. Not applicable if this ejb-local-ref refers
+        to the local business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the 
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise  
+        bean into a component field or property.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-ref-name element contains the name of an EJB
+        reference. The EJB reference is an entry in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  The name must be unique within the
+        Deployment Component.
+        
+        It is recommended that name is prefixed with "ejb/".
+        
+        Example:
+        
+        <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-refType is used by ejb-ref elements for the
+        declaration of a reference to an enterprise bean's home or
+        to the remote business interface of a 3.0 bean.  
+        The declaration consists of:
+        
+        - an optional description
+        - the EJB reference name used in the code of
+        the Deployment Component that's referencing the enterprise
+        bean. 
+        - the optional expected type of the referenced enterprise bean
+        - the optional remote interface of the referenced enterprise bean
+        or the remote business interface of the referenced enterprise 
+        bean
+        - the optional expected home interface of the referenced 
+        enterprise bean.  Not applicable if this ejb-ref
+        refers to the remote business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise
+        bean into a component field or property
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-ref-typeType contains the expected type of the
+        referenced enterprise bean.
+        
+        The ejb-ref-type designates a value
+        that must be one of the following:
+        
+        Entity
+        Session
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Entity"/>
+        <xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is used to designate an empty
+        element when used. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The env-entryType is used to declare an application's
+        environment entry. The declaration consists of an optional
+        description, the name of the environment entry, a type
+        (optional if the value is injected, otherwise required), and
+        an optional value.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        If a value is not specified and injection is requested,
+        no injection will occur and no entry of the specified name
+        will be created.  This allows an initial value to be
+        specified in the source code without being incorrectly
+        changed when no override has been specified.
+        
+        If a value is not specified and no injection is requested,
+        a value must be supplied during deployment. 
+        
+        This type is used by env-entry elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The env-entry-name element contains the name of a
+            Deployment Component's environment entry.  The name
+            is a JNDI name relative to the java:comp/env
+            context.  The name must be unique within a 
+            Deployment Component. The uniqueness
+            constraints must be defined within the declared
+            context.
+            
+            Example:
+            
+            <env-entry-name>minAmount</env-entry-name>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-type"
+                   type="javaee:env-entry-type-valuesType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The env-entry-type element contains the Java language
+            type of the environment entry.  If an injection target
+            is specified for the environment entry, the type may
+            be omitted, or must match the type of the injection
+            target.  If no injection target is specified, the type
+            is required.
+            
+            Example:
+            
+            <env-entry-type>java.lang.Integer</env-entry-type>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-value"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The env-entry-value designates the value of a
+            Deployment Component's environment entry. The value
+            must be a String that is valid for the
+            constructor of the specified type that takes a
+            single String parameter, or for java.lang.Character,
+            a single character.
+            
+            Example:
+            
+            <env-entry-value>100.00</env-entry-value>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        This type contains the fully-qualified Java type of the
+        environment entry value that is expected by the
+        application's code.
+        
+        The following are the legal values of env-entry-type-valuesType:
+        
+        java.lang.Boolean
+        java.lang.Byte
+        java.lang.Character
+        java.lang.String
+        java.lang.Short
+        java.lang.Integer
+        java.lang.Long
+        java.lang.Float
+        java.lang.Double
+        		  java.lang.Class
+        		  any enumeration type (i.e. a subclass of java.lang.Enum)
+        
+        Examples:
+        
+        <env-entry-type>java.lang.Boolean</env-entry-type>
+        <env-entry-type>java.lang.Class</env-entry-type>
+        <env-entry-type>com.example.Color</env-entry-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate the name of a
+        Java class or interface.  The name is in the form of a
+        "binary name", as defined in the JLS.  This is the form
+        of name used in Class.forName().  Tools that need the
+        canonical name (the name used in source code) will need
+        to convert this binary name to the canonical name.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines four different values which can designate
+        boolean values. This includes values yes and no which are 
+        not designated by xsd:boolean
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="true"/>
+        <xsd:enumeration value="false"/>
+        <xsd:enumeration value="yes"/>
+        <xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The icon type contains small-icon and large-icon elements
+        that specify the file names for small and large GIF, JPEG,
+        or PNG icon images used to represent the parent element in a
+        GUI tool. 
+        
+        The xml:lang attribute defines the language that the
+        icon file names are provided in. Its value is "en" (English)
+        by default. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="small-icon"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The small-icon element contains the name of a file
+            containing a small (16 x 16) icon image. The file
+            name is a relative path within the Deployment
+            Component's Deployment File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <small-icon>employee-service-icon16x16.jpg</small-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The large-icon element contains the name of a file
+            containing a large
+            (32 x 32) icon image. The file name is a relative 
+            path within the Deployment Component's Deployment
+            File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <large-icon>employee-service-icon32x32.jpg</large-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="injection-targetType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        An injection target specifies a class and a name within
+        that class into which a resource should be injected.
+        
+        The injection target class specifies the fully qualified
+        class name that is the target of the injection.  The
+        Java EE specifications describe which classes can be an
+        injection target.
+        
+        The injection target name specifies the target within
+        the specified class.  The target is first looked for as a
+        JavaBeans property name.  If not found, the target is
+        looked for as a field name.
+        
+        The specified resource will be injected into the target
+        during initialization of the class by either calling the
+        set method for the target property or by setting a value
+        into the named field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="injection-target-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="injection-target-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:simpleType name="isolation-levelType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        	The following transaction isolation levels are allowed
+        	(see documentation for the java.sql.Connection interface):
+        TRANSACTION_READ_UNCOMMITTED
+        TRANSACTION_READ_COMMITTED
+        TRANSACTION_REPEATABLE_READ
+        TRANSACTION_SERIALIZABLE
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="TRANSACTION_READ_UNCOMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_READ_COMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_REPEATABLE_READ"/>
+      <xsd:enumeration value="TRANSACTION_SERIALIZABLE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The java-identifierType defines a Java identifier.
+        The users of this type should further verify that 
+        the content does not contain Java reserved keywords.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a generic type that designates a Java primitive
+        type or a fully qualified name of a Java interface/type,
+        or an array of such types.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jdbc-urlType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The jdbc-urlType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 9.3 of the
+        JDBC Specification where the format is:
+        
+        jdbc:<subprotocol>:<subname>
+        
+        Example:
+        
+        <url>jdbc:mysql://localhost:3307/testdb</url>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="jdbc:(.*):(.*)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jndi-nameType type designates a JNDI name in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  A JNDI name must be unique within the
+        Deployment Component.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The homeType defines the fully-qualified name of
+        an enterprise bean's home interface. 
+        
+        Example:
+        
+        <home>com.aardvark.payroll.PayrollHome</home>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lifecycle-callbackType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The lifecycle-callback type specifies a method on a
+        class to be called when a lifecycle event occurs.
+        Note that each class may have only one lifecycle callback
+        method for any given event and that the method may not
+        be overloaded.
+        
+        If the lifefycle-callback-class element is missing then
+        the class defining the callback is assumed to be the
+        component class in scope at the place in the descriptor
+        in which the callback definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="lifecycle-callback-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="lifecycle-callback-method"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The listenerType indicates the deployment properties for a web
+        application listener bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The listener-class element declares a class in the
+            application must be registered as a web
+            application listener bean. The value is the fully
+            qualified classname of the listener class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localType defines the fully-qualified name of an
+        enterprise bean's local interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The local-homeType defines the fully-qualified
+        name of an enterprise bean's local home interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is a general type that can be used to declare
+        parameter/value lists.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-name element contains the name of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="param-value"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-value element contains the value of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate either a relative
+        path or an absolute path starting with a "/".
+        
+        In elements that specify a pathname to a file within the
+        same Deployment File, relative filenames (i.e., those not
+        starting with "/") are considered relative to the root of
+        the Deployment File's namespace.  Absolute filenames (i.e.,
+        those starting with "/") also specify names in the root of
+        the Deployment File's namespace.  In general, relative names
+        are preferred.  The exception is .war files where absolute
+        names are preferred for consistency with the Servlet API.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The persistence-context-ref element contains a declaration
+        of Deployment Component's reference to a persistence context
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence context reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - an optional specification as to whether
+        the persistence context type is Transaction or
+        Extended.  If not specified, Transaction is assumed.
+        - an optional list of persistence properties
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        </persistence-context-ref>
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        <persistence-context-type>Extended</persistence-context-type>
+        </persistence-context-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-context-ref-name element specifies
+            the name of a persistence context reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-context-type"
+                   type="javaee:persistence-context-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify properties for the container or persistence
+            provider.  Vendor-specific properties may be included in
+            the set of properties.  Properties that are not recognized
+            by a vendor must be ignored.  Entries that make use of the 
+            namespace javax.persistence and its subnamespaces must not
+            be used for vendor-specific properties.  The namespace
+            javax.persistence is reserved for use by the specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-typeType specifies the transactional
+        nature of a persistence context reference.  
+        
+        The value of the persistence-context-type element must be
+        one of the following:
+        Transaction
+        Extended
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Transaction"/>
+        <xsd:enumeration value="Extended"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies a name/value pair.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:xsdStringType">
+      </xsd:element>
+      <xsd:element name="value"
+                   type="javaee:xsdStringType">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The persistence-unit-ref element contains a declaration
+        of Deployment Component's reference to a persistence unit
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence unit reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        </persistence-unit-ref>
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        </persistence-unit-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-unit-ref-name element specifies
+            the name of a persistence unit reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The remote element contains the fully-qualified name
+        of the enterprise bean's remote interface.
+        
+        Example:
+        
+        <remote>com.wombat.empl.EmployeeService</remote>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The resource-env-refType is used to define
+        resource-env-ref elements.  It contains a declaration of a
+        Deployment Component's reference to an administered object
+        associated with a resource in the Deployment Component's
+        environment.  It consists of an optional description, the
+        resource environment reference name, and an optional
+        indication of the resource environment reference type
+        expected by the Deployment Component code.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The resource environment type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-env-ref>
+        <resource-env-ref-name>jms/StockQueue
+        </resource-env-ref-name>
+        <resource-env-ref-type>javax.jms.Queue
+        </resource-env-ref-type>
+        </resource-env-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-name element specifies the name
+            of a resource environment reference; its value is
+            the environment entry name used in
+            the Deployment Component code.  The name is a JNDI 
+            name relative to the java:comp/env context and must 
+            be unique within a Deployment Component.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-env-ref-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-type element specifies the type
+            of a resource environment reference.  It is the
+            fully qualified name of a Java language class or
+            interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The resource-refType contains a declaration of a
+        Deployment Component's reference to an external resource. It
+        consists of an optional description, the resource manager
+        connection factory reference name, an optional indication of
+        the resource manager connection factory type expected by the
+        Deployment Component code, an optional type of authentication
+        (Application or Container), and an optional specification of
+        the shareability of connections obtained from the resource
+        (Shareable or Unshareable).
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The connection factory type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-ref>
+        <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+        <res-type>javax.sql.DataSource</res-type>
+        <res-auth>Container</res-auth>
+        <res-sharing-scope>Shareable</res-sharing-scope>
+        </resource-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-ref-name element specifies the name of a
+            resource manager connection factory reference.
+            The name is a JNDI name relative to the
+            java:comp/env context.  
+            The name must be unique within a Deployment File. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-type element specifies the type of the data
+            source. The type is specified by the fully qualified
+            Java language class or interface
+            expected to be implemented by the data source.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-auth"
+                   type="javaee:res-authType"
+                   minOccurs="0"/>
+      <xsd:element name="res-sharing-scope"
+                   type="javaee:res-sharing-scopeType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-authType specifies whether the Deployment Component
+        code signs on programmatically to the resource manager, or
+        whether the Container will sign on to the resource manager
+        on behalf of the Deployment Component. In the latter case,
+        the Container uses information that is supplied by the
+        Deployer.
+        
+        The value must be one of the two following:
+        
+        Application
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Application"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-sharing-scope type specifies whether connections
+        obtained through the given resource manager connection
+        factory reference can be shared. The value, if specified,
+        must be one of the two following:
+        
+        Shareable
+        Unshareable
+        
+        The default value is Shareable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Shareable"/>
+        <xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The run-asType specifies the run-as identity to be
+        used for the execution of a component. It contains an 
+        optional description, and the name of a security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The role-nameType designates the name of a security role.
+        
+        The name must conform to the lexical rules for a token.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The security-roleType contains the definition of a security
+        role. The definition consists of an optional description of
+        the security role, and the security role name.
+        
+        Example:
+        
+        <security-role>
+        <description>
+        This role includes all employees who are authorized
+        to access the employee service application.
+        </description>
+        <role-name>employee</role-name>
+        </security-role>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-role-refType contains the declaration of a
+        security role reference in a component's or a
+        Deployment Component's code. The declaration consists of an
+        optional description, the security role name used in the
+        code, and an optional link to a security role. If the
+        security role is not specified, the Deployer must choose an
+        appropriate security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The value of the role-name element must be the String used
+            as the parameter to the 
+            EJBContext.isCallerInRole(String roleName) method or the
+            HttpServletRequest.isUserInRole(String role) method.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="role-link"
+                   type="javaee:role-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The role-link element is a reference to a defined
+            security role. The role-link element must contain
+            the name of one of the security roles defined in the
+            security-role elements.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:QName.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:boolean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:NMTOKEN.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:anyURI.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:integer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:positiveInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:nonNegativeInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:string.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a special string datatype that is defined by Java EE as
+        a base type for defining collapsed strings. When schemas
+        require trailing/leading space elimination as well as
+        collapsing the existing whitespace, this base type may be
+        used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This simple type designates a boolean with only two
+        permissible values
+        
+        - true
+        - false
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdBooleanType">
+        <xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The url-patternType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 11.2 of the
+        Servlet API Specification. This pattern is assumed to be in
+        URL-decoded form and must not contain CR(#xD) or LF(#xA).
+        If it contains those characters, the container must inform
+        the developer with a descriptive error message.
+        The container must preserve all characters including whitespaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The message-destinationType specifies a message
+        destination. The logical destination described by this
+        element is mapped to a physical destination by the Deployer.
+        
+        The message destination element contains: 
+        
+        - an optional description
+        - an optional display-name
+        - an optional icon
+        - a message destination name which must be unique
+        among message destination names within the same 
+        Deployment File. 
+        - an optional mapped name
+        - an optional lookup name
+        
+        Example: 
+        
+        <message-destination>
+        <message-destination-name>CorporateStocks
+        </message-destination-name>
+        </message-destination>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-name element specifies a
+            name for a message destination.  This name must be
+            unique among the names of message destinations
+            within the Deployment File.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this message destination
+            should be mapped to.  Each message-destination-ref
+            element that references this message destination will
+            define a name in the namespace of the referencing
+            component or in one of the other predefined namespaces. 
+            Many application servers provide a way to map these
+            local names to names of resources known to the
+            application server.  This mapped name is often a global
+            JNDI name, but may be a name of any form.  Each of the
+            local names should be mapped to this same global name.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lookup-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve the message destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The message-destination-ref element contains a declaration
+        of Deployment Component's reference to a message destination
+        associated with a resource in Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the message destination reference name
+        - an optional message destination type
+        - an optional specification as to whether
+        the destination is used for 
+        consuming or producing messages, or both.
+        if not specified, "both" is assumed.
+        - an optional link to the message destination
+        - optional injection targets
+        
+        The message destination type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Examples:
+        
+        <message-destination-ref>
+        <message-destination-ref-name>jms/StockQueue
+        </message-destination-ref-name>
+        <message-destination-type>javax.jms.Queue
+        </message-destination-type>
+        <message-destination-usage>Consumes
+        </message-destination-usage>
+        <message-destination-link>CorporateStocks
+        </message-destination-link>
+        </message-destination-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-ref-name element specifies
+            the name of a message destination reference; its
+            value is the environment entry name used in
+            Deployment Component code.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+                   type="javaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-usage"
+                   type="javaee:message-destination-usageType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="javaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-usageType specifies the use of the
+        message destination indicated by the reference.  The value
+        indicates whether messages are consumed from the message
+        destination, produced for the destination, or both.  The
+        Assembler makes use of this information in linking producers
+        of a destination with its consumers.
+        
+        The value of the message-destination-usage element must be
+        one of the following:
+        Consumes
+        Produces
+        ConsumesProduces
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Consumes"/>
+        <xsd:enumeration value="Produces"/>
+        <xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The message-destination-typeType specifies the type of
+        the destination. The type is specified by the Java interface
+        expected to be implemented by the destination.
+        
+        Example: 
+        
+        <message-destination-type>javax.jms.Queue
+        </message-destination-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-linkType is used to link a message
+        destination reference or message-driven bean to a message
+        destination.
+        
+        The Assembler sets the value to reflect the flow of messages
+        between producers and consumers in the application.
+        
+        The value must be the message-destination-name of a message
+        destination in the same Deployment File or in another
+        Deployment File in the same Java EE application unit.
+        
+        Alternatively, the value may be composed of a path name
+        specifying a Deployment File containing the referenced
+        message destination with the message-destination-name of the
+        destination appended and separated from the path name by
+        "#". The path name is relative to the Deployment File
+        containing Deployment Component that is referencing the
+        message destination.  This allows multiple message
+        destinations with the same name to be uniquely identified.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/javaee_7.xsd b/wildfly/docs/schema/javaee_7.xsd
new file mode 100644
index 0000000..f9fdb31
--- /dev/null
+++ b/wildfly/docs/schema/javaee_7.xsd
@@ -0,0 +1,3098 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following definitions that appear in the common
+      shareable schema(s) of Java EE deployment descriptors should be
+      interpreted with respect to the context they are included:
+      
+      Deployment Component may indicate one of the following:
+      java ee application;
+      application client;
+      web application;
+      enterprise bean;
+      resource adapter; 
+      
+      Deployment File may indicate one of the following:
+      ear file;
+      war file;
+      jar file;
+      rar file;
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+              schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation="javaee_web_services_client_1_4.xsd"/>
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained description related
+        elements consistent across Java EE deployment descriptors.
+        
+        All elements may occur multiple times with different languages,
+        to support localization of the content.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained JNDI environment
+        reference elements consistent across Java EE deployment descriptors.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="javaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="javaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="javaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="javaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="javaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="javaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="javaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to most
+        JNDI resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+      <xsd:element name="lookup-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve a resource reference.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceBaseGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to all the
+        JNDI resource elements. It does not include the lookup-name
+        element, that is only applicable to some resource elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this resource should be
+            mapped to.  The name of this resource, as defined by the
+            resource's name element or defaulted, is a name that is
+            local to the application component using the resource.
+            (It's a name in the JNDI java:comp/env namespace.)  Many
+            application servers provide a way to map these local
+            names to names of resources known to the application
+            server.  This mapped name is often a global JNDI name,
+            but may be a name of any form.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="injection-target"
+                   type="javaee:injection-targetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="administered-objectType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of an administered object.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this administered object.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            administered object being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's interface type.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's class name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Property of the administered object property.  This may be a 
+            vendor-specific property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="connection-factory-resourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Connector Connection Factory resource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this resource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            resource being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified class name of the connection factory 
+            interface. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transaction-support"
+                   type="javaee:transaction-supportType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The level of transaction support the connection factory 
+            needs to support. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource property.  This may be a vendor-specific
+            property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a DataSource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this DataSource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            data source being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            DataSource, XADataSource or ConnectionPoolDataSource
+            implementation class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="server-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Database server name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-number"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Port number where a server is listening for requests.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="database-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of a database on a server.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="url"
+                   type="javaee:jdbc-urlType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            A JDBC URL. If the <code>url</code> property is specified
+            along with other standard <code>DataSource</code> properties
+            such as <code>serverName</code>, <code>databaseName</code>
+            and <code>portNumber</code>, the more specific properties will
+            take precedence and <code>url</code> will be ignored.
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JDBC DataSource property.  This may be a vendor-specific
+            property or a less commonly used DataSource property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="login-timeout"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Sets the maximum time in seconds that this data source
+            will wait while attempting to connect to a database.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="javaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="isolation-level"
+                   type="javaee:isolation-levelType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Isolation level for connections.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="initial-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Number of connections that should be created when a
+            connection pool is initialized.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-idle-time"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The number of seconds that a physical connection should
+            remain unused in the pool before the connection is
+            closed for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-statements"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The total number of statements that a connection pool
+            should keep open.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The description type is used by a description element to
+        provide text describing the parent element.  The elements
+        that use this type should include any information that the
+        Deployment Component's Deployment File file producer wants
+        to provide to the consumer of the Deployment Component's
+        Deployment File (i.e., to the Deployer). Typically, the
+        tools used by such a Deployment File consumer will display
+        the description when processing the parent element that
+        contains the description.
+        
+        The lang attribute defines the language that the
+        description is provided in. The default value is "en" (English). 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:xsdStringType">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a dewey decimal that is used
+        to describe versions of documents. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\.?[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The display-name type contains a short name that is intended
+        to be displayed by tools. It is used by display-name
+        elements.  The display name need not be unique.
+        
+        Example: 
+        
+        ...
+        <display-name xml:lang="en">
+        Employee Self Service
+        </display-name>
+        
+        The value of the xml:lang attribute is "en" (English) by default. 
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:string">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-linkType is used by ejb-link
+        elements in the ejb-ref or ejb-local-ref elements to specify
+        that an EJB reference is linked to enterprise bean.
+        
+        The value of the ejb-link element must be the ejb-name of an
+        enterprise bean in the same ejb-jar file or in another ejb-jar
+        file in the same Java EE application unit. 
+        
+        Alternatively, the name in the ejb-link element may be
+        composed of a path name specifying the ejb-jar containing the
+        referenced enterprise bean with the ejb-name of the target
+        bean appended and separated from the path name by "#".  The
+        path name is relative to the Deployment File containing
+        Deployment Component that is referencing the enterprise
+        bean.  This allows multiple enterprise beans with the same
+        ejb-name to be uniquely identified.
+        
+        Examples:
+        
+        <ejb-link>EmployeeRecord</ejb-link>
+        
+        <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-local-refType is used by ejb-local-ref elements for
+        the declaration of a reference to an enterprise bean's local
+        home or to the local business interface of a 3.0 bean.
+        The declaration consists of:
+        
+        - an optional description
+        - the EJB reference name used in the code of the Deployment 
+        Component that's referencing the enterprise bean.
+        - the optional expected type of the referenced enterprise bean
+        - the optional expected local interface of the referenced 
+        enterprise bean or the local business interface of the 
+        referenced enterprise bean.
+        - the optional expected local home interface of the referenced 
+        enterprise bean. Not applicable if this ejb-local-ref refers
+        to the local business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the 
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise  
+        bean into a component field or property.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The ejb-ref-name element contains the name of an EJB
+        reference. The EJB reference is an entry in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  The name must be unique within the
+        Deployment Component.
+        
+        It is recommended that name is prefixed with "ejb/".
+        
+        Example:
+        
+        <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-refType is used by ejb-ref elements for the
+        declaration of a reference to an enterprise bean's home or
+        to the remote business interface of a 3.0 bean.  
+        The declaration consists of:
+        
+        - an optional description
+        - the EJB reference name used in the code of
+        the Deployment Component that's referencing the enterprise
+        bean. 
+        - the optional expected type of the referenced enterprise bean
+        - the optional remote interface of the referenced enterprise bean
+        or the remote business interface of the referenced enterprise 
+        bean
+        - the optional expected home interface of the referenced 
+        enterprise bean.  Not applicable if this ejb-ref
+        refers to the remote business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise
+        bean into a component field or property
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-ref-typeType contains the expected type of the
+        referenced enterprise bean.
+        
+        The ejb-ref-type designates a value
+        that must be one of the following:
+        
+        Entity
+        Session
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Entity"/>
+        <xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is used to designate an empty
+        element when used. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The env-entryType is used to declare an application's
+        environment entry. The declaration consists of an optional
+        description, the name of the environment entry, a type
+        (optional if the value is injected, otherwise required), and
+        an optional value.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        If a value is not specified and injection is requested,
+        no injection will occur and no entry of the specified name
+        will be created.  This allows an initial value to be
+        specified in the source code without being incorrectly
+        changed when no override has been specified.
+        
+        If a value is not specified and no injection is requested,
+        a value must be supplied during deployment. 
+        
+        This type is used by env-entry elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The env-entry-name element contains the name of a
+            Deployment Component's environment entry.  The name
+            is a JNDI name relative to the java:comp/env
+            context.  The name must be unique within a 
+            Deployment Component. The uniqueness
+            constraints must be defined within the declared
+            context.
+            
+            Example:
+            
+            <env-entry-name>minAmount</env-entry-name>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-type"
+                   type="javaee:env-entry-type-valuesType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The env-entry-type element contains the Java language
+            type of the environment entry.  If an injection target
+            is specified for the environment entry, the type may
+            be omitted, or must match the type of the injection
+            target.  If no injection target is specified, the type
+            is required.
+            
+            Example:
+            
+            <env-entry-type>java.lang.Integer</env-entry-type>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-value"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The env-entry-value designates the value of a
+            Deployment Component's environment entry. The value
+            must be a String that is valid for the
+            constructor of the specified type that takes a
+            single String parameter, or for java.lang.Character,
+            a single character.
+            
+            Example:
+            
+            <env-entry-value>100.00</env-entry-value>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        This type contains the fully-qualified Java type of the
+        environment entry value that is expected by the
+        application's code.
+        
+        The following are the legal values of env-entry-type-valuesType:
+        
+        java.lang.Boolean
+        java.lang.Byte
+        java.lang.Character
+        java.lang.String
+        java.lang.Short
+        java.lang.Integer
+        java.lang.Long
+        java.lang.Float
+        java.lang.Double
+        		  java.lang.Class
+        		  any enumeration type (i.e. a subclass of java.lang.Enum)
+        
+        Examples:
+        
+        <env-entry-type>java.lang.Boolean</env-entry-type>
+        <env-entry-type>java.lang.Class</env-entry-type>
+        <env-entry-type>com.example.Color</env-entry-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate the name of a
+        Java class or interface.  The name is in the form of a
+        "binary name", as defined in the JLS.  This is the form
+        of name used in Class.forName().  Tools that need the
+        canonical name (the name used in source code) will need
+        to convert this binary name to the canonical name.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines four different values which can designate
+        boolean values. This includes values yes and no which are 
+        not designated by xsd:boolean
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="true"/>
+        <xsd:enumeration value="false"/>
+        <xsd:enumeration value="yes"/>
+        <xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The icon type contains small-icon and large-icon elements
+        that specify the file names for small and large GIF, JPEG,
+        or PNG icon images used to represent the parent element in a
+        GUI tool. 
+        
+        The xml:lang attribute defines the language that the
+        icon file names are provided in. Its value is "en" (English)
+        by default. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="small-icon"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The small-icon element contains the name of a file
+            containing a small (16 x 16) icon image. The file
+            name is a relative path within the Deployment
+            Component's Deployment File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <small-icon>employee-service-icon16x16.jpg</small-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The large-icon element contains the name of a file
+            containing a large
+            (32 x 32) icon image. The file name is a relative 
+            path within the Deployment Component's Deployment
+            File.
+            
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+            
+            Example:
+            
+            <large-icon>employee-service-icon32x32.jpg</large-icon>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="injection-targetType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        An injection target specifies a class and a name within
+        that class into which a resource should be injected.
+        
+        The injection target class specifies the fully qualified
+        class name that is the target of the injection.  The
+        Java EE specifications describe which classes can be an
+        injection target.
+        
+        The injection target name specifies the target within
+        the specified class.  The target is first looked for as a
+        JavaBeans property name.  If not found, the target is
+        looked for as a field name.
+        
+        The specified resource will be injected into the target
+        during initialization of the class by either calling the
+        set method for the target property or by setting a value
+        into the named field.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="injection-target-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="injection-target-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:simpleType name="isolation-levelType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        	The following transaction isolation levels are allowed
+        	(see documentation for the java.sql.Connection interface):
+        TRANSACTION_READ_UNCOMMITTED
+        TRANSACTION_READ_COMMITTED
+        TRANSACTION_REPEATABLE_READ
+        TRANSACTION_SERIALIZABLE
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="TRANSACTION_READ_UNCOMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_READ_COMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_REPEATABLE_READ"/>
+      <xsd:enumeration value="TRANSACTION_SERIALIZABLE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The java-identifierType defines a Java identifier.
+        The users of this type should further verify that 
+        the content does not contain Java reserved keywords.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a generic type that designates a Java primitive
+        type or a fully qualified name of a Java interface/type,
+        or an array of such types.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jdbc-urlType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The jdbc-urlType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 9.3 of the
+        JDBC Specification where the format is:
+        
+        jdbc:<subprotocol>:<subname>
+        
+        Example:
+        
+        <url>jdbc:mysql://localhost:3307/testdb</url>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="jdbc:(.*):(.*)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-connection-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a JMS Connection Factory.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this JMS Connection Factory.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            JMS connection factory being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS connection factory
+            interface.  Permitted values are javax.jms.ConnectionFactory,
+            javax.jms.QueueConnectionFactory, or 
+            javax.jms.TopicConnectionFactory.  If not specified,
+            javax.jms.ConnectionFactory will be used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS connection factory
+            implementation class.  Ignored if a resource adapter  
+            is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-id"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Client id to use for connection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JMS Connection Factory property.  This may be a vendor-specific
+            property or a less commonly used ConnectionFactory property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="javaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a JMS Destination.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this JMS Destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            JMS destination being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS destination interface.
+            Permitted values are javax.jms.Queue and javax.jms.Topic
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS destination implementation
+            class.  Ignored if a resource adapter is used unless the
+            resource adapter defines more than one destination implementation
+            class for the specified interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="destination-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of the queue or topic.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JMS Destination property.  This may be a vendor-specific
+            property or a less commonly used Destination property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jndi-nameType type designates a JNDI name in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  A JNDI name must be unique within the
+        Deployment Component.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The homeType defines the fully-qualified name of
+        an enterprise bean's home interface. 
+        
+        Example:
+        
+        <home>com.aardvark.payroll.PayrollHome</home>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lifecycle-callbackType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The lifecycle-callback type specifies a method on a
+        class to be called when a lifecycle event occurs.
+        Note that each class may have only one lifecycle callback
+        method for any given event and that the method may not
+        be overloaded.
+        
+        If the lifefycle-callback-class element is missing then
+        the class defining the callback is assumed to be the
+        component class in scope at the place in the descriptor
+        in which the callback definition appears.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="lifecycle-callback-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="lifecycle-callback-method"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The listenerType indicates the deployment properties for a web
+        application listener bean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The listener-class element declares a class in the
+            application must be registered as a web
+            application listener bean. The value is the fully
+            qualified classname of the listener class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localType defines the fully-qualified name of an
+        enterprise bean's local interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The local-homeType defines the fully-qualified
+        name of an enterprise bean's local home interface.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mail-sessionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Mail Session resource.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Mail Session resource.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            Mail Session resource being defined.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Storage protocol.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider store protocol implementation class
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Transport protocol.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider transport protocol implementation class
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="host"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server host name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server user name.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Email address to indicate the message sender.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server property.  This may be a vendor-specific
+            property.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is a general type that can be used to declare
+        parameter/value lists.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-name element contains the name of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="param-value"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-value element contains the value of a
+            parameter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate either a relative
+        path or an absolute path starting with a "/".
+        
+        In elements that specify a pathname to a file within the
+        same Deployment File, relative filenames (i.e., those not
+        starting with "/") are considered relative to the root of
+        the Deployment File's namespace.  Absolute filenames (i.e.,
+        those starting with "/") also specify names in the root of
+        the Deployment File's namespace.  In general, relative names
+        are preferred.  The exception is .war files where absolute
+        names are preferred for consistency with the Servlet API.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The persistence-context-ref element contains a declaration
+        of Deployment Component's reference to a persistence context
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence context reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - an optional specification as to whether
+        the persistence context type is Transaction or
+        Extended.  If not specified, Transaction is assumed.
+        - an optional specification as to whether
+        the persistence context synchronization with the current
+        transaction is Synchronized or Unsynchronized. If not
+        specified, Synchronized is assumed.
+        - an optional list of persistence properties
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        </persistence-context-ref>
+        
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        <persistence-context-type>Extended</persistence-context-type>
+        </persistence-context-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-context-ref-name element specifies
+            the name of a persistence context reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-context-type"
+                   type="javaee:persistence-context-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-context-synchronization"
+                   type="javaee:persistence-context-synchronizationType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify properties for the container or persistence
+            provider.  Vendor-specific properties may be included in
+            the set of properties.  Properties that are not recognized
+            by a vendor must be ignored.  Entries that make use of the 
+            namespace javax.persistence and its subnamespaces must not
+            be used for vendor-specific properties.  The namespace
+            javax.persistence is reserved for use by the specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-synchronizationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-synchronizationType specifies 
+        whether a container-managed persistence context is automatically
+        synchronized with the current transaction.
+        
+        The value of the persistence-context-synchronization element 
+        must be one of the following:
+        Synchronized
+        Unsynchronized
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Synchronized"/>
+        <xsd:enumeration value="Unsynchronized"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-typeType specifies the transactional
+        nature of a persistence context reference.  
+        
+        The value of the persistence-context-type element must be
+        one of the following:
+        Transaction
+        Extended
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Transaction"/>
+        <xsd:enumeration value="Extended"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies a name/value pair.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:xsdStringType">
+      </xsd:element>
+      <xsd:element name="value"
+                   type="javaee:xsdStringType">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The persistence-unit-ref element contains a declaration
+        of Deployment Component's reference to a persistence unit
+        associated within a Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the persistence unit reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - optional injection targets
+        
+        Examples:
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        </persistence-unit-ref>
+        
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        </persistence-unit-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-unit-ref-name element specifies
+            the name of a persistence unit reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+            
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file. 
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the 
+            Application Assembler cannot change persistence unit names.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The remote element contains the fully-qualified name
+        of the enterprise bean's remote interface.
+        
+        Example:
+        
+        <remote>com.wombat.empl.EmployeeService</remote>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The resource-env-refType is used to define
+        resource-env-ref elements.  It contains a declaration of a
+        Deployment Component's reference to an administered object
+        associated with a resource in the Deployment Component's
+        environment.  It consists of an optional description, the
+        resource environment reference name, and an optional
+        indication of the resource environment reference type
+        expected by the Deployment Component code.
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The resource environment type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-env-ref>
+        <resource-env-ref-name>jms/StockQueue
+        </resource-env-ref-name>
+        <resource-env-ref-type>javax.jms.Queue
+        </resource-env-ref-type>
+        </resource-env-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-name element specifies the name
+            of a resource environment reference; its value is
+            the environment entry name used in
+            the Deployment Component code.  The name is a JNDI 
+            name relative to the java:comp/env context and must 
+            be unique within a Deployment Component.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-env-ref-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-type element specifies the type
+            of a resource environment reference.  It is the
+            fully qualified name of a Java language class or
+            interface.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The resource-refType contains a declaration of a
+        Deployment Component's reference to an external resource. It
+        consists of an optional description, the resource manager
+        connection factory reference name, an optional indication of
+        the resource manager connection factory type expected by the
+        Deployment Component code, an optional type of authentication
+        (Application or Container), and an optional specification of
+        the shareability of connections obtained from the resource
+        (Shareable or Unshareable).
+        
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+        
+        The connection factory type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Example:
+        
+        <resource-ref>
+        <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+        <res-type>javax.sql.DataSource</res-type>
+        <res-auth>Container</res-auth>
+        <res-sharing-scope>Shareable</res-sharing-scope>
+        </resource-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-ref-name element specifies the name of a
+            resource manager connection factory reference.
+            The name is a JNDI name relative to the
+            java:comp/env context.  
+            The name must be unique within a Deployment File. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-type element specifies the type of the data
+            source. The type is specified by the fully qualified
+            Java language class or interface
+            expected to be implemented by the data source.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-auth"
+                   type="javaee:res-authType"
+                   minOccurs="0"/>
+      <xsd:element name="res-sharing-scope"
+                   type="javaee:res-sharing-scopeType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-authType specifies whether the Deployment Component
+        code signs on programmatically to the resource manager, or
+        whether the Container will sign on to the resource manager
+        on behalf of the Deployment Component. In the latter case,
+        the Container uses information that is supplied by the
+        Deployer.
+        
+        The value must be one of the two following:
+        
+        Application
+        Container
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Application"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-sharing-scope type specifies whether connections
+        obtained through the given resource manager connection
+        factory reference can be shared. The value, if specified,
+        must be one of the two following:
+        
+        Shareable
+        Unshareable
+        
+        The default value is Shareable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Shareable"/>
+        <xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The run-asType specifies the run-as identity to be
+        used for the execution of a component. It contains an 
+        optional description, and the name of a security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The role-nameType designates the name of a security role.
+        
+        The name must conform to the lexical rules for a token.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The security-roleType contains the definition of a security
+        role. The definition consists of an optional description of
+        the security role, and the security role name.
+        
+        Example:
+        
+        <security-role>
+        <description>
+        This role includes all employees who are authorized
+        to access the employee service application.
+        </description>
+        <role-name>employee</role-name>
+        </security-role>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-role-refType contains the declaration of a
+        security role reference in a component's or a
+        Deployment Component's code. The declaration consists of an
+        optional description, the security role name used in the
+        code, and an optional link to a security role. If the
+        security role is not specified, the Deployer must choose an
+        appropriate security role.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The value of the role-name element must be the String used
+            as the parameter to the 
+            EJBContext.isCallerInRole(String roleName) method or the
+            HttpServletRequest.isUserInRole(String role) method.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="role-link"
+                   type="javaee:role-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The role-link element is a reference to a defined
+            security role. The role-link element must contain
+            the name of one of the security roles defined in the
+            security-role elements.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:QName.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:boolean.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:NMTOKEN.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:anyURI.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:integer.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:positiveInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:nonNegativeInteger.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:string.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a special string datatype that is defined by Java EE as
+        a base type for defining collapsed strings. When schemas
+        require trailing/leading space elimination as well as
+        collapsing the existing whitespace, this base type may be
+        used.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This simple type designates a boolean with only two
+        permissible values
+        
+        - true
+        - false
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdBooleanType">
+        <xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The url-patternType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 11.2 of the
+        Servlet API Specification. This pattern is assumed to be in
+        URL-decoded form and must not contain CR(#xD) or LF(#xA).
+        If it contains those characters, the container must inform
+        the developer with a descriptive error message.
+        The container must preserve all characters including whitespaces.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The message-destinationType specifies a message
+        destination. The logical destination described by this
+        element is mapped to a physical destination by the Deployer.
+        
+        The message destination element contains: 
+        
+        - an optional description
+        - an optional display-name
+        - an optional icon
+        - a message destination name which must be unique
+        among message destination names within the same 
+        Deployment File. 
+        - an optional mapped name
+        - an optional lookup name
+        
+        Example: 
+        
+        <message-destination>
+        <message-destination-name>CorporateStocks
+        </message-destination-name>
+        </message-destination>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-name element specifies a
+            name for a message destination.  This name must be
+            unique among the names of message destinations
+            within the Deployment File.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this message destination
+            should be mapped to.  Each message-destination-ref
+            element that references this message destination will
+            define a name in the namespace of the referencing
+            component or in one of the other predefined namespaces. 
+            Many application servers provide a way to map these
+            local names to names of resources known to the
+            application server.  This mapped name is often a global
+            JNDI name, but may be a name of any form.  Each of the
+            local names should be mapped to this same global name.
+            
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lookup-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve the message destination.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The message-destination-ref element contains a declaration
+        of Deployment Component's reference to a message destination
+        associated with a resource in Deployment Component's
+        environment. It consists of:
+        
+        - an optional description
+        - the message destination reference name
+        - an optional message destination type
+        - an optional specification as to whether
+        the destination is used for 
+        consuming or producing messages, or both.
+        if not specified, "both" is assumed.
+        - an optional link to the message destination
+        - optional injection targets
+        
+        The message destination type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+        
+        Examples:
+        
+        <message-destination-ref>
+        <message-destination-ref-name>jms/StockQueue
+        </message-destination-ref-name>
+        <message-destination-type>javax.jms.Queue
+        </message-destination-type>
+        <message-destination-usage>Consumes
+        </message-destination-usage>
+        <message-destination-link>CorporateStocks
+        </message-destination-link>
+        </message-destination-ref>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-ref-name element specifies
+            the name of a message destination reference; its
+            value is the environment entry name used in
+            Deployment Component code.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+                   type="javaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-usage"
+                   type="javaee:message-destination-usageType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="javaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-usageType specifies the use of the
+        message destination indicated by the reference.  The value
+        indicates whether messages are consumed from the message
+        destination, produced for the destination, or both.  The
+        Assembler makes use of this information in linking producers
+        of a destination with its consumers.
+        
+        The value of the message-destination-usage element must be
+        one of the following:
+        Consumes
+        Produces
+        ConsumesProduces
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Consumes"/>
+        <xsd:enumeration value="Produces"/>
+        <xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The message-destination-typeType specifies the type of
+        the destination. The type is specified by the Java interface
+        expected to be implemented by the destination.
+        
+        Example: 
+        
+        <message-destination-type>javax.jms.Queue
+        </message-destination-type>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-linkType is used to link a message
+        destination reference or message-driven bean to a message
+        destination.
+        
+        The Assembler sets the value to reflect the flow of messages
+        between producers and consumers in the application.
+        
+        The value must be the message-destination-name of a message
+        destination in the same Deployment File or in another
+        Deployment File in the same Java EE application unit.
+        
+        Alternatively, the value may be composed of a path name
+        specifying a Deployment File containing the referenced
+        message destination with the message-destination-name of the
+        destination appended and separated from the path name by
+        "#". The path name is relative to the Deployment File
+        containing Deployment Component that is referencing the
+        message destination.  This allows multiple message
+        destinations with the same name to be uniquely identified.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-supportType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-supportType specifies the level of
+        transaction support provided by the resource adapter. It is
+        used by transaction-support elements.
+        
+        The value must be one of the following:
+        
+        NoTransaction
+        LocalTransaction
+        XATransaction
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NoTransaction"/>
+        <xsd:enumeration value="LocalTransaction"/>
+        <xsd:enumeration value="XATransaction"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/javaee_8.xsd b/wildfly/docs/schema/javaee_8.xsd
new file mode 100644
index 0000000..2996054
--- /dev/null
+++ b/wildfly/docs/schema/javaee_8.xsd
@@ -0,0 +1,3098 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+      Copyright (c) 2009-2017 Oracle and/or its affiliates. All rights reserved.
+
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following definitions that appear in the common
+      shareable schema(s) of Java EE deployment descriptors should be
+      interpreted with respect to the context they are included:
+
+      Deployment Component may indicate one of the following:
+      java ee application;
+      application client;
+      web application;
+      enterprise bean;
+      resource adapter;
+
+      Deployment File may indicate one of the following:
+      ear file;
+      war file;
+      jar file;
+      rar file;
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:import namespace="http://www.w3.org/XML/1998/namespace"
+              schemaLocation="http://www.w3.org/2001/xml.xsd"/>
+
+  <xsd:include schemaLocation="javaee_web_services_client_1_4.xsd"/>
+
+  <xsd:group name="descriptionGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained description related
+        elements consistent across Java EE deployment descriptors.
+
+        All elements may occur multiple times with different languages,
+        to support localization of the content.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="jndiEnvironmentRefsGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group keeps the usage of the contained JNDI environment
+        reference elements consistent across Java EE deployment descriptors.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="env-entry"
+                   type="javaee:env-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref"
+                   type="javaee:ejb-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-local-ref"
+                   type="javaee:ejb-local-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:group ref="javaee:service-refGroup"/>
+      <xsd:element name="resource-ref"
+                   type="javaee:resource-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref"
+                   type="javaee:resource-env-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref"
+                   type="javaee:message-destination-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref"
+                   type="javaee:persistence-context-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref"
+                   type="javaee:persistence-unit-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="post-construct"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="pre-destroy"
+                   type="javaee:lifecycle-callbackType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="data-source"
+                   type="javaee:data-sourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-connection-factory"
+                   type="javaee:jms-connection-factoryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jms-destination"
+                   type="javaee:jms-destinationType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="mail-session"
+                   type="javaee:mail-sessionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="connection-factory"
+                   type="javaee:connection-factory-resourceType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="administered-object"
+                   type="javaee:administered-objectType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to most
+        JNDI resource elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+      <xsd:element name="lookup-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve a resource reference.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+  <xsd:group name="resourceBaseGroup">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This group collects elements that are common to all the
+        JNDI resource elements. It does not include the lookup-name
+        element, that is only applicable to some resource elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this resource should be
+            mapped to.  The name of this resource, as defined by the
+            resource's name element or defaulted, is a name that is
+            local to the application component using the resource.
+            (It's a name in the JNDI java:comp/env namespace.)  Many
+            application servers provide a way to map these local
+            names to names of resources known to the application
+            server.  This mapped name is often a global JNDI name,
+            but may be a name of any form.
+
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="injection-target"
+                   type="javaee:injection-targetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:group>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="administered-objectType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of an administered object.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this administered object.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            administered object being defined.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's interface type.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The administered object's class name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Property of the administered object property.  This may be a
+            vendor-specific property.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="connection-factory-resourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Connector Connection Factory resource.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this resource.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            resource being defined.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified class name of the connection factory
+            interface.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transaction-support"
+                   type="javaee:transaction-supportType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The level of transaction support the connection factory
+            needs to support.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource property.  This may be a vendor-specific
+            property.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a DataSource.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this DataSource.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            data source being defined.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            DataSource, XADataSource or ConnectionPoolDataSource
+            implementation class.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="server-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Database server name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-number"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Port number where a server is listening for requests.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="database-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of a database on a server.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="url"
+                   type="javaee:jdbc-urlType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            A JDBC URL. If the <code>url</code> property is specified
+            along with other standard <code>DataSource</code> properties
+            such as <code>serverName</code>, <code>databaseName</code>
+            and <code>portNumber</code>, the more specific properties will
+            take precedence and <code>url</code> will be ignored.
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JDBC DataSource property.  This may be a vendor-specific
+            property or a less commonly used DataSource property.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="login-timeout"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Sets the maximum time in seconds that this data source
+            will wait while attempting to connect to a database.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="javaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="isolation-level"
+                   type="javaee:isolation-levelType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Isolation level for connections.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="initial-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Number of connections that should be created when a
+            connection pool is initialized.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-idle-time"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The number of seconds that a physical connection should
+            remain unused in the pool before the connection is
+            closed for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-statements"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The total number of statements that a connection pool
+            should keep open.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The description type is used by a description element to
+        provide text describing the parent element.  The elements
+        that use this type should include any information that the
+        Deployment Component's Deployment File file producer wants
+        to provide to the consumer of the Deployment Component's
+        Deployment File (i.e., to the Deployer). Typically, the
+        tools used by such a Deployment File consumer will display
+        the description when processing the parent element that
+        contains the description.
+
+        The lang attribute defines the language that the
+        description is provided in. The default value is "en" (English).
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:xsdStringType">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="dewey-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a dewey decimal that is used
+        to describe versions of documents.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\.?[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="display-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The display-name type contains a short name that is intended
+        to be displayed by tools. It is used by display-name
+        elements.  The display name need not be unique.
+
+        Example:
+
+        ...
+        <display-name xml:lang="en">
+        Employee Self Service
+        </display-name>
+
+        The value of the xml:lang attribute is "en" (English) by default.
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:string">
+        <xsd:attribute ref="xml:lang"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-linkType is used by ejb-link
+        elements in the ejb-ref or ejb-local-ref elements to specify
+        that an EJB reference is linked to enterprise bean.
+
+        The value of the ejb-link element must be the ejb-name of an
+        enterprise bean in the same ejb-jar file or in another ejb-jar
+        file in the same Java EE application unit.
+
+        Alternatively, the name in the ejb-link element may be
+        composed of a path name specifying the ejb-jar containing the
+        referenced enterprise bean with the ejb-name of the target
+        bean appended and separated from the path name by "#".  The
+        path name is relative to the Deployment File containing
+        Deployment Component that is referencing the enterprise
+        bean.  This allows multiple enterprise beans with the same
+        ejb-name to be uniquely identified.
+
+        Examples:
+
+        <ejb-link>EmployeeRecord</ejb-link>
+
+        <ejb-link>../products/product.jar#ProductEJB</ejb-link>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-local-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-local-refType is used by ejb-local-ref elements for
+        the declaration of a reference to an enterprise bean's local
+        home or to the local business interface of a 3.0 bean.
+        The declaration consists of:
+
+        - an optional description
+        - the EJB reference name used in the code of the Deployment
+        Component that's referencing the enterprise bean.
+        - the optional expected type of the referenced enterprise bean
+        - the optional expected local interface of the referenced
+        enterprise bean or the local business interface of the
+        referenced enterprise bean.
+        - the optional expected local home interface of the referenced
+        enterprise bean. Not applicable if this ejb-local-ref refers
+        to the local business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise
+        bean into a component field or property.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="local-home"
+                   type="javaee:local-homeType"
+                   minOccurs="0"/>
+      <xsd:element name="local"
+                   type="javaee:localType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The ejb-ref-name element contains the name of an EJB
+        reference. The EJB reference is an entry in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  The name must be unique within the
+        Deployment Component.
+
+        It is recommended that name is prefixed with "ejb/".
+
+        Example:
+
+        <ejb-ref-name>ejb/Payroll</ejb-ref-name>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:jndi-nameType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-refType is used by ejb-ref elements for the
+        declaration of a reference to an enterprise bean's home or
+        to the remote business interface of a 3.0 bean.
+        The declaration consists of:
+
+        - an optional description
+        - the EJB reference name used in the code of
+        the Deployment Component that's referencing the enterprise
+        bean.
+        - the optional expected type of the referenced enterprise bean
+        - the optional remote interface of the referenced enterprise bean
+        or the remote business interface of the referenced enterprise
+        bean
+        - the optional expected home interface of the referenced
+        enterprise bean.  Not applicable if this ejb-ref
+        refers to the remote business interface of a 3.0 bean.
+        - optional ejb-link information, used to specify the
+        referenced enterprise bean
+        - optional elements to define injection of the named enterprise
+        bean into a component field or property
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="ejb-ref-name"
+                   type="javaee:ejb-ref-nameType"/>
+      <xsd:element name="ejb-ref-type"
+                   type="javaee:ejb-ref-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="home"
+                   type="javaee:homeType"
+                   minOccurs="0"/>
+      <xsd:element name="remote"
+                   type="javaee:remoteType"
+                   minOccurs="0"/>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ejb-ref-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The ejb-ref-typeType contains the expected type of the
+        referenced enterprise bean.
+
+        The ejb-ref-type designates a value
+        that must be one of the following:
+
+        Entity
+        Session
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Entity"/>
+        <xsd:enumeration value="Session"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="emptyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is used to designate an empty
+        element when used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The env-entryType is used to declare an application's
+        environment entry. The declaration consists of an optional
+        description, the name of the environment entry, a type
+        (optional if the value is injected, otherwise required), and
+        an optional value.
+
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+
+        If a value is not specified and injection is requested,
+        no injection will occur and no entry of the specified name
+        will be created.  This allows an initial value to be
+        specified in the source code without being incorrectly
+        changed when no override has been specified.
+
+        If a value is not specified and no injection is requested,
+        a value must be supplied during deployment.
+
+        This type is used by env-entry elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="env-entry-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-name element contains the name of a
+            Deployment Component's environment entry.  The name
+            is a JNDI name relative to the java:comp/env
+            context.  The name must be unique within a
+            Deployment Component. The uniqueness
+            constraints must be defined within the declared
+            context.
+
+            Example:
+
+            <env-entry-name>minAmount</env-entry-name>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-type"
+                   type="javaee:env-entry-type-valuesType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-type element contains the Java language
+            type of the environment entry.  If an injection target
+            is specified for the environment entry, the type may
+            be omitted, or must match the type of the injection
+            target.  If no injection target is specified, the type
+            is required.
+
+            Example:
+
+            <env-entry-type>java.lang.Integer</env-entry-type>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="env-entry-value"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The env-entry-value designates the value of a
+            Deployment Component's environment entry. The value
+            must be a String that is valid for the
+            constructor of the specified type that takes a
+            single String parameter, or for java.lang.Character,
+            a single character.
+
+            Example:
+
+            <env-entry-value>100.00</env-entry-value>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="env-entry-type-valuesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        This type contains the fully-qualified Java type of the
+        environment entry value that is expected by the
+        application's code.
+
+        The following are the legal values of env-entry-type-valuesType:
+
+        java.lang.Boolean
+        java.lang.Byte
+        java.lang.Character
+        java.lang.String
+        java.lang.Short
+        java.lang.Integer
+        java.lang.Long
+        java.lang.Float
+        java.lang.Double
+			  java.lang.Class
+			  any enumeration type (i.e. a subclass of java.lang.Enum)
+
+        Examples:
+
+        <env-entry-type>java.lang.Boolean</env-entry-type>
+        <env-entry-type>java.lang.Class</env-entry-type>
+        <env-entry-type>com.example.Color</env-entry-type>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="fully-qualified-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate the name of a
+        Java class or interface.  The name is in the form of a
+        "binary name", as defined in the JLS.  This is the form
+        of name used in Class.forName().  Tools that need the
+        canonical name (the name used in source code) will need
+        to convert this binary name to the canonical name.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generic-booleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines four different values which can designate
+        boolean values. This includes values yes and no which are
+        not designated by xsd:boolean
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="true"/>
+        <xsd:enumeration value="false"/>
+        <xsd:enumeration value="yes"/>
+        <xsd:enumeration value="no"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="iconType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The icon type contains small-icon and large-icon elements
+        that specify the file names for small and large GIF, JPEG,
+        or PNG icon images used to represent the parent element in a
+        GUI tool.
+
+        The xml:lang attribute defines the language that the
+        icon file names are provided in. Its value is "en" (English)
+        by default.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="small-icon"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The small-icon element contains the name of a file
+            containing a small (16 x 16) icon image. The file
+            name is a relative path within the Deployment
+            Component's Deployment File.
+
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+
+            Example:
+
+            <small-icon>employee-service-icon16x16.jpg</small-icon>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="large-icon"
+                   type="javaee:pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            The large-icon element contains the name of a file
+            containing a large
+            (32 x 32) icon image. The file name is a relative
+            path within the Deployment Component's Deployment
+            File.
+
+            The image may be in the GIF, JPEG, or PNG format.
+            The icon can be used by tools.
+
+            Example:
+
+            <large-icon>employee-service-icon32x32.jpg</large-icon>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute ref="xml:lang"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="injection-targetType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        An injection target specifies a class and a name within
+        that class into which a resource should be injected.
+
+        The injection target class specifies the fully qualified
+        class name that is the target of the injection.  The
+        Java EE specifications describe which classes can be an
+        injection target.
+
+        The injection target name specifies the target within
+        the specified class.  The target is first looked for as a
+        JavaBeans property name.  If not found, the target is
+        looked for as a field name.
+
+        The specified resource will be injected into the target
+        during initialization of the class by either calling the
+        set method for the target property or by setting a value
+        into the named field.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="injection-target-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="injection-target-name"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:simpleType name="isolation-levelType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+		The following transaction isolation levels are allowed
+		(see documentation for the java.sql.Connection interface):
+        TRANSACTION_READ_UNCOMMITTED
+        TRANSACTION_READ_COMMITTED
+        TRANSACTION_REPEATABLE_READ
+        TRANSACTION_SERIALIZABLE
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value="TRANSACTION_READ_UNCOMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_READ_COMMITTED"/>
+      <xsd:enumeration value="TRANSACTION_REPEATABLE_READ"/>
+      <xsd:enumeration value="TRANSACTION_SERIALIZABLE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-identifierType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The java-identifierType defines a Java identifier.
+        The users of this type should further verify that
+        the content does not contain Java reserved keywords.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="($|_|\p{L})(\p{L}|\p{Nd}|_|$)*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="java-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a generic type that designates a Java primitive
+        type or a fully qualified name of a Java interface/type,
+        or an array of such types.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="[^\p{Z}]*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jdbc-urlType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The jdbc-urlType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 9.3 of the
+        JDBC Specification where the format is:
+
+        jdbc:<subprotocol>:<subname>
+
+        Example:
+
+        <url>jdbc:mysql://localhost:3307/testdb</url>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="jdbc:(.*):(.*)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-connection-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a JMS Connection Factory.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this JMS Connection Factory.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            JMS connection factory being defined.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS connection factory
+            interface.  Permitted values are javax.jms.ConnectionFactory,
+            javax.jms.QueueConnectionFactory, or
+            javax.jms.TopicConnectionFactory.  If not specified,
+            javax.jms.ConnectionFactory will be used.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS connection factory
+            implementation class.  Ignored if a resource adapter
+            is used.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            User name to use for connection authentication.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password to use for connection authentication.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-id"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Client id to use for connection.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JMS Connection Factory property.  This may be a vendor-specific
+            property or a less commonly used ConnectionFactory property.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transactional"
+                   type="javaee:xsdBooleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Set to false if connections should not participate in
+            transactions.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Maximum number of connections that should be concurrently
+            allocated for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="min-pool-size"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Minimum number of connections that should be concurrently
+            allocated for a connection pool.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jms-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a JMS Destination.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this JMS Destination.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            JMS destination being defined.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="interface-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS destination interface.
+            Permitted values are javax.jms.Queue and javax.jms.Topic
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="class-name"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Fully-qualified name of the JMS destination implementation
+            class.  Ignored if a resource adapter is used unless the
+            resource adapter defines more than one destination implementation
+            class for the specified interface.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-adapter"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Resource adapter name.  If not specified, the application
+            server will define the default behavior, which may or may
+            not involve the use of a resource adapter.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="destination-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Name of the queue or topic.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            JMS Destination property.  This may be a vendor-specific
+            property or a less commonly used Destination property.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jndi-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jndi-nameType type designates a JNDI name in the
+        Deployment Component's environment and is relative to the
+        java:comp/env context.  A JNDI name must be unique within the
+        Deployment Component.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The homeType defines the fully-qualified name of
+        an enterprise bean's home interface.
+
+        Example:
+
+        <home>com.aardvark.payroll.PayrollHome</home>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lifecycle-callbackType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The lifecycle-callback type specifies a method on a
+        class to be called when a lifecycle event occurs.
+        Note that each class may have only one lifecycle callback
+        method for any given event and that the method may not
+        be overloaded.
+
+        If the lifefycle-callback-class element is missing then
+        the class defining the callback is assumed to be the
+        component class in scope at the place in the descriptor
+        in which the callback definition appears.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="lifecycle-callback-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"/>
+      <xsd:element name="lifecycle-callback-method"
+                   type="javaee:java-identifierType"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The listenerType indicates the deployment properties for a web
+        application listener bean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="listener-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The listener-class element declares a class in the
+            application must be registered as a web
+            application listener bean. The value is the fully
+            qualified classname of the listener class.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="localType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localType defines the fully-qualified name of an
+        enterprise bean's local interface.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="local-homeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The local-homeType defines the fully-qualified
+        name of an enterprise bean's local home interface.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mail-sessionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Configuration of a Mail Session resource.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Description of this Mail Session resource.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name element specifies the JNDI name of the
+            Mail Session resource being defined.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Storage protocol.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="store-protocol-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider store protocol implementation class
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Transport protocol.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="transport-protocol-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Service provider transport protocol implementation class
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="host"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server host name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="user"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server user name.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="password"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Password.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Email address to indicate the message sender.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Mail server property.  This may be a vendor-specific
+            property.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="param-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is a general type that can be used to declare
+        parameter/value lists.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="param-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-name element contains the name of a
+            parameter.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="param-value"
+                   type="javaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The param-value element contains the value of a
+            parameter.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate either a relative
+        path or an absolute path starting with a "/".
+
+        In elements that specify a pathname to a file within the
+        same Deployment File, relative filenames (i.e., those not
+        starting with "/") are considered relative to the root of
+        the Deployment File's namespace.  Absolute filenames (i.e.,
+        those starting with "/") also specify names in the root of
+        the Deployment File's namespace.  In general, relative names
+        are preferred.  The exception is .war files where absolute
+        names are preferred for consistency with the Servlet API.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The persistence-context-ref element contains a declaration
+        of Deployment Component's reference to a persistence context
+        associated within a Deployment Component's
+        environment. It consists of:
+
+        - an optional description
+        - the persistence context reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - an optional specification as to whether
+        the persistence context type is Transaction or
+        Extended.  If not specified, Transaction is assumed.
+        - an optional specification as to whether
+        the persistence context synchronization with the current
+        transaction is Synchronized or Unsynchronized. If not
+        specified, Synchronized is assumed.
+        - an optional list of persistence properties
+        - optional injection targets
+
+        Examples:
+
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        </persistence-context-ref>
+
+        <persistence-context-ref>
+        <persistence-context-ref-name>myPersistenceContext
+        </persistence-context-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        <persistence-context-type>Extended</persistence-context-type>
+        </persistence-context-ref>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-context-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-context-ref-name element specifies
+            the name of a persistence context reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file.
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the
+            Application Assembler cannot change persistence unit names.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-context-type"
+                   type="javaee:persistence-context-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-context-synchronization"
+                   type="javaee:persistence-context-synchronizationType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-property"
+                   type="javaee:propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify properties for the container or persistence
+            provider.  Vendor-specific properties may be included in
+            the set of properties.  Properties that are not recognized
+            by a vendor must be ignored.  Entries that make use of the
+            namespace javax.persistence and its subnamespaces must not
+            be used for vendor-specific properties.  The namespace
+            javax.persistence is reserved for use by the specification.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-synchronizationType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-synchronizationType specifies
+        whether a container-managed persistence context is automatically
+        synchronized with the current transaction.
+
+        The value of the persistence-context-synchronization element
+        must be one of the following:
+        Synchronized
+        Unsynchronized
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Synchronized"/>
+        <xsd:enumeration value="Unsynchronized"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-context-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The persistence-context-typeType specifies the transactional
+        nature of a persistence context reference.
+
+        The value of the persistence-context-type element must be
+        one of the following:
+        Transaction
+        Extended
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Transaction"/>
+        <xsd:enumeration value="Extended"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies a name/value pair.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:xsdStringType">
+      </xsd:element>
+      <xsd:element name="value"
+                   type="javaee:xsdStringType">
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The persistence-unit-ref element contains a declaration
+        of Deployment Component's reference to a persistence unit
+        associated within a Deployment Component's
+        environment. It consists of:
+
+        - an optional description
+        - the persistence unit reference name
+        - an optional persistence unit name.  If not specified,
+        the default persistence unit is assumed.
+        - optional injection targets
+
+        Examples:
+
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        </persistence-unit-ref>
+
+        <persistence-unit-ref>
+        <persistence-unit-ref-name>myPersistenceUnit
+        </persistence-unit-ref-name>
+        <persistence-unit-name>PersistenceUnit1
+        </persistence-unit-name>
+        </persistence-unit-ref>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="persistence-unit-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The persistence-unit-ref-name element specifies
+            the name of a persistence unit reference; its
+            value is the environment entry name used in
+            Deployment Component code.  The name is a JNDI name
+            relative to the java:comp/env context.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="persistence-unit-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The Application Assembler(or BeanProvider) may use the
+            following syntax to avoid the need to rename persistence
+            units to have unique names within a Java EE application.
+
+            The Application Assembler specifies the pathname of the
+            root of the persistence.xml file for the referenced
+            persistence unit and appends the name of the persistence
+            unit separated from the pathname by #. The pathname is
+            relative to the referencing application component jar file.
+            In this manner, multiple persistence units with the same
+            persistence unit name may be uniquely identified when the
+            Application Assembler cannot change persistence unit names.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceBaseGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="remoteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The remote element contains the fully-qualified name
+        of the enterprise bean's remote interface.
+
+        Example:
+
+        <remote>com.wombat.empl.EmployeeService</remote>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-env-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The resource-env-refType is used to define
+        resource-env-ref elements.  It contains a declaration of a
+        Deployment Component's reference to an administered object
+        associated with a resource in the Deployment Component's
+        environment.  It consists of an optional description, the
+        resource environment reference name, and an optional
+        indication of the resource environment reference type
+        expected by the Deployment Component code.
+
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+
+        The resource environment type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+
+        Example:
+
+        <resource-env-ref>
+        <resource-env-ref-name>jms/StockQueue
+        </resource-env-ref-name>
+        <resource-env-ref-type>javax.jms.Queue
+        </resource-env-ref-type>
+        </resource-env-ref>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="resource-env-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-name element specifies the name
+            of a resource environment reference; its value is
+            the environment entry name used in
+            the Deployment Component code.  The name is a JNDI
+            name relative to the java:comp/env context and must
+            be unique within a Deployment Component.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-env-ref-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The resource-env-ref-type element specifies the type
+            of a resource environment reference.  It is the
+            fully qualified name of a Java language class or
+            interface.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="resource-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The resource-refType contains a declaration of a
+        Deployment Component's reference to an external resource. It
+        consists of an optional description, the resource manager
+        connection factory reference name, an optional indication of
+        the resource manager connection factory type expected by the
+        Deployment Component code, an optional type of authentication
+        (Application or Container), and an optional specification of
+        the shareability of connections obtained from the resource
+        (Shareable or Unshareable).
+
+        It also includes optional elements to define injection of
+        the named resource into fields or JavaBeans properties.
+
+        The connection factory type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+
+        Example:
+
+        <resource-ref>
+        <res-ref-name>jdbc/EmployeeAppDB</res-ref-name>
+        <res-type>javax.sql.DataSource</res-type>
+        <res-auth>Container</res-auth>
+        <res-sharing-scope>Shareable</res-sharing-scope>
+        </resource-ref>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="res-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-ref-name element specifies the name of a
+            resource manager connection factory reference.
+            The name is a JNDI name relative to the
+            java:comp/env context.
+            The name must be unique within a Deployment File.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The res-type element specifies the type of the data
+            source. The type is specified by the fully qualified
+            Java language class or interface
+            expected to be implemented by the data source.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="res-auth"
+                   type="javaee:res-authType"
+                   minOccurs="0"/>
+      <xsd:element name="res-sharing-scope"
+                   type="javaee:res-sharing-scopeType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-authType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-authType specifies whether the Deployment Component
+        code signs on programmatically to the resource manager, or
+        whether the Container will sign on to the resource manager
+        on behalf of the Deployment Component. In the latter case,
+        the Container uses information that is supplied by the
+        Deployer.
+
+        The value must be one of the two following:
+
+        Application
+        Container
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Application"/>
+        <xsd:enumeration value="Container"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="res-sharing-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The res-sharing-scope type specifies whether connections
+        obtained through the given resource manager connection
+        factory reference can be shared. The value, if specified,
+        must be one of the two following:
+
+        Shareable
+        Unshareable
+
+        The default value is Shareable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Shareable"/>
+        <xsd:enumeration value="Unshareable"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="run-asType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The run-asType specifies the run-as identity to be
+        used for the execution of a component. It contains an
+        optional description, and the name of a security role.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="role-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The role-nameType designates the name of a security role.
+
+        The name must conform to the lexical rules for a token.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-roleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The security-roleType contains the definition of a security
+        role. The definition consists of an optional description of
+        the security role, and the security role name.
+
+        Example:
+
+        <security-role>
+        <description>
+        This role includes all employees who are authorized
+        to access the employee service application.
+        </description>
+        <role-name>employee</role-name>
+        </security-role>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-role-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-role-refType contains the declaration of a
+        security role reference in a component's or a
+        Deployment Component's code. The declaration consists of an
+        optional description, the security role name used in the
+        code, and an optional link to a security role. If the
+        security role is not specified, the Deployer must choose an
+        appropriate security role.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The value of the role-name element must be the String used
+            as the parameter to the
+            EJBContext.isCallerInRole(String roleName) method or the
+            HttpServletRequest.isUserInRole(String role) method.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="role-link"
+                   type="javaee:role-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The role-link element is a reference to a defined
+            security role. The role-link element must contain
+            the name of one of the security roles defined in the
+            security-role elements.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdQNameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:QName.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:QName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdBooleanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:boolean.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:boolean">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNMTOKENType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:NMTOKEN.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NMTOKEN">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdAnyURIType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:anyURI.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:anyURI">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:integer.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:integer">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdPositiveIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:positiveInteger.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:positiveInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdNonNegativeIntegerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:nonNegativeInteger.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:nonNegativeInteger">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="xsdStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type adds an "id" attribute to xsd:string.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="string">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is a special string datatype that is defined by Java EE as
+        a base type for defining collapsed strings. When schemas
+        require trailing/leading space elimination as well as
+        collapsing the existing whitespace, this base type may be
+        used.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:token">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="true-falseType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This simple type designates a boolean with only two
+        permissible values
+
+        - true
+        - false
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdBooleanType">
+        <xsd:pattern value="(true|false)"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="url-patternType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The url-patternType contains the url pattern of the mapping.
+        It must follow the rules specified in Section 11.2 of the
+        Servlet API Specification. This pattern is assumed to be in
+        URL-decoded form and must not contain CR(#xD) or LF(#xA).
+        If it contains those characters, the container must inform
+        the developer with a descriptive error message.
+        The container must preserve all characters including whitespaces.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destinationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destinationType specifies a message
+        destination. The logical destination described by this
+        element is mapped to a physical destination by the Deployer.
+
+        The message destination element contains:
+
+        - an optional description
+        - an optional display-name
+        - an optional icon
+        - a message destination name which must be unique
+        among message destination names within the same
+        Deployment File.
+        - an optional mapped name
+        - an optional lookup name
+
+        Example:
+
+        <message-destination>
+        <message-destination-name>CorporateStocks
+        </message-destination-name>
+        </message-destination>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="message-destination-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-name element specifies a
+            name for a message destination.  This name must be
+            unique among the names of message destinations
+            within the Deployment File.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mapped-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A product specific name that this message destination
+            should be mapped to.  Each message-destination-ref
+            element that references this message destination will
+            define a name in the namespace of the referencing
+            component or in one of the other predefined namespaces.
+            Many application servers provide a way to map these
+            local names to names of resources known to the
+            application server.  This mapped name is often a global
+            JNDI name, but may be a name of any form.  Each of the
+            local names should be mapped to this same global name.
+
+            Application servers are not required to support any
+            particular form or type of mapped name, nor the ability
+            to use mapped names.  The mapped name is
+            product-dependent and often installation-dependent.  No
+            use of a mapped name is portable.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lookup-name"
+                   type="javaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The JNDI name to be looked up to resolve the message destination.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destination-ref element contains a declaration
+        of Deployment Component's reference to a message destination
+        associated with a resource in Deployment Component's
+        environment. It consists of:
+
+        - an optional description
+        - the message destination reference name
+        - an optional message destination type
+        - an optional specification as to whether
+        the destination is used for
+        consuming or producing messages, or both.
+        if not specified, "both" is assumed.
+        - an optional link to the message destination
+        - optional injection targets
+
+        The message destination type must be supplied unless an
+        injection target is specified, in which case the type
+        of the target is used.  If both are specified, the type
+        must be assignment compatible with the type of the injection
+        target.
+
+        Examples:
+
+        <message-destination-ref>
+        <message-destination-ref-name>jms/StockQueue
+        </message-destination-ref-name>
+        <message-destination-type>javax.jms.Queue
+        </message-destination-type>
+        <message-destination-usage>Consumes
+        </message-destination-usage>
+        <message-destination-link>CorporateStocks
+        </message-destination-link>
+        </message-destination-ref>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="message-destination-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The message-destination-ref-name element specifies
+            the name of a message destination reference; its
+            value is the environment entry name used in
+            Deployment Component code.
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-destination-type"
+                   type="javaee:message-destination-typeType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-usage"
+                   type="javaee:message-destination-usageType"
+                   minOccurs="0"/>
+      <xsd:element name="message-destination-link"
+                   type="javaee:message-destination-linkType"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-usageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-usageType specifies the use of the
+        message destination indicated by the reference.  The value
+        indicates whether messages are consumed from the message
+        destination, produced for the destination, or both.  The
+        Assembler makes use of this information in linking producers
+        of a destination with its consumers.
+
+        The value of the message-destination-usage element must be
+        one of the following:
+        Consumes
+        Produces
+        ConsumesProduces
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="Consumes"/>
+        <xsd:enumeration value="Produces"/>
+        <xsd:enumeration value="ConsumesProduces"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        The message-destination-typeType specifies the type of
+        the destination. The type is specified by the Java interface
+        expected to be implemented by the destination.
+
+        Example:
+
+        <message-destination-type>javax.jms.Queue
+        </message-destination-type>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="message-destination-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The message-destination-linkType is used to link a message
+        destination reference or message-driven bean to a message
+        destination.
+
+        The Assembler sets the value to reflect the flow of messages
+        between producers and consumers in the application.
+
+        The value must be the message-destination-name of a message
+        destination in the same Deployment File or in another
+        Deployment File in the same Java EE application unit.
+
+        Alternatively, the value may be composed of a path name
+        specifying a Deployment File containing the referenced
+        message destination with the message-destination-name of the
+        destination appended and separated from the path name by
+        "#". The path name is relative to the Deployment File
+        containing Deployment Component that is referencing the
+        message destination.  This allows multiple message
+        destinations with the same name to be uniquely identified.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transaction-supportType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transaction-supportType specifies the level of
+        transaction support provided by the resource adapter. It is
+        used by transaction-support elements.
+
+        The value must be one of the following:
+
+        NoTransaction
+        LocalTransaction
+        XATransaction
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NoTransaction"/>
+        <xsd:enumeration value="LocalTransaction"/>
+        <xsd:enumeration value="XATransaction"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/javaee_web_services_1_2.xsd b/wildfly/docs/schema/javaee_web_services_1_2.xsd
new file mode 100644
index 0000000..e0f73b4
--- /dev/null
+++ b/wildfly/docs/schema/javaee_web_services_1_2.xsd
@@ -0,0 +1,747 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/javaee"
+	    xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="1.2">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)javaee_web_services_1_2.xsds	1.18 02/13/06
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2006 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	The webservices element is the root element for the web services
+	deployment descriptor.  It specifies the set of web service
+	descriptions that are to be deployed into the Java EE Application
+	Server and the dependencies they have on container resources and
+	services.  The deployment descriptor must be named
+	"META-INF/webservices.xml" in the web services' jar file.
+
+	Used in: webservices.xml
+
+	All webservices deployment descriptors must indicate the
+	webservices schema by using the Java EE namespace:
+
+	http://java.sun.com/xml/ns/javaee
+
+	and by indicating the version of the schema by using the version
+	element as shown below:
+
+	    <webservices xmlns="http://java.sun.com/xml/ns/javaee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+		http://java.sun.com/xml/ns/javaee/javaee_web_services_1_2.xsd"
+	      version="1.2">
+	      ...
+	    </webservices>
+
+	The instance documents may indicate the published version of the
+	schema using the xsi:schemaLocation attribute for the Java EE
+	namespace with the following location:
+
+	http://java.sun.com/xml/ns/javaee/javaee_web_services_1_2.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_5.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="webservices" type="javaee:webservicesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The webservices element is the root element for the web services
+	deployment descriptor.  It specifies the set of web service
+	descriptions that are to be deployed into the Java EE Application Server
+	and the dependencies they have on container resources and services.
+
+	Used in: webservices.xml
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:key name="webservice-description-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The webservice-description-name identifies the collection of
+	  port-components associated with a WSDL file and JAX-RPC mapping. The
+	  name must be unique within the deployment descriptor.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:webservice-description"/>
+      <xsd:field xpath="javaee:webservice-description-name"/>
+    </xsd:key>
+  </xsd:element>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+      The handler-chain element defines the handlerchain.
+      Handlerchain can be defined such that the handlers in the
+      handlerchain operate,all ports of a service, on a specific
+      port or on a list of protocol-bindings. The choice of elements
+      service-name-pattern, port-name-pattern and protocol-bindings
+      are used to specify whether the handlers in handler-chain are
+      for a service, port or protocol binding. If none of these
+      choices are specified with the handler-chain element then the
+      handlers specified in the handler-chain will be applied on
+      everything.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+
+      <xsd:choice minOccurs="0" maxOccurs="1">
+         <xsd:element name="service-name-pattern"
+		      type="javaee:qname-pattern" />
+         <xsd:element name="port-name-pattern"
+		      type="javaee:qname-pattern" />
+         <xsd:element name="protocol-bindings"
+		      type="javaee:protocol-bindingListType"/>
+      </xsd:choice>
+
+      <xsd:element name="handler"
+                   type="javaee:port-component_handlerType"
+		   minOccurs="1" maxOccurs="unbounded"/>
+    </xsd:sequence>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+      The handler-chains element defines the handlerchains associated
+      with this service or service endpoint.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="handler-chain"
+                   type="javaee:handler-chainType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The port-component element associates a WSDL port with a web service
+	interface and implementation.  It defines the name of the port as a
+	component, optional description, optional display name, optional iconic
+	representations, WSDL port QName, Service Endpoint Interface, Service
+	Implementation Bean.
+
+	This element also associates a WSDL service with a JAX-WS Provider
+	implementation.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="display-name"
+		   type="javaee:display-nameType"
+		   minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="icon"
+		   type="javaee:iconType"
+		   minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="port-component-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The port-component-name element specifies a port component's
+	      name.  This name is assigned by the module producer to name
+	      the service implementation bean in the module's deployment
+	      descriptor. The name must be unique among the port component
+	      names defined in the same module.
+
+	      Used in: port-component
+
+	      Example:
+		      <port-component-name>EmployeeService
+		      </port-component-name>
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-service"
+		   type="javaee:xsdQNameType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the name space and local name part of the WSDL
+	    service QName. This is required to be specified for
+	    port components that are JAX-WS Provider implementations.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-port"
+		   type="javaee:xsdQNameType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the name space and local name part of the WSDL
+	    port QName. This is not required to be specified for port
+	    components that are JAX-WS Provider implementations
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="javaee:true-falseType"
+		   minOccurs="0" maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism for an
+            endpoint implementation.
+
+	    Not to be specified for JAX-RPC runtime
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="protocol-binding"
+                   type="javaee:protocol-bindingType"
+		   minOccurs="0" maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify the protocol binding used by the port-component.
+	    If this element is not specified, then the default binding is
+            used (SOAP 1.1 over HTTP)
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="service-endpoint-interface"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+	    <![CDATA[
+
+	      The service-endpoint-interface element contains the
+	      fully-qualified name of the port component's Service Endpoint
+	      Interface.
+
+	      Used in: port-component
+
+	      Example:
+		      <remote>com.wombat.empl.EmployeeService</remote>
+
+	      This may not be specified in case there is no Service
+	      Enpoint Interface as is the case with directly using an
+	      implementation class with the @WebService annotation.
+
+	      When the port component is a Provider implementation
+	      this is not specified.
+
+	      ]]>
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-impl-bean"
+		   type="javaee:service-impl-beanType"/>
+
+      <xsd:choice>
+	<xsd:element name="handler"
+		     type="javaee:port-component_handlerType"
+		     minOccurs="0" maxOccurs="unbounded">
+	  <xsd:annotation>
+	    <xsd:documentation>
+		 To be used with JAX-RPC based runtime only.
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+	<xsd:element name="handler-chains"
+		     type="javaee:handler-chainsType"
+		     minOccurs="0" maxOccurs="1">
+	  <xsd:annotation>
+	    <xsd:documentation>
+		 To be used with JAX-WS based runtime only.
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-component_handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Declares the handler for a port-component. Handlers can access the
+	init-param name/value pairs using the HandlerInfo interface.
+
+	Used in: port-component
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the name of the handler. The name must be unique within the
+	    module.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a fully qualified class name for the handler implementation.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+		   type="javaee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+
+      <xsd:element name="soap-header"
+		   type="javaee:xsdQNameType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the QName of a SOAP header that will be processed by the
+	    handler.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-role"
+		   type="javaee:string"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The soap-role element contains a SOAP actor definition that the
+	    Handler will play as a role.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="protocol-URIAliasType">
+     <xsd:annotation>
+        <xsd:documentation>
+	   Defines the type that is used for specifying tokens that
+	   start with ## which are used to alias existing standard
+	   protocol bindings and support aliases for new standard
+	   binding URIs that are introduced in future specifications.
+
+	   The following tokens alias the standard protocol binding
+	   URIs:
+
+	   ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+	   ##SOAP11_HTTP_MTOM =
+                 "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+           ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+           ##SOAP12_HTTP_MTOM =
+		 "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+           ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+
+        </xsd:documentation>
+     </xsd:annotation>
+     <xsd:restriction base="xsd:token">
+        <xsd:pattern value="##.+"/>
+     </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="protocol-bindingListType">
+     <xsd:annotation>
+        <xsd:documentation>
+	   Defines the type used for specifying a list of
+	   protocol-bindingType(s). For e.g.
+
+	    ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+
+        </xsd:documentation>
+     </xsd:annotation>
+     <xsd:list itemType="javaee:protocol-bindingType"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="protocol-bindingType">
+     <xsd:annotation>
+        <xsd:documentation>
+	   Defines the type used for specifying the URI for the
+	   protocol binding used by the port-component.  For
+	   portability one could use one of the following tokens that
+	   alias the standard binding types:
+
+	    ##SOAP11_HTTP
+	    ##SOAP11_HTTP_MTOM
+	    ##SOAP12_HTTP
+	    ##SOAP12_HTTP_MTOM
+	    ##XML_HTTP
+
+	   Other specifications could define tokens that start with ##
+	   to alias new standard binding URIs that are introduced.
+
+        </xsd:documentation>
+     </xsd:annotation>
+     <xsd:union memberTypes="xsd:anyURI javaee:protocol-URIAliasType"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="qname-pattern">
+     <xsd:annotation>
+        <xsd:documentation>
+	     This is used to specify the QName pattern in the
+	     attribute service-name-pattern and port-name-pattern in
+	     the handler-chain element
+
+	     For example, the various forms acceptable here for
+	     service-name-pattern attribute in handler-chain element
+	     are :
+
+	     Exact Name: service-name-pattern="ns1:EchoService"
+
+		 In this case, handlers specified in this
+		 handler-chain element will apply to all ports with
+		 this exact service name. The namespace prefix must
+		 have been declared in a namespace declaration
+		 attribute in either the start-tag of the element
+		 where the prefix is used or in an an ancestor
+		 element (i.e. an element in whose content the
+		 prefixed markup occurs)
+
+	     Pattern : service-name-pattern="ns1:EchoService*"
+
+		 In this case, handlers specified in this
+		 handler-chain element will apply to all ports whose
+		 Service names are like EchoService1, EchoServiceFoo
+		 etc. The namespace prefix must have been declared in
+		 a namespace declaration attribute in either the
+		 start-tag of the element where the prefix is used or
+		 in an an ancestor element (i.e. an element in whose
+		 content the prefixed markup occurs)
+
+	     Wild Card : service-name-pattern="*"
+
+		In this case, handlers specified in this handler-chain
+		element will apply to ports of all service names.
+
+	    The same can be applied to port-name attribute in
+	    handler-chain element.
+
+        </xsd:documentation>
+     </xsd:annotation>
+
+     <xsd:restriction base="xsd:token">
+        <xsd:pattern value="\*|([\i-[:]][\c-[:]]*:)?[\i-[:]][\c-[:]]*\*?"/>
+     </xsd:restriction>
+
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-impl-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-impl-bean element defines the web service implementation.
+	A service implementation can be an EJB bean class or JAX-RPC web
+	component.  Existing EJB implementations are exposed as a web service
+	using an ejb-link.
+
+	Used in: port-component
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice>
+      <xsd:element name="ejb-link"
+		   type="javaee:ejb-linkType"/>
+      <xsd:element name="servlet-link"
+		   type="javaee:servlet-linkType"/>
+    </xsd:choice>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The servlet-link element is used in the service-impl-bean element
+	  to specify that a Service Implementation Bean is defined as a
+	  JAX-RPC Service Endpoint.
+
+	  The value of the servlet-link element must be the servlet-name of
+	  a JAX-RPC Service Endpoint in the same WAR file.
+
+	  Used in: service-impl-bean
+
+	  Example:
+		  <servlet-link>StockQuoteService</servlet-link>
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservice-descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The webservice-description element defines a WSDL document file
+	and the set of Port components associated with the WSDL ports
+	defined in the WSDL document.  There may be multiple
+	webservice-descriptions defined within a module.
+
+	All WSDL file ports must have a corresponding port-component element
+	defined.
+
+	Used in: webservices
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="display-name"
+		   type="javaee:display-nameType"
+		   minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="icon"
+		   type="javaee:iconType"
+		   minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="webservice-description-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The webservice-description-name identifies the collection of
+	    port-components associated with a WSDL file and JAX-RPC
+	    mapping. The name must be unique within the deployment descriptor.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+		   type="javaee:pathType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-file element contains the name of a WSDL file in the
+	    module.  The file name is a relative path within the module.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+		   type="javaee:pathType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The jaxrpc-mapping-file element contains the name of a file that
+	    describes the JAX-RPC mapping between the Java interaces used by
+	    the application and the WSDL description in the wsdl-file.  The
+	    file name is a relative path within the module.
+
+	    This is not required when JAX-WS based runtime is used.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component"
+		   type="javaee:port-componentType"
+		   minOccurs="1" maxOccurs="unbounded">
+	<xsd:key name="port-component_handler-name-key">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      Defines the name of the handler. The name must be unique
+	      within the module.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:handler"/>
+	  <xsd:field xpath="javaee:handler-name"/>
+	</xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservicesType">
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="webservice-description"
+		   type="javaee:webservice-descriptionType"
+		   minOccurs="1" maxOccurs="unbounded">
+	<xsd:key name="port-component-name-key">
+	  <xsd:annotation>
+	    <xsd:documentation>
+	      <![CDATA[
+
+		The port-component-name element specifies a port
+		component's name.  This name is assigned by the module
+		producer to name the service implementation bean in the
+		module's deployment descriptor. The name must be unique
+		among the port component names defined in the same module.
+
+		Used in: port-component
+
+		Example:
+			<port-component-name>EmployeeService
+			</port-component-name>
+
+		]]>
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:port-component"/>
+	  <xsd:field xpath="javaee:port-component-name"/>
+	</xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+
+    <xsd:attribute name="version"
+		   type="javaee:dewey-versionType"
+		   fixed="1.2"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The required value for the version is 1.2.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/javaee_web_services_1_3.xsd b/wildfly/docs/schema/javaee_web_services_1_3.xsd
new file mode 100644
index 0000000..d53e9f4
--- /dev/null
+++ b/wildfly/docs/schema/javaee_web_services_1_3.xsd
@@ -0,0 +1,580 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+<![CDATA[[
+      The webservices element is the root element for the web services
+      deployment descriptor.  It specifies the set of web service
+      descriptions that are to be deployed into the Java EE Application
+      Server and the dependencies they have on container resources and
+      services.  The deployment descriptor must be named
+      "META-INF/webservices.xml" in the web services' jar file.
+      
+      Used in: webservices.xml
+      
+      All webservices deployment descriptors must indicate the
+      webservices schema by using the Java EE namespace:
+      
+      http://java.sun.com/xml/ns/javaee
+      
+      and by indicating the version of the schema by using the version
+      element as shown below:
+      
+      <webservices xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://java.sun.com/xml/ns/javaee
+      	http://java.sun.com/xml/ns/javaee/javaee_web_services_1_3.xsd"
+      version="1.3">
+      ...
+      </webservices>
+      
+      The instance documents may indicate the published version of the
+      schema using the xsi:schemaLocation attribute for the Java EE
+      namespace with the following location:
+      
+      http://java.sun.com/xml/ns/javaee/javaee_web_services_1_3.xsd
+      
+]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_6.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="webservices"
+               type="javaee:webservicesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webservices element is the root element for the web services
+        deployment descriptor.  It specifies the set of web service
+        descriptions that are to be deployed into the Java EE Application Server
+        and the dependencies they have on container resources and services.
+        
+        Used in: webservices.xml
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:key name="webservice-description-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The webservice-description-name identifies the collection of
+          port-components associated with a WSDL file and JAX-RPC mapping. The
+          name must be unique within the deployment descriptor.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:webservice-description"/>
+      <xsd:field xpath="javaee:webservice-description-name"/>
+    </xsd:key>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The port-component element associates a WSDL port with a web service
+        interface and implementation.  It defines the name of the port as a
+        component, optional description, optional display name, optional iconic
+        representations, WSDL port QName, Service Endpoint Interface, Service
+        Implementation Bean.
+        
+        This element also associates a WSDL service with a JAX-WS Provider
+        implementation.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="port-component-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[[
+            The port-component-name element specifies a port component's
+            name.  This name is assigned by the module producer to name
+            the service implementation bean in the module's deployment
+            descriptor. The name must be unique among the port component
+            names defined in the same module.
+            
+            Used in: port-component
+            
+            Example:
+            	      <port-component-name>EmployeeService
+            	      </port-component-name>
+            
+]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-service"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name space and local name part of the WSDL
+            service QName. This is required to be specified for
+            port components that are JAX-WS Provider implementations.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-port"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name space and local name part of the WSDL
+            port QName. This is not required to be specified for port
+            components that are JAX-WS Provider implementations
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism for an
+            endpoint implementation.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mtom-threshold"
+                   type="javaee:xsdNonNegativeIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When MTOM is enabled, binary data above this size in bytes
+            will be XOP encoded or sent as attachment. Default value is 0.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="addressing"
+                   type="javaee:addressingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            This specifies the WS-Addressing requirements for a JAX-WS
+            web service. It corresponds to javax.xml.ws.soap.Addressing
+            annotation or its feature javax.xml.ws.soap.AddressingFeature.
+            
+            See the addressingType for more information.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="respect-binding"
+                   type="javaee:respect-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Corresponds to the javax.xml.ws.RespectBinding annotation
+            or its corresponding javax.xml.ws.RespectBindingFeature web
+            service feature. This is used to control whether a JAX-WS
+            implementation must respect/honor the contents of the
+            wsdl:binding in the WSDL that is associated with the service.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="protocol-binding"
+                   type="javaee:protocol-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify the protocol binding used by the port-component.
+            If this element is not specified, then the default binding is
+            used (SOAP 1.1 over HTTP)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint-interface"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[[
+            The service-endpoint-interface element contains the
+            fully-qualified name of the port component's Service Endpoint
+            Interface.
+            
+            Used in: port-component
+            
+            Example:
+            	      <remote>com.wombat.empl.EmployeeService</remote>
+            
+            This may not be specified in case there is no Service
+            Enpoint Interface as is the case with directly using an
+            implementation class with the @WebService annotation.
+            
+            When the port component is a Provider implementation
+            this is not specified.
+            
+]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-impl-bean"
+                   type="javaee:service-impl-beanType"/>
+      <xsd:choice>
+        <xsd:element name="handler"
+                     type="javaee:handlerType"
+                     minOccurs="0"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with JAX-RPC based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="handler-chains"
+                     type="javaee:handler-chainsType"
+                     minOccurs="0"
+                     maxOccurs="1">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with JAX-WS based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-impl-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The service-impl-bean element defines the web service implementation.
+        A service implementation can be an EJB bean class or JAX-RPC web
+        component.  Existing EJB implementations are exposed as a web service
+        using an ejb-link.
+        
+        Used in: port-component
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"/>
+      <xsd:element name="servlet-link"
+                   type="javaee:servlet-linkType"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[[
+        The servlet-link element is used in the service-impl-bean element
+        to specify that a Service Implementation Bean is defined as a
+        JAX-RPC Service Endpoint.
+        
+        The value of the servlet-link element must be the servlet-name of
+        a JAX-RPC Service Endpoint in the same WAR file.
+        
+        Used in: service-impl-bean
+        
+        Example:
+        	  <servlet-link>StockQuoteService</servlet-link>
+        
+]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservice-descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webservice-description element defines a WSDL document file
+        and the set of Port components associated with the WSDL ports
+        defined in the WSDL document.  There may be multiple
+        webservice-descriptions defined within a module.
+        
+        All WSDL file ports must have a corresponding port-component element
+        defined.
+        
+        Used in: webservices
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="webservice-description-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The webservice-description-name identifies the collection of
+            port-components associated with a WSDL file and JAX-RPC
+            mapping. The name must be unique within the deployment descriptor.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The wsdl-file element contains the name of a WSDL file in the
+            module.  The file name is a relative path within the module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The jaxrpc-mapping-file element contains the name of a file that
+            describes the JAX-RPC mapping between the Java interaces used by
+            the application and the WSDL description in the wsdl-file.  The
+            file name is a relative path within the module.
+            
+            This is not required when JAX-WS based runtime is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component"
+                   type="javaee:port-componentType"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+        <xsd:key name="port-component_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Defines the name of the handler. The name must be unique
+              within the module.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:handler"/>
+          <xsd:field xpath="javaee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservicesType">
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="webservice-description"
+                   type="javaee:webservice-descriptionType"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+        <xsd:key name="port-component-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+<![CDATA[[
+              	The port-component-name element specifies a port
+              	component's name.  This name is assigned by the module
+              	producer to name the service implementation bean in the
+              	module's deployment descriptor. The name must be unique
+              	among the port component names defined in the same module.
+              
+              	Used in: port-component
+              
+              	Example:
+              		<port-component-name>EmployeeService
+              		</port-component-name>
+              
+              	
+              
+]]>
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:port-component"/>
+          <xsd:field xpath="javaee:port-component-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="1.3"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 1.3.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/javaee_web_services_1_4.xsd b/wildfly/docs/schema/javaee_web_services_1_4.xsd
new file mode 100644
index 0000000..577b2db
--- /dev/null
+++ b/wildfly/docs/schema/javaee_web_services_1_4.xsd
@@ -0,0 +1,572 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.4">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      The webservices element is the root element for the web services
+      deployment descriptor.  It specifies the set of web service
+      descriptions that are to be deployed into the Java EE Application
+      Server and the dependencies they have on container resources and
+      services.  The deployment descriptor must be named
+      "META-INF/webservices.xml" in the web services' jar file.
+      
+      Used in: webservices.xml
+      
+      All webservices deployment descriptors must indicate the
+      webservices schema by using the Java EE namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and by indicating the version of the schema by using the version
+      element as shown below:
+      
+      <webservices xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee
+      	http://xmlns.jcp.org/xml/ns/javaee/javaee_web_services_1_4.xsd"
+      version="1.4">
+      ...
+      </webservices>
+      
+      The instance documents may indicate the published version of the
+      schema using the xsi:schemaLocation attribute for the Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/javaee_web_services_1_4.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="webservices"
+               type="javaee:webservicesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webservices element is the root element for the web services
+        deployment descriptor.  It specifies the set of web service
+        descriptions that are to be deployed into the Java EE Application Server
+        and the dependencies they have on container resources and services.
+        
+        Used in: webservices.xml
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:key name="webservice-description-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The webservice-description-name identifies the collection of
+          port-components associated with a WSDL file and JAX-RPC mapping. The
+          name must be unique within the deployment descriptor.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:webservice-description"/>
+      <xsd:field xpath="javaee:webservice-description-name"/>
+    </xsd:key>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The port-component element associates a WSDL port with a web service
+        interface and implementation.  It defines the name of the port as a
+        component, optional description, optional display name, optional iconic
+        representations, WSDL port QName, Service Endpoint Interface, Service
+        Implementation Bean.
+        
+        This element also associates a WSDL service with a JAX-WS Provider
+        implementation.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="port-component-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The port-component-name element specifies a port component's
+            name.  This name is assigned by the module producer to name
+            the service implementation bean in the module's deployment
+            descriptor. The name must be unique among the port component
+            names defined in the same module.
+            
+            Used in: port-component
+            
+            Example:
+            	      <port-component-name>EmployeeService
+            	      </port-component-name>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-service"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name space and local name part of the WSDL
+            service QName. This is required to be specified for
+            port components that are JAX-WS Provider implementations.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-port"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name space and local name part of the WSDL
+            port QName. This is not required to be specified for port
+            components that are JAX-WS Provider implementations
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism for an
+            endpoint implementation.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mtom-threshold"
+                   type="javaee:xsdNonNegativeIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When MTOM is enabled, binary data above this size in bytes
+            will be XOP encoded or sent as attachment. Default value is 0.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="addressing"
+                   type="javaee:addressingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            This specifies the WS-Addressing requirements for a JAX-WS
+            web service. It corresponds to javax.xml.ws.soap.Addressing
+            annotation or its feature javax.xml.ws.soap.AddressingFeature.
+            
+            See the addressingType for more information.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="respect-binding"
+                   type="javaee:respect-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Corresponds to the javax.xml.ws.RespectBinding annotation
+            or its corresponding javax.xml.ws.RespectBindingFeature web
+            service feature. This is used to control whether a JAX-WS
+            implementation must respect/honor the contents of the
+            wsdl:binding in the WSDL that is associated with the service.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="protocol-binding"
+                   type="javaee:protocol-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to specify the protocol binding used by the port-component.
+            If this element is not specified, then the default binding is
+            used (SOAP 1.1 over HTTP)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-endpoint-interface"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            The service-endpoint-interface element contains the
+            fully-qualified name of the port component's Service Endpoint
+            Interface.
+            
+            Used in: port-component
+            
+            Example:
+            	      <remote>com.wombat.empl.EmployeeService</remote>
+            
+            This may not be specified in case there is no Service
+            Enpoint Interface as is the case with directly using an
+            implementation class with the @WebService annotation.
+            
+            When the port component is a Provider implementation
+            this is not specified.
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-impl-bean"
+                   type="javaee:service-impl-beanType"/>
+      <xsd:choice>
+        <xsd:element name="handler"
+                     type="javaee:handlerType"
+                     minOccurs="0"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with JAX-RPC based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="handler-chains"
+                     type="javaee:handler-chainsType"
+                     minOccurs="0"
+                     maxOccurs="1">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with JAX-WS based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-impl-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The service-impl-bean element defines the web service implementation.
+        A service implementation can be an EJB bean class or JAX-RPC web
+        component.  Existing EJB implementations are exposed as a web service
+        using an ejb-link.
+        
+        Used in: port-component
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice>
+      <xsd:element name="ejb-link"
+                   type="javaee:ejb-linkType"/>
+      <xsd:element name="servlet-link"
+                   type="javaee:servlet-linkType"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-linkType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        The servlet-link element is used in the service-impl-bean element
+        to specify that a Service Implementation Bean is defined as a
+        JAX-RPC Service Endpoint.
+        
+        The value of the servlet-link element must be the servlet-name of
+        a JAX-RPC Service Endpoint in the same WAR file.
+        
+        Used in: service-impl-bean
+        
+        Example:
+        	  <servlet-link>StockQuoteService</servlet-link>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservice-descriptionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The webservice-description element defines a WSDL document file
+        and the set of Port components associated with the WSDL ports
+        defined in the WSDL document.  There may be multiple
+        webservice-descriptions defined within a module.
+        
+        All WSDL file ports must have a corresponding port-component element
+        defined.
+        
+        Used in: webservices
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="icon"
+                   type="javaee:iconType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="webservice-description-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The webservice-description-name identifies the collection of
+            port-components associated with a WSDL file and JAX-RPC
+            mapping. The name must be unique within the deployment descriptor.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The wsdl-file element contains the name of a WSDL file in the
+            module.  The file name is a relative path within the module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The jaxrpc-mapping-file element contains the name of a file that
+            describes the JAX-RPC mapping between the Java interaces used by
+            the application and the WSDL description in the wsdl-file.  The
+            file name is a relative path within the module.
+            
+            This is not required when JAX-WS based runtime is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component"
+                   type="javaee:port-componentType"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+        <xsd:key name="port-component_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Defines the name of the handler. The name must be unique
+              within the module.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:handler"/>
+          <xsd:field xpath="javaee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="webservicesType">
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="webservice-description"
+                   type="javaee:webservice-descriptionType"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+        <xsd:key name="port-component-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[[
+              	The port-component-name element specifies a port
+              	component's name.  This name is assigned by the module
+              	producer to name the service implementation bean in the
+              	module's deployment descriptor. The name must be unique
+              	among the port component names defined in the same module.
+              
+              	Used in: port-component
+              
+              	Example:
+              		<port-component-name>EmployeeService
+              		</port-component-name>
+              
+              	
+              
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:port-component"/>
+          <xsd:field xpath="javaee:port-component-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="javaee:dewey-versionType"
+                   fixed="1.4"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The required value for the version is 1.4.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/javaee_web_services_client_1_2.xsd b/wildfly/docs/schema/javaee_web_services_client_1_2.xsd
new file mode 100644
index 0000000..9e601de
--- /dev/null
+++ b/wildfly/docs/schema/javaee_web_services_client_1_2.xsd
@@ -0,0 +1,578 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/javaee"
+	    xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="1.2">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)javaee_web_services_client_1_2.xsds	1.19 02/13/06
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2006 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-component-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The port-component-ref element declares a client dependency
+	on the container for resolving a Service Endpoint Interface
+	to a WSDL port. It optionally associates the Service Endpoint
+	Interface with a particular port-component. This is only used
+	by the container for a Service.getPort(Class) method call.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="service-endpoint-interface"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-endpoint-interface element defines a fully qualified
+	    Java class that represents the Service Endpoint Interface of a
+	    WSDL port.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="enable-mtom"
+                   type="javaee:true-falseType"
+		   minOccurs="0" maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism on the client
+	    side for a port-component.
+
+	    Not to be specified for JAX-RPC runtime
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="port-component-link"
+		   type="javaee:string"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-component-link element links a port-component-ref
+	    to a specific port-component required to be made available
+	    by a service reference.
+
+	    The value of a port-component-link must be the
+	    port-component-name of a port-component in the same module
+	    or another module in the same application unit. The syntax
+	    for specification follows the syntax defined for ejb-link
+	    in the EJB 2.0 specification.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:group name="service-refGroup">
+    <xsd:sequence>
+      <xsd:element name="service-ref"
+		   type="javaee:service-refType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:key name="service-ref_handler-name-key">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      Defines the name of the handler. The name must be unique
+	      within the module.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	  <xsd:selector xpath="javaee:handler"/>
+	  <xsd:field xpath="javaee:handler-name"/>
+	</xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The service-ref element declares a reference to a Web
+	service. It contains optional description, display name and
+	icons, a declaration of the required Service interface,
+	an optional WSDL document location, an optional set
+	of JAX-RPC mappings, an optional QName for the service element,
+	an optional set of Service Endpoint Interfaces to be resolved
+	by the container to a WSDL port, and an optional set of handlers.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="service-ref-name"
+		   type="javaee:jndi-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-ref-name element declares logical name that the
+	    components in the module use to look up the Web service. It
+	    is recommended that all service reference names start with
+	    "service/".
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="service-interface"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-interface element declares the fully qualified class
+	    name of the JAX-RPC Service interface the client depends on.
+	    In most cases the value will be javax.xml.rpc.Service.  A JAX-RPC
+	    generated Service Interface class may also be specified.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="service-ref-type"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-ref-type element declares the type of the service-ref
+	    element that is injected or returned when a JNDI lookup is done.
+	    This must be either a fully qualified name of Service class or
+	    the fully qualified name of service endpoint interface class.
+	    This is only used with JAX-WS runtime where the corresponding
+	    @WebServiceRef annotation can be used to denote both a Service
+	    or a Port.
+
+	    If this is not specified, then the type of service-ref element
+	    that is injected or returned when a JNDI lookup is done is
+	    always a Service interface/class.
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="wsdl-file"
+		   type="javaee:xsdAnyURIType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The wsdl-file element contains the URI location of a WSDL
+	    file. The location is relative to the root of the module.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="jaxrpc-mapping-file"
+		   type="javaee:pathType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The jaxrpc-mapping-file element contains the name of a file that
+	    describes the JAX-RPC mapping between the Java interaces used by
+	    the application and the WSDL description in the wsdl-file.  The
+	    file name is a relative path within the module file.
+
+	    This is not required when JAX-WS based runtime is used.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="service-qname"
+		   type="javaee:xsdQNameType"
+		   minOccurs="0" maxOccurs="1">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The service-qname element declares the specific WSDL service
+	    element that is being refered to.  It is not specified if no
+	    wsdl-file is declared.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="port-component-ref"
+		   type="javaee:port-component-refType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-component-ref element declares a client dependency
+	    on the container for resolving a Service Endpoint Interface
+	    to a WSDL port. It optionally associates the Service Endpoint
+	    Interface with a particular port-component. This is only used
+	    by the container for a Service.getPort(Class) method call.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:choice>
+	  <xsd:element name="handler"
+		       type="javaee:service-ref_handlerType"
+		       minOccurs="0" maxOccurs="unbounded">
+	    <xsd:annotation>
+	      <xsd:documentation>
+
+		Declares the handler for a port-component. Handlers can
+		access the init-param name/value pairs using the
+		HandlerInfo interface. If port-name is not specified, the
+		handler is assumed to be associated with all ports of the
+		service.
+
+		To be used with JAX-RPC based runtime only.
+
+	      </xsd:documentation>
+	    </xsd:annotation>
+	  </xsd:element>
+	  <xsd:element name="handler-chains"
+		       type="javaee:service-ref_handler-chainsType"
+		       minOccurs="0" maxOccurs="1">
+	    <xsd:annotation>
+	      <xsd:documentation>
+		 To be used with JAX-WS based runtime only.
+	      </xsd:documentation>
+	    </xsd:annotation>
+	  </xsd:element>
+      </xsd:choice>
+
+      <xsd:group ref="javaee:resourceGroup"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-ref_handler-chainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+      The handler-chain element defines the handlerchain.
+      Handlerchain can be defined such that the handlers in the
+      handlerchain operate,all ports of a service, on a specific
+      port or on a list of protocol-bindings. The choice of elements
+      service-name-pattern, port-name-pattern and protocol-bindings
+      are used to specify whether the handlers in handler-chain are
+      for a service, port or protocol binding. If none of these
+      choices are specified with the handler-chain element then the
+      handlers specified in the handler-chain will be applied on
+      everything.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+
+      <xsd:choice minOccurs="0" maxOccurs="1">
+         <xsd:element name="service-name-pattern"
+		      type="javaee:service-ref_qname-pattern" />
+         <xsd:element name="port-name-pattern"
+	              type="javaee:service-ref_qname-pattern" />
+         <xsd:element name="protocol-bindings"
+	              type="javaee:service-ref_protocol-bindingListType"/>
+      </xsd:choice>
+
+      <xsd:element name="handler"
+                   type="javaee:service-ref_handlerType"
+		   minOccurs="1" maxOccurs="unbounded"/>
+    </xsd:sequence>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-ref_handler-chainsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+      The handler-chains element defines the handlerchains associated with this
+      service or service endpoint.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="handler-chain"
+                   type="javaee:service-ref_handler-chainType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-ref_handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Declares the handler for a port-component. Handlers can access the
+	init-param name/value pairs using the HandlerInfo interface. If
+	port-name is not specified, the handler is assumed to be associated
+	with all ports of the service.
+
+	Used in: service-ref
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the name of the handler. The name must be unique
+	    within the module.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a fully qualified class name for the handler
+	    implementation.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+		   type="javaee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+
+      <xsd:element name="soap-header"
+		   type="javaee:xsdQNameType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the QName of a SOAP header that will be processed
+	    by the handler.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="soap-role"
+		   type="javaee:string"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The soap-role element contains a SOAP actor definition that
+	    the Handler will play as a role.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="port-name"
+		   type="javaee:string"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The port-name element defines the WSDL port-name that a
+	    handler should be associated with.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="service-ref_protocol-URIAliasType">
+     <xsd:annotation>
+        <xsd:documentation>
+	   Defines the type that is used for specifying tokens that
+	   start with ## which are used to alias existing standard
+	   protocol bindings and support aliases for new standard
+	   binding URIs that are introduced in future specifications.
+
+	   The following tokens alias the standard protocol binding
+	   URIs:
+
+	   ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+	   ##SOAP11_HTTP_MTOM =
+                 "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+           ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+           ##SOAP12_HTTP_MTOM =
+                 "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+           ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+
+        </xsd:documentation>
+     </xsd:annotation>
+     <xsd:restriction base="xsd:token">
+        <xsd:pattern value="##.+"/>
+     </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="service-ref_protocol-bindingListType">
+     <xsd:annotation>
+        <xsd:documentation>
+	   Defines the type used for specifying a list of
+	   protocol-bindingType(s). For e.g.
+
+	    ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+
+        </xsd:documentation>
+     </xsd:annotation>
+     <xsd:list itemType="javaee:service-ref_protocol-bindingType"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="service-ref_protocol-bindingType">
+     <xsd:annotation>
+        <xsd:documentation>
+	   Defines the type used for specifying the URI for the
+	   protocol binding used by the port-component.  For
+	   portability one could use one of the following tokens that
+	   alias the standard binding types:
+
+	    ##SOAP11_HTTP
+	    ##SOAP11_HTTP_MTOM
+            ##SOAP12_HTTP
+            ##SOAP12_HTTP_MTOM
+            ##XML_HTTP
+
+	   Other specifications could define tokens that start with ##
+	   to alias new standard binding URIs that are introduced.
+
+        </xsd:documentation>
+     </xsd:annotation>
+     <xsd:union memberTypes="xsd:anyURI javaee:service-ref_protocol-URIAliasType"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="service-ref_qname-pattern">
+     <xsd:annotation>
+        <xsd:documentation>
+	     This is used to specify the QName pattern in the
+	     attribute service-name-pattern and port-name-pattern in
+	     the handler-chain element
+
+	     For example, the various forms acceptable here for
+	     service-name-pattern attribute in handler-chain element
+	     are :
+
+	     Exact Name: service-name-pattern="ns1:EchoService"
+
+		 In this case, handlers specified in this
+		 handler-chain element will apply to all ports with
+		 this exact service name. The namespace prefix must
+		 have been declared in a namespace declaration
+		 attribute in either the start-tag of the element
+		 where the prefix is used or in an an ancestor
+		 element (i.e. an element in whose content the
+		 prefixed markup occurs)
+
+	     Pattern : service-name-pattern="ns1:EchoService*"
+
+		 In this case, handlers specified in this
+		 handler-chain element will apply to all ports whose
+		 Service names are like EchoService1, EchoServiceFoo
+		 etc. The namespace prefix must have been declared in
+		 a namespace declaration attribute in either the
+		 start-tag of the element where the prefix is used or
+		 in an an ancestor element (i.e. an element in whose
+		 content the prefixed markup occurs)
+
+	     Wild Card : service-name-pattern="*"
+
+		In this case, handlers specified in this handler-chain
+		element will apply to ports of all service names.
+
+	    The same can be applied to port-name attribute in
+	    handler-chain element.
+
+        </xsd:documentation>
+     </xsd:annotation>
+
+     <xsd:restriction base="xsd:token">
+        <xsd:pattern value="\*|([\i-[:]][\c-[:]]*:)?[\i-[:]][\c-[:]]*\*?"/>
+     </xsd:restriction>
+
+  </xsd:simpleType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/javaee_web_services_client_1_3.xsd b/wildfly/docs/schema/javaee_web_services_client_1_3.xsd
new file mode 100644
index 0000000..237d33c
--- /dev/null
+++ b/wildfly/docs/schema/javaee_web_services_client_1_3.xsd
@@ -0,0 +1,745 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The service-ref element declares a reference to a Web
+        service. It contains optional description, display name and
+        icons, a declaration of the required Service interface,
+        an optional WSDL document location, an optional set
+        of JAX-RPC mappings, an optional QName for the service element,
+        an optional set of Service Endpoint Interfaces to be resolved 
+        by the container to a WSDL port, and an optional set of handlers.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="service-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-ref-name element declares logical name that the
+            components in the module use to look up the Web service. It 
+            is recommended that all service reference names start with 
+            "service/".
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-interface"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-interface element declares the fully qualified class
+            name of the JAX-RPC Service interface the client depends on. 
+            In most cases the value will be javax.xml.rpc.Service.  A JAX-RPC
+            generated Service Interface class may also be specified.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-ref-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-ref-type element declares the type of the service-ref 
+            element that is injected or returned when a JNDI lookup is done.
+            This must be either a fully qualified name of Service class or 
+            the fully qualified name of service endpoint interface class. 
+            This is only used with JAX-WS runtime where the corresponding 
+            @WebServiceRef annotation can be used to denote both a Service
+            or a Port.
+            
+            If this is not specified, then the type of service-ref element 
+            that is injected or returned when a JNDI lookup is done is 
+            always a Service interface/class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+                   type="javaee:xsdAnyURIType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The wsdl-file element contains the URI location of a WSDL
+            file. The location is relative to the root of the module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The jaxrpc-mapping-file element contains the name of a file that
+            describes the JAX-RPC mapping between the Java interaces used by
+            the application and the WSDL description in the wsdl-file.  The 
+            file name is a relative path within the module file.
+            
+            This is not required when JAX-WS based runtime is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-qname"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-qname element declares the specific WSDL service
+            element that is being refered to.  It is not specified if no
+            wsdl-file is declared.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component-ref"
+                   type="javaee:port-component-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-component-ref element declares a client dependency
+            on the container for resolving a Service Endpoint Interface
+            to a WSDL port. It optionally associates the Service Endpoint
+            Interface with a particular port-component. This is only used
+            by the container for a Service.getPort(Class) method call.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="handler"
+                     type="javaee:handlerType"
+                     minOccurs="0"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	Declares the handler for a port-component. Handlers can
+              	access the init-param name/value pairs using the
+              	HandlerInfo interface. If port-name is not specified, the
+              	handler is assumed to be associated with all ports of the
+              	service.
+              
+              	To be used with JAX-RPC based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="handler-chains"
+                     type="javaee:handler-chainsType"
+                     minOccurs="0"
+                     maxOccurs="1">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with JAX-WS based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-component-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The port-component-ref element declares a client dependency
+        on the container for resolving a Service Endpoint Interface
+        to a WSDL port. It optionally associates the Service Endpoint
+        Interface with a particular port-component. This is only used
+        by the container for a Service.getPort(Class) method call.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="service-endpoint-interface"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-endpoint-interface element defines a fully qualified
+            Java class that represents the Service Endpoint Interface of a
+            WSDL port.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism on the client
+            side for a port-component. 
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mtom-threshold"
+                   type="javaee:xsdNonNegativeIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When MTOM is enabled, binary data above this size in bytes
+            should be XOP encoded or sent as attachment. Default value is 0.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="addressing"
+                   type="javaee:addressingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            This specifies the WS-Addressing requirements for a JAX-WS
+            web service. It corresponds to javax.xml.ws.soap.Addressing
+            annotation or its feature javax.xml.ws.soap.AddressingFeature.
+            
+            See the addressingType for more information.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="respect-binding"
+                   type="javaee:respect-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Corresponds to the javax.xml.ws.RespectBinding annotation
+            or its corresponding javax.xml.ws.RespectBindingFeature web
+            service feature. This is used to control whether a JAX-WS
+            implementation must respect/honor the contents of the
+            wsdl:binding in the WSDL that is associated with the service.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component-link"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-component-link element links a port-component-ref
+            to a specific port-component required to be made available
+            by a service reference.
+            
+            The value of a port-component-link must be the
+            port-component-name of a port-component in the same module
+            or another module in the same application unit. The syntax
+            for specification follows the syntax defined for ejb-link
+            in the EJB 2.0 specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chains element defines the handlerchains associated with this
+        service or service endpoint.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="handler-chain"
+                   type="javaee:handler-chainType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chain element defines the handlerchain. 
+        Handlerchain can be defined such that the handlers in the
+        handlerchain operate,all ports of a service, on a specific
+        port or on a list of protocol-bindings. The choice of elements
+        service-name-pattern, port-name-pattern and protocol-bindings
+        are used to specify whether the handlers in handler-chain are
+        for a service, port or protocol binding. If none of these 
+        choices are specified with the handler-chain element then the
+        handlers specified in the handler-chain will be applied on 
+        everything.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="service-name-pattern"
+                     type="javaee:qname-pattern"/>
+        <xsd:element name="port-name-pattern"
+                     type="javaee:qname-pattern"/>
+        <xsd:element name="protocol-bindings"
+                     type="javaee:protocol-bindingListType"/>
+      </xsd:choice>
+      <xsd:element name="handler"
+                   type="javaee:handlerType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="protocol-bindingListType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type used for specifying a list of
+        protocol-bindingType(s). For e.g.
+        
+        ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:list itemType="javaee:protocol-bindingType"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="protocol-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type used for specifying the URI for the
+        protocol binding used by the port-component.  For
+        portability one could use one of the following tokens that
+        alias the standard binding types: 
+        
+        ##SOAP11_HTTP
+        ##SOAP11_HTTP_MTOM
+        ##SOAP12_HTTP
+        ##SOAP12_HTTP_MTOM
+        ##XML_HTTP
+        
+        Other specifications could define tokens that start with ##
+        to alias new standard binding URIs that are introduced.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:union memberTypes="xsd:anyURI javaee:protocol-URIAliasType"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="protocol-URIAliasType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type that is used for specifying tokens that
+        start with ## which are used to alias existing standard
+        protocol bindings and support aliases for new standard
+        binding URIs that are introduced in future specifications.
+        
+        The following tokens alias the standard protocol binding
+        URIs:
+        
+        ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+        ##SOAP11_HTTP_MTOM = 
+        "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+        ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+        ##SOAP12_HTTP_MTOM = 
+        "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+        ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="##.+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="qname-pattern">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is used to specify the QName pattern in the
+        attribute service-name-pattern and port-name-pattern in
+        the handler-chain element
+        
+        For example, the various forms acceptable here for
+        service-name-pattern attribute in handler-chain element
+        are :
+        
+        Exact Name: service-name-pattern="ns1:EchoService"
+        
+        	 In this case, handlers specified in this
+        	 handler-chain element will apply to all ports with
+        	 this exact service name. The namespace prefix must
+        	 have been declared in a namespace declaration
+        	 attribute in either the start-tag of the element
+        	 where the prefix is used or in an an ancestor 
+        	 element (i.e. an element in whose content the 
+        	 prefixed markup occurs)
+        	 
+        
+        Pattern : service-name-pattern="ns1:EchoService*"
+        
+        	 In this case, handlers specified in this
+        	 handler-chain element will apply to all ports whose
+        	 Service names are like EchoService1, EchoServiceFoo
+        	 etc. The namespace prefix must have been declared in
+        	 a namespace declaration attribute in either the
+        	 start-tag of the element where the prefix is used or
+        	 in an an ancestor element (i.e. an element in whose 
+        	 content the prefixed markup occurs)
+        
+        Wild Card : service-name-pattern="*"
+        
+        	In this case, handlers specified in this handler-chain
+        	element will apply to ports of all service names.
+        
+        The same can be applied to port-name attribute in
+        handler-chain element.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\*|([\i-[:]][\c-[:]]*:)?[\i-[:]][\c-[:]]*\*?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="addressingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This specifies the WS-Addressing requirements for a JAX-WS web service.
+        It corresponds to javax.xml.ws.soap.Addressing annotation or its
+        feature javax.xml.ws.soap.AddressingFeature.
+        
+        If the "enabled" element is "true", WS-Addressing is enabled.
+        It means that the endpoint supports WS-Addressing but does not require
+        its use. The default value for "enabled" is "true".
+        
+        If the WS-Addressing is enabled and the "required" element is "true",
+        it means that the endpoint requires WS-Addressing. The default value
+        for "required" is "false".
+        
+        If WS-Addressing is enabled, the "responses" element determines
+        if an endpoint requires the use of only anonymous responses,
+        or only non-anonymous responses, or all. The value of the "responses"
+        element must be one of the following:
+        
+        ANONYMOUS
+        NON_ANONYMOUS
+        ALL
+        
+        The default value for the "responses" is ALL.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="required"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="responses"
+                   type="javaee:addressing-responsesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="addressing-responsesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        If WS-Addressing is enabled, this type determines if an endpoint
+        requires the use of only anonymous responses, or only non-anonymous
+        responses, or all.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="ANONYMOUS"/>
+        <xsd:enumeration value="NON_ANONYMOUS"/>
+        <xsd:enumeration value="ALL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="respect-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Corresponds to the javax.xml.ws.RespectBinding annotation
+        or its corresponding javax.xml.ws.RespectBindingFeature web
+        service feature. This is used to control whether a JAX-WS
+        implementation must respect/honor the contents of the
+        wsdl:binding in the WSDL that is associated with the service.
+        
+        If the "enabled" element is "true", wsdl:binding in the
+        associated WSDL, if any, must be respected/honored.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declares the handler for a port-component, service-ref. Handlers can
+        access the init-param name/value pairs using the HandlerInfo interface.
+        
+        Used in: port-component, service-ref
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name of the handler. The name must be unique within the
+            module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a fully qualified class name for the handler implementation.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Not to be specified for JAX-WS runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-header"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the QName of a SOAP header that will be processed by the
+            handler.
+            
+            Not to be specified for JAX-WS runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-role"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The soap-role element contains a SOAP actor definition that the
+            Handler will play as a role.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-name"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-name element defines the WSDL port-name that a
+            handler should be associated with. If port-name is not
+            specified, the handler is assumed to be associated with
+            all ports of the service.
+            
+            Not to be specified for JAX-WS runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:group name="service-refGroup">
+    <xsd:sequence>
+      <xsd:element name="service-ref"
+                   type="javaee:service-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:key name="service-ref_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Defines the name of the handler. The name must be unique
+              within the module.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:handler"/>
+          <xsd:field xpath="javaee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/javaee_web_services_client_1_4.xsd b/wildfly/docs/schema/javaee_web_services_client_1_4.xsd
new file mode 100644
index 0000000..d474a8d
--- /dev/null
+++ b/wildfly/docs/schema/javaee_web_services_client_1_4.xsd
@@ -0,0 +1,737 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.4">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      (C) Copyright International Business Machines Corporation 2002
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="service-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The service-ref element declares a reference to a Web
+        service. It contains optional description, display name and
+        icons, a declaration of the required Service interface,
+        an optional WSDL document location, an optional set
+        of JAX-RPC mappings, an optional QName for the service element,
+        an optional set of Service Endpoint Interfaces to be resolved 
+        by the container to a WSDL port, and an optional set of handlers.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="service-ref-name"
+                   type="javaee:jndi-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-ref-name element declares logical name that the
+            components in the module use to look up the Web service. It 
+            is recommended that all service reference names start with 
+            "service/".
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-interface"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-interface element declares the fully qualified class
+            name of the JAX-RPC Service interface the client depends on. 
+            In most cases the value will be javax.xml.rpc.Service.  A JAX-RPC
+            generated Service Interface class may also be specified.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-ref-type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-ref-type element declares the type of the service-ref 
+            element that is injected or returned when a JNDI lookup is done.
+            This must be either a fully qualified name of Service class or 
+            the fully qualified name of service endpoint interface class. 
+            This is only used with JAX-WS runtime where the corresponding 
+            @WebServiceRef annotation can be used to denote both a Service
+            or a Port.
+            
+            If this is not specified, then the type of service-ref element 
+            that is injected or returned when a JNDI lookup is done is 
+            always a Service interface/class.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="wsdl-file"
+                   type="javaee:xsdAnyURIType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The wsdl-file element contains the URI location of a WSDL
+            file. The location is relative to the root of the module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="jaxrpc-mapping-file"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The jaxrpc-mapping-file element contains the name of a file that
+            describes the JAX-RPC mapping between the Java interaces used by
+            the application and the WSDL description in the wsdl-file.  The 
+            file name is a relative path within the module file.
+            
+            This is not required when JAX-WS based runtime is used.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="service-qname"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-qname element declares the specific WSDL service
+            element that is being refered to.  It is not specified if no
+            wsdl-file is declared.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component-ref"
+                   type="javaee:port-component-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-component-ref element declares a client dependency
+            on the container for resolving a Service Endpoint Interface
+            to a WSDL port. It optionally associates the Service Endpoint
+            Interface with a particular port-component. This is only used
+            by the container for a Service.getPort(Class) method call.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="handler"
+                     type="javaee:handlerType"
+                     minOccurs="0"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	Declares the handler for a port-component. Handlers can
+              	access the init-param name/value pairs using the
+              	HandlerInfo interface. If port-name is not specified, the
+              	handler is assumed to be associated with all ports of the
+              	service.
+              
+              	To be used with JAX-RPC based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="handler-chains"
+                     type="javaee:handler-chainsType"
+                     minOccurs="0"
+                     maxOccurs="1">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              	 To be used with JAX-WS based runtime only.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:group ref="javaee:resourceGroup"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="port-component-refType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The port-component-ref element declares a client dependency
+        on the container for resolving a Service Endpoint Interface
+        to a WSDL port. It optionally associates the Service Endpoint
+        Interface with a particular port-component. This is only used
+        by the container for a Service.getPort(Class) method call.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="service-endpoint-interface"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The service-endpoint-interface element defines a fully qualified
+            Java class that represents the Service Endpoint Interface of a
+            WSDL port.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enable-mtom"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Used to enable or disable SOAP MTOM/XOP mechanism on the client
+            side for a port-component. 
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="mtom-threshold"
+                   type="javaee:xsdNonNegativeIntegerType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When MTOM is enabled, binary data above this size in bytes
+            should be XOP encoded or sent as attachment. Default value is 0.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="addressing"
+                   type="javaee:addressingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            This specifies the WS-Addressing requirements for a JAX-WS
+            web service. It corresponds to javax.xml.ws.soap.Addressing
+            annotation or its feature javax.xml.ws.soap.AddressingFeature.
+            
+            See the addressingType for more information.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="respect-binding"
+                   type="javaee:respect-bindingType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Corresponds to the javax.xml.ws.RespectBinding annotation
+            or its corresponding javax.xml.ws.RespectBindingFeature web
+            service feature. This is used to control whether a JAX-WS
+            implementation must respect/honor the contents of the
+            wsdl:binding in the WSDL that is associated with the service.
+            
+            Not to be specified for JAX-RPC runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-component-link"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-component-link element links a port-component-ref
+            to a specific port-component required to be made available
+            by a service reference.
+            
+            The value of a port-component-link must be the
+            port-component-name of a port-component in the same module
+            or another module in the same application unit. The syntax
+            for specification follows the syntax defined for ejb-link
+            in the EJB 2.0 specification.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainsType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chains element defines the handlerchains associated with this
+        service or service endpoint.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="handler-chain"
+                   type="javaee:handler-chainType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handler-chainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The handler-chain element defines the handlerchain. 
+        Handlerchain can be defined such that the handlers in the
+        handlerchain operate,all ports of a service, on a specific
+        port or on a list of protocol-bindings. The choice of elements
+        service-name-pattern, port-name-pattern and protocol-bindings
+        are used to specify whether the handlers in handler-chain are
+        for a service, port or protocol binding. If none of these 
+        choices are specified with the handler-chain element then the
+        handlers specified in the handler-chain will be applied on 
+        everything.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="service-name-pattern"
+                     type="javaee:qname-pattern"/>
+        <xsd:element name="port-name-pattern"
+                     type="javaee:qname-pattern"/>
+        <xsd:element name="protocol-bindings"
+                     type="javaee:protocol-bindingListType"/>
+      </xsd:choice>
+      <xsd:element name="handler"
+                   type="javaee:handlerType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="protocol-bindingListType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type used for specifying a list of
+        protocol-bindingType(s). For e.g.
+        
+        ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:list itemType="javaee:protocol-bindingType"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="protocol-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type used for specifying the URI for the
+        protocol binding used by the port-component.  For
+        portability one could use one of the following tokens that
+        alias the standard binding types: 
+        
+        ##SOAP11_HTTP
+        ##SOAP11_HTTP_MTOM
+        ##SOAP12_HTTP
+        ##SOAP12_HTTP_MTOM
+        ##XML_HTTP
+        
+        Other specifications could define tokens that start with ##
+        to alias new standard binding URIs that are introduced.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:union memberTypes="xsd:anyURI javaee:protocol-URIAliasType"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="protocol-URIAliasType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the type that is used for specifying tokens that
+        start with ## which are used to alias existing standard
+        protocol bindings and support aliases for new standard
+        binding URIs that are introduced in future specifications.
+        
+        The following tokens alias the standard protocol binding
+        URIs:
+        
+        ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+        ##SOAP11_HTTP_MTOM = 
+        "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+        ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+        ##SOAP12_HTTP_MTOM = 
+        "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+        ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="##.+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="qname-pattern">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This is used to specify the QName pattern in the
+        attribute service-name-pattern and port-name-pattern in
+        the handler-chain element
+        
+        For example, the various forms acceptable here for
+        service-name-pattern attribute in handler-chain element
+        are :
+        
+        Exact Name: service-name-pattern="ns1:EchoService"
+        
+        	 In this case, handlers specified in this
+        	 handler-chain element will apply to all ports with
+        	 this exact service name. The namespace prefix must
+        	 have been declared in a namespace declaration
+        	 attribute in either the start-tag of the element
+        	 where the prefix is used or in an an ancestor 
+        	 element (i.e. an element in whose content the 
+        	 prefixed markup occurs)
+        	 
+        
+        Pattern : service-name-pattern="ns1:EchoService*"
+        
+        	 In this case, handlers specified in this
+        	 handler-chain element will apply to all ports whose
+        	 Service names are like EchoService1, EchoServiceFoo
+        	 etc. The namespace prefix must have been declared in
+        	 a namespace declaration attribute in either the
+        	 start-tag of the element where the prefix is used or
+        	 in an an ancestor element (i.e. an element in whose 
+        	 content the prefixed markup occurs)
+        
+        Wild Card : service-name-pattern="*"
+        
+        	In this case, handlers specified in this handler-chain
+        	element will apply to ports of all service names.
+        
+        The same can be applied to port-name attribute in
+        handler-chain element.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="\*|([\i-[:]][\c-[:]]*:)?[\i-[:]][\c-[:]]*\*?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="addressingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This specifies the WS-Addressing requirements for a JAX-WS web service.
+        It corresponds to javax.xml.ws.soap.Addressing annotation or its
+        feature javax.xml.ws.soap.AddressingFeature.
+        
+        If the "enabled" element is "true", WS-Addressing is enabled.
+        It means that the endpoint supports WS-Addressing but does not require
+        its use. The default value for "enabled" is "true".
+        
+        If the WS-Addressing is enabled and the "required" element is "true",
+        it means that the endpoint requires WS-Addressing. The default value
+        for "required" is "false".
+        
+        If WS-Addressing is enabled, the "responses" element determines
+        if an endpoint requires the use of only anonymous responses,
+        or only non-anonymous responses, or all. The value of the "responses"
+        element must be one of the following:
+        
+        ANONYMOUS
+        NON_ANONYMOUS
+        ALL
+        
+        The default value for the "responses" is ALL.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="required"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="responses"
+                   type="javaee:addressing-responsesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="addressing-responsesType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        If WS-Addressing is enabled, this type determines if an endpoint
+        requires the use of only anonymous responses, or only non-anonymous
+        responses, or all.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="ANONYMOUS"/>
+        <xsd:enumeration value="NON_ANONYMOUS"/>
+        <xsd:enumeration value="ALL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="respect-bindingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Corresponds to the javax.xml.ws.RespectBinding annotation
+        or its corresponding javax.xml.ws.RespectBindingFeature web
+        service feature. This is used to control whether a JAX-WS
+        implementation must respect/honor the contents of the
+        wsdl:binding in the WSDL that is associated with the service.
+        
+        If the "enabled" element is "true", wsdl:binding in the
+        associated WSDL, if any, must be respected/honored.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="handlerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declares the handler for a port-component, service-ref. Handlers can
+        access the init-param name/value pairs using the HandlerInfo interface.
+        
+        Used in: port-component, service-ref
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="handler-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the name of the handler. The name must be unique within the
+            module.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="handler-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a fully qualified class name for the handler implementation.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Not to be specified for JAX-WS runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-header"
+                   type="javaee:xsdQNameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the QName of a SOAP header that will be processed by the
+            handler.
+            
+            Not to be specified for JAX-WS runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="soap-role"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The soap-role element contains a SOAP actor definition that the
+            Handler will play as a role.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="port-name"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The port-name element defines the WSDL port-name that a
+            handler should be associated with. If port-name is not
+            specified, the handler is assumed to be associated with
+            all ports of the service.
+            
+            Not to be specified for JAX-WS runtime
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:group name="service-refGroup">
+    <xsd:sequence>
+      <xsd:element name="service-ref"
+                   type="javaee:service-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:key name="service-ref_handler-name-key">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Defines the name of the handler. The name must be unique
+              within the module.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+          <xsd:selector xpath="javaee:handler"/>
+          <xsd:field xpath="javaee:handler-name"/>
+        </xsd:key>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:group>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-app_7_0.xsd b/wildfly/docs/schema/jboss-app_7_0.xsd
new file mode 100644
index 0000000..84cf6a9
--- /dev/null
+++ b/wildfly/docs/schema/jboss-app_7_0.xsd
@@ -0,0 +1,123 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+           targetNamespace="http://www.jboss.com/xml/ns/javaee"
+           version="7.0"
+           elementFormDefault="qualified">
+
+    <xs:annotation>
+        <xs:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the JBoss AS7 EAR application deployment descriptor.
+	The deployment descriptor must be named "jboss-app.xml" and placed in the
+	.ear/META-INF folder. All the descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-app xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             version="7.0">
+	       ...
+            </jboss-app>
+
+    The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	 https://www.jboss.org/schema/jbossas/jboss-app_7_0.xsd
+
+	]]>
+        </xs:documentation>
+    </xs:annotation>
+
+    <!-- Import the Java EE6 xsd -->
+    <xs:import namespace="http://java.sun.com/xml/ns/javaee"
+               schemaLocation="application_6.xsd"/>
+
+    <!-- Include the common JBoss EE elements -->
+    <xs:include schemaLocation="jboss-common_6_0.xsd"/>
+
+
+    <xs:element name="jboss-app" type="jboss-appType"/>
+
+    <xs:complexType name="jboss-appType">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for JBoss specific configurations in a .ear
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="javaee:applicationType">
+                <xs:sequence>
+                    <xs:element name="distinct-name" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The distinct-name for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The security domain application for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="unauthenticated-principal" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The principal that will be used for unauthenticated requests in this application
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+
+                    <xs:element name="library-directory" type="xs:string" minOccurs="0" maxOccurs="1"/>
+
+                    <xs:element name="security-role" minOccurs="0" maxOccurs="unbounded"
+                                type="jboss:security-roleType"/>
+
+                    <xs:element name="module" minOccurs="0" maxOccurs="unbounded" type="moduleType"/>
+
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:sequence>
+            <xs:element name="service" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="har" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="web" type="javaee:webType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-app_7_1.xsd b/wildfly/docs/schema/jboss-app_7_1.xsd
new file mode 100644
index 0000000..3ae12a8
--- /dev/null
+++ b/wildfly/docs/schema/jboss-app_7_1.xsd
@@ -0,0 +1,127 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+           targetNamespace="http://www.jboss.com/xml/ns/javaee"
+           version="7.1"
+           elementFormDefault="qualified">
+
+    <xs:annotation>
+        <xs:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the JBoss AS7 EAR application deployment descriptor.
+	The deployment descriptor must be named "jboss-app.xml" and placed in the
+	.ear/META-INF folder. All the descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-app xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             version="7.1">
+	       ...
+            </jboss-app>
+
+    The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	 https://www.jboss.org/schema/jbossas/jboss-app_7_1.xsd
+
+	]]>
+        </xs:documentation>
+    </xs:annotation>
+
+    <!-- Import the Java EE6 xsd -->
+    <xs:import namespace="http://java.sun.com/xml/ns/javaee"
+               schemaLocation="http://www.jboss.org/schema/jbossas/application_7.xsd"/>
+
+    <!-- Include the common JBoss EE elements -->
+    <xs:include schemaLocation="http://www.jboss.org/schema/jbossas/jboss-common_7_1.xsd"/>
+
+
+    <xs:element name="jboss-app" type="jboss-appType"/>
+
+    <xs:complexType name="jboss-appType">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for JBoss specific configurations in a .ear
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="javaee:applicationType">
+                <xs:sequence>
+                    <xs:element name="distinct-name" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The distinct-name for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The security domain application for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="unauthenticated-principal" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The principal that will be used for unauthenticated requests in this application
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+
+                    <xs:element name="library-directory" type="xs:string" minOccurs="0" maxOccurs="1"/>
+
+                    <xs:element name="security-role" minOccurs="0" maxOccurs="unbounded"
+                                type="jboss:security-roleType"/>
+
+                    <xs:element name="module" minOccurs="0" maxOccurs="unbounded" type="moduleType"/>
+
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:complexContent>
+            <xs:extension base="javaee:moduleType">
+                <xs:sequence>
+                    <xs:element name="service" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="har" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="web" type="javaee:webType" minOccurs="0" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-app_8_0.xsd b/wildfly/docs/schema/jboss-app_8_0.xsd
new file mode 100644
index 0000000..9b134ec
--- /dev/null
+++ b/wildfly/docs/schema/jboss-app_8_0.xsd
@@ -0,0 +1,127 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xs:schema xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+           xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+           targetNamespace="http://www.jboss.com/xml/ns/javaee"
+           version="8.0"
+           elementFormDefault="qualified">
+
+    <xs:annotation>
+        <xs:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the JBoss AS7 EAR application deployment descriptor.
+	The deployment descriptor must be named "jboss-app.xml" and placed in the
+	.ear/META-INF folder. All the descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-app xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             version="8.0">
+	       ...
+            </jboss-app>
+
+    The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	 https://www.jboss.org/schema/jbossas/jboss-app_8_0.xsd
+
+	]]>
+        </xs:documentation>
+    </xs:annotation>
+
+    <!-- Import the Java EE6 xsd -->
+    <xs:import namespace="http://xmlns.jcp.org/xml/ns/javaee"
+               schemaLocation="http://www.jboss.org/schema/jbossas/application_8.xsd"/>
+
+    <!-- Include the common JBoss EE elements -->
+    <xs:include schemaLocation="http://www.jboss.org/schema/jbossas/jboss-common_8_0.xsd"/>
+
+
+    <xs:element name="jboss-app" type="jboss-appType"/>
+
+    <xs:complexType name="jboss-appType">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for JBoss specific configurations in a .ear
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="javaee:applicationType">
+                <xs:sequence>
+                    <xs:element name="distinct-name" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The distinct-name for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The security domain application for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="unauthenticated-principal" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The principal that will be used for unauthenticated requests in this application
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+
+                    <xs:element name="library-directory" type="xs:string" minOccurs="0" maxOccurs="1"/>
+
+                    <xs:element name="security-role" minOccurs="0" maxOccurs="unbounded"
+                                type="jboss:security-roleType"/>
+
+                    <xs:element name="module" minOccurs="0" maxOccurs="unbounded" type="moduleType"/>
+
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:complexContent>
+            <xs:extension base="javaee:moduleType">
+                <xs:sequence>
+                    <xs:element name="service" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="har" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="web" type="javaee:webType" minOccurs="0" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-app_8_1.xsd b/wildfly/docs/schema/jboss-app_8_1.xsd
new file mode 100644
index 0000000..e926bd0
--- /dev/null
+++ b/wildfly/docs/schema/jboss-app_8_1.xsd
@@ -0,0 +1,122 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+           xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+           targetNamespace="http://www.jboss.com/xml/ns/javaee"
+           version="8.1"
+           elementFormDefault="qualified">
+
+    <xs:annotation>
+        <xs:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the JBoss AS7 EAR application deployment descriptor.
+	The deployment descriptor must be named "jboss-app.xml" and placed in the
+	.ear/META-INF folder. All the descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-app xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             version="8.1">
+	       ...
+            </jboss-app>
+
+    The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	 https://www.jboss.org/schema/jbossas/jboss-app_8_1.xsd
+
+	]]>
+        </xs:documentation>
+    </xs:annotation>
+
+    <!-- Import the Java EE6 xsd -->
+    <xs:import namespace="http://xmlns.jcp.org/xml/ns/javaee"
+               schemaLocation="https://www.jboss.org/schema/jbossas/application_8.xsd"/>
+
+    <!-- Include the common JBoss EE elements -->
+    <xs:include schemaLocation="https://www.jboss.org/schema/jbossas/jboss-common_8_1.xsd"/>
+
+
+    <xs:element name="jboss-app" type="jboss-appType"/>
+
+    <xs:complexType name="jboss-appType">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for JBoss specific configurations in a .ear
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="javaee:applicationType">
+                <xs:sequence>
+                    <xs:element name="distinct-name" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The distinct-name for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The security domain application for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="unauthenticated-principal" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The principal that will be used for unauthenticated requests in this application
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+
+                    <xs:element name="library-directory" type="xs:string" minOccurs="0" maxOccurs="1"/>
+
+                    <xs:element name="security-role" minOccurs="0" maxOccurs="unbounded"
+                                type="jboss:security-roleType"/>
+
+                    <xs:element name="module" minOccurs="0" maxOccurs="unbounded" type="moduleType"/>
+
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:complexContent>
+            <xs:extension base="javaee:moduleType">
+                <xs:sequence>
+                    <xs:element name="service" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="har" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="web" type="javaee:webType" minOccurs="0" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-app_9_0.xsd b/wildfly/docs/schema/jboss-app_9_0.xsd
new file mode 100644
index 0000000..0cc3989
--- /dev/null
+++ b/wildfly/docs/schema/jboss-app_9_0.xsd
@@ -0,0 +1,122 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns="urn:jboss:jakartaee:1.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:jboss="urn:jboss:jakartaee:1.0"
+           targetNamespace="urn:jboss:jakartaee:1.0"
+           version="9.0"
+           elementFormDefault="qualified">
+
+    <xs:annotation>
+        <xs:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the JBoss EAR application deployment descriptor.
+	The deployment descriptor must be named "jboss-app.xml" and placed in the
+	.ear/META-INF folder. All the descriptors must indicate
+	the JBoss schema by using the Jakarta EE namespace:
+
+	urn:jboss:jakartaee:1.0
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-app xmlns="urn:jboss:jakartaee:1.0"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             version="9.0">
+	       ...
+            </jboss-app>
+
+    The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Jakarta EE namespace with the following location:
+
+	 https://www.jboss.org/schema/jbossas/jboss-app_9_0.xsd
+
+	]]>
+        </xs:documentation>
+    </xs:annotation>
+
+    <!-- Import the JakartaEE 10 xsd -->
+    <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee"
+               schemaLocation="https://jakarta.ee/xml/ns/jakartaee/application_10.xsd"/>
+
+    <!-- Include the common JBoss EE elements -->
+    <xs:include schemaLocation="https://www.jboss.org/schema/jbossas/jboss-common_9_0.xsd"/>
+
+
+    <xs:element name="jboss-app" type="jboss-appType"/>
+
+    <xs:complexType name="jboss-appType">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for JBoss specific configurations in a .ear
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="jakartaee:applicationType">
+                <xs:sequence>
+                    <xs:element name="distinct-name" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The distinct-name for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The security domain application for this application.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="unauthenticated-principal" type="xs:string" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The principal that will be used for unauthenticated requests in this application
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+
+                    <xs:element name="library-directory" type="xs:string" minOccurs="0" maxOccurs="1"/>
+
+                    <xs:element name="security-role" minOccurs="0" maxOccurs="unbounded"
+                                type="jboss:security-roleType"/>
+
+                    <xs:element name="module" minOccurs="0" maxOccurs="unbounded" type="moduleType"/>
+
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:complexContent>
+            <xs:extension base="jakartaee:moduleType">
+                <xs:sequence>
+                    <xs:element name="service" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="har" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+                    <xs:element name="web" type="jakartaee:webType" minOccurs="0" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-cli_1_0.xsd b/wildfly/docs/schema/jboss-as-cli_1_0.xsd
new file mode 100644
index 0000000..c3ae2a3
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-cli_1_0.xsd
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:cli:1.0"
+           targetNamespace="urn:jboss:cli:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the JBoss Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element ref="default-controller" minOccurs="0"/>
+                <xs:element ref="history" minOccurs="0"/>
+                <xs:element ref="ssl" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="default-controller">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration of the default controller to connect to
+                when the connect command is executed w/o arguments.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="host" type="xs:string" minOccurs="0" default="localhost"/>
+                <xs:element name="port" type="xs:int" minOccurs="0" default="9999"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="history">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true"/>
+                <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history"/>
+                <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}"/>
+                <xs:element name="max-size" type="xs:int" minOccurs="0" default="500"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="ssl">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="keyStore" type="xs:string" minOccurs="0" />
+                <xs:element name="keyStorePassword" type="xs:string" minOccurs="0" />
+                <xs:element name="trustStore" type="xs:string" minOccurs="0" />
+                <xs:element name="trustStorePassword" type="xs:string" minOccurs="0" />
+                <xs:element name="modifyTrustStore" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Setting to true will cause the CLI to prompt when unrecognised certificates are received
+                            and allow them to be stored in the truststore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-cli_1_1.xsd b/wildfly/docs/schema/jboss-as-cli_1_1.xsd
new file mode 100644
index 0000000..4844ce6
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-cli_1_1.xsd
@@ -0,0 +1,99 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:cli:1.1"
+           targetNamespace="urn:jboss:cli:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the JBoss Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element ref="default-controller" minOccurs="0"/>
+                <xs:element ref="validate-operation-requests" minOccurs="0"/>
+                <xs:element ref="history" minOccurs="0"/>
+                <xs:element ref="ssl" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="default-controller">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration of the default controller to connect to
+                when the connect command is executed w/o arguments.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="host" type="xs:string" minOccurs="0" default="localhost"/>
+                <xs:element name="port" type="xs:int" minOccurs="0" default="9999"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="validate-operation-requests" type="xs:boolean" default="true">
+        <xs:annotation>
+            <xs:documentation>
+                Indicates whether the parameter list of the operation reuqests
+                should be validated before the requests are sent to the controller
+                for the execution.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+    
+    <xs:element name="history">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true"/>
+                <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history"/>
+                <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}"/>
+                <xs:element name="max-size" type="xs:int" minOccurs="0" default="500"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="ssl">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="key-store" type="xs:string" minOccurs="0" />
+                <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+                <xs:element name="alias" type="xs:string" minOccurs="0" />
+                <xs:element name="key-password" type="xs:string" minOccurs="0" />                
+                <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+                <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+                <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Setting to true will cause the CLI to prompt when unrecognised certificates are received
+                            and allow them to be stored in the truststore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-cli_1_2.xsd b/wildfly/docs/schema/jboss-as-cli_1_2.xsd
new file mode 100644
index 0000000..fa3bcad
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-cli_1_2.xsd
@@ -0,0 +1,133 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:cli:1.2"
+           targetNamespace="urn:jboss:cli:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the JBoss Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element ref="default-controller" minOccurs="0"/>
+                <xs:element ref="validate-operation-requests" minOccurs="0"/>
+                <xs:element ref="history" minOccurs="0"/>
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter)
+                            values before sending the operation request to the controller or let the resolution happen
+                            on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element ref="connection-timeout" minOccurs="0" maxOccurs="1"/>
+
+                <xs:element ref="ssl" minOccurs="0" maxOccurs="1"/>
+
+                <xs:element ref="silent" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="default-controller">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration of the default controller to connect to
+                when the connect command is executed w/o arguments.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="host" type="xs:string" minOccurs="0" default="localhost"/>
+                <xs:element name="port" type="xs:int" minOccurs="0" default="9999"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="validate-operation-requests" type="xs:boolean" default="true">
+        <xs:annotation>
+            <xs:documentation>
+                Indicates whether the parameter list of the operation reuqests
+                should be validated before the requests are sent to the controller
+                for the execution.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:element name="history">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true"/>
+                <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history"/>
+                <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}"/>
+                <xs:element name="max-size" type="xs:int" minOccurs="0" default="500"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="connection-timeout" type="xs:int" default="5000">
+        <xs:annotation>
+            <xs:documentation>
+                The time allowed to establish a connection with the controller.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:element name="ssl">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="key-store" type="xs:string" minOccurs="0" />
+                <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+                <xs:element name="alias" type="xs:string" minOccurs="0" />
+                <xs:element name="key-password" type="xs:string" minOccurs="0" />
+                <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+                <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+                <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Setting to true will cause the CLI to prompt when unrecognised certificates are received
+                            and allow them to be stored in the truststore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="silent" type="xs:boolean" default="false">
+        <xs:annotation>
+            <xs:documentation>
+                Whether to write info and error messages to the terminal output.
+                Even if the value is false, the messages will still be logged
+                using the logger if its configuration allows and/or if the
+                output target was specified as part of the command line using '>'.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-cli_1_3.xsd b/wildfly/docs/schema/jboss-as-cli_1_3.xsd
new file mode 100644
index 0000000..6194c1b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-cli_1_3.xsd
@@ -0,0 +1,157 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:cli:1.3"
+           targetNamespace="urn:jboss:cli:1.3"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the JBoss Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element ref="default-controller" minOccurs="0"/>
+                <xs:element ref="validate-operation-requests" minOccurs="0"/>
+                <xs:element ref="history" minOccurs="0"/>
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter)
+                            values before sending the operation request to the controller or let the resolution happen
+                            on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element ref="connection-timeout" minOccurs="0" maxOccurs="1"/>
+
+                <xs:element ref="ssl" minOccurs="0" maxOccurs="1"/>
+                
+                <xs:element ref="silent" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="default-controller">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration of the default controller to connect to
+                when the connect command is executed w/o arguments.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="host" type="xs:string" minOccurs="0" default="localhost"/>
+                <xs:element name="port" type="xs:int" minOccurs="0" default="9999"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="validate-operation-requests" type="xs:boolean" default="true">
+        <xs:annotation>
+            <xs:documentation>
+                Indicates whether the parameter list of the operation reuqests
+                should be validated before the requests are sent to the controller
+                for the execution.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:element name="history">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true"/>
+                <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history"/>
+                <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}"/>
+                <xs:element name="max-size" type="xs:int" minOccurs="0" default="500"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="connection-timeout" type="xs:int" default="5000">
+        <xs:annotation>
+            <xs:documentation>
+                The time allowed to establish a connection with the controller.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:element name="ssl">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="vault" type="vaultType" minOccurs="0" />
+                <xs:element name="key-store" type="xs:string" minOccurs="0" />
+                <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+                <xs:element name="alias" type="xs:string" minOccurs="0" />
+                <xs:element name="key-password" type="xs:string" minOccurs="0" />
+                <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+                <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+                <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Setting to true will cause the CLI to prompt when unrecognised certificates are received
+                            and allow them to be stored in the truststore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+    
+    <xs:element name="silent" type="xs:boolean" default="false">
+        <xs:annotation>
+            <xs:documentation>
+                Whether to write info and error messages to the terminal output.
+                Even if the value is false, the messages will still be logged
+                using the logger if its configuration allows and/or if the
+                output target was specified as part of the command line using '>'.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+    
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-cli_2_0.xsd b/wildfly/docs/schema/jboss-as-cli_2_0.xsd
new file mode 100644
index 0000000..8fb5188
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-cli_2_0.xsd
@@ -0,0 +1,230 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:2.0" targetNamespace="urn:jboss:cli:2.0"
+    elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="http-remoting">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remoting
+                                            protocol - this attribute set to true causes the protocol to default to remoting if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be http-remoting if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+                            
+                            Even if the value is false, the messages will still be logged using 
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault" type="vaultType" minOccurs="0" />
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                Element of this type points to a file with vault configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="file" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Absolute or relative file system path to the XML file
+                    containing the vault configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    One of the system-provided named paths (such as jboss.home.dir,
+                    user.home, user.dir) relative to which the absolute path
+                    will be calculated for the path specified in the file attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-config_1_7.xsd b/wildfly/docs/schema/jboss-as-config_1_7.xsd
new file mode 100644
index 0000000..3df4c3f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-config_1_7.xsd
@@ -0,0 +1,4198 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:1.7"
+           targetNamespace="urn:jboss:domain:1.7"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+                            
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host 
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+                            
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             3 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+                              
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+                                
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />        
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+	    <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attempts using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element> 
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM, 
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles, 
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password?  Some LDAP servers will
+                            allow an anonymous bind so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for group loading be used or should
+                                            the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined in the configuration, 
+                                            however setting this attribute to false will cause subsequent searches to use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for group loading be used or should the 
+                                    connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined in the configuration, 
+                                    however setting this attribute to false will cause subsequent searches to use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existant groups 
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the groups that the 
+                    groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+           <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+            </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter. Must be unique across all types of formatter
+                    (there is only the JSON formatter at present but more are planned for the
+                    future)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether or not to include the date in the formatted log record
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+                <xs:documentation>
+                    The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                    Will be ignored if include-date="false".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+                <xs:documentation>
+                    The separator between the date and the rest of the formatted log message.
+                    Will be ignored if include-date="false".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+                <xs:attribute name="compact" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true will format the JSON on one line. There may still be
+                            values containing new lines, so if having the whole record on
+                            one line is important, set escape-new-line or escape-control-characters to true.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true will escape all new lines with the ascii code in octal,
+                            e.g. #012.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true will escape all control characters (ascii entries with a decimal
+                            value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                            If this is true, it will override escape-new-line="false"
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="RFC5424">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="RFC3164">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="max-length" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="truncate" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+	             <xs:attribute name="facility" default="USER_LEVEL">
+	                <xs:annotation>
+	                   <xs:documentation>
+	                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+	                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+	                   </xs:documentation>
+	                </xs:annotation>
+	                <xs:simpleType>
+	                   <xs:restriction base="xs:token">
+	                      <xs:enumeration value="KERNEL">
+	                         <xs:annotation>
+	                            <xs:documentation>0</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="USER_LEVEL">
+	                         <xs:annotation>
+	                            <xs:documentation>1</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="MAIL_SYSTEM">
+	                         <xs:annotation>
+	                            <xs:documentation>2</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SYSTEM_DAEMONS">
+	                         <xs:annotation>
+	                            <xs:documentation>3</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SECURITY">
+	                         <xs:annotation>
+	                            <xs:documentation>4</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SYSLOGD">
+	                         <xs:annotation>
+	                            <xs:documentation>5</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LINE_PRINTER">
+	                         <xs:annotation>
+	                            <xs:documentation>6</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="NETWORK_NEWS">
+	                         <xs:annotation>
+	                            <xs:documentation>7</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="UUCP">
+	                         <xs:annotation>
+	                            <xs:documentation>8</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="CLOCK_DAEMON">
+	                         <xs:annotation>
+	                            <xs:documentation>9</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SECURITY2">
+	                         <xs:annotation>
+	                            <xs:documentation>10</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="FTP_DAEMON">
+	                         <xs:annotation>
+	                            <xs:documentation>11</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="NTP">
+	                         <xs:annotation>
+	                            <xs:documentation>12</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOG_AUDIT">
+	                         <xs:annotation>
+	                            <xs:documentation>13</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOG_ALERT">
+	                         <xs:annotation>
+	                            <xs:documentation>14</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="CLOCK_DAEMON2">
+	                         <xs:annotation>
+	                            <xs:documentation>15</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_0">
+	                         <xs:annotation>
+	                            <xs:documentation>16</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_1">
+	                         <xs:annotation>
+	                            <xs:documentation>17</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_2">
+	                         <xs:annotation>
+	                            <xs:documentation>18</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_3">
+	                         <xs:annotation>
+	                            <xs:documentation>19</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_4">
+	                         <xs:annotation>
+	                            <xs:documentation>20</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_5">
+	                         <xs:annotation>
+	                            <xs:documentation>21</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_6">
+	                         <xs:annotation>
+	                            <xs:documentation>22</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_7">
+	                         <xs:annotation>
+	                            <xs:documentation>23</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                   </xs:restriction>
+	                </xs:simpleType>
+	             </xs:attribute>
+	             <xs:attribute name="app-name" type="xs:string">
+	                <xs:annotation>
+	                   <xs:documentation>
+	                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+	                   </xs:documentation>
+	                </xs:annotation>
+	             </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means 
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>                
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" />
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Additional attributes specific to the native management interface only.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Where Remoting is accepting incomming connections part of the authentication process
+                            advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                            can be set if an alternative is required.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Where Remoting is accepting incomming connection the initial exchange and the authentication
+                            process both advertise the name of the server, by default this is derived from the address Remoting
+                            is listening on but this attribute can be set to override the name.
+                         </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>            
+            </xs:extension>
+        </xs:complexContent>
+    
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                    
+                    Note: When specified the interface must also be configured to reference a security realm with a configured KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                        should be ignored. The value corresponds to the 'key' portion of the first element in the
+                        resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:sequence>
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional" default="org.jboss.as.host-controller">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the DiscoveryOption implementation from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+	    <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+	        <xs:annotation>
+                <xs:documentation>
+	                    Increment to apply to the base port values defined in the
+	                    socket group to derive the values to use on this
+	                    server.
+	            </xs:documentation>
+	        </xs:annotation>
+	    </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+                <xs:documentation>
+                    Type definition for a client mapping on a socket binding. A client
+                    mapping specifies how external clients should connect to this
+                    socket's port, provided that the client's outbound interface
+                    match the specified source network value.
+                </xs:documentation>
+            </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an ip address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses a ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either a IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:element name="any-ipv6-address" type="any-ipv6-addressType"/>
+            <xs:element name="any-ipv4-address" type="any-ipv4-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either a IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv6-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv6 wildcard address (::).
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv4-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv4 wildcard address (0.0.0.0).
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                        The name of the path. Cannot be one of the standard fixed paths
+                        provided by the system:
+
+                        jboss.home - the root directory of the JBoss AS distribution
+                        user.home - user's home directory
+                        user.dir - user's current working directory
+                        java.home - java installation directory
+                        jboss.server.base.dir - root directory for an individual server
+                                                instance
+
+                        Note that the system provides other standard paths that can be
+                        overridden by declaring them in the configuration file. See
+                        the 'relative-to' attribute documentation for a complete
+                        list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+
+                If treated as an absolute path, the actual runtime pathname specified
+                by the value of this attribute will be determined as follows:
+
+                If this value is already absolute, then the value is directly
+                used.  Otherwise the runtime pathname is resolved in a
+                system-dependent way.  On UNIX systems, a relative pathname is
+                made absolute by resolving it against the current user directory.
+                On Microsoft Windows systems, a relative pathname is made absolute
+                by resolving it against the current directory of the drive named by the
+                pathname, if any; if not, it is resolved against the current user
+                directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                The name of another previously named path, or of one of the
+                standard paths provided by the system. If 'relative-to' is
+                provided, the value of the 'path' attribute is treated as
+                relative to the path specified by this attribute. The standard
+                paths provided by the system include:
+
+                jboss.home - the root directory of the JBoss AS distribution
+                user.home - user's home directory
+                user.dir - user's current working directory
+                java.home - java installation directory
+                jboss.server.base.dir - root directory for an individual server
+                                        instance
+                jboss.server.config.dir - directory in which server configuration
+                                          files are stored.
+                jboss.server.data.dir - directory the server will use for persistent
+                                        data file storage
+                jboss.server.log.dir - directory the server will use for
+                                       log file storage
+                jboss.server.temp.dir - directory the server will use for
+                                       temporary file storage
+                jboss.domain.servers.dir - directory under which a host controller
+                                           will create the working area for
+                                           individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                The name of the path. Cannot be one of the standard fixed paths
+                provided by the system:
+
+                jboss.home.dir - the root directory of the JBoss AS distribution
+                user.home - user's home directory
+                user.dir - user's current working directory
+                java.home - java installation directory
+                jboss.server.base.dir - root directory for an individual server
+                                        instance
+
+                Note that the system provides other standard paths that can be
+                overridden by declaring them in the configuration file. See
+                the 'relative-to' attribute documentation for a complete
+                list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+
+                If treated as an absolute path, the actual runtime pathname specified
+                by the value of this attribute will be determined as follows:
+
+                If this value is already absolute, then the value is directly
+                used.  Otherwise the runtime pathname is resolved in a
+                system-dependent way.  On UNIX systems, a relative pathname is
+                made absolute by resolving it against the current user directory.
+                On Microsoft Windows systems, a relative pathname is made absolute
+                by resolving it against the current directory of the drive named by the
+                pathname, if any; if not, it is resolved against the current user
+                directory.
+
+                Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                The name of another previously named path, or of one of the
+                standard paths provided by the system. If 'relative-to' is
+                provided, the value of the 'path' attribute is treated as
+                relative to the path specified by this attribute. The standard
+                paths provided by the system include:
+
+                jboss.home.dir - the root directory of the JBoss AS distribution
+                user.home - user's home directory
+                user.dir - user's current working directory
+                java.home - java installation directory
+                jboss.server.base.dir - root directory for an individual server
+                                        instance
+                jboss.server.config.dir - directory in which server configuration
+                                          files are stored.
+                jboss.server.data.dir - directory the server will use for persistent
+                                        data file storage
+                jboss.server.log.dir - directory the server will use for
+                                       log file storage
+                jboss.server.temp.dir - directory the server will use for
+                                       temporary file storage
+                jboss.domain.servers.dir - directory under which a host controller
+                                           will create the working area for
+                                           individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+			            <xs:annotation>
+			                <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+			            </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+	           Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+	           If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+	           If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    Configuration of if a classification's read is sensitive
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    Configuration of if a classification's write is sensitive
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured sensitive classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="sensitive-classificationType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="type" type="typed-sensitivityType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the constraint, must be unique for each name
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            'core' or the name of the subsystem defining the constraint
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-config_1_8.xsd b/wildfly/docs/schema/jboss-as-config_1_8.xsd
new file mode 100644
index 0000000..ee5a7ea
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-config_1_8.xsd
@@ -0,0 +1,4250 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:1.8"
+           targetNamespace="urn:jboss:domain:1.8"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+                    
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+                            
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host 
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+                            
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             3 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+                              
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+                                
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />        
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+	    <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attempts using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element> 
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM, 
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles, 
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password?  Some LDAP servers will
+                            allow an anonymous bind so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+	   		</xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for group loading be used or should
+                                            the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined in the configuration, 
+                                            however setting this attribute to false will cause subsequent searches to use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for group loading be used or should the 
+                                    connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined in the configuration, 
+                                    however setting this attribute to false will cause subsequent searches to use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existant groups 
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the groups that the 
+                    groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+           <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+            </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter. Must be unique across all types of formatter
+                    (there is only the JSON formatter at present but more are planned for the
+                    future)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether or not to include the date in the formatted log record
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+                <xs:documentation>
+                    The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                    Will be ignored if include-date="false".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+                <xs:documentation>
+                    The separator between the date and the rest of the formatted log message.
+                    Will be ignored if include-date="false".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+                <xs:attribute name="compact" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true will format the JSON on one line. There may still be
+                            values containing new lines, so if having the whole record on
+                            one line is important, set escape-new-line or escape-control-characters to true.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true will escape all new lines with the ascii code in octal,
+                            e.g. #012.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true will escape all control characters (ascii entries with a decimal
+                            value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                            If this is true, it will override escape-new-line="false"
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="RFC5424">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="RFC3164">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="max-length" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="truncate" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+	             <xs:attribute name="facility" default="USER_LEVEL">
+	                <xs:annotation>
+	                   <xs:documentation>
+	                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+	                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+	                   </xs:documentation>
+	                </xs:annotation>
+	                <xs:simpleType>
+	                   <xs:restriction base="xs:token">
+	                      <xs:enumeration value="KERNEL">
+	                         <xs:annotation>
+	                            <xs:documentation>0</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="USER_LEVEL">
+	                         <xs:annotation>
+	                            <xs:documentation>1</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="MAIL_SYSTEM">
+	                         <xs:annotation>
+	                            <xs:documentation>2</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SYSTEM_DAEMONS">
+	                         <xs:annotation>
+	                            <xs:documentation>3</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SECURITY">
+	                         <xs:annotation>
+	                            <xs:documentation>4</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SYSLOGD">
+	                         <xs:annotation>
+	                            <xs:documentation>5</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LINE_PRINTER">
+	                         <xs:annotation>
+	                            <xs:documentation>6</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="NETWORK_NEWS">
+	                         <xs:annotation>
+	                            <xs:documentation>7</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="UUCP">
+	                         <xs:annotation>
+	                            <xs:documentation>8</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="CLOCK_DAEMON">
+	                         <xs:annotation>
+	                            <xs:documentation>9</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="SECURITY2">
+	                         <xs:annotation>
+	                            <xs:documentation>10</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="FTP_DAEMON">
+	                         <xs:annotation>
+	                            <xs:documentation>11</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="NTP">
+	                         <xs:annotation>
+	                            <xs:documentation>12</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOG_AUDIT">
+	                         <xs:annotation>
+	                            <xs:documentation>13</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOG_ALERT">
+	                         <xs:annotation>
+	                            <xs:documentation>14</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="CLOCK_DAEMON2">
+	                         <xs:annotation>
+	                            <xs:documentation>15</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_0">
+	                         <xs:annotation>
+	                            <xs:documentation>16</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_1">
+	                         <xs:annotation>
+	                            <xs:documentation>17</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_2">
+	                         <xs:annotation>
+	                            <xs:documentation>18</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_3">
+	                         <xs:annotation>
+	                            <xs:documentation>19</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_4">
+	                         <xs:annotation>
+	                            <xs:documentation>20</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_5">
+	                         <xs:annotation>
+	                            <xs:documentation>21</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_6">
+	                         <xs:annotation>
+	                            <xs:documentation>22</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                      <xs:enumeration value="LOCAL_USE_7">
+	                         <xs:annotation>
+	                            <xs:documentation>23</xs:documentation>
+	                         </xs:annotation>
+	                      </xs:enumeration>
+	                   </xs:restriction>
+	                </xs:simpleType>
+	             </xs:attribute>
+	             <xs:attribute name="app-name" type="xs:string">
+	                <xs:annotation>
+	                   <xs:documentation>
+	                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+	                   </xs:documentation>
+	                </xs:annotation>
+	             </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means 
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>                
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" />
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Additional attributes specific to the native management interface only.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Where Remoting is accepting incomming connections part of the authentication process
+                            advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                            can be set if an alternative is required.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Where Remoting is accepting incomming connection the initial exchange and the authentication
+                            process both advertise the name of the server, by default this is derived from the address Remoting
+                            is listening on but this attribute can be set to override the name.
+                         </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>            
+            </xs:extension>
+        </xs:complexContent>
+    
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                    
+                    Note: When specified the interface must also be configured to reference a security realm with a configured KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                        should be ignored. The value corresponds to the 'key' portion of the first element in the
+                        resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:sequence>
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional" default="org.jboss.as.host-controller">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the DiscoveryOption implementation from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+	    <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+	        <xs:annotation>
+                <xs:documentation>
+	                    Increment to apply to the base port values defined in the
+	                    socket group to derive the values to use on this
+	                    server.
+	            </xs:documentation>
+	        </xs:annotation>
+	    </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+                <xs:documentation>
+                    Type definition for a client mapping on a socket binding. A client
+                    mapping specifies how external clients should connect to this
+                    socket's port, provided that the client's outbound interface
+                    match the specified source network value.
+                </xs:documentation>
+            </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an ip address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses a ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either a IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:element name="any-ipv6-address" type="any-ipv6-addressType"/>
+            <xs:element name="any-ipv4-address" type="any-ipv4-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either a IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv6-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv6 wildcard address (::).
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv4-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv4 wildcard address (0.0.0.0).
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                        The name of the path. Cannot be one of the standard fixed paths
+                        provided by the system:
+
+                        jboss.home - the root directory of the JBoss AS distribution
+                        user.home - user's home directory
+                        user.dir - user's current working directory
+                        java.home - java installation directory
+                        jboss.server.base.dir - root directory for an individual server
+                                                instance
+
+                        Note that the system provides other standard paths that can be
+                        overridden by declaring them in the configuration file. See
+                        the 'relative-to' attribute documentation for a complete
+                        list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+
+                If treated as an absolute path, the actual runtime pathname specified
+                by the value of this attribute will be determined as follows:
+
+                If this value is already absolute, then the value is directly
+                used.  Otherwise the runtime pathname is resolved in a
+                system-dependent way.  On UNIX systems, a relative pathname is
+                made absolute by resolving it against the current user directory.
+                On Microsoft Windows systems, a relative pathname is made absolute
+                by resolving it against the current directory of the drive named by the
+                pathname, if any; if not, it is resolved against the current user
+                directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                The name of another previously named path, or of one of the
+                standard paths provided by the system. If 'relative-to' is
+                provided, the value of the 'path' attribute is treated as
+                relative to the path specified by this attribute. The standard
+                paths provided by the system include:
+
+                jboss.home - the root directory of the JBoss AS distribution
+                user.home - user's home directory
+                user.dir - user's current working directory
+                java.home - java installation directory
+                jboss.server.base.dir - root directory for an individual server
+                                        instance
+                jboss.server.config.dir - directory in which server configuration
+                                          files are stored.
+                jboss.server.data.dir - directory the server will use for persistent
+                                        data file storage
+                jboss.server.log.dir - directory the server will use for
+                                       log file storage
+                jboss.server.temp.dir - directory the server will use for
+                                       temporary file storage
+                jboss.domain.servers.dir - directory under which a host controller
+                                           will create the working area for
+                                           individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                The name of the path. Cannot be one of the standard fixed paths
+                provided by the system:
+
+                jboss.home.dir - the root directory of the JBoss AS distribution
+                user.home - user's home directory
+                user.dir - user's current working directory
+                java.home - java installation directory
+                jboss.server.base.dir - root directory for an individual server
+                                        instance
+
+                Note that the system provides other standard paths that can be
+                overridden by declaring them in the configuration file. See
+                the 'relative-to' attribute documentation for a complete
+                list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+
+                If treated as an absolute path, the actual runtime pathname specified
+                by the value of this attribute will be determined as follows:
+
+                If this value is already absolute, then the value is directly
+                used.  Otherwise the runtime pathname is resolved in a
+                system-dependent way.  On UNIX systems, a relative pathname is
+                made absolute by resolving it against the current user directory.
+                On Microsoft Windows systems, a relative pathname is made absolute
+                by resolving it against the current directory of the drive named by the
+                pathname, if any; if not, it is resolved against the current user
+                directory.
+
+                Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                The name of another previously named path, or of one of the
+                standard paths provided by the system. If 'relative-to' is
+                provided, the value of the 'path' attribute is treated as
+                relative to the path specified by this attribute. The standard
+                paths provided by the system include:
+
+                jboss.home.dir - the root directory of the JBoss AS distribution
+                user.home - user's home directory
+                user.dir - user's current working directory
+                java.home - java installation directory
+                jboss.server.base.dir - root directory for an individual server
+                                        instance
+                jboss.server.config.dir - directory in which server configuration
+                                          files are stored.
+                jboss.server.data.dir - directory the server will use for persistent
+                                        data file storage
+                jboss.server.log.dir - directory the server will use for
+                                       log file storage
+                jboss.server.temp.dir - directory the server will use for
+                                       temporary file storage
+                jboss.domain.servers.dir - directory under which a host controller
+                                           will create the working area for
+                                           individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+			            <xs:annotation>
+			                <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+			            </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+	           Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+	           If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+	           If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    Configuration of if a classification's read is sensitive
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    Configuration of if a classification's write is sensitive
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured sensitive classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="sensitive-classificationType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="type" type="typed-sensitivityType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the constraint, must be unique for each name
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            'core' or the name of the subsystem defining the constraint
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-config_2_0.xsd b/wildfly/docs/schema/jboss-as-config_2_0.xsd
new file mode 100644
index 0000000..0e7a5d8
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-config_2_0.xsd
@@ -0,0 +1,3821 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:2.0"
+           targetNamespace="urn:jboss:domain:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore" type="extendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="keyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="keyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="extendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" />
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                    
+                    Note: When specified the interface must also be configured to reference a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to instruct the master Host Controller to automatically not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Contact the master host controller to pull down the current domain wide configuration,
+                        but do not actually register with the master as a member of the domain. If the master
+                        cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:element name="any-ipv6-address" type="any-ipv6-addressType"/>
+            <xs:element name="any-ipv4-address" type="any-ipv4-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv6-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv6 wildcard address (::).
+
+                Deprecated. The name of this type implies sockets will be
+                reachable only via IPv6 addresses and not via IPv4, but this
+                is not the case. Since using any-addressType provides the same effect,
+                this any-ipv6-addressType will be removed in a future release.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv4-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv4 wildcard address (0.0.0.0).
+
+                Deprecated. In the absence of -Djava.net.preferIPv4Stack=true,
+                the JVM cannot be instructed to bind a socket to all IPv4 addresses,
+                but only to IPv4 addresses, so the intended semantic cannot be
+                obtained via this setting alone. Since using any-addressType
+                and setting -Djava.net.preferIPv4Stack=true provides the same effect,
+                this any-ipv4-addressType will be removed in a future release.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-config_2_1.xsd b/wildfly/docs/schema/jboss-as-config_2_1.xsd
new file mode 100644
index 0000000..dc30056
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-config_2_1.xsd
@@ -0,0 +1,4010 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:2.1"
+           targetNamespace="urn:jboss:domain:2.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" />
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                    
+                    Note: When specified the interface must also be configured to reference a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to instruct the master Host Controller to automatically not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:element name="any-ipv6-address" type="any-ipv6-addressType"/>
+            <xs:element name="any-ipv4-address" type="any-ipv4-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv6-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv6 wildcard address (::).
+
+                Deprecated. The name of this type implies sockets will be
+                reachable only via IPv6 addresses and not via IPv4, but this
+                is not the case. Since using any-addressType provides the same effect,
+                this any-ipv6-addressType will be removed in a future release.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv4-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv4 wildcard address (0.0.0.0).
+
+                Deprecated. In the absence of -Djava.net.preferIPv4Stack=true,
+                the JVM cannot be instructed to bind a socket to all IPv4 addresses,
+                but only to IPv4 addresses, so the intended semantic cannot be
+                obtained via this setting alone. Since using any-addressType
+                and setting -Djava.net.preferIPv4Stack=true provides the same effect,
+                this any-ipv4-addressType will be removed in a future release.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-config_2_2.xsd b/wildfly/docs/schema/jboss-as-config_2_2.xsd
new file mode 100644
index 0000000..2d6e3d1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-config_2_2.xsd
@@ -0,0 +1,4043 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:2.2"
+           targetNamespace="urn:jboss:domain:2.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                    
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revery back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" />
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to instruct the master Host Controller to automatically not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Contact the master host controller to pull down the current domain wide configuration,
+                        but do not actually register with the master as a member of the domain. If the master
+                        cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:element name="any-ipv6-address" type="any-ipv6-addressType"/>
+            <xs:element name="any-ipv4-address" type="any-ipv4-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv6-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv6 wildcard address (::).
+
+                Deprecated. The name of this type implies sockets will be
+                reachable only via IPv6 addresses and not via IPv4, but this
+                is not the case. Since using any-addressType provides the same effect,
+                this any-ipv6-addressType will be removed in a future release.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-ipv4-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to the IPv4 wildcard address (0.0.0.0).
+
+                Deprecated. In the absence of -Djava.net.preferIPv4Stack=true,
+                the JVM cannot be instructed to bind a socket to all IPv4 addresses,
+                but only to IPv4 addresses, so the intended semantic cannot be
+                obtained via this setting alone. Since using any-addressType
+                and setting -Djava.net.preferIPv4Stack=true provides the same effect,
+                this any-ipv4-addressType will be removed in a future release.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-datasources_1_1.xsd b/wildfly/docs/schema/jboss-as-datasources_1_1.xsd
new file mode 100644
index 0000000..bb3418a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-datasources_1_1.xsd
@@ -0,0 +1,950 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:1.1" xmlns="urn:jboss:domain:datasources:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), IdleConnections, EntirePool
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            Thios tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-verion" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-datasources_1_2.xsd b/wildfly/docs/schema/jboss-as-datasources_1_2.xsd
new file mode 100644
index 0000000..5b1c64b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-datasources_1_2.xsd
@@ -0,0 +1,968 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:1.2" xmlns="urn:jboss:domain:datasources:1.2"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                          Enable cmr functionality on this datsource's connections
+                         ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+      <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                      Enable statistics for this datasource
+                     ]]>
+            </xs:documentation>
+          </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), IdleConnections, EntirePool
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in a org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            Thios tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor version is obmitted the fist availabe
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-verion" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor version is obmitted the fist availabe
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-deployment-scanner_1_0.xsd b/wildfly/docs/schema/jboss-as-deployment-scanner_1_0.xsd
new file mode 100644
index 0000000..e1056f2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-deployment-scanner_1_0.xsd
@@ -0,0 +1,91 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:jboss:domain:deployment-scanner:1.0" xmlns:xs="http://www.w3.org/2001/XMLSchema" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:jboss:domain:deployment-scanner:1.0" version="1.0">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The filesystem deployment scanner subsystem configuration.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded" minOccurs="0">
+            <xs:element maxOccurs="unbounded" minOccurs="0" name="deployment-scanner" type="standalone-deployment-scanner-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-scanner-type">
+        <xs:annotation>
+            <xs:documentation>Allows configuration of an additional location where deployment
+                content can be stored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute default="default" name="name" type="xs:string" use="optional"/>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+           <xs:annotation>
+                <xs:documentation>Reference to a filesystem path defined in the "paths" section
+                of the server configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="0" name="scan-interval" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Periodic interval, in milliseconds, at which the repository
+                    should be scanned for changes. A value of less than 1 indicates the
+                    repository should only be scanned at initial startup.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="true" name="scan-enabled" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Flag indicating that all scanning (including initial scanning at startup)
+                    should be disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="true" name="auto-deploy-zipped" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether zipped deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="false" name="auto-deploy-exploded" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether zipped deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file. Setting
+                    this to 'true' is not recommended for anything but basic development scenarios,
+                    as there is no way to ensure that deployment will not occur in the middle of
+                    changes to the content.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="60" name="deployment-timeout" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                   Timeout used. in seconds, for deployment operations.  If an individual deployment operation
+                   takes longer than this timeout it will be canceled and marked as failed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-deployment-scanner_1_1.xsd b/wildfly/docs/schema/jboss-as-deployment-scanner_1_1.xsd
new file mode 100644
index 0000000..92e749b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-deployment-scanner_1_1.xsd
@@ -0,0 +1,99 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:jboss:domain:deployment-scanner:1.1" xmlns:xs="http://www.w3.org/2001/XMLSchema" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:jboss:domain:deployment-scanner:1.1" version="1.1">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The filesystem deployment scanner subsystem configuration.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded" minOccurs="0">
+            <xs:element maxOccurs="unbounded" minOccurs="0" name="deployment-scanner" type="standalone-deployment-scanner-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-scanner-type">
+        <xs:annotation>
+            <xs:documentation>Allows configuration of an additional location where deployment
+                content can be stored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="optional" default="default" />
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+           <xs:annotation>
+                <xs:documentation>Reference to a filesystem path defined in the "paths" section
+                of the server configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="scan-enabled" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Flag indicating that all scanning (including initial scanning at startup)
+                    should be disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="scan-interval" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>Periodic interval, in milliseconds, at which the repository
+                    should be scanned for changes. A value of less than 1 indicates the
+                    repository should only be scanned at initial startup.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-deploy-zipped" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether zipped deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-deploy-exploded" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether exploded deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file. Setting
+                    this to 'true' is not recommended for anything but basic development scenarios,
+                    as there is no way to ensure that deployment will not occur in the middle of
+                    changes to the content.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-deploy-xml" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether xml deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="deployment-timeout" type="xs:int" use="optional" default="600">
+            <xs:annotation>
+                <xs:documentation>
+                   Timeout used, in seconds, for deployment operations.  If an individual deployment operation
+                   takes longer than this timeout it will be canceled and marked as failed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-deployment-scanner_2_0.xsd b/wildfly/docs/schema/jboss-as-deployment-scanner_2_0.xsd
new file mode 100644
index 0000000..09f3c94
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-deployment-scanner_2_0.xsd
@@ -0,0 +1,107 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:jboss:domain:deployment-scanner:2.0" xmlns:xs="http://www.w3.org/2001/XMLSchema" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:jboss:domain:deployment-scanner:2.0" version="2.0">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The filesystem deployment scanner subsystem configuration.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded" minOccurs="0">
+            <xs:element maxOccurs="unbounded" minOccurs="0" name="deployment-scanner" type="standalone-deployment-scanner-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-scanner-type">
+        <xs:annotation>
+            <xs:documentation>Allows configuration of an additional location where deployment
+                content can be stored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="optional" default="default" />
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>The actual filesystem path. Treated as an absolute path, unless the
+                'relative-to' attribute is specified, in which case the value
+                is treated as relative to that path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+           <xs:annotation>
+                <xs:documentation>Reference to a filesystem path defined in the "paths" section
+                of the server configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="scan-enabled" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Flag indicating that all scanning (including initial scanning at startup)
+                    should be enabled or disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+            <xs:attribute name="scan-interval" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>Periodic interval, in milliseconds, at which the repository
+                    should be scanned for changes. A value of less than 1 indicates the
+                    repository should only be scanned at initial startup.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-deploy-zipped" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether zipped deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-deploy-exploded" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether exploded deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file. Setting
+                    this to 'true' is not recommended for anything but basic development scenarios,
+                    as there is no way to ensure that deployment will not occur in the middle of
+                    changes to the content.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-deploy-xml" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether xml deployment content should be automatically deployed by
+                    the scanner without requiring the user to add a .dodeploy marker file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="deployment-timeout" type="xs:int" use="optional" default="600">
+            <xs:annotation>
+                <xs:documentation>
+                   Timeout used, in seconds, for deployment operations.  If an individual deployment operation
+                   takes longer than this timeout it will be canceled and marked as failed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-failure-causes-rollback" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls whether a runtime failure of a deployment causes a rollback of the deployment as well
+                    as all other (maybe unrelated) deployments as part of the scan operation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_1_0.xsd b/wildfly/docs/schema/jboss-as-ee_1_0.xsd
new file mode 100644
index 0000000..afd107c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_1_0.xsd
@@ -0,0 +1,65 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:1.0"
+            xmlns="urn:jboss:domain:ee:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_1_1.xsd b/wildfly/docs/schema/jboss-as-ee_1_1.xsd
new file mode 100644
index 0000000..a67019a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_1_1.xsd
@@ -0,0 +1,82 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:1.1"
+            xmlns="urn:jboss:domain:ee:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_1_2.xsd b/wildfly/docs/schema/jboss-as-ee_1_2.xsd
new file mode 100644
index 0000000..835e0f1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_1_2.xsd
@@ -0,0 +1,102 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:1.2"
+            xmlns="urn:jboss:domain:ee:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="annotation-property-replacement" type="annotation-property-replacementType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+        <xs:attribute name="annotations" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="meta-inf" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="services" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="annotation-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on an annotation. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean" />
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_2_0.xsd b/wildfly/docs/schema/jboss-as-ee_2_0.xsd
new file mode 100644
index 0000000..86542cf
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_2_0.xsd
@@ -0,0 +1,395 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:2.0"
+            xmlns="urn:jboss:domain:ee:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="annotation-property-replacement" type="annotation-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="concurrent" type="concurrentType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="default-bindings" type="defaultBindingsType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+        <xs:attribute name="annotations" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="meta-inf" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="services" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="annotation-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on an annotation. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <!-- EE Concurrent (JSR 236) XML elements and attributes definition -->
+
+    <xs:complexType name="concurrentType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures EE Concurrent resources. If undefined, it turns off all EE Concurrent functionality.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="context-services" type="contextServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-executor-services" type="managedExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-scheduled-executor-services" type="managedScheduledExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-thread-factories" type="managedThreadFactoriesType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="contextServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="context-service" type="contextServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="contextServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The context service (implementing javax.enterprise.concurrent.ContextService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="use-transaction-setup-provider" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The optional attribute that defines if the context service should use a transaction setup provider, which may be used to suspend and resume active transactions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-thread-factory" type="managedThreadFactoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed thread factory (implementing javax.enterprise.concurrent.ManagedThreadFactory).
+                The mandatory "name" attribute, which may not be empty or have the value "default", identifies the
+                created thread factory.
+                The optional "context-service" identifies which Context Service should be used by created threads.
+                The optional "priority" attribute may be used to specify the priority of created threads.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="priority" type="priorityType" default="5"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-executor-service" type="managedExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed executor service (implementing javax.enterprise.concurrent.ManagedExecutorService).
+                If the "thread-factory" attribute is not defined a managed thread factory with no context service and normal thread priority will be created and used by the executor.
+                The task queue is based on the values of "core-threads" and "queue-length":
+                * If "queue-length" is 0, or "queue-length" is Integer.MAX_VALUE (2147483647) and "core-threads" is 0, direct handoff queuing strategy will be used and a SynchronousQueue will be created.
+                * If "queue-length" is Integer.MAX_VALUE but "core-threads" is not 0, an unbounded queue will be used.
+                * For any other valid value for "queue-length", a bounded queue wil be created.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType" use="required"/>
+        <xs:attribute name="max-threads" type="maxThreadsType" default="2147483647"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="queue-length" type="queueLengthType" default="0"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-scheduled-executor-service" type="managedScheduledExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed scheduled executor service (implementing javax.enterprise.concurrent.ManagedScheduledExecutorService).
+                If the "thread-factory" attribute is not defined a managed thread factory with no context service and normal thread priority will be created and used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType" use="required"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:simpleType name="nonEmptyTokenType">
+        <xs:annotation>
+            <xs:documentation>
+                A non empty token name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:minLength value="1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="nameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name for an EE Concurrency resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="jndiNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the entry in JNDI.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="contextServiceNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the context service to be used.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="threadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the managed thread factory to be used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="priorityType">
+        <xs:annotation>
+            <xs:documentation>
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Priority", defined in sections 3.4.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="hungTaskThresholdType">
+        <xs:annotation>
+            <xs:documentation>
+                The amount of time in milliseconds that a task can execute before it is considered hung. If zero then tasks are never considered hung.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Hung Task Threshold", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="longRunningTasksType">
+        <xs:annotation>
+            <xs:documentation>
+                If the application intends to run short vs. long-running tasks they can specify to use pooled or daemon threads.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Thread Use", defined in section 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="coreThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of threads to keep in the executor's pool, even if they are idle.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Core Size", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="maxThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The maximum number of threads to allow in the executor's pool.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Maximum Size", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keepAliveTimeType">
+        <xs:annotation>
+            <xs:documentation>
+                The time to allow threads to remain idle when the number of threads is greater than the core size.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Keep Alive", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="queueLengthType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of tasks that can be stored in the input queue. Zero means the queue capacity is not limited.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Work Queue Capacity", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="rejectPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                The policy to use when a task is to be rejected by the executor.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Reject Policy", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Throw an exception when rejected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="RETRY_ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Automatically resubmit and abort if it fails.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="defaultBindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The JNDI names for the default resources on EE components/modules JNDI contexts.
+                The optional context-service attribute defines the JNDI name of the EE Concurrency ContextService that should be bound at java:comp/DefaultContextService.
+                The optional datasource attribute defines the JNDI name of the SQL DataSource that should be bound at java:comp/DefaultDataSource.
+                The optional jms-connection-factory attribute defines the JNDI name of the JMS ConnectionFactory that should be bound at java:comp/DefaultJMSConnectionFactory.
+                The optional managed-executor-service attribute defines the JNDI name of the EE Concurrency ManagedExecutorService that should be bound at java:comp/DefaultManagedExecutorService.
+                The optional managed-scheduled-executor-service attribute defines the JNDI name of the EE Concurrency ManagedScheduledExecutorService that should be bound at java:comp/DefaultManagedScheduledExecutorService.
+                The optional managed-thread-factory attribute defines the JNDI name of the EE Concurrency ManagedThreadFactory that should be bound at java:comp/DefaultManagedThreadFactory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="context-service" type="jndiNameType"/>
+        <xs:attribute name="datasource" type="jndiNameType"/>
+        <xs:attribute name="jms-connection-factory" type="jndiNameType"/>
+        <xs:attribute name="managed-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-scheduled-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-thread-factory" type="jndiNameType"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_3_0.xsd b/wildfly/docs/schema/jboss-as-ee_3_0.xsd
new file mode 100644
index 0000000..9661bad
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_3_0.xsd
@@ -0,0 +1,395 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:3.0"
+            xmlns="urn:jboss:domain:ee:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="annotation-property-replacement" type="annotation-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="concurrent" type="concurrentType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="default-bindings" type="defaultBindingsType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+        <xs:attribute name="annotations" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="meta-inf" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="services" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="annotation-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on an annotation. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <!-- EE Concurrent (JSR 236) XML elements and attributes definition -->
+
+    <xs:complexType name="concurrentType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures EE Concurrent resources. If undefined, it turns off all EE Concurrent functionality.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="context-services" type="contextServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-thread-factories" type="managedThreadFactoriesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-executor-services" type="managedExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-scheduled-executor-services" type="managedScheduledExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="contextServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="context-service" type="contextServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="contextServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The context service (implementing javax.enterprise.concurrent.ContextService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="use-transaction-setup-provider" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The optional attribute that defines if the context service should use a transaction setup provider, which may be used to suspend and resume active transactions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-thread-factory" type="managedThreadFactoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed thread factory (implementing javax.enterprise.concurrent.ManagedThreadFactory).
+                The mandatory "name" attribute, which may not be empty or have the value "default", identifies the
+                created thread factory.
+                The optional "context-service" identifies which Context Service should be used by created threads.
+                The optional "priority" attribute may be used to specify the priority of created threads.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="priority" type="priorityType" default="5"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-executor-service" type="managedExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed executor service (implementing javax.enterprise.concurrent.ManagedExecutorService).
+                If the "thread-factory" attribute is not defined a managed thread factory with no context service and normal thread priority will be created and used by the executor.
+                The task queue is based on the values of "core-threads" and "queue-length":
+                * If "queue-length" is 0, or "queue-length" is Integer.MAX_VALUE (2147483647) and "core-threads" is 0, direct handoff queuing strategy will be used and a SynchronousQueue will be created.
+                * If "queue-length" is Integer.MAX_VALUE but "core-threads" is not 0, an unbounded queue will be used.
+                * For any other valid value for "queue-length", a bounded queue wil be created.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType" use="required"/>
+        <xs:attribute name="max-threads" type="maxThreadsType" default="2147483647"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="queue-length" type="queueLengthType" default="0"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-scheduled-executor-service" type="managedScheduledExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed scheduled executor service (implementing javax.enterprise.concurrent.ManagedScheduledExecutorService).
+                If the "thread-factory" attribute is not defined a managed thread factory with no context service and normal thread priority will be created and used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType" use="required"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:simpleType name="nonEmptyTokenType">
+        <xs:annotation>
+            <xs:documentation>
+                A non empty token name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:minLength value="1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="nameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name for an EE Concurrency resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="jndiNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the entry in JNDI.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="contextServiceNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the context service to be used.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="threadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the managed thread factory to be used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="priorityType">
+        <xs:annotation>
+            <xs:documentation>
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Priority", defined in sections 3.4.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="hungTaskThresholdType">
+        <xs:annotation>
+            <xs:documentation>
+                The amount of time in milliseconds that a task can execute before it is considered hung. If zero then tasks are never considered hung.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Hung Task Threshold", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="longRunningTasksType">
+        <xs:annotation>
+            <xs:documentation>
+                If the application intends to run short vs. long-running tasks they can specify to use pooled or daemon threads.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Thread Use", defined in section 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="coreThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of threads to keep in the executor's pool, even if they are idle.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Core Size", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="maxThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The maximum number of threads to allow in the executor's pool.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Maximum Size", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keepAliveTimeType">
+        <xs:annotation>
+            <xs:documentation>
+                The time to allow threads to remain idle when the number of threads is greater than the core size.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Keep Alive", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="queueLengthType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of tasks that can be stored in the input queue. Zero means the queue capacity is not limited.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Work Queue Capacity", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="rejectPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                The policy to use when a task is to be rejected by the executor.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Reject Policy", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Throw an exception when rejected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="RETRY_ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Automatically resubmit and abort if it fails.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="defaultBindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The JNDI names for the default resources on EE components/modules JNDI contexts.
+                The optional context-service attribute defines the JNDI name of the EE Concurrency ContextService that should be bound at java:comp/DefaultContextService.
+                The optional datasource attribute defines the JNDI name of the SQL DataSource that should be bound at java:comp/DefaultDataSource.
+                The optional jms-connection-factory attribute defines the JNDI name of the JMS ConnectionFactory that should be bound at java:comp/DefaultJMSConnectionFactory.
+                The optional managed-executor-service attribute defines the JNDI name of the EE Concurrency ManagedExecutorService that should be bound at java:comp/DefaultManagedExecutorService.
+                The optional managed-scheduled-executor-service attribute defines the JNDI name of the EE Concurrency ManagedScheduledExecutorService that should be bound at java:comp/DefaultManagedScheduledExecutorService.
+                The optional managed-thread-factory attribute defines the JNDI name of the EE Concurrency ManagedThreadFactory that should be bound at java:comp/DefaultManagedThreadFactory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="context-service" type="jndiNameType"/>
+        <xs:attribute name="datasource" type="jndiNameType"/>
+        <xs:attribute name="jms-connection-factory" type="jndiNameType"/>
+        <xs:attribute name="managed-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-scheduled-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-thread-factory" type="jndiNameType"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_4_0.xsd b/wildfly/docs/schema/jboss-as-ee_4_0.xsd
new file mode 100644
index 0000000..8deebe9
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_4_0.xsd
@@ -0,0 +1,417 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:4.0"
+            xmlns="urn:jboss:domain:ee:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="annotation-property-replacement" type="annotation-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="concurrent" type="concurrentType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="default-bindings" type="defaultBindingsType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+        <xs:attribute name="annotations" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="meta-inf" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="services" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="annotation-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on an annotation. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <!-- EE Concurrent (JSR 236) XML elements and attributes definition -->
+
+    <xs:complexType name="concurrentType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures EE Concurrent resources. If undefined, it turns off all EE Concurrent functionality.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="context-services" type="contextServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-thread-factories" type="managedThreadFactoriesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-executor-services" type="managedExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-scheduled-executor-services" type="managedScheduledExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="contextServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="context-service" type="contextServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="contextServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The context service (implementing javax.enterprise.concurrent.ContextService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="use-transaction-setup-provider" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The optional attribute that defines if the context service should use a transaction setup provider, which may be used to suspend and resume active transactions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-thread-factory" type="managedThreadFactoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed thread factory (implementing javax.enterprise.concurrent.ManagedThreadFactory).
+                The mandatory "name" attribute, which may not be empty or have the value "default", identifies the
+                created thread factory.
+                The optional "context-service" identifies which Context Service should be used by created threads.
+                The optional "priority" attribute may be used to specify the priority of created threads.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="priority" type="priorityType" default="5"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-executor-service" type="managedExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed executor service (implementing javax.enterprise.concurrent.ManagedExecutorService).
+                If the "thread-factory" attribute is not defined a managed thread factory with no context service and
+                normal thread priority will be created and used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType">
+            <xs:annotation>
+                <xs:documentation>
+                    The minimum number of threads to be used by the executor. If left undefined the default core-size
+                    is calculated based on the number of processors. A value of zero is not advised and in some cases
+                    invalid. See the queue-length attribute for details on how this value is used to determine the
+                    queuing strategy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="maxThreadsType">
+            <xs:annotation>
+                <xs:documentation>The maximum number of threads to be used by the executor. If left undefined the value
+                    from core-size will be used. This value is ignored if an unbounded queue is used (only core-threads
+                    will be used in that case).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="queue-length" type="queueLengthType">
+            <xs:annotation>
+                <xs:documentation>
+                    The executors task queue capacity. A length of 0 means direct hand-off and possible rejection will
+                    occur. An undefined length (the default), or Integer.MAX_VALUE, indicates that an unbounded queue
+                    should be used. All other values specify an exact queue size. If an unbounded queue or direct hand-off
+                    is used, a core-threads value greater than zero is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-scheduled-executor-service" type="managedScheduledExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed scheduled executor service (implementing javax.enterprise.concurrent.ManagedScheduledExecutorService).
+                If the "thread-factory" attribute is not defined a managed thread factory with no context service and normal thread priority will be created and used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:simpleType name="nonEmptyTokenType">
+        <xs:annotation>
+            <xs:documentation>
+                A non empty token name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:minLength value="1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="nameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name for an EE Concurrency resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="jndiNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the entry in JNDI.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="contextServiceNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the context service to be used.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="threadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the managed thread factory to be used by the executor.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="priorityType">
+        <xs:annotation>
+            <xs:documentation>
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Priority", defined in sections 3.4.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="hungTaskThresholdType">
+        <xs:annotation>
+            <xs:documentation>
+                The amount of time in milliseconds that a task can execute before it is considered hung. If zero then tasks are never considered hung.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Hung Task Threshold", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="longRunningTasksType">
+        <xs:annotation>
+            <xs:documentation>
+                If the application intends to run short vs. long-running tasks they can specify to use pooled or daemon threads.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Thread Use", defined in section 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="coreThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of threads to keep in the executor's pool, even if they are idle.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Core Size", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="maxThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The maximum number of threads to allow in the executor's pool.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Maximum Size", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keepAliveTimeType">
+        <xs:annotation>
+            <xs:documentation>
+                The time to allow threads to remain idle when the number of threads is greater than the core size.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Keep Alive", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="queueLengthType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of tasks that can be stored in the input queue. Zero means the queue capacity is not limited.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Work Queue Capacity", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="rejectPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                The policy to use when a task is to be rejected by the executor.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Reject Policy", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Throw an exception when rejected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="RETRY_ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Automatically resubmit and abort if it fails.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="defaultBindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The JNDI names for the default resources on EE components/modules JNDI contexts.
+                The optional context-service attribute defines the JNDI name of the EE Concurrency ContextService that should be bound at java:comp/DefaultContextService.
+                The optional datasource attribute defines the JNDI name of the SQL DataSource that should be bound at java:comp/DefaultDataSource.
+                The optional jms-connection-factory attribute defines the JNDI name of the JMS ConnectionFactory that should be bound at java:comp/DefaultJMSConnectionFactory.
+                The optional managed-executor-service attribute defines the JNDI name of the EE Concurrency ManagedExecutorService that should be bound at java:comp/DefaultManagedExecutorService.
+                The optional managed-scheduled-executor-service attribute defines the JNDI name of the EE Concurrency ManagedScheduledExecutorService that should be bound at java:comp/DefaultManagedScheduledExecutorService.
+                The optional managed-thread-factory attribute defines the JNDI name of the EE Concurrency ManagedThreadFactory that should be bound at java:comp/DefaultManagedThreadFactory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="context-service" type="jndiNameType"/>
+        <xs:attribute name="datasource" type="jndiNameType"/>
+        <xs:attribute name="jms-connection-factory" type="jndiNameType"/>
+        <xs:attribute name="managed-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-scheduled-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-thread-factory" type="jndiNameType"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_5_0.xsd b/wildfly/docs/schema/jboss-as-ee_5_0.xsd
new file mode 100644
index 0000000..e5fd8ee
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_5_0.xsd
@@ -0,0 +1,458 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee:5.0"
+            xmlns="urn:jboss:domain:ee:5.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="5.0">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="global-directories" type="directoriesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="annotation-property-replacement" type="annotation-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="concurrent" type="concurrentType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="default-bindings" type="defaultBindingsType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string"/>
+        <xs:attribute name="annotations" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="meta-inf" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="services" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="directoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="directory" type="directoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="directoryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the global directory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the global directory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+                <xs:documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="annotation-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on an annotation. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <!-- EE Concurrent (JSR 236) XML elements and attributes definition -->
+
+    <xs:complexType name="concurrentType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures EE Concurrent resources. If undefined, it turns off all EE Concurrent functionality.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="context-services" type="contextServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-thread-factories" type="managedThreadFactoriesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-executor-services" type="managedExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-scheduled-executor-services" type="managedScheduledExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="contextServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="context-service" type="contextServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="contextServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The context service (implementing javax.enterprise.concurrent.ContextService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="use-transaction-setup-provider" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The optional attribute that defines if the context service should use a transaction setup provider, which may be used to suspend and resume active transactions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-thread-factory" type="managedThreadFactoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed thread factory (implementing javax.enterprise.concurrent.ManagedThreadFactory).
+                The mandatory "name" attribute, which may not be empty or have the value "default", identifies the
+                created thread factory.
+                The optional "context-service" identifies which Context Service should be used by created threads.
+                The optional "priority" attribute may be used to specify the priority of created threads.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="priority" type="priorityType" default="5"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-executor-service" type="managedExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed executor service (implementing javax.enterprise.concurrent.ManagedExecutorService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Managed executors always use their own thread factory, and to configure its threads priority use instead thread-priority attribute.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-priority" type="priorityType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType">
+            <xs:annotation>
+                <xs:documentation>
+                    The minimum number of threads to be used by the executor. If left undefined the default core-size
+                    is calculated based on the number of processors. A value of zero is not advised and in some cases
+                    invalid. See the queue-length attribute for details on how this value is used to determine the
+                    queuing strategy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="maxThreadsType">
+            <xs:annotation>
+                <xs:documentation>The maximum number of threads to be used by the executor. If left undefined the value
+                    from core-size will be used. This value is ignored if an unbounded queue is used (only core-threads
+                    will be used in that case).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="queue-length" type="queueLengthType">
+            <xs:annotation>
+                <xs:documentation>
+                    The executors task queue capacity. A length of 0 means direct hand-off and possible rejection will
+                    occur. An undefined length (the default), or Integer.MAX_VALUE, indicates that an unbounded queue
+                    should be used. All other values specify an exact queue size. If an unbounded queue or direct hand-off
+                    is used, a core-threads value greater than zero is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-scheduled-executor-service" type="managedScheduledExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed scheduled executor service (implementing javax.enterprise.concurrent.ManagedScheduledExecutorService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Managed executors always use their own thread factory, and to configure its threads priority use instead thread-priority attribute.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-priority" type="priorityType"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:simpleType name="nonEmptyTokenType">
+        <xs:annotation>
+            <xs:documentation>
+                A non empty token name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:minLength value="1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="nameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name for an EE Concurrency resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="jndiNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the entry in JNDI.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="contextServiceNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the context service to be used.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="threadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Deprecated. Use thread-priority instead to configure executor's thread priority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="priorityType">
+        <xs:annotation>
+            <xs:documentation>
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Priority", defined in sections 3.4.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="hungTaskThresholdType">
+        <xs:annotation>
+            <xs:documentation>
+                The amount of time in milliseconds that a task can execute before it is considered hung. If zero then tasks are never considered hung.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Hung Task Threshold", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="longRunningTasksType">
+        <xs:annotation>
+            <xs:documentation>
+                If the application intends to run short vs. long-running tasks they can specify to use pooled or daemon threads.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Thread Use", defined in section 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="coreThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of threads to keep in the executor's pool, even if they are idle.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Core Size", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="maxThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The maximum number of threads to allow in the executor's pool.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Maximum Size", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keepAliveTimeType">
+        <xs:annotation>
+            <xs:documentation>
+                The time to allow threads to remain idle when the number of threads is greater than the core size.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Keep Alive", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="queueLengthType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of tasks that can be stored in the input queue. Zero means the queue capacity is not limited.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Work Queue Capacity", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="rejectPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                The policy to use when a task is to be rejected by the executor.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Reject Policy", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Throw an exception when rejected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="RETRY_ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Automatically resubmit and abort if it fails.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="defaultBindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The JNDI names for the default resources on EE components/modules JNDI contexts.
+                The optional context-service attribute defines the JNDI name of the EE Concurrency ContextService that should be bound at java:comp/DefaultContextService.
+                The optional datasource attribute defines the JNDI name of the SQL DataSource that should be bound at java:comp/DefaultDataSource.
+                The optional jms-connection-factory attribute defines the JNDI name of the JMS ConnectionFactory that should be bound at java:comp/DefaultJMSConnectionFactory.
+                The optional managed-executor-service attribute defines the JNDI name of the EE Concurrency ManagedExecutorService that should be bound at java:comp/DefaultManagedExecutorService.
+                The optional managed-scheduled-executor-service attribute defines the JNDI name of the EE Concurrency ManagedScheduledExecutorService that should be bound at java:comp/DefaultManagedScheduledExecutorService.
+                The optional managed-thread-factory attribute defines the JNDI name of the EE Concurrency ManagedThreadFactory that should be bound at java:comp/DefaultManagedThreadFactory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="context-service" type="jndiNameType"/>
+        <xs:attribute name="datasource" type="jndiNameType"/>
+        <xs:attribute name="jms-connection-factory" type="jndiNameType"/>
+        <xs:attribute name="managed-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-scheduled-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-thread-factory" type="jndiNameType"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ee_6_0.xsd b/wildfly/docs/schema/jboss-as-ee_6_0.xsd
new file mode 100644
index 0000000..023a52e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ee_6_0.xsd
@@ -0,0 +1,471 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ee:6.0"
+           xmlns="urn:jboss:domain:ee:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <!-- The EE subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="global-modules" type="modulesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="global-directories" type="directoriesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ear-subdeployments-isolated" default="false" type="ear-subdeployments-isolatedType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="spec-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="jboss-descriptor-property-replacement" type="descriptor-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="annotation-property-replacement" type="annotation-property-replacementType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="concurrent" type="concurrentType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="default-bindings" type="defaultBindingsType" minOccurs="0" maxOccurs="1" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="modulesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="module" type="moduleType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="slot" type="xs:string" default="main"/>
+        <xs:attribute name="annotations" type="xs:boolean" default="false"/>
+        <xs:attribute name="meta-inf" type="xs:boolean" default="true"/>
+        <xs:attribute name="services" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="directoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="directory" type="directoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="directoryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the global directory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the global directory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="ear-subdeployments-isolatedType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                see classes belonging to other subdeployments within the .ear.
+                For example:
+                myapp.ear
+                |
+                |--- web.war
+                |
+                |--- ejb1.jar
+                |
+                |--- ejb2.jar
+
+                If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                (and vice-versa).
+
+                *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                as per spec*
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="descriptor-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on a descriptor. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="annotation-property-replacementType">
+        <xs:annotation>
+            <xs:documentation>
+                Flag indicating whether system property replacement will be performed on an annotation. This defaults to
+                true, however it is disabled in the default configurations.
+
+                Security Node: System properties etc are resolved in the security context of the application server
+                itself, not the deployment that contains the file. This means that if you are running with a security
+                manager and enable this property, a deployment can potentially access system properties or environment
+                entries that the security manager would have otherwise prevented.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <!-- EE Concurrent (JSR 236) XML elements and attributes definition -->
+
+    <xs:complexType name="concurrentType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures EE Concurrent resources. If undefined, it turns off all EE Concurrent functionality.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="context-services" type="contextServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-thread-factories" type="managedThreadFactoriesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-executor-services" type="managedExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="managed-scheduled-executor-services" type="managedScheduledExecutorServicesType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="contextServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="context-service" type="contextServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="contextServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The context service (implementing javax.enterprise.concurrent.ContextService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="use-transaction-setup-provider" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The optional attribute that defines if the context service should use a transaction setup provider, which may be used to suspend and resume active transactions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoriesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-thread-factory" type="managedThreadFactoryType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedThreadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed thread factory (implementing javax.enterprise.concurrent.ManagedThreadFactory).
+                The mandatory "name" attribute, which may not be empty or have the value "default", identifies the
+                created thread factory.
+                The optional "context-service" identifies which Context Service should be used by created threads.
+                The optional "priority" attribute may be used to specify the priority of created threads.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="priority" type="priorityType" default="5"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-executor-service" type="managedExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed executor service (implementing javax.enterprise.concurrent.ManagedExecutorService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Managed executors always use their own thread factory, and to configure its threads priority use instead thread-priority attribute.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-priority" type="priorityType"/>
+        <xs:attribute name="hung-task-termination-period" type="hungTaskTerminationPeriodType" default="0"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType">
+            <xs:annotation>
+                <xs:documentation>
+                    The minimum number of threads to be used by the executor. If left undefined the default core-size
+                    is calculated based on the number of processors. A value of zero is not advised and in some cases
+                    invalid. See the queue-length attribute for details on how this value is used to determine the
+                    queuing strategy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="maxThreadsType">
+            <xs:annotation>
+                <xs:documentation>The maximum number of threads to be used by the executor. If left undefined the value
+                    from core-size will be used. This value is ignored if an unbounded queue is used (only core-threads
+                    will be used in that case).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="queue-length" type="queueLengthType">
+            <xs:annotation>
+                <xs:documentation>
+                    The executors task queue capacity. A length of 0 means direct hand-off and possible rejection will
+                    occur. An undefined length (the default), or Integer.MAX_VALUE, indicates that an unbounded queue
+                    should be used. All other values specify an exact queue size. If an unbounded queue or direct hand-off
+                    is used, a core-threads value greater than zero is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServicesType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="managed-scheduled-executor-service" type="managedScheduledExecutorServiceType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="managedScheduledExecutorServiceType">
+        <xs:annotation>
+            <xs:documentation>
+                A managed scheduled executor service (implementing javax.enterprise.concurrent.ManagedScheduledExecutorService).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="nameType" use="required"/>
+        <xs:attribute name="jndi-name" type="jndiNameType" use="required"/>
+        <xs:attribute name="context-service" type="contextServiceNameType"/>
+        <xs:attribute name="thread-factory" type="threadFactoryType">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Managed executors always use their own thread factory, and to configure its threads priority use instead thread-priority attribute.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-priority" type="priorityType"/>
+        <xs:attribute name="hung-task-termination-period" type="hungTaskTerminationPeriodType" default="0"/>
+        <xs:attribute name="hung-task-threshold" type="hungTaskThresholdType" default="0"/>
+        <xs:attribute name="long-running-tasks" type="longRunningTasksType" default="false"/>
+        <xs:attribute name="core-threads" type="coreThreadsType"/>
+        <xs:attribute name="keepalive-time" type="keepAliveTimeType" default="60000"/>
+        <xs:attribute name="reject-policy" type="rejectPolicyType" default="ABORT"/>
+    </xs:complexType>
+
+    <xs:simpleType name="nonEmptyTokenType">
+        <xs:annotation>
+            <xs:documentation>
+                A non empty token name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:minLength value="1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="nameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name for an EE Concurrency resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="jndiNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the entry in JNDI.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="contextServiceNameType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of the context service to be used.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="threadFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Deprecated. Use thread-priority instead to configure executor's thread priority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="nonEmptyTokenType" />
+    </xs:simpleType>
+
+    <xs:simpleType name="priorityType">
+        <xs:annotation>
+            <xs:documentation>
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Priority", defined in sections 3.4.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="hungTaskTerminationPeriodType">
+        <xs:annotation>
+            <xs:documentation>
+                The period, in milliseconds, to attempt automatic hung tasks termination, by cancelling such tasks. If value is 0, which is the default, hung tasks are never cancelled.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="hungTaskThresholdType">
+        <xs:annotation>
+            <xs:documentation>
+                The amount of time in milliseconds that a task can execute before it is considered hung. If zero then tasks are never considered hung.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Hung Task Threshold", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="longRunningTasksType">
+        <xs:annotation>
+            <xs:documentation>
+                If the application intends to run short vs. long-running tasks they can specify to use pooled or daemon threads.
+                This xml attribute matches EE Concurrent 1.0 Final Release attribute named "Thread Use", defined in section 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:boolean"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="coreThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of threads to keep in the executor's pool, even if they are idle.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Core Size", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="maxThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+                The maximum number of threads to allow in the executor's pool.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Maximum Size", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keepAliveTimeType">
+        <xs:annotation>
+            <xs:documentation>
+                The time to allow threads to remain idle when the number of threads is greater than the core size.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Pool Info: Keep Alive", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:long">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="queueLengthType">
+        <xs:annotation>
+            <xs:documentation>
+                The number of tasks that can be stored in the input queue. Zero means the queue capacity is not limited.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Work Queue Capacity", defined in section 3.1.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:minInclusive value="0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="rejectPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                The policy to use when a task is to be rejected by the executor.
+                This type matches EE Concurrent 1.0 Final Release attribute named "Reject Policy", defined in sections 3.1.4.2 and 3.2.4.2
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Throw an exception when rejected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="RETRY_ABORT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Automatically resubmit and abort if it fails.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="defaultBindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The JNDI names for the default resources on EE components/modules JNDI contexts.
+                The optional context-service attribute defines the JNDI name of the EE Concurrency ContextService that should be bound at java:comp/DefaultContextService.
+                The optional datasource attribute defines the JNDI name of the SQL DataSource that should be bound at java:comp/DefaultDataSource.
+                The optional jms-connection-factory attribute defines the JNDI name of the JMS ConnectionFactory that should be bound at java:comp/DefaultJMSConnectionFactory.
+                The optional managed-executor-service attribute defines the JNDI name of the EE Concurrency ManagedExecutorService that should be bound at java:comp/DefaultManagedExecutorService.
+                The optional managed-scheduled-executor-service attribute defines the JNDI name of the EE Concurrency ManagedScheduledExecutorService that should be bound at java:comp/DefaultManagedScheduledExecutorService.
+                The optional managed-thread-factory attribute defines the JNDI name of the EE Concurrency ManagedThreadFactory that should be bound at java:comp/DefaultManagedThreadFactory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="context-service" type="jndiNameType"/>
+        <xs:attribute name="datasource" type="jndiNameType"/>
+        <xs:attribute name="jms-connection-factory" type="jndiNameType"/>
+        <xs:attribute name="managed-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-scheduled-executor-service" type="jndiNameType"/>
+        <xs:attribute name="managed-thread-factory" type="jndiNameType"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_1_0.xsd b/wildfly/docs/schema/jboss-as-ejb3_1_0.xsd
new file mode 100644
index 0000000..cf2427e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_1_0.xsd
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:1.0"
+           xmlns="urn:jboss:domain:ejb3:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem"/>
+
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_1_1.xsd b/wildfly/docs/schema/jboss-as-ejb3_1_1.xsd
new file mode 100644
index 0000000..c9955a6
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_1_1.xsd
@@ -0,0 +1,124 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:1.1"
+           xmlns="urn:jboss:domain:ejb3:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="lite" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="instance-acquisition-timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:simpleType name="instance-acquisition-timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="data-store" type="dataStoreType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:attribute name="core-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of threads that the the thread pool will keep alive. Defaults to 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of threads that will be used to run timer service tasks. Defaults to the
+                    number of processes as returned by Runtime.availableProcessors()
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dataStoreType">
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" />
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_1_2.xsd b/wildfly/docs/schema/jboss-as-ejb3_1_2.xsd
new file mode 100644
index 0000000..69c289c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_1_2.xsd
@@ -0,0 +1,268 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:1.2"
+           xmlns="urn:jboss:domain:ejb3:1.2"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="file-passivation-store" type="file-passivation-storeType"/>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:attributeGroup name="passivation-common">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-store" type="dataStoreType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="dataStoreType">
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_1_3.xsd b/wildfly/docs/schema/jboss-as-ejb3_1_3.xsd
new file mode 100644
index 0000000..ee21fbd
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_1_3.xsd
@@ -0,0 +1,314 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:1.3"
+           xmlns="urn:jboss:domain:ejb3:1.3"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.3">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="file-passivation-store" type="file-passivation-storeType"/>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:attributeGroup name="passivation-common">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-store" type="dataStoreType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="dataStoreType">
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_1_4.xsd b/wildfly/docs/schema/jboss-as-ejb3_1_4.xsd
new file mode 100644
index 0000000..e8d7caa
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_1_4.xsd
@@ -0,0 +1,339 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:1.4"
+           xmlns="urn:jboss:domain:ejb3:1.4"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.4">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="file-passivation-store" type="file-passivation-storeType"/>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:attributeGroup name="passivation-common">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-store" type="dataStoreType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="dataStoreType">
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_1_5.xsd b/wildfly/docs/schema/jboss-as-ejb3_1_5.xsd
new file mode 100644
index 0000000..6d50a31
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_1_5.xsd
@@ -0,0 +1,355 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:1.5"
+           xmlns="urn:jboss:domain:ejb3:1.5"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.5">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="file-passivation-store" type="file-passivation-storeType"/>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:attributeGroup name="passivation-common">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="passivation-common"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of a EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-ejb3_2_0.xsd b/wildfly/docs/schema/jboss-as-ejb3_2_0.xsd
new file mode 100644
index 0000000..0212fdd
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-ejb3_2_0.xsd
@@ -0,0 +1,407 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:2.0"
+           xmlns="urn:jboss:domain:ejb3:2.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                Warning: the current implementation of the thread pool can not be reduce to its core size, and thus
+                core size is de facto equals to max-threads. This behavior however will be implemented in future version.
+
+                The "max-threads" attribute must be used to specify the thread pool size. The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down. (however
+                this behavior is not yet implemented, so this attribute is currently not used).
+
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+
+                The "name" attribute is the name of the created executor.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-iiop-openjdk_1_0.xsd b/wildfly/docs/schema/jboss-as-iiop-openjdk_1_0.xsd
new file mode 100644
index 0000000..91c3db5
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-iiop-openjdk_1_0.xsd
@@ -0,0 +1,325 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:iiop-openjdk:1.0"
+           xmlns="urn:jboss:domain:iiop-openjdk:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The iiop subsystem root element -->
+    <xs:element name="subsystem" type="iiopSubsystemType"/>
+
+    <xs:complexType name="iiopSubsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iiopSubsystemType specifies the elements that can be used to configure the various aspects of the
+                iiop subsystem.
+
+                * orb: holds the attributes used to configure the Object Request Broker (ORB).
+                * naming: holds the attributes used to configure the CORBA Naming Service.
+                * security: holds the attributes that control the ORB security features.
+                * properties: allows for the specification of generic name/value properties.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" minOccurs="0" maxOccurs="1" type="genericPropertiesType"/>
+            <xs:element name="orb" minOccurs="0" maxOccurs="1" type="orbConfigType"/>
+            <xs:element name="tcp" minOccurs="0" maxOccurs="1" type="tcpConfigType"/>
+            <xs:element name="initializers" minOccurs="0" maxOccurs="1" type="initializersConfigType"/>
+            <xs:element name="naming" minOccurs="0" maxOccurs="1" type="namingConfigType"/>
+            <xs:element name="security" minOccurs="0" maxOccurs="1" type="securityConfigType"/>
+            <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="as-context" minOccurs="0" maxOccurs="1" type="iorASContextType"/>
+            <xs:element name="sas-context" minOccurs="0" maxOccurs="1" type="iorSASContextType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="orbConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                the orbConfigType specifies the elements and attributes that can be used to configure the behavior of the
+                Object Request Broker (ORB).
+                * giop-version-version: the GIOP version to be used.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="giop-version" type="xs:string" use="optional" default="1.2"/>
+        <xs:attribute name="socket-binding" type="xs:string" use="optional" default="iiop"/>
+        <xs:attribute name="ssl-socket-binding" type="xs:string" use="optional" default="iiop-ssl"/>
+        <xs:attribute name="persistent-server-id" type="xs:string" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="tcpConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The orbTCPConfigType specifies the attributes used to configure the TCP connections.
+
+                * high-water-mark: each time the number of connections exceeds this value ORB tries to reclaim connections.
+                * number-to-reclaim: number of reclaimed connections is specified by this property.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="high-water-mark" type="xs:integer" use="optional"/>
+        <xs:attribute name="number-to-reclaim" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="initializersConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The initializersConfigType specifies the attributes used to configure the ORB initializers.
+
+                * security: indicates whether the security (SAS and CSIv2) initializers should be installed. There are three possibilities:
+                    identity - The server will just send the current username. The recieving server must trust this
+                               server.
+                    client   - The client interceptor will be installed. Remote calls from this server will propagate
+                               by sending the current username and password
+                    none      - Security interceptors are not installed
+                * transactions: indicates which transaction initializers should be installed. There are three possibilities:
+                    full   - This requires JTS to be enabled in the transactions subsystem config, and will enable full transaction
+                           interaoprability with other JBoss AS instances.
+                    spec - This does not require JTS to be enabled, but will install the minimum set of transaction interceptors
+                           required for EJB spec compliance. These interceptors detect an incoming transaction and throw an
+                           exception if the invocation should be run in the incoming transaction context.
+                    none  - No transaction initalizers will be installed.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security" type="securityEnabledType" use="optional" default="none"/>
+        <xs:attribute name="transactions" type="transactionEnabledType" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:complexType name="namingConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The namingConfigType specifies the attributes used to configure the naming service.
+
+                * root-context: the naming service root context.
+                * export-corbaloc: indicates whether the root context should be exported as corbaloc::address:port/NameService
+                                   (true) or not (false).
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="root-context" type="xs:string" use="optional" default="NameService"/>
+        <xs:attribute name="export-corbaloc" type="trueFalseType" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="securityConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The securityConfigType specifies the attributes used to configure the ORB security features.
+
+                * support-ssl: indicates whether SSL is to be supported (true) or not (false).
+                * security-domain: the name of the security domain that holds the key and trust stores that will be used
+                                   to establish SSL connections.
+                * add-component-via-interceptor: indicates whether SSL components should be added by an IOR interceptor
+                                                 (true) or not (false).
+                * client-supports: value that indicates the client SSL supported parameters (None, ServerAuth, ClientAuth.
+                                   MutualAuth)
+                * client-requires: value that indicates the client SSL required parameters (None, ServerAuth, ClientAuth.
+                                   MutualAuth)
+                * server-supports: value that indicates the server SSL supported parameters (None, ServerAuth, ClientAuth.
+                                   MutualAuth)
+                * server-requires: value that indicates the server SSL required parameters (None, ServerAuth, ClientAuth.
+                                   MutualAuth)
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="support-ssl" type="trueFalseType" use="optional" default="false"/>
+        <xs:attribute name="security-domain" type="xs:string" use="optional"/>
+        <xs:attribute name="add-component-via-interceptor" type="trueFalseType" use="optional" default="true"/>
+        <xs:attribute name="client-supports" type="sslConfigType" use="optional" default="MutualAuth"/>
+        <xs:attribute name="client-requires" type="sslConfigType" use="optional" default="None"/>
+        <xs:attribute name="server-supports" type="sslConfigType" use="optional" default="MutualAuth"/>
+        <xs:attribute name="server-requires" type="sslConfigType" use="optional" default="None"/>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of generic properties.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="genericPropertyType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of generic name/value properties. It is useful to specify
+               configuration attributes that have not been covered in this schema.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="iorTransportEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for IOR transport config fields.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+            <xs:enumeration value="required"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorTransportConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorTransportconfigType specifies the attributes used to setup the IOR transport settings.
+
+                * integrity: indicates whether the transport must require integrity protection or not. Valid values are
+                             "none", "supported" and "required".
+                * confidentiality: indicates whether the transport must require confidentiality protection or not. Valid
+                             values are "none", "supported" and "required".
+                * trust-in-target: indicates if the transport must require trust in target to be established. Valid values
+                             are "none" and "supported".
+                * trust-in-client: indicates if the transport must require trust in client to be established. Valid values
+                             are "none", "supported" and "required".
+                * detect-replay: indicates whether the transport must require replay detection or not. Valid values are
+                             "none", "supported" and "required".
+                * detect-misordering: indicates whether the transport must require misordering detection or not. Valid
+                             values are "none", "supported" and "required".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="integrity" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="confidentiality" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-target" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-client" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-replay" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-misordering" type="iorTransportEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="authMethodEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for AS Context auth method.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="username_password"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorASContextType specifies the attributes used to setup the IOR Authentication Service settings.
+
+                * auth-method: the authentication method. Valid values are "none" and "username_password".
+                * realm: the Authentication Service realm name. If not provided it will be set to "Default".
+                * requires: indicates if authentication is required (true) or not (false).
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="auth-method" type="authMethodEnum" use="optional" default="username_password"/>
+        <xs:attribute name="realm" type="xs:string" use="optional"/>
+        <xs:attribute name="required" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:simpleType name="callerPropagationEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for SAS Context caller propagation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorSASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorSASContextType specifies the attributes used to setup the IOR Secure Attribute Service settings.
+
+                * caller-propagation: indicates whether the caller should be propagated in the SAS context or not. Valid
+                                      values are "none" and "supported".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="caller-propagation" type="callerPropagationEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="trueFalseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Enumeration of allowed values for the standard IIOP attributes.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="true"/>
+            <xs:enumeration value="false"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transactionEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the transaction interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="full"/>
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="spec"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="securityEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the security interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="identity"/>
+            <xs:enumeration value="client"/>
+            <xs:enumeration value="none"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="sslConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the SSL config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="None"/>
+            <xs:enumeration value="ServerAuth"/>
+            <xs:enumeration value="ClientAuth"/>
+            <xs:enumeration value="MutualAuth"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_10_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_10_0.xsd
new file mode 100644
index 0000000..0d5987b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_10_0.xsd
@@ -0,0 +1,1479 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:10.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:10.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="10.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines a database cache store accessed via JDBC using mixed string and binary-based keys.
+                                Warning: This option has been deprecated, please use jdbc-store instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, a pool of shared locks is maintained for all entries that need to be locked.
+                    Otherwise, a lock is created per entry in the cache.
+                    Lock striping helps control memory footprint but may reduce concurrency in the system.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>
+                    If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish.
+                    The amount of time to wait for is defined by the cache stop timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum idle time a cache entry will be maintained in the cache, in milliseconds.
+                    If the idle time is exceeded, the entry will be expired cluster-wide.
+                    If undefined, idle cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds.
+                    If undefined, cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    This setting should be set to true when multiple cache instances share the same cache store, e.g. multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same shared database.
+                    Setting this to true avoids multiple cache instances writing the same modification multiple times.
+                    If enabled, only the node where the modification originated will write to the cache store.
+                    If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, when the cache starts, data stored in the cache store will be pre-loaded into memory.
+                    This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily.
+                    Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'.
+                    Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store.
+                    If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes.
+                    This essentially gives you a 'write-through' configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Deprecated. This attribute does nothing an will be removed in a future release.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="segment-column" type="tns:segment-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the entry segment.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="segment-column">
+        <xs:attribute name="name" type="xs:string" default="segment">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="INTEGER">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="3.0">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When undefined, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If undefined, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+            <xs:enumeration value="3.0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_11_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_11_0.xsd
new file mode 100644
index 0000000..fc04a42
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_11_0.xsd
@@ -0,0 +1,1506 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:11.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:11.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="11.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="non-blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for non-blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="heap-memory" type="tns:heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines a database cache store accessed via JDBC using mixed string and binary-based keys.
+                                Warning: This option has been deprecated, please use jdbc-store instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, a pool of shared locks is maintained for all entries that need to be locked.
+                    Otherwise, a lock is created per entry in the cache.
+                    Lock striping helps control memory footprint but may reduce concurrency in the system.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>
+                    If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish.
+                    The amount of time to wait for is defined by the cache stop timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" fixed="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" default="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum idle time a cache entry will be maintained in the cache, in milliseconds.
+                    If the idle time is exceeded, the entry will be expired cluster-wide.
+                    If undefined, idle cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds.
+                    If undefined, cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>The timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    This setting should be set to true when multiple cache instances share the same cache store, e.g. multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same shared database.
+                    Setting this to true avoids multiple cache instances writing the same modification multiple times.
+                    If enabled, only the node where the modification originated will write to the cache store.
+                    If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, when the cache starts, data stored in the cache store will be pre-loaded into memory.
+                    This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily.
+                    Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'.
+                    Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store.
+                    If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes.
+                    This essentially gives you a 'write-through' configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Deprecated. This attribute does nothing an will be removed in a future release.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="segment-column" type="tns:segment-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the entry segment.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="segment-column">
+        <xs:attribute name="name" type="xs:string" default="segment">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="INTEGER">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="size-unit">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ENTRIES"/>
+            <xs:enumeration value="BYTES"/>
+            <xs:enumeration value="KB"/>
+            <xs:enumeration value="KiB"/>
+            <xs:enumeration value="MB"/>
+            <xs:enumeration value="MiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A property with name and value.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="3.0">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When undefined, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If undefined, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+            <xs:enumeration value="3.0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_12_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_12_0.xsd
new file mode 100644
index 0000000..5ea2774
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_12_0.xsd
@@ -0,0 +1,1506 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:12.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:12.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="12.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="non-blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for non-blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the set of modules associated with this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="heap-memory" type="tns:heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines a database cache store accessed via JDBC using mixed string and binary-based keys.
+                                Warning: This option has been deprecated, please use jdbc-store instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the set of modules associated with cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, a pool of shared locks is maintained for all entries that need to be locked.
+                    Otherwise, a lock is created per entry in the cache.
+                    Lock striping helps control memory footprint but may reduce concurrency in the system.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>
+                    If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish.
+                    The amount of time to wait for is defined by the cache stop timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" fixed="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" default="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum idle time a cache entry will be maintained in the cache, in milliseconds.
+                    If the idle time is exceeded, the entry will be expired cluster-wide.
+                    If undefined, idle cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds.
+                    If undefined, cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>The timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    This setting should be set to true when multiple cache instances share the same cache store, e.g. multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same shared database.
+                    Setting this to true avoids multiple cache instances writing the same modification multiple times.
+                    If enabled, only the node where the modification originated will write to the cache store.
+                    If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, when the cache starts, data stored in the cache store will be pre-loaded into memory.
+                    This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily.
+                    Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'.
+                    Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store.
+                    If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes.
+                    This essentially gives you a 'write-through' configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Deprecated. This attribute does nothing an will be removed in a future release.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="segment-column" type="tns:segment-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the entry segment.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="segment-column">
+        <xs:attribute name="name" type="xs:string" default="segment">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="INTEGER">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="size-unit">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ENTRIES"/>
+            <xs:enumeration value="BYTES"/>
+            <xs:enumeration value="KB"/>
+            <xs:enumeration value="KiB"/>
+            <xs:enumeration value="MB"/>
+            <xs:enumeration value="MiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A property with name and value.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the set of modules associated with the configuration of the remote cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="3.0">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When undefined, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If undefined, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+            <xs:enumeration value="3.0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_13_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_13_0.xsd
new file mode 100644
index 0000000..1fd49bb
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_13_0.xsd
@@ -0,0 +1,1543 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:13.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:13.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="13.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="non-blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for non-blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller">
+            <xs:annotation>
+                <xs:documentation>Defines the marshalling implementation used to marshal cache entries.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the set of modules associated with this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="heap-memory" type="tns:heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines a database cache store accessed via JDBC using mixed string and binary-based keys.
+                                Warning: This option has been deprecated, please use jdbc-store instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the set of modules associated with cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, a pool of shared locks is maintained for all entries that need to be locked.
+                    Otherwise, a lock is created per entry in the cache.
+                    Lock striping helps control memory footprint but may reduce concurrency in the system.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>
+                    If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish.
+                    The amount of time to wait for is defined by the cache stop timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="complete-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The default duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" fixed="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" default="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum idle time a cache entry will be maintained in the cache, in milliseconds.
+                    If the idle time is exceeded, the entry will be expired cluster-wide.
+                    If undefined, idle cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds.
+                    If undefined, cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>The timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    This setting should be set to true when multiple cache instances share the same cache store, e.g. multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same shared database.
+                    Setting this to true avoids multiple cache instances writing the same modification multiple times.
+                    If enabled, only the node where the modification originated will write to the cache store.
+                    If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, when the cache starts, data stored in the cache store will be pre-loaded into memory.
+                    This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily.
+                    Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'.
+                    Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store.
+                    If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes.
+                    This essentially gives you a 'write-through' configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Deprecated. This attribute does nothing an will be removed in a future release.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="segment-column" type="tns:segment-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the entry segment.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="segment-column">
+        <xs:attribute name="name" type="xs:string" default="segment">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="INTEGER">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="size-unit">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ENTRIES"/>
+            <xs:enumeration value="BYTES"/>
+            <xs:enumeration value="KB"/>
+            <xs:enumeration value="KiB"/>
+            <xs:enumeration value="MB"/>
+            <xs:enumeration value="MiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LEGACY">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Selects the marshaller dynamically based on the associated modules.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>Marshals cache entries using JBoss Marshalling.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>Marshals cache entries using ProtoStream.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A property with name and value.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller">
+            <xs:annotation>
+                <xs:documentation>Defines the marshalling implementation used to marshal cache entries.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the set of modules associated with the configuration of the remote cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="3.0">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transaction-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The default duration (in ms) after which idle transactions are rolled back.
+                    Only applies to transactional remote caches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When undefined, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If undefined, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+            <xs:enumeration value="3.0"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_14_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_14_0.xsd
new file mode 100644
index 0000000..4e7d106
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_14_0.xsd
@@ -0,0 +1,1349 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:14.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:14.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="14.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="non-blocking-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for non-blocking operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="LEGACY">
+            <xs:annotation>
+                <xs:documentation>Defines the marshalling implementation used to marshal cache entries.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the set of modules associated with this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="heap-memory" type="tns:heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-store" type="tns:jdbc-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the set of modules associated with cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, a pool of shared locks is maintained for all entries that need to be locked.
+                    Otherwise, a lock is created per entry in the cache.
+                    Lock striping helps control memory footprint but may reduce concurrency in the system.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Deprecated. This attribute has no effect.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>
+                    If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish.
+                    The amount of time to wait for is defined by the cache stop timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="complete-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The default duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" fixed="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="size-unit" type="tns:size-unit" default="ENTRIES">
+                    <xs:annotation>
+                        <xs:documentation>Describes the unit of measurement for the size attribute.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum idle time a cache entry will be maintained in the cache, in milliseconds.
+                    If the idle time is exceeded, the entry will be expired cluster-wide.
+                    If undefined, idle cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds.
+                    If undefined, cache entries will not auto-expire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long">
+                    <xs:annotation>
+                        <xs:documentation>The timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    This setting should be set to true when multiple cache instances share the same cache store, e.g. multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same shared database.
+                    Setting this to true avoids multiple cache instances writing the same modification multiple times.
+                    If enabled, only the node where the modification originated will write to the cache store.
+                    If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, when the cache starts, data stored in the cache store will be pre-loaded into memory.
+                    This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily.
+                    Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'.
+                    Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store.
+                    If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes.
+                    This essentially gives you a 'write-through' configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="segmented" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="segment-column" type="tns:segment-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the entry segment.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="segment-column">
+        <xs:attribute name="name" type="xs:string" default="segment">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="INTEGER">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry segment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="when-split" type="tns:when-split" default="ALLOW_READ_WRITES">
+            <xs:annotation>
+                <xs:documentation>Defines the availability of cache entries after a network partition is detected.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="merge-policy" type="tns:merge-policy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the policy for resolving cache entry conflicts when merging partitions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="size-unit">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ENTRIES"/>
+            <xs:enumeration value="BYTES"/>
+            <xs:enumeration value="KB"/>
+            <xs:enumeration value="KiB"/>
+            <xs:enumeration value="MB"/>
+            <xs:enumeration value="MiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+            <xs:enumeration value="GB"/>
+            <xs:enumeration value="GiB"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LEGACY">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Selects the marshaller dynamically based on the associated modules.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>Marshals cache entries using JBoss Marshalling using externalizers loaded from modules associated with this container.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>
+                        Marshals cache entries using ProtoStream configured to use schemas/marshallers loaded from modules associated with this container.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A property with name and value.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="LEGACY">
+            <xs:annotation>
+                <xs:documentation>Defines the marshalling implementation used to marshal cache entries.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modules" type="tns:list" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the set of modules associated with the configuration of the remote cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="3.1">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transaction-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The default duration (in ms) after which idle transactions are rolled back.
+                    Only applies to transactional remote caches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When undefined, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If undefined, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+            <xs:enumeration value="3.0"/>
+            <xs:enumeration value="3.1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="when-split">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ALLOW_READS"/>
+            <xs:enumeration value="ALLOW_READ_WRITES"/>
+            <xs:enumeration value="DENY_READ_WRITES"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="merge-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE"/>
+            <xs:enumeration value="PREFERRED_ALWAYS"/>
+            <xs:enumeration value="PREFERRED_NON_NULL"/>
+            <xs:enumeration value="REMOVE_ALL"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_1_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_1_0.xsd
new file mode 100644
index 0000000..b78d593
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_1_0.xsd
@@ -0,0 +1,826 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:1.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="cache-container" type="tns:cache-container" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="alias" type="xs:string" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines an additional name by which this cache container may be referenced.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The jndi name to which to bind this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="rack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="machine" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-store" type="tns:jdbc-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a database cache store accessed via JDBC.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="indexing" type="tns:indexing" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    The indexing mode of the cache. Defaults to NONE.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NON_XA">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eager-locking" type="tns:eager-locking" default="SINGLE">
+            <xs:annotation>
+                <xs:documentation></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="1000">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="rehashing" type="tns:rehashing" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>Rehashing configuration.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="virtual-nodes" type="xs:int" default="1">
+                    <xs:annotation>
+                        <xs:documentation>Controls the number of virtual nodes per "real" node.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+       <xs:attribute name="outbound-socket-binding">
+           <xs:annotation>
+               <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="bucket-table" type="tns:bucket-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                                If an entry-table is also defined, a mixed-mode cache store will be used.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="entry-table" type="tns:entry-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                                If a bucket-table is also defined, a mixed-mode cache store will be used.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="entry-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="bucket-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="rehashing">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="600000">
+            <xs:annotation>
+                <xs:documentation></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eager-locking">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation></xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SINGLE">
+                <xs:annotation>
+                    <xs:documentation></xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation></xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_1_1.xsd b/wildfly/docs/schema/jboss-as-infinispan_1_1.xsd
new file mode 100644
index 0000000..611a7cd
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_1_1.xsd
@@ -0,0 +1,826 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:1.1"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="default-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="base-cache-container" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The jndi name to which to bind this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache container be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:complexContent>
+            <xs:extension base="tns:base-cache-container">
+                <xs:sequence>
+                    <xs:element name="transport" type="tns:transport" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:choice maxOccurs="unbounded">
+                        <xs:element name="local-cache" type="tns:local-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="replicated-cache" type="tns:replicated-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="distributed-cache" type="tns:distributed-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-store" type="tns:jdbc-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a database cache store accessed via JDBC.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="indexing" type="tns:indexing" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    The indexing mode of the cache. Defaults to NONE.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The jndi name to which to bind this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="virtual-nodes" type="xs:int" default="1">
+                    <xs:annotation>
+                        <xs:documentation>Controls the number of virtual nodes per "real" node.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="bucket-table" type="tns:bucket-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                                If an entry-table is also defined, a mixed-mode cache store will be used.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="entry-table" type="tns:entry-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                                If a bucket-table is also defined, a mixed-mode cache store will be used.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="entry-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="bucket-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will not enlist within transactions.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_1_2.xsd b/wildfly/docs/schema/jboss-as-infinispan_1_2.xsd
new file mode 100644
index 0000000..5dba357
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_1_2.xsd
@@ -0,0 +1,927 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:1.2"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="default-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="base-cache-container" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The jndi name to which to bind this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache container be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:complexContent>
+            <xs:extension base="tns:base-cache-container">
+                <xs:sequence>
+                    <xs:element name="transport" type="tns:transport" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:choice maxOccurs="unbounded">
+                        <xs:element name="local-cache" type="tns:local-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="replicated-cache" type="tns:replicated-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="distributed-cache" type="tns:distributed-cache">
+                            <xs:annotation>
+                                <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the name for the underlying group communication cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="indexing" type="tns:indexing" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    The indexing mode of the cache. Defaults to NONE.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The jndi name to which to bind this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="async-marshalling" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                           Enables the use of asynchronous marshalling
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="virtual-nodes" type="xs:int" default="1">
+                    <xs:annotation>
+                        <xs:documentation>Controls the number of virtual nodes per "real" node.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="flush-lock-timeout" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to acquire the lock which guards the state to be flushed to the cache store periodically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shutdown-timeout" type="xs:long" default="25000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout in milliseconds to stop the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will not enlist within transactions.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_1_3.xsd b/wildfly/docs/schema/jboss-as-infinispan_1_3.xsd
new file mode 100644
index 0000000..5333088
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_1_3.xsd
@@ -0,0 +1,933 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:1.3"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache container.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/container/container-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache container be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the name for the underlying group communication cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="indexing" type="tns:indexing" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    The indexing mode of the cache. Defaults to NONE.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/cache/container-name/cache-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="async-marshalling" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                           Enables the use of asynchronous marshalling
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="virtual-nodes" type="xs:int" default="1">
+                    <xs:annotation>
+                        <xs:documentation>Controls the number of virtual nodes per "real" node.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="flush-lock-timeout" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to acquire the lock which guards the state to be flushed to the cache store periodically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shutdown-timeout" type="xs:long" default="25000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout in milliseconds to stop the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will not enlist within transactions.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_1_4.xsd b/wildfly/docs/schema/jboss-as-infinispan_1_4.xsd
new file mode 100644
index 0000000..664d164
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_1_4.xsd
@@ -0,0 +1,950 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:1.4"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:1.4"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.4">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache container.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/container/container-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache container be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the name for the underlying group communication cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="indexing" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        defined indexing options for cache
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Property to pass on to the indexing system.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="index" type="tns:indexing" default="NONE">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The indexing mode of the cache. Defaults to NONE.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/cache/container-name/cache-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="async-marshalling" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                           Enables the use of asynchronous marshalling
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="flush-lock-timeout" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to acquire the lock which guards the state to be flushed to the cache store periodically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shutdown-timeout" type="xs:long" default="25000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout in milliseconds to stop the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will not enlist within transactions.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_1_5.xsd b/wildfly/docs/schema/jboss-as-infinispan_1_5.xsd
new file mode 100644
index 0000000..9a24c7d
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_1_5.xsd
@@ -0,0 +1,960 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:1.5"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:1.5"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.5">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache container.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/container/container-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache container be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the name for the underlying group communication cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="indexing" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        defined indexing options for cache
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Property to pass on to the indexing system.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="index" type="tns:indexing" default="NONE">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The indexing mode of the cache. Defaults to NONE.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/cache/container-name/cache-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="10000">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="async-marshalling" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                           Enables the use of asynchronous marshalling
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="flush-lock-timeout" type="xs:int" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to acquire the lock which guards the state to be flushed to the cache store periodically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shutdown-timeout" type="xs:int" default="25000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout in milliseconds to stop the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will not enlist within transactions.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_2_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_2_0.xsd
new file mode 100644
index 0000000..aec3ff0
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_2_0.xsd
@@ -0,0 +1,1091 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:2.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache container.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/container/container-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache container be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the name for the underlying group communication cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="indexing" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        defined indexing options for cache
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Property to pass on to the indexing system.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="index" type="tns:indexing" default="NONE">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The indexing mode of the cache. Defaults to NONE.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="start" type="tns:controller-mode" default="LAZY">
+            <xs:annotation>
+                <xs:documentation>Should this cache be started on server startup, or lazily when requested by a service or deployment.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batching" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Use batching to group cache operations together. Defaults to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/cache/container-name/cache-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache transaction mode to one of NONE, NON_XA, NON_DURABLE_XA, FULL_XA.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="async-marshalling" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                           Enables the use of asynchronous marshalling
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="backup-for" type="tns:backup-for" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>Configures this cache as a backup for a cache on a remote site (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="flush-lock-timeout" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to acquire the lock which guards the state to be flushed to the cache store periodically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shutdown-timeout" type="xs:long" default="25000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout in milliseconds to stop the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will not enlist within transactions.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="controller-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EAGER">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container on server startup.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LAZY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Start the cache container lazily when requested by a service or deployment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_3_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_3_0.xsd
new file mode 100644
index 0000000..4a14be5
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_3_0.xsd
@@ -0,0 +1,1092 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:3.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:aliases">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache container.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/container/container-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous cache listener notifications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used for evictions.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replication-queue-executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the scheduled executor used by the asynchronous replication queue.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="executor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the executor used for asynchronous transport communication.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="indexing" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defined indexing options for cache
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Property to pass on to the indexing system.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="index" type="tns:indexing" default="NONE">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The indexing mode of the cache. Defaults to NONE.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/cache/container-name/cache-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="10000">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="async-marshalling" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                           Enables the use of asynchronous marshalling
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mode" type="tns:mode" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distribution and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="backup-for" type="tns:backup-for" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>Configures this cache as a backup for a cache on a remote site (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="600000">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="flush-lock-timeout" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to acquire the lock which guards the state to be flushed to the cache store periodically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shutdown-timeout" type="xs:int" default="25000">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout in milliseconds to stop the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:sequence>
+                    <xs:element name="remote-server" type="tns:remote-server" minOccurs="1" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-server">
+        <xs:attribute name="outbound-socket-binding" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>An outbound socket binding for a remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="datasource" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the jndi name of the datasource.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If enabled, this will cause the cache to ask neighboring caches for state when it starts up, so the cache starts 'warm', although it will impact startup time.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="indexing">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Do not index data. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LOCAL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Only index changes made locally, ignoring remote changes. This is useful if indexes are shared across a cluster to prevent redundant indexing of updates.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ALL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Index all data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_4_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_4_0.xsd
new file mode 100644
index 0000000..a0ca315
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_4_0.xsd
@@ -0,0 +1,1072 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:4.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:infinispan:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache container.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/container/container-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="eviction" type="tns:eviction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache eviction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="string-keyed-jdbc-store" type="tns:string-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use string-keyed-jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use string-keyed-jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The jndi name to which to bind this cache.
+                    If undefined, the cache will be bound to: java:jboss/infinispan/cache/container-name/cache-name
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="eviction">
+        <xs:attribute name="strategy" type="tns:eviction-strategy" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Sets the cache eviction strategy. Available options are 'UNORDERED', 'FIFO', 'LRU', 'LIRS' and 'NONE' (to disable eviction).</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-entries" type="xs:int" default="10000">
+            <xs:annotation>
+                <xs:documentation>Maximum number of entries in a cache instance. If selected value is not a power of two the actual value will default to the least power of two larger than selected value. -1 means no limit.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="mode" type="tns:mode" default="SYNC">
+                    <xs:annotation>
+                        <xs:documentation>Sets the clustered cache mode, ASYNC for asynchronous operation, or SYNC for synchronous operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-size" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Deprecated. In ASYNC mode, this attribute can be used to trigger flushing of the queue when it reaches a specific threshold.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="queue-flush-interval" type="xs:long" default="10">
+                    <xs:annotation>
+                        <xs:documentation>Deprecated. In ASYNC mode, this attribute controls how often the asynchronous thread used to flush the replication queue runs. This should be a positive integer which represents thread wakeup time in milliseconds.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="backup-for" type="tns:backup-for" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>Configures this cache as a backup for a cache on a remote site (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The statement batch size used when modifying this table.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Never evict entries. This is the default.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="UNORDERED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FIFO">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Actually activates LRU.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LRU">
+                <xs:annotation>
+                    <xs:documentation>
+                        Least-Recently Used policy.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="LIRS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Low Inter-reference Recency Set. An improved version of LRU which uses cache-locality access information to better decide which data to evict.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_5_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_5_0.xsd
new file mode 100644
index 0000000..616ed06
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_5_0.xsd
@@ -0,0 +1,1049 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:5.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="5.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a LOCAL mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a REPL_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an INVALIDATION_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a DIST_* mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>The maximum amount of time (ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-infinispan_6_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_6_0.xsd
new file mode 100644
index 0000000..e66c4df
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_6_0.xsd
@@ -0,0 +1,1368 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:6.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="2.6">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When non-positive, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                    Value -1 means no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If a negative value is supplied, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="1.0"/>
+            <xs:enumeration value="1.1"/>
+            <xs:enumeration value="1.2"/>
+            <xs:enumeration value="1.3"/>
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_7_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_7_0.xsd
new file mode 100644
index 0000000..8822937
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_7_0.xsd
@@ -0,0 +1,1368 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:7.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:7.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="7.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="2.6">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When non-positive, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                    Value -1 means no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If a negative value is supplied, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="1.0"/>
+            <xs:enumeration value="1.1"/>
+            <xs:enumeration value="1.2"/>
+            <xs:enumeration value="1.3"/>
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_8_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_8_0.xsd
new file mode 100644
index 0000000..c5f4543
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_8_0.xsd
@@ -0,0 +1,1415 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:8.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:8.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="8.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. If false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="2.6">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When non-positive, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                    Value -1 means no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If a negative value is supplied, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="1.0"/>
+            <xs:enumeration value="1.1"/>
+            <xs:enumeration value="1.2"/>
+            <xs:enumeration value="1.3"/>
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_9_0.xsd b/wildfly/docs/schema/jboss-as-infinispan_9_0.xsd
new file mode 100644
index 0000000..a4557a6
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_9_0.xsd
@@ -0,0 +1,1432 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:9.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:9.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="9.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. f false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="2.6">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When non-positive, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                    Value -1 means no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If a negative value is supplied, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="1.0"/>
+            <xs:enumeration value="1.1"/>
+            <xs:enumeration value="1.2"/>
+            <xs:enumeration value="1.3"/>
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-infinispan_9_1.xsd b/wildfly/docs/schema/jboss-as-infinispan_9_1.xsd
new file mode 100644
index 0000000..6567e5f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-infinispan_9_1.xsd
@@ -0,0 +1,1439 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:infinispan:9.1"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:infinispan:9.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="9.1">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the cache containers available to the registry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="cache-container" type="tns:cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines an embedded cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-cache-container" type="tns:remote-cache-container">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="cache-container">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Overrides the transport characteristics for this cache container.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async-operations-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous operations.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="listener-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous cache listener notifications.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-command-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used to execute remote commands.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state-transfer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for for state transfer.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transport-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for asynchronous transport communication.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expiration-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a scheduled thread pool used for expiration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="persistence-thread-pool" type="tns:scheduled-thread-pool" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Defines a thread pool used for interacting with the persistent store.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="local-cache" type="tns:local-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a local mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="replicated-cache" type="tns:replicated-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a replication mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="invalidation-cache" type="tns:invalidation-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines an invalidation mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="distributed-cache" type="tns:distributed-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a distribution mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="scattered-cache" type="tns:scattered-cache">
+                    <xs:annotation>
+                        <xs:documentation>Defines a scattered mode cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="aliases" type="tns:list">
+            <xs:annotation>
+                <xs:documentation>A set of aliases by which this cache container may also be referenced.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-cache" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Indicates the default cache for this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when building this cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache container should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:attribute name="channel" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the channel used for this transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Defines the jgroups stack used by the transport.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lock-timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    Infinispan uses a distributed lock to maintain a coherent transaction log during state transfer or rehashing, which means that only one cache can be doing state transfer or rehashing at the same time.
+                    This constraint is in place because more than one cache could be involved in a transaction.
+                    This timeout controls the time to wait to acquire acquire a lock on the distributed lock.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cache" abstract="true">
+        <xs:sequence>
+            <xs:element name="locking" type="tns:locking" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The locking configuration of the cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache transaction configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="binary-memory" type="tns:binary-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="object-memory" type="tns:memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="off-heap-memory" type="tns:off-heap-memory">
+                    <xs:annotation>
+                        <xs:documentation>The cache memory configuration.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="expiration" type="tns:expiration" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>The cache expiration configuration.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="store" type="tns:custom-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a custom cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="file-store" type="tns:file-store">
+                    <xs:annotation>
+                        <xs:documentation>Defines a file-based cache store.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:choice minOccurs="0">
+                    <xs:element name="jdbc-store" type="tns:jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using string-based keys.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="binary-keyed-jdbc-store" type="tns:binary-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="mixed-keyed-jdbc-store" type="tns:mixed-keyed-jdbc-store">
+                        <xs:annotation>
+                            <xs:documentation>Defines a database cache store accessed via JDBC using mixed string and binary-based keys. Warning: This option has been deprecated, please use jdbc-store instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:element name="remote-store" type="tns:remote-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines a remote cache store accessed via HotRod.
+                            Nested properties will be treated as HotRod client properties.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-store" type="tns:hotrod-store">
+                    <xs:annotation>
+                        <xs:documentation>
+                            HotRod-based store using Infinispan Server instance to store data.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this cache within its cache container.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the module whose class loader should be used when building this cache, if different from the enclosing cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Determines whether or not the cache should collect statistics.  Keep disabled for optimal performance.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="local-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="locking">
+        <xs:attribute name="isolation" type="tns:isolation" default="READ_COMMITTED">
+            <xs:annotation>
+                <xs:documentation>Sets the cache locking isolation level.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="striping" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, a pool of shared locks is maintained for all entries that need to be locked. Otherwise, a lock is created per entry in the cache. Lock striping helps control memory footprint but may reduce concurrency in the system.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="acquire-timeout" type="xs:long" default="15000">
+            <xs:annotation>
+                <xs:documentation>Maximum time to attempt a particular lock acquisition.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="concurrency-level" type="xs:int" default="1000">
+            <xs:annotation>
+                <xs:documentation>Concurrency level for lock containers. Adjust this value according to the number of concurrent threads interacting with Infinispan.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transaction">
+        <xs:attribute name="mode" type="tns:transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>Defines the transaction mode of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>If there are any ongoing transactions when a cache is stopped, Infinispan waits for ongoing remote and local transactions to finish. The amount of time to wait for is defined by the cache stop timeout.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="locking" type="tns:locking-mode" default="PESSIMISTIC">
+            <xs:annotation>
+                <xs:documentation>The locking mode for this cache, one of OPTIMISTIC or PESSIMISTIC.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="memory">
+        <xs:attribute name="size" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum size of this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="binary-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:memory">
+                <xs:attribute name="eviction-type" type="tns:eviction-type" default="COUNT">
+                    <xs:annotation>
+                        <xs:documentation>Sets the cache eviction type.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="off-heap-memory">
+        <xs:complexContent>
+            <xs:extension base="tns:binary-memory">
+                <xs:attribute name="capacity" type="xs:int" default="1048576">
+                    <xs:annotation>
+                        <xs:documentation>Capability of the off-heap storage.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="expiration">
+        <xs:attribute name="max-idle" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum idle time a cache entry will be maintained in the cache, in milliseconds. If the idle time is exceeded, the entry will be expired cluster-wide. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lifespan" type="xs:long" default="-1">
+            <xs:annotation>
+                <xs:documentation>Maximum lifespan of a cache entry, after which the entry is expired cluster-wide, in milliseconds. -1 means the entries never expire.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="interval" type="xs:long" default="5000">
+            <xs:annotation>
+                <xs:documentation>Interval (in milliseconds) between subsequent runs to purge expired entries from memory and any cache stores. If you wish to disable the periodic eviction process altogether, set wakeupInterval to -1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clustered-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:cache">
+                <xs:attribute name="remote-timeout" type="xs:long" default="10000">
+                    <xs:annotation>
+                        <xs:documentation>In SYNC mode, the timeout (in ms) used to wait for an acknowledgment when making a remote call, after which the call is aborted and an exception is thrown.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="shared-state-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:clustered-cache">
+                <xs:sequence>
+                    <xs:element name="partition-handling" type="tns:partition-handling" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The partition handling configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="state-transfer" type="tns:state-transfer" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>The state transfer configuration for distributed and replicated caches.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence minOccurs="0">
+                        <xs:element name="backups" type="tns:backups" minOccurs="0">
+                            <xs:annotation>
+                                <xs:documentation>A list of backup sites for this cache (for use with cross-site replication).</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="replicated-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="segmented-cache" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="tns:shared-state-cache">
+                <xs:attribute name="segments" type="xs:int" default="256">
+                    <xs:annotation>
+                        <xs:documentation>Number of hash space segments (per cluster).</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="consistent-hash-strategy" type="tns:consistent-hash-strategy" default="INTER_CACHE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Defines the consistent hash strategy for the cache.
+                            This determines the consistent hash factory to use for generating the consistent hash.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributed-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="owners" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>Number of cluster-wide replicas for each cache entry.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="l1-lifespan" type="xs:long" default="0">
+                    <xs:annotation>
+                        <xs:documentation>Maximum lifespan in milliseconds of an entry placed in the L1 cache.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="capacity-factor" type="xs:float" default="1.0">
+                    <xs:annotation>
+                        <xs:documentation>Controls the proportion of entries that will reside on the local node, compared to the other nodes in the cluster.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="scattered-cache">
+        <xs:complexContent>
+            <xs:extension base="tns:segmented-cache">
+                <xs:attribute name="bias-lifespan" type="xs:long" default="300000">
+                    <xs:annotation>
+                        <xs:documentation>When greater than zero, specifies the duration (in ms) that a cache entry will be cached on a non-owner following a write operation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="invalidation-batch-size" type="xs:int" default="128">
+                    <xs:annotation>
+                        <xs:documentation>The threshold after which batched invalidations are sent.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="store" abstract="true">
+        <xs:sequence>
+            <xs:element name="write-behind" type="tns:write-behind" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Configures a cache store as write-behind instead of write-through.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A cache store property with name and value.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="max-batch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum size of a batch to be inserted/deleted from the store.
+                    If the value is less than one, then no upper limit is placed on the number of operations in a batch.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="shared" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>This setting should be set to true when multiple cache instances share the same cache store (e.g., multiple nodes in a cluster using a JDBC-based CacheStore pointing to the same, shared database.) Setting this to true avoids multiple cache instances writing the same modification multiple times. If enabled, only the node where the modification originated will write to the cache store. If disabled, each individual cache reacts to a potential remote update by storing the data to the cache store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="preload" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, when the cache starts, data stored in the cache store will be pre-loaded into memory. This is particularly useful when data in the cache store will be needed immediately after startup and you want to avoid cache operations being delayed as a result of loading this data lazily. Can be used to provide a 'warm-cache' on startup, however there is a performance penalty as startup time is affected by this process.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, data is only written to the cache store when it is evicted from memory, a phenomenon known as 'passivation'. Next time the data is requested, it will be 'activated' which means that data will be brought back to memory and removed from the persistent store. f false, the cache store contains a copy of the contents in memory, so writes to cache result in cache store writes. This essentially gives you a 'write-through' configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fetch-state" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, fetch persistent state when joining a cluster. If multiple cache stores are chained, only one of them can have this property enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="purge" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>If true, purges this cache store when it starts up.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="singleton" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true, the singleton store cache store is enabled. SingletonStore is a delegating cache store used for situations when only one instance in a cluster should interact with the underlying store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="write-behind">
+        <xs:attribute name="modification-queue-size" type="xs:int" default="1024">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of entries in the asynchronous queue. When the queue is full, the store becomes write-through.
+                    until it can accept new entries
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Size of the thread pool whose threads are responsible for applying the modifications to the cache store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="custom-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The class name of the cache store implementation.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+                    <xs:annotation>
+                        <xs:documentation>The base directory in which to store the cache state.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path within "relative-to" in which to store the cache state.
+                            If undefined, the path defaults to the cache container name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="remote-servers" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>A list of outbound socket bindings.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="cache" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The name of the remote cache.  If undefined, the default cache will be used.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                            A timeout of zero is interpreted as an infinite timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Enable/disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="cache-configuration" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Name of the cache configuration template defined in Infinispan Server to create caches from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to a container-managed remote-cache-container.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:store">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References the pool name of a data source.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="dialect" type="tns:dialect" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>Defines the JDBC dialect.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mixed-keyed-jdbc-store">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-jdbc-store">
+                <xs:sequence>
+                    <xs:element name="binary-keyed-table" type="tns:binary-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache buckets.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="string-keyed-table" type="tns:string-keyed-table" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Defines the table used to store cache entries.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="string-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_entry">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache entry table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="binary-keyed-table">
+        <xs:complexContent>
+            <xs:extension base="tns:table">
+                <xs:attribute name="prefix" type="xs:string" default="ispn_bucket">
+                    <xs:annotation>
+                        <xs:documentation>Defines the prefix prepended to the cache name used when composing the name of the cache bucket table.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="table">
+        <xs:sequence>
+            <xs:element name="id-column" type="tns:id-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache key or bucket id.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="data-column" type="tns:data-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timestamp-column" type="tns:timestamp-column" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines the column in which to store the timestamp of the cache entry or bucket.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="fetch-size" type="xs:int" default="100">
+            <xs:annotation>
+                <xs:documentation>The fetch size used when querying from this table.  Used to avoid heap memory exhaustion when query is large.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create-on-start" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should create this database table when the cache starts.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="drop-on-stop" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether the store should drop this database table when the cache stops.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="id-column">
+        <xs:attribute name="name" type="xs:string" default="id">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="VARCHAR">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache key or bucket id.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="data-column">
+        <xs:attribute name="name" type="xs:string" default="datum">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BINARY">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="timestamp-column">
+        <xs:attribute name="name" type="xs:string" default="version">
+            <xs:annotation>
+                <xs:documentation>The name of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" default="BIGINT">
+            <xs:annotation>
+                <xs:documentation>The type of the column used to store the cache entry or bucket timestamp.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="partition-handling">
+        <xs:attribute name="enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If enabled, the cache will enter degraded mode upon detecting a network partition that threatens the integrity of the cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="state-transfer">
+        <xs:attribute name="timeout" type="xs:long" default="240000">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum amount of time (in ms) to wait for state from neighboring caches, before throwing an exception and aborting startup.
+                    A timeout of 0 means the cache will be available immediately after joining, and initial state transfer is non-blocking.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="chunk-size" type="xs:integer" default="512">
+            <xs:annotation>
+                <xs:documentation>The number of cache entries to batch in each transfer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backups">
+        <xs:sequence>
+            <xs:element name="backup" type="tns:backup" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A backup site for this cache.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="backup">
+        <xs:sequence>
+            <xs:element name="take-offline" type="tns:take-offline" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Control when to take this backup site offline.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="strategy" type="tns:mode" default="ASYNC">
+            <xs:annotation>
+                <xs:documentation>The backup strategy for this cache.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="failure-policy" type="tns:backup-failure-policy" default="WARN">
+            <xs:annotation>
+                <xs:documentation>The policy to follow when connectivity to the backup site fails.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="10000">
+            <xs:annotation>
+                <xs:documentation>The timeout for replicating to the backup site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this backup site is enabled.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="backup-for">
+        <xs:attribute name="remote-cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the remote cache for which this cache acts as a backup</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="remote-site" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The site of the remote cache for which this cache acts as a backup.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="take-offline">
+        <xs:attribute name="after-failures" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the number of failures after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-wait" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>Indicates the minimum time (in milliseconds) to wait after the max number of failures is reached, after which this backup site should go offline.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:simpleType name="isolation">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>
+                        No locking isolation will be performed. This is only valid in local mode. In clustered mode, READ_COMMITTED will be used instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_UNCOMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures READ_COMMITTED.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="READ_COMMITTED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Read committed is an isolation level that guarantees that any data read is committed at the moment it is read. However, depending on the outcome of other transactions, successive reads may return different results.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="REPEATABLE_READ">
+                <xs:annotation>
+                    <xs:documentation>
+                        Repeatable read is an isolation level that guarantees that any data read is committed at the moment it is read and that, within a transaction, successive reads will always return the same data.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SERIALIZABLE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Unsupported. Actually configures REPEATABLE_READ.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transaction-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.Synchronization</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FULL_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, with recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="eviction-type">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="COUNT">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the number of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="MEMORY">
+                <xs:annotation>
+                    <xs:documentation>
+                        Evicts the oldest entries when the total memory size of cache entries exceeds the specified size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ASYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables asynchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="SYNC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables synchronous mode.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="locking-mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="OPTIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Optimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PESSIMISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Enables Pessimistic locking.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="backup-failure-policy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="IGNORE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Ignore backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WARN">
+                <xs:annotation>
+                    <xs:documentation>
+                        Warn of backup failures.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="FAIL">
+                <xs:annotation>
+                    <xs:documentation>
+                        Fail local operations when a backup failure occurs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="dialect">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="ACCESS"/>
+            <xs:enumeration value="DB2"/>
+            <xs:enumeration value="DB2_390"/>
+            <xs:enumeration value="DERBY"/>
+            <xs:enumeration value="FIREBIRD"/>
+            <xs:enumeration value="H2"/>
+            <xs:enumeration value="HSQL"/>
+            <xs:enumeration value="INFORMIX"/>
+            <xs:enumeration value="INTERBASE"/>
+            <xs:enumeration value="MARIA_DB"/>
+            <xs:enumeration value="MYSQL"/>
+            <xs:enumeration value="ORACLE"/>
+            <xs:enumeration value="POSTGRES"/>
+            <xs:enumeration value="SQL_SERVER"/>
+            <xs:enumeration value="SQLITE"/>
+            <xs:enumeration value="SYBASE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="consistent-hash-strategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="INTER_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node on any cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="INTRA_CACHE">
+                <xs:annotation>
+                    <xs:documentation>
+                        A given cache key will have the same consistent hash on every node within a given cache with the same topology.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Fixed thread pool size for the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the scheduled thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cache-container">
+        <xs:sequence>
+            <xs:element name="async-thread-pool" type="tns:thread-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the executor service used for asynchronous work on the Transport,
+                        including asynchronous marshalling and Cache async operations such as RemoteCache.putAsync().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="tns:connection-pool" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the connection pool.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="invalidation-near-cache" type="tns:invalidation-near-cache" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures using near cache in invalidated mode.
+                        When entries are updated or removed server-side, invalidation messages will be sent to clients to remove them from the near cache.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A property with name and value.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="remote-clusters" type="tns:remote-clusters" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configures remote server clusters for Hot Rod client to connect to.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security" type="tns:security" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Security configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction" type="tns:remote-transaction" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Transaction configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="connection-timeout" type="xs:int" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum socket connect timeout before giving up connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-remote-cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the default remote server cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size-estimate" type="xs:int" default="64">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing keys, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-retries" type="xs:int" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets the maximum number of retries for each request. A valid value should be greater or equals than 0.
+                    Value of 0 means no retry will made in case of a network failure.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jboss.as.clustering.infinispan">
+            <xs:annotation>
+                <xs:documentation>Defines the module whose class loader should be used when configuring remote cache container marshaller.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this remote cache container.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol-version" type="tns:protocol-version" default="2.6">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the protocol version that this client should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable SO_TIMEOUT on socket connections to remote Hot Rod servers with the specified timeout, in milliseconds.
+                    A timeout of 0 is interpreted as an infinite timeout.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables statistics gathering for this remote cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-no-delay" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable or disable TCP_NODELAY on socket connections to remote Hot Rod servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Configures TCP keepalive on the TCP stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value-size-estimate" type="xs:int" default="512">
+            <xs:annotation>
+                <xs:documentation>
+                    This hint allows sizing of byte buffers when serializing and deserializing values, to minimize array resizing.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-clusters">
+        <xs:choice>
+            <xs:element name="remote-cluster" type="tns:remote-cluster" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines remote server cluster.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="remote-cluster">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Name of remote server cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-bindings">
+            <xs:annotation>
+                <xs:documentation>List of socket bindings of remote servers.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="invalidation-near-cache">
+        <xs:attribute name="max-entries" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the maximum number of elements to keep in the near cache.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connection-pool">
+        <xs:attribute name="exhausted-action" type="tns:exhausted-action" default="WAIT">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies what happens when asking for a connection from a server's pool, and that pool is exhausted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-active" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    Controls the maximum number of connections per server that are allocated (checked out to client threads, or idle in the pool) at one time.
+                    When non-positive, there is no limit to the number of connections per server.
+                    When maxActive is reached, the connection pool for that server is said to be exhausted.
+                    Value -1 means no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-wait" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The amount of time in milliseconds to wait for a connection to become available when the exhausted action is ExhaustedAction.WAIT,
+                    after which a java.util.NoSuchElementException will be thrown.
+                    If a negative value is supplied, the pool will block indefinitely.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-evictable-idle-time" type="xs:long" default="1800000">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies the minimum amount of time that an connection may sit idle in the pool before it is eligible for eviction due to idle time.
+                    When non-positive, no connection will be dropped from the pool due to idle time alone.
+                    This setting has no effect unless timeBetweenEvictionRunsMillis > 0.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-idle" type="xs:int" default="1">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets a target value for the minimum number of idle connections (per server) that should always be available.
+                    If this parameter is set to a positive number and timeBetweenEvictionRunsMillis > 0, each time the idle connection eviction thread runs,
+                    it will try to create enough idle instances so that there will be minIdle idle instances available for each server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="exhausted-action">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="EXCEPTION">
+                <xs:annotation>
+                    <xs:documentation>
+                        An exception will be thrown to the calling user.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="WAIT">
+                <xs:annotation>
+                    <xs:documentation>
+                        The caller will block by invoking waits until a new or idle connections is available.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="CREATE_NEW">
+                <xs:annotation>
+                    <xs:documentation>
+                        A new persistent connection will be created and returned thus rendering maxActive meaningless.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="protocol-version">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="1.0"/>
+            <xs:enumeration value="1.1"/>
+            <xs:enumeration value="1.2"/>
+            <xs:enumeration value="1.3"/>
+            <xs:enumeration value="2.0"/>
+            <xs:enumeration value="2.1"/>
+            <xs:enumeration value="2.2"/>
+            <xs:enumeration value="2.3"/>
+            <xs:enumeration value="2.4"/>
+            <xs:enumeration value="2.5"/>
+            <xs:enumeration value="2.6"/>
+            <xs:enumeration value="2.7"/>
+            <xs:enumeration value="2.8"/>
+            <xs:enumeration value="2.9"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="security">
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-transaction">
+        <xs:attribute name="mode" type="tns:remote-transaction-mode" default="NONE">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron-managed SSLContext to be used for connecting to the remote cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="timeout" type="xs:long" default="60000">
+            <xs:annotation>
+                <xs:documentation>
+                    The duration (in ms) after which idle transactions are rolled back.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-transaction-mode">
+        <xs:restriction base="tns:transaction-mode">
+            <xs:enumeration value="NONE">
+                <xs:annotation>
+                    <xs:documentation>Cache will be non-transactional.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="BATCH">
+                <xs:annotation>
+                    <xs:documentation>Cache will support batching of operations.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="NON_DURABLE_XA">
+                <xs:annotation>
+                    <xs:documentation>Cache will enlist within transactions as a javax.transaction.xa.XAResource, without recovery.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jaxrs_1_0.xsd b/wildfly/docs/schema/jboss-as-jaxrs_1_0.xsd
new file mode 100644
index 0000000..c61f37a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jaxrs_1_0.xsd
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jaxrs:1.0"
+            xmlns="urn:jboss:domain:jaxrs:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem"/>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jaxrs_2_0.xsd b/wildfly/docs/schema/jboss-as-jaxrs_2_0.xsd
new file mode 100644
index 0000000..d5b91b9
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jaxrs_2_0.xsd
@@ -0,0 +1,74 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jaxrs:2.0"
+            xmlns="urn:jboss:domain:jaxrs:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The jaxrs subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+    <xs:complexType name="subsystemType">
+       <xs:all minOccurs="0" maxOccurs="1">
+          <xs:element name="jaxrs-2-0-request-matching" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-add-charset" type="xs:boolean" minOccurs="0" maxOccurs="1" default="true"/>
+          <xs:element name="resteasy-buffer-exception-entity" type="xs:boolean" minOccurs="0" maxOccurs="1" default="true"/>
+          <xs:element name="resteasy-disable-html-sanitizer" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-disable-providers" type="classListType" minOccurs="0" maxOccurs="1"/>
+          <xs:element name="resteasy-document-expand-entity-references" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-document-secure-disableDTDs" type="xs:boolean" minOccurs="0" maxOccurs="1" default ="true"/>
+          <xs:element name="resteasy-document-secure-processing-feature" type="xs:boolean" minOccurs="0" maxOccurs="1" default="true"/>
+          <xs:element name="resteasy-gzip-max-input" type="xs:integer" minOccurs="0" maxOccurs="1" default="10000000"/>
+          <xs:element name="resteasy-jndi-resources" type="jndiListType" minOccurs="0" maxOccurs="1"/>
+          <xs:element name="resteasy-language-mappings" type="mapType" minOccurs="0" maxOccurs="1"/>
+          <xs:element name="resteasy-media-type-mappings" type="mapType" minOccurs="0" maxOccurs="1"/>
+          <xs:element name="resteasy-media-type-param-mapping" type="xs:string" minOccurs="0" maxOccurs="1"/>
+          <xs:element name="resteasy-prefer-jackson-over-jsonb" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-providers" type="classListType" minOccurs="0" maxOccurs="1"/>
+          <xs:element name="resteasy-rfc7232preconditions" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-role-based-security" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-secure-random-max-use" type="xs:integer" minOccurs="0" maxOccurs="1" default="100"/>
+          <xs:element name="resteasy-use-builtin-providers" type="xs:boolean" minOccurs="0" maxOccurs="1" default="true"/>
+          <xs:element name="resteasy-use-container-form-params" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+          <xs:element name="resteasy-wider-request-matching" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false"/>
+       </xs:all>
+    </xs:complexType>
+    
+    <xs:complexType name="classListType">
+       <xs:sequence>
+          <xs:element name="class" type="xs:NMTOKEN" minOccurs="1" maxOccurs="unbounded"/>
+       </xs:sequence>
+    </xs:complexType>
+    
+    <xs:complexType name="jndiListType">
+       <xs:sequence>
+          <xs:element name="jndi" type="jndiType" minOccurs="1" maxOccurs="unbounded"/>
+       </xs:sequence>
+    </xs:complexType>
+    
+    <xs:simpleType name="jndiType">
+       <xs:restriction base = "xs:string">
+          <xs:pattern value="\w+:.+(/.+)*"/>
+       </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mapType">
+       <xs:sequence>
+          <xs:element name="entry" type="entryType" minOccurs="1" maxOccurs="unbounded"/>
+       </xs:sequence>
+    </xs:complexType>
+    
+    <xs:complexType name="entryType">
+       <xs:simpleContent>
+          <xs:extension base="xs:string">
+             <xs:attribute name="key"/>
+          </xs:extension>
+       </xs:simpleContent>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-jaxrs_3_0.xsd b/wildfly/docs/schema/jboss-as-jaxrs_3_0.xsd
new file mode 100644
index 0000000..4a72de8
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jaxrs_3_0.xsd
@@ -0,0 +1,106 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jaxrs:3.0"
+           xmlns="urn:jboss:domain:jaxrs:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <!-- The jaxrs subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+    <xs:complexType name="subsystemType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="jaxrs-2-0-request-matching" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-add-charset" type="xs:boolean" minOccurs="0" maxOccurs="1" default="true"/>
+            <xs:element name="resteasy-buffer-exception-entity" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="true"/>
+            <xs:element name="resteasy-disable-html-sanitizer" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-disable-providers" type="classListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resteasy-document-expand-entity-references" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-document-secure-disableDTDs" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="true"/>
+            <xs:element name="resteasy-document-secure-processing-feature" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="true"/>
+            <xs:element name="resteasy-gzip-max-input" type="xs:integer" minOccurs="0" maxOccurs="1"
+                        default="10000000"/>
+            <xs:element name="resteasy-jndi-resources" type="jndiListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resteasy-language-mappings" type="mapType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resteasy-media-type-mappings" type="mapType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resteasy-media-type-param-mapping" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resteasy-prefer-jackson-over-jsonb" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-providers" type="classListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resteasy-rfc7232preconditions" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-role-based-security" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-secure-random-max-use" type="xs:integer" minOccurs="0" maxOccurs="1"
+                        default="100"/>
+            <xs:element name="resteasy-use-builtin-providers" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="true"/>
+            <xs:element name="resteasy-use-container-form-params" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="resteasy-wider-request-matching" type="xs:boolean" minOccurs="0" maxOccurs="1"
+                        default="false"/>
+            <xs:element name="tracing-type" minOccurs="0" maxOccurs="1" default="OFF">
+                <xs:simpleType>
+                    <xs:restriction base="xs:string">
+                        <xs:enumeration value="OFF"/>
+                        <xs:enumeration value="ON_DEMAND"/>
+                        <xs:enumeration value="ALL"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:element>
+            <xs:element name="tracing-threshold" minOccurs="0" maxOccurs="1" default="SUMMARY">
+                <xs:simpleType>
+                    <xs:restriction base="xs:string">
+                        <xs:enumeration value="SUMMARY"/>
+                        <xs:enumeration value="TRACE"/>
+                        <xs:enumeration value="VERBOSE"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="classListType">
+        <xs:sequence>
+            <xs:element name="class" type="xs:NMTOKEN" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jndiListType">
+        <xs:sequence>
+            <xs:element name="jndi" type="jndiType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="jndiType">
+        <xs:restriction base="xs:string">
+            <xs:pattern value="\w+:.+(/.+)*"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mapType">
+        <xs:sequence>
+            <xs:element name="entry" type="entryType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="entryType">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="key"/>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-jca_1_1.xsd b/wildfly/docs/schema/jboss-as-jca_1_1.xsd
new file mode 100644
index 0000000..bc5fd02
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jca_1_1.xsd
@@ -0,0 +1,165 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jca:1.1"
+           xmlns="urn:jboss:domain:jca:1.1"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:sequence>
+            <xs:element name="archive-validation"
+                type="archive-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle archive validation for the deployment
+                        units. If it's not present it's considered true
+                        with default attributes.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bean-validation"
+                type="bean-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle bean validation (JSR-303) for the
+                        deployment units. If it's not present it's
+                        considered true
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="default-workmanager" type="workmanagerType" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The default work manager and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A custom work manager definition and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bootstrap-contexts" type="bootstrap-contextsType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Definition of custom bootstrap contexts
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="cached-connection-manager" type="cached-connection-managerType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="archive-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether archive validation is enabled.  Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-error" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation error report fail the deployment. Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-warn" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation warning report fail the deployment. Default: false
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether bean validation is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1"></xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0"></xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager. Note, that custom work managers need
+                   to have a name defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextsType">
+        <xs:sequence>
+            <xs:element name="bootstrap-context" type="bootstrap-contextType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the bootstrap context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="workmanager" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager to use for this context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cached-connection-managerType">
+        <xs:attribute name="debug" type="xs:boolean" use="optional"></xs:attribute>
+        <xs:attribute name="error" type="xs:boolean" use="optional"></xs:attribute>
+    </xs:complexType>
+
+     <xs:complexType name="thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                See threads:blocking-bounded-queue-thread-pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="threads:countType"/>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jdr_1_0.xsd b/wildfly/docs/schema/jboss-as-jdr_1_0.xsd
new file mode 100644
index 0000000..d7b5fb7
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jdr_1_0.xsd
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jdr:1.0"
+            xmlns="urn:jboss:domain:jdr:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="subsystem" type="subsystemType"/>
+    <xs:complexType name="subsystemType"/>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_1_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_1_0.xsd
new file mode 100644
index 0000000..e5b6785
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_1_0.xsd
@@ -0,0 +1,123 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:1.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:jgroups:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default-stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-binding" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Provides an address/port binding for a protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_1_1.xsd b/wildfly/docs/schema/jboss-as-jgroups_1_1.xsd
new file mode 100644
index 0000000..0cd06c4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_1_1.xsd
@@ -0,0 +1,138 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:1.1"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:jgroups:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default-stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-binding" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Provides an address/port binding for a protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_2_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_2_0.xsd
new file mode 100644
index 0000000..b836a89
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_2_0.xsd
@@ -0,0 +1,176 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:2.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:jgroups:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default-stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-binding" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Provides an address/port binding for a protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The stack name used to create a bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The cluster name of the channel that bridges this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_3_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_3_0.xsd
new file mode 100644
index 0000000..8d8d328
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_3_0.xsd
@@ -0,0 +1,298 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:3.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                    If undefined, the channel will use the default stack.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-binding" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Provides an address/port binding for a protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="internal-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for internal messages used by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="oob-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="timer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_4_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_4_0.xsd
new file mode 100644
index 0000000..37e1be1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_4_0.xsd
@@ -0,0 +1,304 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:4.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.  If undefined, the channel name will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-binding" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Provides an address/port binding for a protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="internal-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for internal messages used by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="oob-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="timer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_5_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_5_0.xsd
new file mode 100644
index 0000000..c552dfe
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_5_0.xsd
@@ -0,0 +1,527 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:5.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="5.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.  If undefined, the channel name will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this channel will collect statistics.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="protocol" type="tns:protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-protocol" type="tns:socket-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-discovery-protocol" type="tns:socket-discovery-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-protocol" type="tns:jdbc-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="encrypt-protocol" type="tns:encrypt-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="auth-protocol" type="tns:auth-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not all protocols in the stack will collect statistics by default.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="generic-protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this protocol will collect statistics overriding stack configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Deprecated.  Socket-based protocols should use &lt;socket-protocol/&gt; instead.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a socket binding for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-discovery-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-bindings" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a list of socket bindings for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Data source reference for JDBC protocols to be used instead of connection and JNDI lookup properties.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="encrypt-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="tns:credential-reference">
+                        <xs:annotation>
+                            <xs:documentation>References the password credential with which the key is protected.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to encrypt messages.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to encrypt.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auth-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:choice>
+                    <xs:element name="plain-token" type="tns:plain-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a plain text shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="digest-token" type="tns:digest-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a digest of a shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="cipher-token" type="tns:cipher-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using an encrypted shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="plain-token">
+        <xs:sequence>
+            <xs:element name="shared-secret-reference" type="tns:credential-reference">
+                <xs:annotation>
+                    <xs:documentation>References a shared secret used to authenticate new members.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="digest-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:attribute name="algorithm" type="xs:string" default="SHA-265">
+                    <xs:annotation>
+                        <xs:documentation>The digest algorithm with which to obfuscate the shared secret.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cipher-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="tns:credential-reference">
+                        <xs:annotation>
+                            <xs:documentation>References the credential required to obtain the specified key from the specified store.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="algorithm" type="xs:string" default="RSA">
+                    <xs:annotation>
+                        <xs:documentation>The encryption algorithm/transformation used to protect the shared secret during transmission.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:complexType name="credential-reference">
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="internal-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for internal messages used by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="oob-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="timer-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="queue-length" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum queue length for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_6_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_6_0.xsd
new file mode 100644
index 0000000..fd0d581
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_6_0.xsd
@@ -0,0 +1,507 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:6.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.  If undefined, the channel name will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this channel will collect statistics.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="protocol" type="tns:protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-protocol" type="tns:socket-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-discovery-protocol" type="tns:socket-discovery-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-protocol" type="tns:jdbc-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="encrypt-protocol" type="tns:encrypt-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="auth-protocol" type="tns:auth-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not all protocols in the stack will collect statistics by default.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="generic-protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this protocol will collect statistics overriding stack configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Deprecated.  Socket-based protocols should use &lt;socket-protocol/&gt; instead.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a socket binding for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-discovery-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-bindings" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a list of socket bindings for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Data source reference for JDBC protocols to be used instead of connection and JNDI lookup properties.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="encrypt-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="tns:credential-reference">
+                        <xs:annotation>
+                            <xs:documentation>References the password credential with which the key is protected.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to encrypt messages.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to encrypt.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auth-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:choice>
+                    <xs:element name="plain-token" type="tns:plain-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a plain text shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="digest-token" type="tns:digest-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a digest of a shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="cipher-token" type="tns:cipher-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using an encrypted shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="plain-token">
+        <xs:sequence>
+            <xs:element name="shared-secret-reference" type="tns:credential-reference">
+                <xs:annotation>
+                    <xs:documentation>References a shared secret used to authenticate new members.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="digest-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:attribute name="algorithm" type="xs:string" default="SHA-265">
+                    <xs:annotation>
+                        <xs:documentation>The digest algorithm with which to obfuscate the shared secret.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cipher-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="tns:credential-reference">
+                        <xs:annotation>
+                            <xs:documentation>References the credential required to obtain the specified key from the specified store.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="algorithm" type="xs:string" default="RSA">
+                    <xs:annotation>
+                        <xs:documentation>The encryption algorithm/transformation used to protect the shared secret during transmission.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:complexType name="credential-reference">
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_7_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_7_0.xsd
new file mode 100644
index 0000000..c987635
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_7_0.xsd
@@ -0,0 +1,497 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:7.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:7.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="7.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.  If undefined, the channel name will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this channel will collect statistics.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="protocol" type="tns:protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-protocol" type="tns:socket-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-discovery-protocol" type="tns:socket-discovery-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-protocol" type="tns:jdbc-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="encrypt-protocol" type="tns:encrypt-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="auth-protocol" type="tns:auth-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not all protocols in the stack will collect statistics by default.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="generic-protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this protocol will collect statistics overriding stack configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Deprecated.  Socket-based protocols should use &lt;socket-protocol/&gt; instead.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a socket binding for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to send messages to other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-discovery-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-bindings" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a list of socket bindings for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Data source reference for JDBC protocols to be used instead of connection and JNDI lookup properties.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="encrypt-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="credential-reference:credentialReferenceType">
+                        <xs:annotation>
+                            <xs:documentation>References the password credential with which the key is protected.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to encrypt messages.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to encrypt.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auth-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:choice>
+                    <xs:element name="plain-token" type="tns:plain-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a plain text shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="digest-token" type="tns:digest-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a digest of a shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="cipher-token" type="tns:cipher-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using an encrypted shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="plain-token">
+        <xs:sequence>
+            <xs:element name="shared-secret-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>References a shared secret used to authenticate new members.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="digest-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:attribute name="algorithm" type="xs:string" default="SHA-265">
+                    <xs:annotation>
+                        <xs:documentation>The digest algorithm with which to obfuscate the shared secret.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cipher-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="credential-reference:credentialReferenceType">
+                        <xs:annotation>
+                            <xs:documentation>References the credential required to obtain the specified key from the specified store.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="algorithm" type="xs:string" default="RSA">
+                    <xs:annotation>
+                        <xs:documentation>The encryption algorithm/transformation used to protect the shared secret during transmission.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to receive messages from other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to send messages to other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-transport">
+        <xs:complexContent>
+            <xs:extension base="tns:transport">
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_8_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_8_0.xsd
new file mode 100644
index 0000000..2021fba
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_8_0.xsd
@@ -0,0 +1,497 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:8.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:8.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="8.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.  If undefined, the channel name will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this channel will collect statistics.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Identifies the default protocol stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="protocol" type="tns:protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-protocol" type="tns:socket-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-discovery-protocol" type="tns:socket-discovery-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-protocol" type="tns:jdbc-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="encrypt-protocol" type="tns:encrypt-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="auth-protocol" type="tns:auth-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not all protocols in the stack will collect statistics by default.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="generic-protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this protocol will collect statistics overriding stack configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Deprecated.  Socket-based protocols should use &lt;socket-protocol/&gt; instead.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-binding" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a socket binding for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to send messages to other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-discovery-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="socket-bindings" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a list of socket bindings for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Data source reference for JDBC protocols to be used instead of connection and JNDI lookup properties.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="encrypt-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="credential-reference:credentialReferenceType">
+                        <xs:annotation>
+                            <xs:documentation>References the password credential with which the key is protected.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to encrypt messages.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to encrypt.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auth-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:choice>
+                    <xs:element name="plain-token" type="tns:plain-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a plain text shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="digest-token" type="tns:digest-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a digest of a shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="cipher-token" type="tns:cipher-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using an encrypted shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="plain-token">
+        <xs:sequence>
+            <xs:element name="shared-secret-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>References a shared secret used to authenticate new members.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="digest-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:attribute name="algorithm" type="xs:string" default="SHA-265">
+                    <xs:annotation>
+                        <xs:documentation>The digest algorithm with which to obfuscate the shared secret.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cipher-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="credential-reference:credentialReferenceType">
+                        <xs:annotation>
+                            <xs:documentation>References the credential required to obtain the specified key from the specified store.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="algorithm" type="xs:string" default="RSA">
+                    <xs:annotation>
+                        <xs:documentation>The encryption algorithm/transformation used to protect the shared secret during transmission.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:generic-protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="shared" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Indicates whether or not the channels created for this stack should use a single, shared transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to receive messages from other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to send messages to other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="default-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="oob-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread pool used for OOB messages received by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="timer-executor" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the timer thread pool used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="thread-factory" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Defines the thread factory used by this transport.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-transport">
+        <xs:complexContent>
+            <xs:extension base="tns:transport">
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jgroups_9_0.xsd b/wildfly/docs/schema/jboss-as-jgroups_9_0.xsd
new file mode 100644
index 0000000..63437ab
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jgroups_9_0.xsd
@@ -0,0 +1,448 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:jgroups:9.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:jgroups:9.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="9.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="tns:subsystem">
+        <xs:annotation>
+            <xs:documentation>Enumerates the protocol stacks available to the channel factory.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="channels" type="tns:channels" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined channels.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="stacks" type="tns:stacks">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the defined protocol stacks.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="channels">
+        <xs:sequence>
+            <xs:element name="channel" type="tns:channel" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Identifies the default cluster.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel">
+        <xs:sequence>
+            <xs:element name="fork" type="tns:fork" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a fork of this channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the stack used by this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cluster" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.  If undefined, the channel name will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.wildfly.clustering.server">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load clustering services.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this channel will collect statistics.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fork">
+        <xs:sequence>
+            <xs:element name="protocol" type="tns:protocol" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol to add to the protocol stack of this fork channel.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the cluster name of this channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="stacks">
+        <xs:sequence>
+            <xs:element name="stack" type="tns:stack" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a protocol stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="stack">
+        <xs:sequence>
+            <xs:element name="transport" type="tns:transport">
+                <xs:annotation>
+                    <xs:documentation>Defines the transport protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="protocol" type="tns:protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-protocol" type="tns:socket-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="socket-discovery-protocol" type="tns:socket-discovery-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="jdbc-protocol" type="tns:jdbc-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="encrypt-protocol" type="tns:encrypt-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="auth-protocol" type="tns:auth-protocol">
+                    <xs:annotation>
+                        <xs:documentation>Defines a non-transport protocol for a stack.</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="relay" type="tns:relay" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>Defines a relay protocol for a stack.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this stack.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not all protocols in the stack will collect statistics by default.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="protocol">
+        <xs:sequence>
+            <xs:element name="property" type="tns:property" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a property override for a protocol.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the protocol type, e.g. TCP, UDP, PING, etc.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" default="org.jgroups">
+            <xs:annotation>
+                <xs:documentation>Indicates the module from which to load this protocol.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>Indicates whether or not this protocol will collect statistics overriding stack configuration.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:attribute name="socket-binding" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a socket binding for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to send messages to other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="socket-discovery-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:attribute name="socket-bindings" type="tns:list" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Provides a list of socket bindings for a protocol.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:attribute name="data-source" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Data source reference for JDBC protocols to be used instead of connection and JNDI lookup properties.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="encrypt-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="credential-reference:credentialReferenceType">
+                        <xs:annotation>
+                            <xs:documentation>References the password credential with which the key is protected.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to encrypt messages.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to encrypt.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auth-protocol">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:choice>
+                    <xs:element name="plain-token" type="tns:plain-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a plain text shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="digest-token" type="tns:digest-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using a digest of a shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="cipher-token" type="tns:cipher-token">
+                        <xs:annotation>
+                            <xs:documentation>An auth token using an encrypted shared secret.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="plain-token">
+        <xs:sequence>
+            <xs:element name="shared-secret-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>References a shared secret used to authenticate new members.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="digest-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:attribute name="algorithm" type="xs:string" default="SHA-265">
+                    <xs:annotation>
+                        <xs:documentation>The digest algorithm with which to obfuscate the shared secret.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cipher-token">
+        <xs:complexContent>
+            <xs:extension base="tns:plain-token">
+                <xs:sequence>
+                    <xs:element name="key-credential-reference" type="credential-reference:credentialReferenceType">
+                        <xs:annotation>
+                            <xs:documentation>References the credential required to obtain the specified key from the specified store.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the private key and certificate used to authenticate new members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="algorithm" type="xs:string" default="RSA">
+                    <xs:annotation>
+                        <xs:documentation>The encryption algorithm/transformation used to protect the shared secret during transmission.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="transport">
+        <xs:complexContent>
+            <xs:extension base="tns:protocol">
+                <xs:sequence>
+                    <xs:element name="default-thread-pool" type="tns:thread-pool" minOccurs="0" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Defines the thread pool used for default messages received by this transport.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to receive messages from other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The socket-binding used to configure the bind address/port of the socket used to send messages to other members.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="diagnostics-socket-binding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>If specified, enables diagnostics and specified the multicast address/port on which to communicate.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="site" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the site where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rack" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the rack where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="machine" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>Identifies the machine where this node runs.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="thread-pool">
+        <xs:attribute name="min-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Minimum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-threads" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum thread pool size for the thread pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="keepalive-time" type="xs:long" use="optional">
+            <xs:annotation>
+                <xs:documentation>Timeout in milliseconds to remove idle thread from the pool.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:simpleContent>
+            <xs:extension base="xs:string">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>Defines the name of a protocol property.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="relay">
+        <xs:sequence>
+            <xs:element name="remote-site" type="tns:remote-site" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a remote site to which to bridge.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="site" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of our site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-site">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="channel" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The bridge channel to this remote site.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jmx_1_0.xsd b/wildfly/docs/schema/jboss-as-jmx_1_0.xsd
new file mode 100644
index 0000000..6135d89
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jmx_1_0.xsd
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jmx:1.0"
+            xmlns="urn:jboss:domain:jmx:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The jmx subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+      <xs:sequence>
+         <xs:element name="jmx-connector" type="jmx-connectorType" />
+      </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jmx-connectorType">
+       <xs:attribute name="registry-binding" use="required" />
+       <xs:attribute name="server-binding" use="required" />
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jmx_1_1.xsd b/wildfly/docs/schema/jboss-as-jmx_1_1.xsd
new file mode 100644
index 0000000..7329f16
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jmx_1_1.xsd
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jmx:1.1"
+            xmlns="urn:jboss:domain:jmx:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The jmx subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+      <xs:sequence>
+         <xs:element name="show-model" type="booleanValueType" minOccurs="0"/>
+         <xs:element name="remoting-connector" type="remotingConnectorRefType" minOccurs="0"/>
+      </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+      <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="remotingConnectorRefType">
+        <xs:attribute name="use-management-endpoint" type="xs:boolean" default="true" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    If true then this connector will use the management endpoint, otherwise it will use the
+                    remoting subsystem endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jmx_1_2.xsd b/wildfly/docs/schema/jboss-as-jmx_1_2.xsd
new file mode 100644
index 0000000..68a191b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jmx_1_2.xsd
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jmx:1.2"
+            xmlns="urn:jboss:domain:jmx:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- The jmx subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+      <xs:sequence>
+         <xs:element name="expose-resolved-model" type="resolvedModelType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="expose-expression-model" type="expressionModelType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="remoting-connector" type="remotingConnectorRefType" minOccurs="0"/>
+      </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="resolvedModelType">
+      <xs:attribute name="domain-name" type="xs:string" default="jboss.as"/>
+      <xs:attribute name="proper-property-format" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="expressionModelType">
+      <xs:attribute name="domain-name" type="xs:string" default="jboss.as.expr"/>
+    </xs:complexType>
+
+    <xs:complexType name="remotingConnectorRefType">
+        <xs:attribute name="use-management-endpoint" type="xs:boolean" default="true" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    If true then this connector will use the management endpoint, otherwise it will use the
+                    remoting subsystem endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jmx_1_3.xsd b/wildfly/docs/schema/jboss-as-jmx_1_3.xsd
new file mode 100644
index 0000000..9aebf85
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jmx_1_3.xsd
@@ -0,0 +1,109 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jmx:1.3"
+            xmlns="urn:jboss:domain:jmx:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+
+    <!-- The jmx subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+      <xs:sequence>
+         <xs:element name="expose-resolved-model" type="resolvedModelType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="expose-expression-model" type="expressionModelType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="remoting-connector" type="remotingConnectorRefType" minOccurs="0"/>
+         <xs:element name="audit-log" type="audit-logType" minOccurs="0"/>
+         <xs:element name="sensitivity" type="sensitivityType" minOccurs="0"/>
+      </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="resolvedModelType">
+      <xs:attribute name="domain-name" type="xs:string" default="jboss.as"/>
+      <xs:attribute name="proper-property-format" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="expressionModelType">
+      <xs:attribute name="domain-name" type="xs:string" default="jboss.as.expr"/>
+    </xs:complexType>
+
+    <xs:complexType name="remotingConnectorRefType">
+        <xs:attribute name="use-management-endpoint" type="xs:boolean" default="true" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    If true then this connector will use the management endpoint, otherwise it will use the
+                    remoting subsystem endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-logType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>        
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+    
+    <xs:complexType name="sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures access control sensititity for the mbeans in the jmx subsystem
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="non-core-mbeans" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+    
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jpa_1_0.xsd b/wildfly/docs/schema/jboss-as-jpa_1_0.xsd
new file mode 100644
index 0000000..804f88c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jpa_1_0.xsd
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jpa:1.0"
+            xmlns="urn:jboss:domain:jpa:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The managedbean subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+      <xs:sequence>
+          <xs:element name="jpa" type="jpa-config" />
+      </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="jpa-config">
+        <xs:attribute name="default-datasource" use="optional"/>
+    </xs:complexType>
+
+
+</xs:schema>
+
+
diff --git a/wildfly/docs/schema/jboss-as-jpa_1_1.xsd b/wildfly/docs/schema/jboss-as-jpa_1_1.xsd
new file mode 100644
index 0000000..a8b5128
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jpa_1_1.xsd
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jpa:1.1"
+            xmlns="urn:jboss:domain:jpa:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The managedbean subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+      <xs:sequence>
+          <xs:element name="jpa" type="jpa-config" />
+      </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jpa-config">
+        <xs:attribute name="default-datasource" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="default-extended-persistence-inheritance" type="inheritance_type" use="optional" default="DEEP"/>
+    </xs:complexType>
+
+    <xs:simpleType name="inheritance_type">
+        <xs:annotation>
+            <xs:documentation>
+            Controls how JPA extended persistence context (XPC) inheritance is performed. 
+            DEEP - Extended persistence context is shared at top bean level with all sub-beans referencing the same named persistence context.
+            SHALLOW - Extended persistece context is only shared with the parent bean (never with sibling beans).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DEEP"/>
+            <xs:enumeration value="SHALLOW"/>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
+
+
diff --git a/wildfly/docs/schema/jboss-as-jsf_1_0.xsd b/wildfly/docs/schema/jboss-as-jsf_1_0.xsd
new file mode 100644
index 0000000..28cebd7
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jsf_1_0.xsd
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jsf:1.0"
+            xmlns="urn:jboss:domain:jsf:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:attribute name="default-jsf-impl-slot" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jsf_1_1.xsd b/wildfly/docs/schema/jboss-as-jsf_1_1.xsd
new file mode 100644
index 0000000..89cea65
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jsf_1_1.xsd
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jsf:1.1"
+           xmlns="urn:jboss:domain:jsf:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:attribute name="default-jsf-impl-slot" type="xs:string" use="optional"/>
+        <xs:attribute name="disallow-doctype-decl" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-jsr77_1_0.xsd b/wildfly/docs/schema/jboss-as-jsr77_1_0.xsd
new file mode 100644
index 0000000..2bd88b1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-jsr77_1_0.xsd
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:jsr77:1.0"
+            xmlns="urn:jboss:domain:jsr77:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem"/>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-logging_1_0.xsd b/wildfly/docs/schema/jboss-as-logging_1_0.xsd
new file mode 100644
index 0000000..2ff3b0b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_1_0.xsd
@@ -0,0 +1,365 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:logging:1.0"
+            xmlns="urn:jboss:domain:logging:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+        <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread.  Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a simple filter type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="simpleFilterGroup"/>
+    </xs:complexType>
+
+    <xs:complexType name="multiFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a composite filter type.  The "any" filter will return true of any of its constituent filters
+                returns true; the "all" filter will return false if any of its constituent filters returns false.  Both
+                composite filter types are short-circuiting, meaning that if the result can be determined with an earlier
+                filter, later filters are not run.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="simpleFilterGroup" maxOccurs="unbounded"/>
+    </xs:complexType>
+
+    <xs:group name="simpleFilterGroup">
+        <xs:choice>
+            <xs:element name="all" type="multiFilterType"/>
+            <xs:element name="any" type="multiFilterType"/>
+            <xs:element name="accept"/>
+            <xs:element name="deny"/>
+            <xs:element name="not" type="filterType"/>
+            <xs:element name="match" type="regexFilterType"/>
+            <xs:element name="replace" type="replaceFilterType"/>
+            <xs:element name="level" type="levelFilterType"/>
+            <xs:element name="level-range" type="levelRangeFilterType"/>
+            <xs:element name="change-level" type="levelChangeFilterType"/>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="regexFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A regular expression-based filter.  The filter returns true if the pattern matches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="replaceFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A regular expression substitution filter.  This filter modifies the log message and always returns true.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+        <xs:attribute name="replacement" type="xs:string" use="required"/>
+        <xs:attribute name="replace-all" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="levelFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A level filter.  This filter returns true if the log message level matches the parameter.  It is a
+                numerical match; two differently-named levels with the same numeric value will be considered equal.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="levelRangeFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A level range filter.  This filter returns true if the log message level matches the range specified
+                by the parameters.  It is a
+                numerical match; two differently-named levels with the same numeric value will be considered equal.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="min-level" type="xs:string" use="required"/>
+        <xs:attribute name="min-inclusive" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="max-level" type="xs:string" use="required"/>
+        <xs:attribute name="max-inclusive" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="levelChangeFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A level change filter.  This filter modifies the log message and always returns true.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="new-level" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_1_1.xsd b/wildfly/docs/schema/jboss-as-logging_1_1.xsd
new file mode 100644
index 0000000..a46cd8f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_1_1.xsd
@@ -0,0 +1,384 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:logging:1.1"
+            xmlns="urn:jboss:domain:logging:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+        <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread.  Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="filterType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a simple filter type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="simpleFilterGroup"/>
+    </xs:complexType>
+
+    <xs:complexType name="multiFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a composite filter type.  The "any" filter will return true of any of its constituent filters
+                returns true; the "all" filter will return false if any of its constituent filters returns false.  Both
+                composite filter types are short-circuiting, meaning that if the result can be determined with an earlier
+                filter, later filters are not run.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="simpleFilterGroup" maxOccurs="unbounded"/>
+    </xs:complexType>
+
+    <xs:group name="simpleFilterGroup">
+        <xs:choice>
+            <xs:element name="all" type="multiFilterType"/>
+            <xs:element name="any" type="multiFilterType"/>
+            <xs:element name="accept"/>
+            <xs:element name="deny"/>
+            <xs:element name="not" type="filterType"/>
+            <xs:element name="match" type="regexFilterType"/>
+            <xs:element name="replace" type="replaceFilterType"/>
+            <xs:element name="level" type="levelFilterType"/>
+            <xs:element name="level-range" type="levelRangeFilterType"/>
+            <xs:element name="change-level" type="levelChangeFilterType"/>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="regexFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A regular expression-based filter.  The filter returns true if the pattern matches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="replaceFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A regular expression substitution filter.  This filter modifies the log message and always returns true.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+        <xs:attribute name="replacement" type="xs:string" use="required"/>
+        <xs:attribute name="replace-all" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="levelFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A level filter.  This filter returns true if the log message level matches the parameter.  It is a
+                numerical match; two differently-named levels with the same numeric value will be considered equal.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="levelRangeFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A level range filter.  This filter returns true if the log message level matches the range specified
+                by the parameters.  It is a
+                numerical match; two differently-named levels with the same numeric value will be considered equal.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="min-level" type="xs:string" use="required"/>
+        <xs:attribute name="min-inclusive" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="max-level" type="xs:string" use="required"/>
+        <xs:attribute name="max-inclusive" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="levelChangeFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                A level change filter.  This filter modifies the log message and always returns true.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="new-level" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_1_2.xsd b/wildfly/docs/schema/jboss-as-logging_1_2.xsd
new file mode 100644
index 0000000..57d02b5
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_1_2.xsd
@@ -0,0 +1,460 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:logging:1.2"
+            xmlns="urn:jboss:domain:logging:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType" />
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+        <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread.  Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_1_3.xsd b/wildfly/docs/schema/jboss-as-logging_1_3.xsd
new file mode 100644
index 0000000..fd93f2e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_1_3.xsd
@@ -0,0 +1,462 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:1.3"
+           xmlns="urn:jboss:domain:logging:1.3"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.3">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="formatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_1_4.xsd b/wildfly/docs/schema/jboss-as-logging_1_4.xsd
new file mode 100644
index 0000000..ac4300e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_1_4.xsd
@@ -0,0 +1,553 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:1.4"
+           xmlns="urn:jboss:domain:logging:1.4"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.4">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred, brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred, brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                 Defines a formatter to be used to format log messages.
+
+                 Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                 ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_1_5.xsd b/wildfly/docs/schema/jboss-as-logging_1_5.xsd
new file mode 100644
index 0000000..52368e0
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_1_5.xsd
@@ -0,0 +1,580 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:1.5"
+           xmlns="urn:jboss:domain:logging:1.5"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.5">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="filter" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter.  See the documentation for org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred, brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred, brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                 Defines a formatter to be used to format log messages.
+
+                 Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                 ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_2_0.xsd b/wildfly/docs/schema/jboss-as-logging_2_0.xsd
new file mode 100644
index 0000000..b3cce5b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_2_0.xsd
@@ -0,0 +1,566 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:2.0"
+           xmlns="urn:jboss:domain:logging:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                            Determines whether or not deployments should be scanned for configuration files. If set to
+                            true and a configuration file is found the log manager will be configured based on the
+                            configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_3_0.xsd b/wildfly/docs/schema/jboss-as-logging_3_0.xsd
new file mode 100644
index 0000000..e67cdde
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_3_0.xsd
@@ -0,0 +1,595 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:3.0"
+           xmlns="urn:jboss:domain:logging:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                            Determines whether or not deployments should be scanned for configuration files. If set to
+                            true and a configuration file is found the log manager will be configured based on the
+                            configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                                <xs:enumeration value="console"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_4_0.xsd b/wildfly/docs/schema/jboss-as-logging_4_0.xsd
new file mode 100644
index 0000000..3f59b46
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_4_0.xsd
@@ -0,0 +1,595 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:4.0"
+           xmlns="urn:jboss:domain:logging:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                            Determines whether or not deployments should be scanned for configuration files. If set to
+                            true and a configuration file is found the log manager will be configured based on the
+                            configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                                <xs:enumeration value="console"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_5_0.xsd b/wildfly/docs/schema/jboss-as-logging_5_0.xsd
new file mode 100644
index 0000000..9a85296
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_5_0.xsd
@@ -0,0 +1,775 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:5.0"
+           xmlns="urn:jboss:domain:logging:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="5.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Determines whether or not deployments should be scanned for configuration files. If set to
+                        true and a configuration file is found the log manager will be configured based on the
+                        configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                                <xs:enumeration value="console"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+            <xs:element name="json-formatter" type="structuredFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a JSON formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="xml-formatter" type="xmlFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a XML formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="structuredFormatterType">
+        <xs:all>
+            <xs:element name="exception-output-type" type="exceptionOutputType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Indicates how the cause of the logged message, if one is available, will be added to the output.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="record-delimiter" type="valueType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The value to be used to indicate the end of a record. If set to null no delimiter will be used
+                        at the end of the record. The default value is a line feed.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="key-overrides" type="keyOverrideType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Allows the names of the keys or elements for the properties to be overridden.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="meta-data" type="propertiesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Sets the meta data to use in the structured format. Properties will be added to each log message.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="date-format" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The date/time format pattern. The pattern must be a valid
+                    java.time.format.DateTimeFormatter.ofPattern() pattern.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pretty-print" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether or not pretty printing should be used when formatting.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="print-details" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets whether or not details should be printed. Printing the details can be expensive as the values
+                    are retrieved from the caller. The details include the source class name, source file name, source
+                    method name and source line number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="zone-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The zone ID for formatting the date and time. The system default is used if left undefined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="xmlFormatterType">
+        <xs:complexContent>
+            <xs:extension base="structuredFormatterType">
+                <xs:attribute name="namespace-uri" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Allows the namespace to be overridden. If not defined a default will be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="print-namespace" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether or no the namespace should be added to each record element.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="exceptionOutputType">
+        <xs:annotation>
+            <xs:documentation>
+                Set the output type for exceptions. The default is detailed.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="detailed">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be an array of stack trace elements. This will include
+                                suppressed exceptions and the cause of the exception.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="detailed-and-formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyOverrideType">
+        <xs:attribute name="exception" type="xs:string"/>
+        <xs:attribute name="exception-caused-by" type="xs:string"/>
+        <xs:attribute name="exception-circular-reference" type="xs:string"/>
+        <xs:attribute name="exception-frame" type="xs:string"/>
+        <xs:attribute name="exception-frame-class" type="xs:string"/>
+        <xs:attribute name="exception-frame-line" type="xs:string"/>
+        <xs:attribute name="exception-frame-method" type="xs:string"/>
+        <xs:attribute name="exception-frames" type="xs:string"/>
+        <xs:attribute name="exception-message" type="xs:string"/>
+        <xs:attribute name="exception-reference-id" type="xs:string"/>
+        <xs:attribute name="exception-suppressed" type="xs:string"/>
+        <xs:attribute name="exception-type" type="xs:string"/>
+        <xs:attribute name="host-name" type="xs:string"/>
+        <xs:attribute name="level" type="xs:string"/>
+        <xs:attribute name="logger-class-name" type="xs:string"/>
+        <xs:attribute name="logger-name" type="xs:string"/>
+        <xs:attribute name="mdc" type="xs:string"/>
+        <xs:attribute name="message" type="xs:string"/>
+        <xs:attribute name="ndc" type="xs:string"/>
+        <xs:attribute name="process-id" type="xs:string"/>
+        <xs:attribute name="process-name" type="xs:string"/>
+        <xs:attribute name="record" type="xs:string"/>
+        <xs:attribute name="sequence" type="xs:string"/>
+        <xs:attribute name="source-class-name" type="xs:string"/>
+        <xs:attribute name="source-file-name" type="xs:string"/>
+        <xs:attribute name="source-line-number" type="xs:string"/>
+        <xs:attribute name="source-method-name" type="xs:string"/>
+        <xs:attribute name="source-module-name" type="xs:string"/>
+        <xs:attribute name="source-module-version" type="xs:string"/>
+        <xs:attribute name="stack-trace" type="xs:string"/>
+        <xs:attribute name="thread-id" type="xs:string"/>
+        <xs:attribute name="thread-name" type="xs:string"/>
+        <xs:attribute name="timestamp" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_6_0.xsd b/wildfly/docs/schema/jboss-as-logging_6_0.xsd
new file mode 100644
index 0000000..22fa642
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_6_0.xsd
@@ -0,0 +1,810 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:6.0"
+           xmlns="urn:jboss:domain:logging:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="socket-handler" type="socketHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Determines whether or not deployments should be scanned for configuration files. If set to
+                        true and a configuration file is found the log manager will be configured based on the
+                        configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="socket-handler" type="socketHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                                <xs:enumeration value="console"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="socketHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a socket.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="named-formatter" type="namedFormatterType"/>
+            <xs:element name="protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="value" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="SSL_TCP"/>
+                                <xs:enumeration value="TCP"/>
+                                <xs:enumeration value="UDP"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" default="true"/>
+        <xs:attribute name="block-on-reconnect" type="xs:boolean" default="false"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+        <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+        <xs:attribute name="ssl-context" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+            <xs:element name="json-formatter" type="structuredFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a JSON formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="xml-formatter" type="xmlFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a XML formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="structuredFormatterType">
+        <xs:all>
+            <xs:element name="exception-output-type" type="exceptionOutputType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Indicates how the cause of the logged message, if one is available, will be added to the output.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="record-delimiter" type="valueType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The value to be used to indicate the end of a record. If set to null no delimiter will be used
+                        at the end of the record. The default value is a line feed.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="key-overrides" type="keyOverrideType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Allows the names of the keys or elements for the properties to be overridden.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="meta-data" type="propertiesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Sets the meta data to use in the structured format. Properties will be added to each log message.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="date-format" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The date/time format pattern. The pattern must be a valid
+                    java.time.format.DateTimeFormatter.ofPattern() pattern.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pretty-print" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether or not pretty printing should be used when formatting.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="print-details" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets whether or not details should be printed. Printing the details can be expensive as the values
+                    are retrieved from the caller. The details include the source class name, source file name, source
+                    method name and source line number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="zone-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The zone ID for formatting the date and time. The system default is used if left undefined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="xmlFormatterType">
+        <xs:complexContent>
+            <xs:extension base="structuredFormatterType">
+                <xs:attribute name="namespace-uri" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Allows the namespace to be overridden. If not defined a default will be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="print-namespace" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether or no the namespace should be added to each record element.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="exceptionOutputType">
+        <xs:annotation>
+            <xs:documentation>
+                Set the output type for exceptions. The default is detailed.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="detailed">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be an array of stack trace elements. This will include
+                                suppressed exceptions and the cause of the exception.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="detailed-and-formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyOverrideType">
+        <xs:attribute name="exception" type="xs:string"/>
+        <xs:attribute name="exception-caused-by" type="xs:string"/>
+        <xs:attribute name="exception-circular-reference" type="xs:string"/>
+        <xs:attribute name="exception-frame" type="xs:string"/>
+        <xs:attribute name="exception-frame-class" type="xs:string"/>
+        <xs:attribute name="exception-frame-line" type="xs:string"/>
+        <xs:attribute name="exception-frame-method" type="xs:string"/>
+        <xs:attribute name="exception-frames" type="xs:string"/>
+        <xs:attribute name="exception-message" type="xs:string"/>
+        <xs:attribute name="exception-reference-id" type="xs:string"/>
+        <xs:attribute name="exception-suppressed" type="xs:string"/>
+        <xs:attribute name="exception-type" type="xs:string"/>
+        <xs:attribute name="host-name" type="xs:string"/>
+        <xs:attribute name="level" type="xs:string"/>
+        <xs:attribute name="logger-class-name" type="xs:string"/>
+        <xs:attribute name="logger-name" type="xs:string"/>
+        <xs:attribute name="mdc" type="xs:string"/>
+        <xs:attribute name="message" type="xs:string"/>
+        <xs:attribute name="ndc" type="xs:string"/>
+        <xs:attribute name="process-id" type="xs:string"/>
+        <xs:attribute name="process-name" type="xs:string"/>
+        <xs:attribute name="record" type="xs:string"/>
+        <xs:attribute name="sequence" type="xs:string"/>
+        <xs:attribute name="source-class-name" type="xs:string"/>
+        <xs:attribute name="source-file-name" type="xs:string"/>
+        <xs:attribute name="source-line-number" type="xs:string"/>
+        <xs:attribute name="source-method-name" type="xs:string"/>
+        <xs:attribute name="source-module-name" type="xs:string"/>
+        <xs:attribute name="source-module-version" type="xs:string"/>
+        <xs:attribute name="stack-trace" type="xs:string"/>
+        <xs:attribute name="thread-id" type="xs:string"/>
+        <xs:attribute name="thread-name" type="xs:string"/>
+        <xs:attribute name="timestamp" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_7_0.xsd b/wildfly/docs/schema/jboss-as-logging_7_0.xsd
new file mode 100644
index 0000000..f2486be
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_7_0.xsd
@@ -0,0 +1,811 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:7.0"
+           xmlns="urn:jboss:domain:logging:7.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="7.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="socket-handler" type="socketHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Determines whether or not deployments should be scanned for configuration files. If set to
+                        true and a configuration file is found the log manager will be configured based on the
+                        configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="socket-handler" type="socketHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                                <xs:enumeration value="console"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="socketHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a socket.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="named-formatter" type="namedFormatterType"/>
+            <xs:element name="protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="value" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="SSL_TCP"/>
+                                <xs:enumeration value="TCP"/>
+                                <xs:enumeration value="UDP"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" default="true"/>
+        <xs:attribute name="block-on-reconnect" type="xs:boolean" default="false"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+        <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+        <xs:attribute name="ssl-context" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+            <xs:element name="json-formatter" type="structuredFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a JSON formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="xml-formatter" type="xmlFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a XML formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="structuredFormatterType">
+        <xs:all>
+            <xs:element name="exception-output-type" type="exceptionOutputType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Indicates how the cause of the logged message, if one is available, will be added to the output.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="record-delimiter" type="valueType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The value to be used to indicate the end of a record. If set to null no delimiter will be used
+                        at the end of the record. The default value is a line feed.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="key-overrides" type="keyOverrideType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Allows the names of the keys or elements for the properties to be overridden.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="meta-data" type="propertiesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Sets the meta data to use in the structured format. Properties will be added to each log message.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="date-format" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The date/time format pattern. The pattern must be a valid
+                    java.time.format.DateTimeFormatter.ofPattern() pattern.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pretty-print" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether or not pretty printing should be used when formatting.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="print-details" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets whether or not details should be printed. Printing the details can be expensive as the values
+                    are retrieved from the caller. The details include the source class name, source file name, source
+                    method name and source line number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="zone-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The zone ID for formatting the date and time. The system default is used if left undefined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="xmlFormatterType">
+        <xs:complexContent>
+            <xs:extension base="structuredFormatterType">
+                <xs:attribute name="namespace-uri" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Allows the namespace to be overridden. If not defined a default will be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="print-namespace" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether or no the namespace should be added to each record element.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="exceptionOutputType">
+        <xs:annotation>
+            <xs:documentation>
+                Set the output type for exceptions. The default is detailed.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="detailed">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be an array of stack trace elements. This will include
+                                suppressed exceptions and the cause of the exception.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="detailed-and-formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyOverrideType">
+        <xs:attribute name="exception" type="xs:string"/>
+        <xs:attribute name="exception-caused-by" type="xs:string"/>
+        <xs:attribute name="exception-circular-reference" type="xs:string"/>
+        <xs:attribute name="exception-frame" type="xs:string"/>
+        <xs:attribute name="exception-frame-class" type="xs:string"/>
+        <xs:attribute name="exception-frame-line" type="xs:string"/>
+        <xs:attribute name="exception-frame-method" type="xs:string"/>
+        <xs:attribute name="exception-frames" type="xs:string"/>
+        <xs:attribute name="exception-message" type="xs:string"/>
+        <xs:attribute name="exception-reference-id" type="xs:string"/>
+        <xs:attribute name="exception-suppressed" type="xs:string"/>
+        <xs:attribute name="exception-type" type="xs:string"/>
+        <xs:attribute name="host-name" type="xs:string"/>
+        <xs:attribute name="level" type="xs:string"/>
+        <xs:attribute name="logger-class-name" type="xs:string"/>
+        <xs:attribute name="logger-name" type="xs:string"/>
+        <xs:attribute name="mdc" type="xs:string"/>
+        <xs:attribute name="message" type="xs:string"/>
+        <xs:attribute name="ndc" type="xs:string"/>
+        <xs:attribute name="process-id" type="xs:string"/>
+        <xs:attribute name="process-name" type="xs:string"/>
+        <xs:attribute name="record" type="xs:string"/>
+        <xs:attribute name="sequence" type="xs:string"/>
+        <xs:attribute name="source-class-name" type="xs:string"/>
+        <xs:attribute name="source-file-name" type="xs:string"/>
+        <xs:attribute name="source-line-number" type="xs:string"/>
+        <xs:attribute name="source-method-name" type="xs:string"/>
+        <xs:attribute name="source-module-name" type="xs:string"/>
+        <xs:attribute name="source-module-version" type="xs:string"/>
+        <xs:attribute name="stack-trace" type="xs:string"/>
+        <xs:attribute name="thread-id" type="xs:string"/>
+        <xs:attribute name="thread-name" type="xs:string"/>
+        <xs:attribute name="timestamp" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-logging_8_0.xsd b/wildfly/docs/schema/jboss-as-logging_8_0.xsd
new file mode 100644
index 0000000..2398d17
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-logging_8_0.xsd
@@ -0,0 +1,830 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:logging:8.0"
+           xmlns="urn:jboss:domain:logging:8.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="8.0">
+
+    <!-- The logging subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the logging subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="socket-handler" type="socketHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="filter" type="filterType"/>
+            <xs:element name="add-logging-api-dependencies" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Determines whether or not the default logging dependencies should be added to deployments during the deployment process.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-deployment-logging-config" type="booleanTrueValueType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Determines whether or not deployments should be scanned for configuration files. If set to
+                        true and a configuration file is found the log manager will be configured based on the
+                        configuration file.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="logging-profiles" type="logging-profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profilesType">
+        <xs:annotation>
+            <xs:documentation>
+                Contains a list of profiles available for use in deployments
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="logging-profile" type="logging-profileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="logging-profileType">
+        <xs:annotation>
+            <xs:documentation>
+                A logging profile that can be used in a deployment for a custom logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="logger" type="loggerType"/>
+            <xs:element name="root-logger" type="rootLoggerType"/>
+            <xs:element name="console-handler" type="consoleHandlerType"/>
+            <xs:element name="file-handler" type="fileHandlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodicFileHandlerType"/>
+            <xs:element name="periodic-size-rotating-file-handler" type="periodicSizeFileHandlerType"/>
+            <xs:element name="size-rotating-file-handler" type="sizeFileHandlerType"/>
+            <xs:element name="socket-handler" type="socketHandlerType"/>
+            <xs:element name="async-handler" type="asyncHandlerType"/>
+            <xs:element name="custom-handler" type="customHandlerType"/>
+            <xs:element name="syslog-handler" type="syslogHandlerType"/>
+            <xs:element name="formatter" type="formatterType"/>
+            <xs:element name="filter" type="filterType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="optional"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="refType">
+        <xs:annotation>
+            <xs:documentation>
+                A named reference to another object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of handlers to apply to the enclosing object.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handler" type="refType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="rootLoggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines the root logger for this log context.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="handlers" type="handlersType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a logger category.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="rootLoggerType">
+                <xs:attribute name="use-parent-handlers" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="consoleHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the console.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="target" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="name" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="System.out"/>
+                                <xs:enumeration value="System.err"/>
+                                <xs:enumeration value="console"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType" minOccurs="1"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after a time period derived from the given
+                suffix string, which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="periodicSizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point or the time period derived from the given suffix string and keeping a fixed number of
+                backups. The suffix should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeFileHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a file, rotating the log after the size of the file grows beyond a
+                certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="file" type="pathType"/>
+            <xs:element name="rotate-size" type="sizeType" minOccurs="0"/>
+            <xs:element name="max-backup-index" type="positiveIntType" minOccurs="0"/>
+            <xs:element name="suffix" type="valueType" minOccurs="0"/>
+            <xs:element name="append" type="booleanValueType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="rotate-on-boot" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to the sub-handlers in an asynchronous thread. Used for handlers which
+                introduce a substantial amount of lag.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="queue-length" type="queueLengthType" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="overflow-action" type="overflowActionType" minOccurs="0"/>
+            <xs:element name="subhandlers" type="handlersType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="customHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a custom handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="formatter" type="handlerFormatterType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="socketHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a handler which writes to a socket.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="encoding" type="valueType" minOccurs="0"/>
+            <xs:element name="filter-spec" type="valueType" minOccurs="0"/>
+            <xs:element name="named-formatter" type="namedFormatterType"/>
+            <xs:element name="protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="value" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="SSL_TCP"/>
+                                <xs:enumeration value="TCP"/>
+                                <xs:enumeration value="UDP"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="autoflush" type="xs:boolean" default="true"/>
+        <xs:attribute name="block-on-reconnect" type="xs:boolean" default="false"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+        <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+        <xs:attribute name="ssl-context" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogHandlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a syslog handler for UNIX/Linux based operating systems.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="level" type="refType" minOccurs="0"/>
+            <xs:element name="server-address" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The address of the syslog server. The default is localhost.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="hostname" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the host the messages are being sent from. For example the name of the host the
+                        application server is running on.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="port" type="positiveIntType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The port the syslog server is listening on. The default is 514.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="app-name" type="valueType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The app name used when formatting the message in RFC5424 format. By default the app name is
+                        &quot;java&quot;
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="formatter" type="syslogFormatterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="facility" type="facilityType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueLengthType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:positiveInteger">
+                    <xs:minExclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="overflowActionType">
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="block"/>
+                    <xs:enumeration value="discard"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="positiveIntType">
+        <xs:attribute name="value" use="required" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanValueType">
+        <xs:attribute name="value" use="required" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanTrueValueType">
+        <xs:attribute name="value" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="valueType">
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="relative-to" use="optional" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="sizeType">
+        <xs:attribute name="value">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <!-- XSD doesn't allow ^ or $ so ^[0-9]+[bkmgtp]?$ is invalid -->
+                    <xs:pattern value="[0-9]+[bkmgtp]"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="facilityType">
+        <xs:annotation>
+            <xs:documentation>
+                Facility as defined by RFC-5424 (http://tools.ietf.org/html/rfc5424)and RFC-3164
+                (http://tools.ietf.org/html/rfc3164).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="kernel"/>
+                    <xs:enumeration value="user-level"/>
+                    <xs:enumeration value="mail-system"/>
+                    <xs:enumeration value="system-daemons"/>
+                    <xs:enumeration value="security"/>
+                    <xs:enumeration value="syslogd"/>
+                    <xs:enumeration value="line-printer"/>
+                    <xs:enumeration value="network-news"/>
+                    <xs:enumeration value="uucp"/>
+                    <xs:enumeration value="clock-daemon"/>
+                    <xs:enumeration value="security2"/>
+                    <xs:enumeration value="ftp-daemon"/>
+                    <xs:enumeration value="ntp"/>
+                    <xs:enumeration value="log-audit"/>
+                    <xs:enumeration value="log-alert"/>
+                    <xs:enumeration value="clock-daemon2"/>
+                    <xs:enumeration value="local-use-0"/>
+                    <xs:enumeration value="local-use-1"/>
+                    <xs:enumeration value="local-use-2"/>
+                    <xs:enumeration value="local-use-3"/>
+                    <xs:enumeration value="local-use-4"/>
+                    <xs:enumeration value="local-use-5"/>
+                    <xs:enumeration value="local-use-6"/>
+                    <xs:enumeration value="local-use-7"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Formatters -->
+
+    <xs:complexType name="formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                A formatter that can be assigned to a handler.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="patternFormatterType" maxOccurs="1"/>
+            <xs:element name="custom-formatter" type="customFormatterType" maxOccurs="1"/>
+            <xs:element name="json-formatter" type="structuredFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a JSON formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="xml-formatter" type="xmlFormatterType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Defines a XML formatter to be used to format log messages.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="pattern-formatter" type="handlerPatternFormatterType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" maxOccurs="1"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="handlerPatternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="patternFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a pattern formatter. See the documentation for
+                org.jboss.logmanager.formatters.FormatStringParser
+                for more information about the format string.
+
+                The color-map attribute allows for a comma delimited list of colors to be used for different levels. The
+                format is level-name:color-name.
+
+                Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                brightgreen,
+                brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The format pattern as defined in org.jboss.logmanager.formatters.FormatStringParser.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="color-map" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The color-map attribute allows for a comma delimited list of colors to be used for different levels.
+                    The
+                    format is level-name:color-name.
+
+                    Valid Levels; severe, fatal, error, warn, warning, info, debug, trace, config, fine, finer, finest
+
+                    Valid Colors; black, green, red, yellow, blue, magenta, cyan, white, brightblack, brightred,
+                    brightgreen,
+                    brightblue, brightyellow, brightmagenta, brightcyan, brightwhite
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="structuredFormatterType">
+        <xs:all>
+            <xs:element name="exception-output-type" type="exceptionOutputType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Indicates how the cause of the logged message, if one is available, will be added to the output.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="record-delimiter" type="valueType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The value to be used to indicate the end of a record. If set to null no delimiter will be used
+                        at the end of the record. The default value is a line feed.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="key-overrides" type="keyOverrideType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Allows the names of the keys or elements for the properties to be overridden.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="meta-data" type="propertiesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Sets the meta data to use in the structured format. Properties will be added to each log message.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="date-format" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The date/time format pattern. The pattern must be a valid
+                    java.time.format.DateTimeFormatter.ofPattern() pattern.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pretty-print" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether or not pretty printing should be used when formatting.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="print-details" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets whether or not details should be printed. Printing the details can be expensive as the values
+                    are retrieved from the caller. The details include the source class name, source file name, source
+                    method name and source line number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="zone-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The zone ID for formatting the date and time. The system default is used if left undefined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="xmlFormatterType">
+        <xs:complexContent>
+            <xs:extension base="structuredFormatterType">
+                <xs:attribute name="namespace-uri" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Allows the namespace to be overridden. If not defined a default will be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="print-namespace" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether or no the namespace should be added to each record element.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a formatter to be used to format log messages.
+
+                Note that most log records are formatted in the printf format. Formatters may require invocation of org.jboss.logmanager.ExtLogRecord#getFormattedMessage() for the message to be properly formatted.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a defined formatter that will be used to format the log message.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="exceptionOutputType">
+        <xs:annotation>
+            <xs:documentation>
+                Set the output type for exceptions. The default is detailed.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="detailed">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be an array of stack trace elements. This will include
+                                suppressed exceptions and the cause of the exception.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="detailed-and-formatted">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The cause, if present, will be a string representation of the stack trace in a
+                                stackTrace property. The property value is a string created by
+                                Throwable.printStackTrace().
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyOverrideType">
+        <xs:attribute name="exception" type="xs:string"/>
+        <xs:attribute name="exception-caused-by" type="xs:string"/>
+        <xs:attribute name="exception-circular-reference" type="xs:string"/>
+        <xs:attribute name="exception-frame" type="xs:string"/>
+        <xs:attribute name="exception-frame-class" type="xs:string"/>
+        <xs:attribute name="exception-frame-line" type="xs:string"/>
+        <xs:attribute name="exception-frame-method" type="xs:string"/>
+        <xs:attribute name="exception-frames" type="xs:string"/>
+        <xs:attribute name="exception-message" type="xs:string"/>
+        <xs:attribute name="exception-reference-id" type="xs:string"/>
+        <xs:attribute name="exception-suppressed" type="xs:string"/>
+        <xs:attribute name="exception-type" type="xs:string"/>
+        <xs:attribute name="host-name" type="xs:string"/>
+        <xs:attribute name="level" type="xs:string"/>
+        <xs:attribute name="logger-class-name" type="xs:string"/>
+        <xs:attribute name="logger-name" type="xs:string"/>
+        <xs:attribute name="mdc" type="xs:string"/>
+        <xs:attribute name="message" type="xs:string"/>
+        <xs:attribute name="ndc" type="xs:string"/>
+        <xs:attribute name="process-id" type="xs:string"/>
+        <xs:attribute name="process-name" type="xs:string"/>
+        <xs:attribute name="record" type="xs:string"/>
+        <xs:attribute name="sequence" type="xs:string"/>
+        <xs:attribute name="source-class-name" type="xs:string"/>
+        <xs:attribute name="source-file-name" type="xs:string"/>
+        <xs:attribute name="source-line-number" type="xs:string"/>
+        <xs:attribute name="source-method-name" type="xs:string"/>
+        <xs:attribute name="source-module-name" type="xs:string"/>
+        <xs:attribute name="source-module-version" type="xs:string"/>
+        <xs:attribute name="stack-trace" type="xs:string"/>
+        <xs:attribute name="thread-id" type="xs:string"/>
+        <xs:attribute name="thread-name" type="xs:string"/>
+        <xs:attribute name="timestamp" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Defines a formatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all minOccurs="1" maxOccurs="1">
+            <xs:element name="syslog-format" type="syslogFormatType" maxOccurs="1"/>
+            <xs:element name="named-formatter" type="namedFormatterType" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="syslogFormatType">
+        <xs:annotation>
+            <xs:documentation>
+                Formats the log message according to the RFC specification.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="syslog-type" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="RFC5424">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-5424 specification
+                                (http://tools.ietf.org/html/rfc5424#section-6)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="RFC3164">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Formats the message according the the RFC-3164 specification
+                                (http://tools.ietf.org/html/rfc3164#section-4.1)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filterType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Defines a filter to be used to filter log messages.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="constructor-properties" type="propertiesType" minOccurs="0"/>
+            <xs:element name="properties" type="propertiesType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-mail_1_0.xsd b/wildfly/docs/schema/jboss-as-mail_1_0.xsd
new file mode 100644
index 0000000..6f0bf74
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mail_1_0.xsd
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:mail:1.0"
+           targetNamespace="urn:jboss:domain:mail:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The mail subsystem root element -->
+    <xs:element name="subsystem" type="mail-subsystemType"/>
+    <xs:complexType name="mail-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the mail subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="mail-session" type="mail-sessionType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="mail-sessionType">
+        <xs:sequence>
+            <xs:element name="smtp-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="pop3-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="imap-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="jndi-name" use="required"/>
+        <xs:attribute name="debug" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       enables debuging of mail session
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="from" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            sets mail.from attribute
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="login-type" mixed="true">
+        <xs:attribute name="name"/>
+        <xs:attribute name="password"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="login" type="login-type" maxOccurs="1" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="outbound-socket-binding-ref" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mail_1_1.xsd b/wildfly/docs/schema/jboss-as-mail_1_1.xsd
new file mode 100644
index 0000000..d47b794
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mail_1_1.xsd
@@ -0,0 +1,139 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:mail:1.1"
+           targetNamespace="urn:jboss:domain:mail:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+    <!-- The mail subsystem root element -->
+    <xs:element name="subsystem" type="mail-subsystemType"/>
+    <xs:complexType name="mail-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the mail subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="mail-session" type="mail-sessionType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="mail-sessionType">
+        <xs:sequence>
+            <xs:element name="smtp-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="pop3-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="imap-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="custom-server" type="custom-server-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="jndi-name" use="required" type="xs:string" />
+        <xs:attribute name="debug" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       enables debuging of mail session
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="from" use="optional" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            sets mail.from attribute
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="login-type" mixed="true">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="password" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="login" type="login-type" maxOccurs="1" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="outbound-socket-binding-ref" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <xs:complexType name="property-type" >
+            <xs:attribute name="name" type="xs:string"/>
+            <xs:attribute name="value" type="xs:string"/>
+        </xs:complexType>
+
+
+    <xs:complexType name="custom-server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="login" type="login-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="property" type="property-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding-ref" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mail_1_2.xsd b/wildfly/docs/schema/jboss-as-mail_1_2.xsd
new file mode 100644
index 0000000..34f217e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mail_1_2.xsd
@@ -0,0 +1,140 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:mail:1.2"
+           targetNamespace="urn:jboss:domain:mail:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+    <!-- The mail subsystem root element -->
+    <xs:element name="subsystem" type="mail-subsystemType"/>
+    <xs:complexType name="mail-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the mail subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="mail-session" type="mail-sessionType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="mail-sessionType">
+        <xs:sequence>
+            <xs:element name="smtp-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="pop3-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="imap-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="custom-server" type="custom-server-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string" />
+        <xs:attribute name="jndi-name" use="required" type="xs:string" />
+        <xs:attribute name="debug" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       enables debuging of mail session
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="from" use="optional" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            sets mail.from attribute
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="login-type" mixed="true">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="password" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="login" type="login-type" maxOccurs="1" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="outbound-socket-binding-ref" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <xs:complexType name="property-type" >
+            <xs:attribute name="name" type="xs:string"/>
+            <xs:attribute name="value" type="xs:string"/>
+        </xs:complexType>
+
+
+    <xs:complexType name="custom-server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="login" type="login-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="property" type="property-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding-ref" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_1_0.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_1_0.xsd
new file mode 100644
index 0000000..5189907
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_1_0.xsd
@@ -0,0 +1,242 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:1.0"
+           xmlns="urn:jboss:domain:modcluster:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="mod-cluster-config" type="mod-cluster-configType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mod-cluster-configType">
+        <xs:sequence>
+            <!-- Simple load-provider or a dynamic one -->
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-providerType"/>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-providerType"/>
+            </xs:choice>
+            <xs:element name="ssl" type="sslType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+
+        <!-- Get the actual advertiseGroupAddress / advertisePort from advertiseSocket -->
+        <xs:attribute name="advertise-socket" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-list" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-url" type="xs:string" use="optional" default="/">
+            <xs:annotation>
+                <xs:documentation>Value which will be prepended to the URL of MCMP commands.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>The balancer name. All nodes of a cluster have to use the same value.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="advertise-security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="sticky-session-force" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="sticky-session-remove" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="sticky-session" type="xs:boolean" use="optional" default="true"/>
+
+        <!-- mod_cluster parameters that describe node behaviour -->
+        <xs:attribute name="excluded-contexts" type="xs:string" use="optional"/>
+        <xs:attribute name="auto-enable-contexts" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="stop-context-timeout" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>The amount of time in seconds for which to wait for clean shutdown of a context.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:int" use="optional" default="20">
+            <xs:annotation>
+                <xs:documentation>Number of seconds to wait for a response from an httpd proxy to MCMP commands before timing out, and flagging the proxy as in error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the back-end response before returning error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:int" use="optional" default="1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of failover attempts by reverse proxy when sending the request to the backend server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>Enables/disables packet flushing.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to wait before flushing packets in milliseconds.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>Time (in seconds) in which to wait for a pong answer to a ping.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Soft maximum idle connection count.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Load balancing group</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request. When no workers of a
+                    balancer are usable, mod_cluster will retry after a while (workerTimeout/100). That is timeout in the
+                    balancer mod_proxy documentation. A value of -1 indicates that the HTTPd will not wait
+                    for a worker to be available and will return an error if none is available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- general SSL definitions -->
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration information for one SSL configuration.
+                sslCertificateEncodingAlgorithm (default value only)
+                sslKeyStoreType/sslTrustStoreType (JKS: default value only)
+                sslKeyStoreProvider/sslTrustStoreProvider (only default value).
+                sslTrustAlgorithm (only default value).
+                sslTrustMaxCertLength (5: default value only)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="key-alias" type="xs:string" use="optional" default="jboss">
+            <xs:annotation>
+                <xs:documentation>sslKeyAlias The alias of the key holding the client certificates in the key store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStorePassword/sslTrustStorePassword Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string" use="optional" default="${user.home}/.keystore">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStore: That is the keystore name here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string" use="optional" default="ALL">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCiphers: comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be
+                    the JVM default in of JSSE as contains weak ciphers.
+                    that is SSLCipherSuite when using OpenSSL (APR).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" default="TLS" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    sslProtocol: Overrides the default SSL socket protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-certificate-file" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslTrustStore location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCrlFile A file or URL to get the revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- <simple-load-provider load="1"/> -->
+    <xs:complexType name="simple-load-providerType">
+        <xs:attribute name="factor" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <!-- Something like.
+         <dynamic-load-provider history="10" decay="2">
+             <load-metric type="cpu" weight="2" capacity="1"/>
+             <load-metric type="sessions" weight="1" capacity="512"/>
+              ...
+         </dynamic-load-provider>
+      -->
+    <xs:complexType name="dynamic-load-providerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metricType"/>
+            <xs:element name="custom-load-metric" type="custom-load-metricType"/>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:int" use="optional" default="9"/>
+        <xs:attribute name="decay" type="xs:int" use="optional" default="2"/>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metricType" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="propertyType"/>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="capacity" type="xs:double" use="optional" default="1.0"/>
+    </xs:complexType>
+
+    <xs:complexType name="load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="type" type="loadMetricEnum" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="class" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="loadMetricEnum">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu"/>
+            <xs:enumeration value="mem"/>
+            <xs:enumeration value="heap"/>
+            <xs:enumeration value="sessions"/>
+            <xs:enumeration value="requests"/>
+            <xs:enumeration value="send-traffic"/>
+            <xs:enumeration value="receive-traffic"/>
+            <xs:enumeration value="busyness"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_1_1.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_1_1.xsd
new file mode 100644
index 0000000..3783f9f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_1_1.xsd
@@ -0,0 +1,247 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:1.1"
+           xmlns="urn:jboss:domain:modcluster:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="mod-cluster-config" type="mod-cluster-configType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mod-cluster-configType">
+        <xs:sequence>
+            <!-- Simple load-provider or a dynamic one -->
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-providerType"/>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-providerType"/>
+            </xs:choice>
+            <xs:element name="ssl" type="sslType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+
+        <!-- Get the actual advertiseGroupAddress / advertisePort from advertiseSocket -->
+        <xs:attribute name="advertise-socket" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-list" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-url" type="xs:string" use="optional" default="/">
+            <xs:annotation>
+                <xs:documentation>Value which will be prepended to the URL of MCMP commands.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>The balancer name. All nodes of a cluster have to use the same value.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="advertise-security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="sticky-session-force" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="sticky-session-remove" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="sticky-session" type="xs:boolean" use="optional" default="true"/>
+
+        <!-- mod_cluster parameters that describe node behaviour -->
+        <xs:attribute name="excluded-contexts" type="xs:string" use="optional"/>
+        <xs:attribute name="auto-enable-contexts" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="stop-context-timeout" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>The amount of time in seconds for which to wait for clean shutdown of a context.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:int" use="optional" default="20">
+            <xs:annotation>
+                <xs:documentation>Number of seconds to wait for a response from an httpd proxy to MCMP commands before timing out, and flagging the proxy as in error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the back-end response before returning error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:int" use="optional" default="1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of failover attempts by reverse proxy when sending the request to the backend server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>Enables/disables packet flushing.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to wait before flushing packets in milliseconds.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>Time (in seconds) in which to wait for a pong answer to a ping.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Soft maximum idle connection count.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Load balancing group</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connector" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The web connector on which mod_cluster will operate.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request. When no workers of a
+                    balancer are usable, mod_cluster will retry after a while (workerTimeout/100). That is timeout in the
+                    balancer mod_proxy documentation. A value of -1 indicates that the HTTPd will not wait
+                    for a worker to be available and will return an error if none is available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- general SSL definitions -->
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration information for one SSL configuration.
+                sslCertificateEncodingAlgorithm (default value only)
+                sslKeyStoreType/sslTrustStoreType (JKS: default value only)
+                sslKeyStoreProvider/sslTrustStoreProvider (only default value).
+                sslTrustAlgorithm (only default value).
+                sslTrustMaxCertLength (5: default value only)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="key-alias" type="xs:string" use="optional" default="jboss">
+            <xs:annotation>
+                <xs:documentation>sslKeyAlias The alias of the key holding the client certificates in the key store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStorePassword/sslTrustStorePassword Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string" use="optional" default="${user.home}/.keystore">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStore: That is the keystore name here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string" use="optional" default="ALL">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCiphers: comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be
+                    the JVM default in of JSSE as contains weak ciphers.
+                    that is SSLCipherSuite when using OpenSSL (APR).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" default="TLS" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    sslProtocol: Overrides the default SSL socket protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-certificate-file" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslTrustStore location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCrlFile A file or URL to get the revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- <simple-load-provider load="1"/> -->
+    <xs:complexType name="simple-load-providerType">
+        <xs:attribute name="factor" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <!-- Something like.
+         <dynamic-load-provider history="10" decay="2">
+             <load-metric type="cpu" weight="2" capacity="1"/>
+             <load-metric type="sessions" weight="1" capacity="512"/>
+              ...
+         </dynamic-load-provider>
+      -->
+    <xs:complexType name="dynamic-load-providerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metricType"/>
+            <xs:element name="custom-load-metric" type="custom-load-metricType"/>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:int" use="optional" default="9"/>
+        <xs:attribute name="decay" type="xs:int" use="optional" default="2"/>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metricType" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="propertyType"/>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="capacity" type="xs:double" use="optional" default="1.0"/>
+    </xs:complexType>
+
+    <xs:complexType name="load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="type" type="loadMetricEnum" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="class" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="loadMetricEnum">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu"/>
+            <xs:enumeration value="mem"/>
+            <xs:enumeration value="heap"/>
+            <xs:enumeration value="sessions"/>
+            <xs:enumeration value="requests"/>
+            <xs:enumeration value="send-traffic"/>
+            <xs:enumeration value="receive-traffic"/>
+            <xs:enumeration value="busyness"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_1_2.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_1_2.xsd
new file mode 100644
index 0000000..e66925a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_1_2.xsd
@@ -0,0 +1,260 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:1.2"
+           xmlns="urn:jboss:domain:modcluster:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="mod-cluster-config" type="mod-cluster-configType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mod-cluster-configType">
+        <xs:sequence>
+            <!-- Simple load-provider or a dynamic one -->
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-providerType"/>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-providerType"/>
+            </xs:choice>
+            <xs:element name="ssl" type="sslType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+
+        <!-- Get the actual advertiseGroupAddress / advertisePort from advertiseSocket -->
+        <xs:attribute name="advertise-socket" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-list" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-url" type="xs:string" use="optional" default="/">
+            <xs:annotation>
+                <xs:documentation>Value which will be prepended to the URL of MCMP commands.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>The balancer name. All nodes of a cluster have to use the same value.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="advertise-security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="sticky-session-force" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="sticky-session-remove" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="sticky-session" type="xs:boolean" use="optional" default="true"/>
+
+        <!-- mod_cluster parameters that describe node behaviour -->
+        <xs:attribute name="excluded-contexts" type="xs:string" use="optional"/>
+        <xs:attribute name="auto-enable-contexts" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="stop-context-timeout" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>The amount of time in seconds for which to wait for clean shutdown of a context.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:int" use="optional" default="20">
+            <xs:annotation>
+                <xs:documentation>Number of seconds to wait for a response from an httpd proxy to MCMP commands before timing out, and flagging the proxy as in error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the back-end response before returning error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:int" use="optional" default="1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of failover attempts by reverse proxy when sending the request to the backend server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>Enables/disables packet flushing.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to wait before flushing packets in milliseconds.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>Time (in seconds) in which to wait for a pong answer to a ping.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Soft maximum idle connection count.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Load balancing group</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connector" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of Undertow listener that mod_cluster reverse proxy will connect to.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-draining-strategy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Session draining strategy used during undeployment of a web application.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request. When no workers of a
+                    balancer are usable, mod_cluster will retry after a while (workerTimeout/100). That is timeout in the
+                    balancer mod_proxy documentation. A value of -1 indicates that the HTTPd will not wait
+                    for a worker to be available and will return an error if none is available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- general SSL definitions -->
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration information for one SSL configuration.
+                sslCertificateEncodingAlgorithm (default value only)
+                sslKeyStoreType/sslTrustStoreType (JKS: default value only)
+                sslKeyStoreProvider/sslTrustStoreProvider (only default value).
+                sslTrustAlgorithm (only default value).
+                sslTrustMaxCertLength (5: default value only)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="key-alias" type="xs:string" use="optional" default="jboss">
+            <xs:annotation>
+                <xs:documentation>sslKeyAlias The alias of the key holding the client certificates in the key store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStorePassword/sslTrustStorePassword Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string" use="optional" default="${user.home}/.keystore">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStore: That is the keystore name here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string" use="optional" default="ALL">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCiphers: comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be
+                    the JVM default in of JSSE as contains weak ciphers.
+                    that is SSLCipherSuite when using OpenSSL (APR).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" default="TLS" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    sslProtocol: Overrides the default SSL socket protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-certificate-file" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslTrustStore location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCrlFile A file or URL to get the revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- <simple-load-provider load="1"/> -->
+    <xs:complexType name="simple-load-providerType">
+        <xs:attribute name="factor" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <!-- Something like.
+         <dynamic-load-provider history="10" decay="2">
+             <load-metric type="cpu" weight="2" capacity="1"/>
+             <load-metric type="sessions" weight="1" capacity="512"/>
+             <load-metric type="busyness">
+                 <property name="name1" value="value1"/>
+                 <property name="name2" value="value2"/>
+             </load-metric>
+             ...
+         </dynamic-load-provider>
+      -->
+    <xs:complexType name="dynamic-load-providerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metricType"/>
+            <xs:element name="custom-load-metric" type="custom-load-metricType"/>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:int" use="optional" default="9"/>
+        <xs:attribute name="decay" type="xs:int" use="optional" default="2"/>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metricType" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="propertyType"/>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="capacity" type="xs:double" use="optional" default="1.0"/>
+    </xs:complexType>
+
+    <xs:complexType name="load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="type" type="loadMetricEnum" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="class" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="loadMetricEnum">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu"/>
+            <xs:enumeration value="mem">
+                <xs:annotation>
+                    <xs:documentation>Deprecated.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="heap"/>
+            <xs:enumeration value="sessions"/>
+            <xs:enumeration value="requests"/>
+            <xs:enumeration value="send-traffic"/>
+            <xs:enumeration value="receive-traffic"/>
+            <xs:enumeration value="busyness"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_2_0.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_2_0.xsd
new file mode 100644
index 0000000..c2e63e8
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_2_0.xsd
@@ -0,0 +1,275 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:2.0"
+           xmlns="urn:jboss:domain:modcluster:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="mod-cluster-config" type="mod-cluster-configType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mod-cluster-configType">
+        <xs:sequence>
+            <!-- Simple load-provider or a dynamic one -->
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-providerType"/>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-providerType"/>
+            </xs:choice>
+            <xs:element name="ssl" type="sslType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+
+        <!-- Get the actual advertiseGroupAddress / advertisePort from advertiseSocket -->
+        <xs:attribute name="advertise-socket" type="xs:string" use="optional"/>
+        <xs:attribute name="proxies" use="optional">
+            <xs:annotation>
+                <xs:documentation>List of proxies for mod_cluster to register with defined by outbound-socket-binding in socket-binding-group.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="proxy-url" type="xs:string" use="optional" default="/">
+            <xs:annotation>
+                <xs:documentation>Value which will be prepended to the URL of MCMP commands.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>The balancer name. All nodes of a cluster have to use the same value.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="advertise-security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="sticky-session-force" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="sticky-session-remove" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="sticky-session" type="xs:boolean" use="optional" default="true"/>
+
+        <!-- mod_cluster parameters that describe node behaviour -->
+        <xs:attribute name="excluded-contexts" type="xs:string" use="optional"/>
+        <xs:attribute name="auto-enable-contexts" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="stop-context-timeout" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>The amount of time in seconds for which to wait for clean shutdown of a context.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:int" use="optional" default="20">
+            <xs:annotation>
+                <xs:documentation>Number of seconds to wait for a response from an httpd proxy to MCMP commands before timing out, and flagging the proxy as in error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the back-end response before returning error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:int" use="optional" default="1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of failover attempts by reverse proxy when sending the request to the backend server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>Enables/disables packet flushing.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to wait before flushing packets in milliseconds.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>Time (in seconds) in which to wait for a pong answer to a ping.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Soft maximum idle connection count.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Load balancing group</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connector" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of Undertow listener that mod_cluster reverse proxy will connect to.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-draining-strategy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Session draining strategy used during undeployment of a web application.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request. When no workers of a
+                    balancer are usable, mod_cluster will retry after a while (workerTimeout/100). That is timeout in the
+                    balancer mod_proxy documentation. A value of -1 indicates that the HTTPd will not wait
+                    for a worker to be available and will return an error if none is available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="status-interval" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds a STATUS message is sent from the application server to reverse proxy.
+                    Default: 10 seconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- general SSL definitions -->
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration information for one SSL configuration.
+                sslCertificateEncodingAlgorithm (default value only)
+                sslKeyStoreType/sslTrustStoreType (JKS: default value only)
+                sslKeyStoreProvider/sslTrustStoreProvider (only default value).
+                sslTrustAlgorithm (only default value).
+                sslTrustMaxCertLength (5: default value only)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="key-alias" type="xs:string" use="optional" default="jboss">
+            <xs:annotation>
+                <xs:documentation>sslKeyAlias The alias of the key holding the client certificates in the key store.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStorePassword/sslTrustStorePassword Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string" use="optional" default="${user.home}/.keystore">
+            <xs:annotation>
+                <xs:documentation>
+                    sslKeyStore: That is the keystore name here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string" use="optional" default="ALL">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCiphers: comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be
+                    the JVM default in of JSSE as contains weak ciphers.
+                    that is SSLCipherSuite when using OpenSSL (APR).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" default="TLS" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    sslProtocol: Overrides the default SSL socket protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-certificate-file" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslTrustStore location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    sslCrlFile A file or URL to get the revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- <simple-load-provider load="1"/> -->
+    <xs:complexType name="simple-load-providerType">
+        <xs:attribute name="factor" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <!-- Something like.
+         <dynamic-load-provider history="10" decay="2">
+             <load-metric type="cpu" weight="2" capacity="1"/>
+             <load-metric type="sessions" weight="1" capacity="512"/>
+             <load-metric type="busyness">
+                 <property name="name1" value="value1"/>
+                 <property name="name2" value="value2"/>
+             </load-metric>
+             ...
+         </dynamic-load-provider>
+      -->
+    <xs:complexType name="dynamic-load-providerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metricType"/>
+            <xs:element name="custom-load-metric" type="custom-load-metricType"/>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:int" use="optional" default="9"/>
+        <xs:attribute name="decay" type="xs:int" use="optional" default="2"/>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metricType" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="propertyType"/>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="capacity" type="xs:double" use="optional" default="1.0"/>
+    </xs:complexType>
+
+    <xs:complexType name="load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="type" type="loadMetricEnum" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="class" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="loadMetricEnum">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu"/>
+            <xs:enumeration value="mem">
+                <xs:annotation>
+                    <xs:documentation>Deprecated.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="heap"/>
+            <xs:enumeration value="sessions"/>
+            <xs:enumeration value="requests"/>
+            <xs:enumeration value="send-traffic"/>
+            <xs:enumeration value="receive-traffic"/>
+            <xs:enumeration value="busyness"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_3_0.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_3_0.xsd
new file mode 100644
index 0000000..b10fcdd
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_3_0.xsd
@@ -0,0 +1,273 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:3.0"
+           xmlns="urn:jboss:domain:modcluster:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="mod-cluster-config" type="mod-cluster-configType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mod-cluster-configType">
+        <xs:sequence>
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-providerType"/>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-providerType"/>
+            </xs:choice>
+            <xs:element name="ssl" type="sslType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use ssl-context attribute instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="advertise-socket" type="xs:string" use="optional"/>
+        <xs:attribute name="proxies" use="optional">
+            <xs:annotation>
+                <xs:documentation>List of proxies for mod_cluster to register with defined by outbound-socket-binding in socket-binding-group.</xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="proxy-url" type="xs:string" use="optional" default="/">
+            <xs:annotation>
+                <xs:documentation>Value which will be prepended to the URL of MCMP commands.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>The balancer name. All nodes of a cluster have to use the same value.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="advertise-security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="sticky-session-force" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="sticky-session-remove" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="sticky-session" type="xs:boolean" use="optional" default="true"/>
+
+        <!-- mod_cluster parameters that describe node behaviour -->
+        <xs:attribute name="excluded-contexts" type="xs:string" use="optional"/>
+        <xs:attribute name="auto-enable-contexts" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="stop-context-timeout" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>The amount of time in seconds for which to wait for clean shutdown of a context.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:int" use="optional" default="20">
+            <xs:annotation>
+                <xs:documentation>Number of seconds to wait for a response from an httpd proxy to MCMP commands before timing out, and flagging the proxy as in error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to be used by mod_cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the back-end response before returning error.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:int" use="optional" default="1">
+            <xs:annotation>
+                <xs:documentation>Maximum number of failover attempts by reverse proxy when sending the request to the backend server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>Enables/disables packet flushing.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to wait before flushing packets in milliseconds.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>Time (in seconds) in which to wait for a pong answer to a ping.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Soft maximum idle connection count.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:int" use="optional" default="-1">
+            <xs:annotation>
+                <xs:documentation>Time to live (in seconds) for idle connections above smax.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Load balancing group</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connector" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of Undertow listener that mod_cluster reverse proxy will connect to.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-draining-strategy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Session draining strategy used during undeployment of a web application.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request. When no workers of a
+                    balancer are usable, mod_cluster will retry after a while (workerTimeout/100). That is timeout in the
+                    balancer mod_proxy documentation. A value of -1 indicates that the HTTPd will not wait
+                    for a worker to be available and will return an error if none is available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="status-interval" type="xs:int" use="optional" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds a STATUS message is sent from the application server to reverse proxy.
+                    Default: 10 seconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Deprecated. Configuration information for one SSL configuration.
+                sslCertificateEncodingAlgorithm (default value only)
+                sslKeyStoreType/sslTrustStoreType (JKS: default value only)
+                sslKeyStoreProvider/sslTrustStoreProvider (only default value).
+                sslTrustAlgorithm (only default value).
+                sslTrustMaxCertLength (5: default value only)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="key-alias" type="xs:string" use="optional" default="jboss">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslKeyAlias The alias of the key holding the client certificates in the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslKeyStorePassword/sslTrustStorePassword Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string" use="optional" default="${user.home}/.keystore">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslKeyStore: That is the keystore name here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string" use="optional" default="ALL">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslCiphers: comma separated list of encryption ciphers the configuration is allowed to use, that MUST NOT be
+                    the JVM default in of JSSE as contains weak ciphers.
+                    that is SSLCipherSuite when using OpenSSL (APR).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" default="TLS" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslProtocol: Overrides the default SSL socket protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-certificate-file" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslTrustStore location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. sslCrlFile A file or URL to get the revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simple-load-providerType">
+        <xs:attribute name="factor" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="dynamic-load-providerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metricType"/>
+            <xs:element name="custom-load-metric" type="custom-load-metricType"/>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:int" use="optional" default="9"/>
+        <xs:attribute name="decay" type="xs:int" use="optional" default="2"/>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metricType" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="propertyType"/>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="capacity" type="xs:double" use="optional" default="1.0"/>
+    </xs:complexType>
+
+    <xs:complexType name="load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="type" type="loadMetricEnum" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metricType">
+        <xs:complexContent>
+            <xs:extension base="common-load-metricType">
+                <xs:attribute name="class" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="loadMetricEnum">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu"/>
+            <xs:enumeration value="mem">
+                <xs:annotation>
+                    <xs:documentation>Deprecated.</xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="heap"/>
+            <xs:enumeration value="sessions"/>
+            <xs:enumeration value="requests"/>
+            <xs:enumeration value="send-traffic"/>
+            <xs:enumeration value="receive-traffic"/>
+            <xs:enumeration value="busyness"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_4_0.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_4_0.xsd
new file mode 100644
index 0000000..f0f428b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_4_0.xsd
@@ -0,0 +1,490 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" targetNamespace="urn:jboss:domain:modcluster:4.0"
+           xmlns="urn:jboss:domain:modcluster:4.0" elementFormDefault="qualified" version="4.0">
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="proxy" type="proxy" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Proxy resource coupled with single Undertow listener (and server) specifying load balancer discovery,
+                        its configuration and load balance factor provider. Multiple proxy configuration can be specified.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="proxy">
+        <xs:sequence>
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-provider">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Simple load provider returns constant pre-configured load balancing factor.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-provider">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Dynamic load provider computes the load balance factor of a node from a defined set of load metrics.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="ssl" type="ssl" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Use 'ssl-context' attribute instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this proxy configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether to enable multicast-based advertise mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise-security-key" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    If specified, reverse proxy advertisements checksums will be verified using this value as a salt.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise-socket" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of socket binding to use for the advertise socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-enable-contexts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    If false, the contexts are registered with the reverse proxy as disabled; they need to be enabled manually
+                    by 'enable-context' operation or via mod_cluster_manager console (if available).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the balancer on the reverse proxy to register with.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="excluded-contexts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    List of contexts to exclude from registration with the reverse proxies.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether to enable packet flushing on the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Time to wait before flushing packets on the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of Undertow listener that will be registered with the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the load balancing group this node belongs to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of failover attempts by reverse proxy when sending the request to the backend server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the
+                    back-end response before returning an error.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds for which to wait for a pong answer to a ping.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="proxies">
+            <xs:annotation>
+                <xs:documentation>
+                    List of reverse proxies for mod_cluster to register with defined by 'outbound-socket-binding' in
+                    'socket-binding-group'.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="proxy-list" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated in favor of proxies (list of references to outbound-socket-binding). List of reverse proxies to
+                    register with. Format (hostname:port) separated with commas.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="proxy-url" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Base URL for MCMP requests.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-draining-strategy" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Session draining strategy used during undeployment of a web application.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Soft maximum idle connection count for reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to wait for the reverse proxy to answer a MCMP message.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to be used by mod_cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="status-interval" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds a STATUS message is sent from the application server to the proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether subsequent requests for a given session should be routed to the same node, if possible.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session-force" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether the reverse proxy should run an error in the event that the balancer is unable to route a
+                    request to the node to which it is stuck. Ignored if sticky sessions are disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session-remove" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether the reverse proxy should remove session stickiness in the event that the balancer is
+                    unable to route a request to the node to which it is stuck. Ignored if sticky sessions are disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-context-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum time to wait for context to process pending requests.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Time to live (in seconds) for idle connections above smax.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simple-load-provider">
+        <xs:attribute name="factor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Constant pre-configured load balancing factor.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dynamic-load-provider">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metric">
+                <xs:annotation>
+                    <xs:documentation>
+                        Built-in load metric contributing a value to the overall load factor of a node. The load factors from
+                        each metric are aggregated according to their weights.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-load-metric" type="custom-load-metric">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom load metric loaded from a specified Java class contributing a value to the overall load factor of
+                        a node. The load factors from each metric are aggregated according to their weights.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of historic (previous) load values to consider in the load balance factor computation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="decay" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The factor by which a historic load values should degrade in significance.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metric" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property">
+                <xs:annotation>
+                    <xs:documentation>
+                        Properties to apply on a loaded metric instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number indicating the significance of a metric with respect to the other metrics. For example, a metric of
+                    weight 2 will have twice the impact on the overall load factor than a metric of weight 1.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="capacity" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum capacity of the metric used to normalize the load values from a metric which require explicit
+                    capacity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="load-metric">
+        <xs:complexContent>
+            <xs:extension base="common-load-metric">
+                <xs:attribute name="type" type="load-metric-enumeration" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Type of a built-in load metric from the enumerated values.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metric">
+        <xs:complexContent>
+            <xs:extension base="common-load-metric">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Class name to use to construct a load metric from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Module name from which to load the load metric class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="load-metric-enumeration">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns CPU load as percentage.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="mem">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Will be ignored at runtime if specified.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="heap">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the heap memory usage as a percentage of max heap size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="sessions">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns number of active sessions consulting the session manager. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="requests">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the number of requests per second. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="send-traffic">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the outgoing request traffic in KB per second. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="receive-traffic">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the incoming request POST traffic in KB per second (the application needs to read POST data).
+                        Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="busyness">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the number of currently busy listener threads servicing requests. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="property">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="ssl">
+        <xs:annotation>
+            <xs:documentation>
+                Deprecated. The SSL configuration to client MCMP logic.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="ca-certificate-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Certificate authority revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Key file for the certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-alias" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the key holding the client certificates in the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Comma separated list of encryption ciphers the configuration is allowed to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSL protocols that are enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_5_0.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_5_0.xsd
new file mode 100644
index 0000000..8e9d142
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_5_0.xsd
@@ -0,0 +1,501 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:5.0"
+           xmlns="urn:jboss:domain:modcluster:5.0"
+           elementFormDefault="qualified"
+           version="5.0">
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="proxy" type="proxy" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Proxy resource coupled with single Undertow listener (and server) specifying load balancer discovery,
+                        its configuration and load balance factor provider. Multiple proxy configuration can be specified.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="proxy">
+        <xs:sequence>
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-provider">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Simple load provider returns constant pre-configured load balancing factor.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-provider">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Dynamic load provider computes the load balance factor of a node from a defined set of load metrics.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="ssl" type="ssl" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Use 'ssl-context' attribute instead.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this proxy configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether to enable multicast-based advertise mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise-security-key" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    If specified, reverse proxy advertisements checksums will be verified using this value as a salt.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise-socket" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of socket binding to use for the advertise socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-enable-contexts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    If false, the contexts are registered with the reverse proxy as disabled; they need to be enabled manually
+                    by 'enable-context' operation or via mod_cluster_manager console (if available).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the balancer on the reverse proxy to register with.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="excluded-contexts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    List of contexts to exclude from registration with the reverse proxies.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether to enable packet flushing on the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Time to wait before flushing packets on the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of Undertow listener that will be registered with the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the load balancing group this node belongs to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of failover attempts by reverse proxy when sending the request to the backend server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the
+                    back-end response before returning an error.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds for which to wait for a pong answer to a ping.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="proxies">
+            <xs:annotation>
+                <xs:documentation>
+                    List of reverse proxies for mod_cluster to register with defined by 'outbound-socket-binding' in
+                    'socket-binding-group'.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="proxy-list" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated in favor of proxies (list of references to outbound-socket-binding). List of reverse proxies to
+                    register with. Format (hostname:port) separated with commas.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="proxy-url" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Base URL for MCMP requests.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-draining-strategy" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Session draining strategy used during undeployment of a web application.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Soft maximum idle connection count for reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to wait for the reverse proxy to answer a MCMP message.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to be used by mod_cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="status-interval" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds a STATUS message is sent from the application server to the proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether subsequent requests for a given session should be routed to the same node, if possible.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session-force" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether the reverse proxy should run an error in the event that the balancer is unable to route a
+                    request to the node to which it is stuck. Ignored if sticky sessions are disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session-remove" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether the reverse proxy should remove session stickiness in the event that the balancer is
+                    unable to route a request to the node to which it is stuck. Ignored if sticky sessions are disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-context-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum time to wait for context to process pending requests.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Time to live (in seconds) for idle connections above smax.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simple-load-provider">
+        <xs:attribute name="factor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Constant pre-configured load balancing factor.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dynamic-load-provider">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metric">
+                <xs:annotation>
+                    <xs:documentation>
+                        Built-in load metric contributing a value to the overall load factor of a node. The load factors from
+                        each metric are aggregated according to their weights.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-load-metric" type="custom-load-metric">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom load metric loaded from a specified Java class contributing a value to the overall load factor of
+                        a node. The load factors from each metric are aggregated according to their weights.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of historic (previous) load values to consider in the load balance factor computation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="decay" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The factor by which a historic load values should degrade in significance.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-load" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Initial load within the range [0..100] with which to prepopulate historical values. Used to gradually drive
+                    load to the node. Value of 0 prepopulates with full load and value of -1 disables this behavior.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metric" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property">
+                <xs:annotation>
+                    <xs:documentation>
+                        Properties to apply on a loaded metric instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number indicating the significance of a metric with respect to the other metrics. For example, a metric of
+                    weight 2 will have twice the impact on the overall load factor than a metric of weight 1.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="capacity" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum capacity of the metric used to normalize the load values from a metric which require explicit
+                    capacity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="load-metric">
+        <xs:complexContent>
+            <xs:extension base="common-load-metric">
+                <xs:attribute name="type" type="load-metric-enumeration" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Type of a built-in load metric from the enumerated values.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metric">
+        <xs:complexContent>
+            <xs:extension base="common-load-metric">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Class name to use to construct a load metric from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Module name from which to load the load metric class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="load-metric-enumeration">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns CPU load as percentage.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="mem">
+                <xs:annotation>
+                    <xs:documentation>
+                        Deprecated. Will be ignored at runtime if specified.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="heap">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the heap memory usage as a percentage of max heap size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="sessions">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns number of active sessions consulting the session manager. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="requests">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the number of requests per second. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="send-traffic">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the outgoing request traffic in KB per second. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="receive-traffic">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the incoming request POST traffic in KB per second (the application needs to read POST data).
+                        Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="busyness">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the number of currently busy listener threads servicing requests. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="property">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="ssl">
+        <xs:annotation>
+            <xs:documentation>
+                Deprecated. The SSL configuration to client MCMP logic.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="ca-certificate-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Location of the file containing the trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ca-revocation-url" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Certificate authority revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-key-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Key file for the certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-alias" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the key holding the client certificates in the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Password granting access to the key store and trust store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Comma separated list of encryption ciphers the configuration is allowed to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSL protocols that are enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-mod-cluster_6_0.xsd b/wildfly/docs/schema/jboss-as-mod-cluster_6_0.xsd
new file mode 100644
index 0000000..6fe235b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-mod-cluster_6_0.xsd
@@ -0,0 +1,422 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:modcluster:6.0"
+           xmlns="urn:jboss:domain:modcluster:6.0"
+           elementFormDefault="qualified"
+           version="6.0">
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="proxy" type="proxy" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Proxy resource coupled with single Undertow listener (and server) specifying load balancer discovery,
+                        its configuration and load balance factor provider. Multiple proxy configuration can be specified.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="proxy">
+        <xs:sequence>
+            <xs:choice minOccurs="0">
+                <xs:element name="simple-load-provider" type="simple-load-provider">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Simple load provider returns constant pre-configured load balancing factor.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="dynamic-load-provider" type="dynamic-load-provider">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Dynamic load provider computes the load balance factor of a node from a defined set of load metrics.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Uniquely identifies this proxy configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether to enable multicast-based advertise mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise-security-key" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    If specified, reverse proxy advertisements checksums will be verified using this value as a salt.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="advertise-socket" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of socket binding to use for the advertise socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auto-enable-contexts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    If false, the contexts are registered with the reverse proxy as disabled; they need to be enabled manually
+                    by 'enable-context' operation or via mod_cluster_manager console (if available).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="balancer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the balancer on the reverse proxy to register with.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="excluded-contexts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    List of contexts to exclude from registration with the reverse proxies.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-packets" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether to enable packet flushing on the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flush-wait" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Time to wait before flushing packets on the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="listener" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of Undertow listener that will be registered with the reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="load-balancing-group" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the load balancing group this node belongs to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-attempts" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum number of failover attempts by reverse proxy when sending the request to the backend server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="node-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout (in seconds) for proxy connections to a node. That is the time mod_cluster will wait for the
+                    back-end response before returning an error.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ping" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds for which to wait for a pong answer to a ping.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="proxies">
+            <xs:annotation>
+                <xs:documentation>
+                    List of reverse proxies for mod_cluster to register with defined by 'outbound-socket-binding' in
+                    'socket-binding-group'.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:list itemType="xs:string"/>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="proxy-url" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Base URL for MCMP requests.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-draining-strategy" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Session draining strategy used during undeployment of a web application.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="smax" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Soft maximum idle connection count for reverse proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="socket-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Timeout to wait for the reverse proxy to answer a MCMP message.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to be used by mod_cluster.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="status-interval" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds a STATUS message is sent from the application server to the proxy.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether subsequent requests for a given session should be routed to the same node, if possible.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session-force" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether the reverse proxy should run an error in the event that the balancer is unable to route a
+                    request to the node to which it is stuck. Ignored if sticky sessions are disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sticky-session-remove" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates whether the reverse proxy should remove session stickiness in the event that the balancer is
+                    unable to route a request to the node to which it is stuck. Ignored if sticky sessions are disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stop-context-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum time to wait for context to process pending requests.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ttl" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Time to live (in seconds) for idle connections above smax.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="worker-timeout" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of seconds to wait for a worker to become available to handle a request.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simple-load-provider">
+        <xs:attribute name="factor" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Constant pre-configured load balancing factor.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dynamic-load-provider">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="load-metric" type="load-metric">
+                <xs:annotation>
+                    <xs:documentation>
+                        Built-in load metric contributing a value to the overall load factor of a node. The load factors from
+                        each metric are aggregated according to their weights.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-load-metric" type="custom-load-metric">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom load metric loaded from a specified Java class contributing a value to the overall load factor of
+                        a node. The load factors from each metric are aggregated according to their weights.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="history" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of historic (previous) load values to consider in the load balance factor computation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="decay" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The factor by which a historic load values should degrade in significance.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-load" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Initial load within the range [0..100] with which to prepopulate historical values. Used to gradually drive
+                    load to the node. Value of 0 prepopulates with full load and value of -1 disables this behavior.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="common-load-metric" abstract="true">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property">
+                <xs:annotation>
+                    <xs:documentation>
+                        Properties to apply on a loaded metric instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="weight" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Number indicating the significance of a metric with respect to the other metrics. For example, a metric of
+                    weight 2 will have twice the impact on the overall load factor than a metric of weight 1.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="capacity" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Maximum capacity of the metric used to normalize the load values from a metric which require explicit
+                    capacity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="load-metric">
+        <xs:complexContent>
+            <xs:extension base="common-load-metric">
+                <xs:attribute name="type" type="load-metric-enumeration" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Type of a built-in load metric from the enumerated values.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="custom-load-metric">
+        <xs:complexContent>
+            <xs:extension base="common-load-metric">
+                <xs:attribute name="class" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Class name to use to construct a load metric from.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Module name from which to load the load metric class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="load-metric-enumeration">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="cpu">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns CPU load as percentage.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="heap">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the heap memory usage as a percentage of max heap size.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="sessions">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns number of active sessions consulting the session manager. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="requests">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the number of requests per second. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="send-traffic">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the outgoing request traffic in KB per second. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="receive-traffic">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the incoming request POST traffic in KB per second (the application needs to read POST data).
+                        Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="busyness">
+                <xs:annotation>
+                    <xs:documentation>
+                        Returns the number of currently busy listener threads servicing requests. Requires an explicit capacity.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="property">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-naming_1_0.xsd b/wildfly/docs/schema/jboss-as-naming_1_0.xsd
new file mode 100644
index 0000000..936a3b5
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-naming_1_0.xsd
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:naming:1.0"
+            xmlns="urn:jboss:domain:naming:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem"/>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-naming_1_1.xsd b/wildfly/docs/schema/jboss-as-naming_1_1.xsd
new file mode 100644
index 0000000..5c2046a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-naming_1_1.xsd
@@ -0,0 +1,106 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:naming:1.1"
+           xmlns="urn:jboss:domain:naming:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                Naming subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="bindings" type="bindingsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+
+    <xs:complexType name="bindingsType">
+        <xs:sequence>
+            <xs:element name="simple" type="simpleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="object-factory" type="objectFactoryType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="lookup" type="lookupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="simpleType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of entry to bind. If not specified defaults to java.lang.String.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="objectFactoryType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the JNDI entry from
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The javax.naming.spi.ObjectFactory that provides the value.
+                    Note that when getObjectInstance is invoked the first Object parameter
+                    will be equal to the JNDI name of this binding. All other parameters will
+                    be null.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="lookupType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lookup" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI location to lookup
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-naming_1_2.xsd b/wildfly/docs/schema/jboss-as-naming_1_2.xsd
new file mode 100644
index 0000000..95d2161
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-naming_1_2.xsd
@@ -0,0 +1,115 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:naming:1.2"
+           xmlns="urn:jboss:domain:naming:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                Naming subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="bindings" type="bindingsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote-naming" type="remote-namingType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="remote-namingType">
+        <xs:annotation>
+            <xs:documentation>
+                This element activates the remote naming server, that allows access to items bound in the java:jboss/exported
+                JNDI context.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="bindingsType">
+        <xs:sequence>
+            <xs:element name="simple" type="simpleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="object-factory" type="objectFactoryType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="lookup" type="lookupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="simpleType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of entry to bind. If not specified defaults to java.lang.String.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="objectFactoryType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the JNDI entry from
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The javax.naming.spi.ObjectFactory that provides the value.
+                    Note that when getObjectInstance is invoked the first Object parameter
+                    will be equal to the JNDI name of this binding. All other parameters will
+                    be null.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="lookupType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lookup" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI location to lookup
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-naming_1_3.xsd b/wildfly/docs/schema/jboss-as-naming_1_3.xsd
new file mode 100644
index 0000000..6751834
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-naming_1_3.xsd
@@ -0,0 +1,146 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:naming:1.3"
+           xmlns="urn:jboss:domain:naming:1.3"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.3">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                Naming subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="bindings" type="bindingsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote-naming" type="remote-namingType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="remote-namingType">
+        <xs:annotation>
+            <xs:documentation>
+                This element activates the remote naming server, that allows access to items bound in the java:jboss/exported
+                JNDI context.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="bindingsType">
+        <xs:sequence>
+            <xs:element name="simple" type="simpleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="object-factory" type="objectFactoryType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="lookup" type="lookupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="simpleType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of entry to bind. If not specified defaults to java.lang.String.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="objectFactoryType">
+        <xs:sequence>
+        	<xs:element name="environment" type="environmentType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence> 
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the JNDI entry from
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The javax.naming.spi.ObjectFactory that provides the value.
+                    Note that when getObjectInstance is invoked the first Object parameter
+                    will be equal to the JNDI name of this binding. The second and third 
+                    parameters will always be null, while the last one, the environment, may 
+                    be populated using the environment type child element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>               
+    </xs:complexType>
+
+	<xs:complexType name="environmentType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of environment properties.
+             ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" minOccurs="0" maxOccurs="unbounded"
+				type="propertyType" />
+		</xs:sequence>
+	</xs:complexType>
+
+	<xs:complexType name="propertyType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of name/value environment properties, 
+               provided to the javax.naming.spi.ObjectFactory, when retrieving object instances.
+             ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="name" type="xs:string" use="required" />
+		<xs:attribute name="value" type="xs:string" use="required" />
+	</xs:complexType>
+
+    <xs:complexType name="lookupType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lookup" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI location to lookup
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-naming_1_4.xsd b/wildfly/docs/schema/jboss-as-naming_1_4.xsd
new file mode 100644
index 0000000..ef23747
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-naming_1_4.xsd
@@ -0,0 +1,183 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:naming:1.4"
+           xmlns="urn:jboss:domain:naming:1.4"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.4">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                Naming subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="bindings" type="bindingsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote-naming" type="remote-namingType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="remote-namingType">
+        <xs:annotation>
+            <xs:documentation>
+                This element activates the remote naming server, that allows access to items bound in the java:jboss/exported
+                JNDI context.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="bindingsType">
+        <xs:sequence>
+            <xs:element name="simple" type="simpleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="object-factory" type="objectFactoryType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="lookup" type="lookupType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="external-context" type="externalContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="simpleType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of entry to bind. If not specified defaults to java.lang.String.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="objectFactoryType">
+        <xs:sequence>
+        	<xs:element name="environment" type="environmentType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the JNDI entry from
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The javax.naming.spi.ObjectFactory that provides the value.
+                    Note that when getObjectInstance is invoked the first Object parameter
+                    will be equal to the JNDI name of this binding. The second and third
+                    parameters will always be null, while the last one, the environment, may
+                    be populated using the environment type child element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="externalContextType">
+        <xs:sequence>
+        	<xs:element name="environment" type="environmentType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the external context from. If this is not specified then
+                    the naming module will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the context to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this is true them the resulting context will be cached and reused.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+	<xs:complexType name="environmentType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of environment properties.
+             ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" minOccurs="0" maxOccurs="unbounded"
+				type="propertyType" />
+		</xs:sequence>
+	</xs:complexType>
+
+	<xs:complexType name="propertyType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of name/value environment properties,
+               provided to the javax.naming.spi.ObjectFactory, when retrieving object instances.
+             ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="name" type="xs:string" use="required" />
+		<xs:attribute name="value" type="xs:string" use="required" />
+	</xs:complexType>
+
+    <xs:complexType name="lookupType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lookup" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI location to lookup
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-naming_2_0.xsd b/wildfly/docs/schema/jboss-as-naming_2_0.xsd
new file mode 100644
index 0000000..fe7c92d
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-naming_2_0.xsd
@@ -0,0 +1,183 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:naming:2.0"
+           xmlns="urn:jboss:domain:naming:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                Naming subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="bindings" type="bindingsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote-naming" type="remote-namingType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="remote-namingType">
+        <xs:annotation>
+            <xs:documentation>
+                This element activates the remote naming server, that allows access to items bound in the java:jboss/exported
+                JNDI context.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="bindingsType">
+        <xs:sequence>
+            <xs:element name="simple" type="simpleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="object-factory" type="objectFactoryType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="lookup" type="lookupType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="external-context" type="externalContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="simpleType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of entry to bind. If not specified defaults to java.lang.String.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="objectFactoryType">
+        <xs:sequence>
+        	<xs:element name="environment" type="environmentType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the JNDI entry from
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The javax.naming.spi.ObjectFactory that provides the value.
+                    Note that when getObjectInstance is invoked the first Object parameter
+                    will be equal to the JNDI name of this binding. The second and third
+                    parameters will always be null, while the last one, the environment, may
+                    be populated using the environment type child element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="externalContextType">
+        <xs:sequence>
+        	<xs:element name="environment" type="environmentType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to load the external context from. If this is not specified then
+                    the naming module will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the context to bind
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this is true them the resulting context will be cached and reused.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+	<xs:complexType name="environmentType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of environment properties.
+             ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" minOccurs="0" maxOccurs="unbounded"
+				type="propertyType" />
+		</xs:sequence>
+	</xs:complexType>
+
+	<xs:complexType name="propertyType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of name/value environment properties,
+               provided to the javax.naming.spi.ObjectFactory, when retrieving object instances.
+             ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="name" type="xs:string" use="required" />
+		<xs:attribute name="value" type="xs:string" use="required" />
+	</xs:complexType>
+
+    <xs:complexType name="lookupType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI name to bind to
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="lookup" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The JNDI location to lookup
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-pojo_1_0.xsd b/wildfly/docs/schema/jboss-as-pojo_1_0.xsd
new file mode 100644
index 0000000..ddd6c17
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-pojo_1_0.xsd
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:pojo:1.0"
+            xmlns="urn:jboss:domain:pojo:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The sar subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-remoting_1_0.xsd b/wildfly/docs/schema/jboss-as-remoting_1_0.xsd
new file mode 100644
index 0000000..bd7a591
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-remoting_1_0.xsd
@@ -0,0 +1,273 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:1.0"
+            xmlns="urn:jboss:domain:remoting:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="worker-thread-pool" type="workerThreadsType" minOccurs="0"/>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+    
+    <xs:complexType name="workerThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the worker thread pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The "socket-binding" attribute specifies the name (or names) of the socket binding(s) to attach to.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <!-- xs:element name="ssl-whatever??" type="ref" minOccurs="0" -->
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="socket-binding" type="name-list" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>   
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:simpleType name="strength">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-remoting_1_1.xsd b/wildfly/docs/schema/jboss-as-remoting_1_1.xsd
new file mode 100644
index 0000000..4e2ef27
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-remoting_1_1.xsd
@@ -0,0 +1,318 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:1.1"
+            xmlns="urn:jboss:domain:remoting:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="worker-thread-pool" type="workerThreadsType" minOccurs="0"/>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workerThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the worker thread pool.
+
+                The attributes correspond to the following xnio options:
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The "socket-binding" attribute specifies the name (or names) of the socket binding(s) to attach to.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="socket-binding" type="name-list" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:simpleType name="strength">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-remoting_1_2.xsd b/wildfly/docs/schema/jboss-as-remoting_1_2.xsd
new file mode 100644
index 0000000..e6ad443
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-remoting_1_2.xsd
@@ -0,0 +1,320 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:1.2"
+            xmlns="urn:jboss:domain:remoting:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="worker-thread-pool" type="workerThreadsType" minOccurs="0"/>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workerThreadsType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the worker thread pool.
+
+                The attributes correspond to the following xnio options:
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+        <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The "socket-binding" attribute specifies the name (or names) of the socket binding(s) to attach to.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="socket-binding" type="name-list" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+        <xs:attribute name="server-name" type="xs:string" use="optional" />
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote" />
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:simpleType name="strength">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-resource-adapters_1_0.xsd b/wildfly/docs/schema/jboss-as-resource-adapters_1_0.xsd
new file mode 100644
index 0000000..3662b9d
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-resource-adapters_1_0.xsd
@@ -0,0 +1,669 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:1.0" xmlns="urn:jboss:domain:resource-adapters:1.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), IdleConnections, EntirePool
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-resource-adapters_1_1.xsd b/wildfly/docs/schema/jboss-as-resource-adapters_1_1.xsd
new file mode 100644
index 0000000..f17e0d9
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-resource-adapters_1_1.xsd
@@ -0,0 +1,709 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:1.1" xmlns="urn:jboss:domain:resource-adapters:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), IdleConnections, EntirePool
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-sar_1_0.xsd b/wildfly/docs/schema/jboss-as-sar_1_0.xsd
new file mode 100644
index 0000000..6b9c8ba
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-sar_1_0.xsd
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:sar:1.0"
+            xmlns="urn:jboss:domain:sar:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The sar subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-security_1_0.xsd b/wildfly/docs/schema/jboss-as-security_1_0.xsd
new file mode 100644
index 0000000..a9b5941
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-security_1_0.xsd
@@ -0,0 +1,424 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security:1.0"
+           xmlns="urn:jboss:domain:security:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+   <!-- The security subsystem root element -->
+   <xs:element name="subsystem" type="security-containerType" />
+
+   <!-- The security container configuration -->
+   <xs:complexType name="security-containerType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The security subsystem, used to configure authentication and authorization.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:all>
+         <xs:element name="security-management" type="securityManagementType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="subject-factory" type="subjectFactoryType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+      </xs:all>
+   </xs:complexType>
+
+   <!-- The security management element -->
+   <xs:complexType name="securityManagementType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The optional "authentication-manager-class-name" attribute specifies the AuthenticationManager
+                    implementation class name to use. To use the container default set the value to "default".
+
+                    The optional "deep-copy-subject-mode" attribute sets the copy mode of subjects done by the security
+                    managers to be deep copies that makes copies of the subject principals and credentials if they are
+                    cloneable. It should be set to true if subject include mutable content that can be corrupted when
+                    multiple threads have the same identity and cache flushes/logout clearing the subject in one thread
+                    results in subject references affecting other threads. Default value is "false".
+
+                    The optional "default-callback-handler-class-name" specifies a global class name for the
+                    CallbackHandler implementation to be used with login modules. To use the container default set the
+                    value to "default".
+
+                    The optional "authorization-manager-class-name" attribute specifies the AuthorizationManager
+                    implementation class name to use. To use the container default set the value to "default".
+
+                    The optional "audit-manager-class-name" attribute specifies the AuditManager
+                    implementation class name to use. To use the container default set the value to "default".
+
+                    The optional "identity-trust-manager-class-name" attribute specifies the IdentityTrustManager
+                    implementation class name to use. To use the container default set the value to "default".
+
+                    The optional "mapping-manager-class-name" attribute specifies the MappingManager
+                    implementation class name to use. To use the container default set the value to "default".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="authentication-manager-class-name" type="xs:string" use="optional"/>
+      <xs:attribute name="deep-copy-subject-mode" type="xs:boolean" use="optional"/>
+      <xs:attribute name="default-callback-handler-class-name" type="xs:string" use="optional"/>
+      <xs:attribute name="authorization-manager-class-name" type="xs:string" use="optional"/>
+      <xs:attribute name="audit-manager-class-name" type="xs:string" use="optional"/>
+      <xs:attribute name="identity-trust-manager-class-name" type="xs:string" use="optional"/>
+      <xs:attribute name="mapping-manager-class-name" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <!-- The subject factory element -->
+   <xs:complexType name="subjectFactoryType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The optional "subject-factory-class-name" attribute sets the class name for the SubjectFactory
+                    implementation to be used. To use the container default set the value to "default".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="subject-factory-class-name" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <!-- Configuration for security domains -->
+   <xs:complexType name="securityDomainsType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Configures security domains for applications.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="security-domain" type="securityDomainType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityDomainType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Definition of a security domain.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:choice>
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="authentication-jaspi" type="authenticationJaspiType" minOccurs="0" maxOccurs="1"/>
+         </xs:choice>
+         <xs:element name="authorization" type="authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="acl" type="aclType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="mapping" type="mappingType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="audit" type="auditType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="identity-trust" type="identityTrustType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="extends" type="xs:string" use="optional"/>
+      <xs:attribute name="cache-type" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationJaspiType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JASPI authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module-stack" type="loginModuleStackType" maxOccurs="unbounded"/>
+         <xs:element name="auth-module" type="authModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authorizationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="policy-module" type="policyModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="aclType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="acl-module" type="aclModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="mappingType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="mapping-module" type="mappingModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="auditType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="provider-module" type="providerModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="identityTrustType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="trust-module" type="trustModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:simpleType name="module-option-flag">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The flag attribute controls how a login module
+                    participates in the overall procedure.
+                    Required - The LoginModule is required to succeed. If it
+                    succeeds or fails, authentication still continues to proceed
+                    down the LoginModule list.
+
+                    Requisite - The LoginModule is required to succeed. If it succeeds,
+                    authentication continues down the LoginModule list. If it fails,
+                    control immediately returns to the application (authentication does not proceed
+                    down the LoginModule list).
+
+                    Sufficient - The LoginModule is  not required to succeed. If it does
+                    succeed, control immediately returns to the application (authentication
+                    does not proceed down the LoginModule list). If it fails,
+                    authentication continues down the LoginModule list.
+
+                    Optional - The LoginModule is not required to succeed. If it succeeds or
+                    fails, authentication still continues to proceed down the
+                    LoginModule list.
+
+                    The overall authentication succeeds only if
+                    all required and requisite LoginModules succeed. If a
+                    sufficient LoginModule is configured and succeeds, then only
+                    the required and requisite LoginModules prior to that
+                    sufficient LoginModule need to have succeeded for the overall
+                    authentication to succeed. If no required or requisite
+                    LoginModules are configured for an application, then at least
+                    one sufficient or optional LoginModule must succeed.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="required"/>
+         <xs:enumeration value="requisite"/>
+         <xs:enumeration value="sufficient"/>
+         <xs:enumeration value="optional"/>
+      </xs:restriction>
+   </xs:simpleType>
+
+   <xs:complexType name="loginModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="propertyType">
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="value" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="loginModuleStackType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="authModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="login-module-stack-ref" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="policyModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="aclModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="mappingModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="type" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="providerModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="trustModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="jsseType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JSSE configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+        <xs:element name="additional-properties" type="xs:string" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="keystore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="client-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="server-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="service-auth-token" type="xs:string" use="optional"/>
+      <xs:attribute name="client-auth" type="xs:boolean" use="optional"/>
+      <xs:attribute name="cipher-suites" type="xs:string" use="optional"/>
+      <xs:attribute name="protocols" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="properties">
+      <xs:sequence>
+         <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-security_1_1.xsd b/wildfly/docs/schema/jboss-as-security_1_1.xsd
new file mode 100644
index 0000000..cd8610f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-security_1_1.xsd
@@ -0,0 +1,418 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security:1.1"
+           xmlns="urn:jboss:domain:security:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+
+   <!-- The security subsystem root element -->
+   <xs:element name="subsystem" type="security-containerType" />
+
+   <!-- The security container configuration -->
+   <xs:complexType name="security-containerType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The security subsystem, used to configure authentication and authorization.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:all>
+         <xs:element name="security-management" type="securityManagementType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+      </xs:all>
+   </xs:complexType>
+
+   <!-- The security management element -->
+   <xs:complexType name="securityManagementType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The optional "deep-copy-subject-mode" attribute sets the copy mode of subjects done by the security
+                    managers to be deep copies that makes copies of the subject principals and credentials if they are
+                    cloneable. It should be set to true if subject include mutable content that can be corrupted when
+                    multiple threads have the same identity and cache flushes/logout clearing the subject in one thread
+                    results in subject references affecting other threads. Default value is "false".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="deep-copy-subject-mode" type="xs:boolean" use="optional"/>
+   </xs:complexType>
+
+   <!-- Configuration for security domains -->
+   <xs:complexType name="securityDomainsType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Configures security domains for applications.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="security-domain" type="securityDomainType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityDomainType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Definition of a security domain.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:choice>
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="authentication-jaspi" type="authenticationJaspiType" minOccurs="0" maxOccurs="1"/>
+         </xs:choice>
+         <xs:element name="authorization" type="authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="acl" type="aclType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="mapping" type="mappingType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="audit" type="auditType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="identity-trust" type="identityTrustType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="cache-type" type="cacheTypeType" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationJaspiType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JASPI authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module-stack" type="loginModuleStackType" maxOccurs="unbounded"/>
+         <xs:element name="auth-module" type="authModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authorizationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="policy-module" type="policyModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="aclType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="acl-module" type="aclModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="mappingType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="mapping-module" type="mappingModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="auditType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="provider-module" type="providerModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="identityTrustType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="trust-module" type="trustModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:simpleType name="module-option-flag">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The flag attribute controls how a login module
+                    participates in the overall procedure.
+                    Required - The LoginModule is required to succeed. If it
+                    succeeds or fails, authentication still continues to proceed
+                    down the LoginModule list.
+
+                    Requisite - The LoginModule is required to succeed. If it succeeds,
+                    authentication continues down the LoginModule list. If it fails,
+                    control immediately returns to the application (authentication does not proceed
+                    down the LoginModule list).
+
+                    Sufficient - The LoginModule is  not required to succeed. If it does
+                    succeed, control immediately returns to the application (authentication
+                    does not proceed down the LoginModule list). If it fails,
+                    authentication continues down the LoginModule list.
+
+                    Optional - The LoginModule is not required to succeed. If it succeeds or
+                    fails, authentication still continues to proceed down the
+                    LoginModule list.
+
+                    The overall authentication succeeds only if
+                    all required and requisite LoginModules succeed. If a
+                    sufficient LoginModule is configured and succeeds, then only
+                    the required and requisite LoginModules prior to that
+                    sufficient LoginModule need to have succeeded for the overall
+                    authentication to succeed. If no required or requisite
+                    LoginModules are configured for an application, then at least
+                    one sufficient or optional LoginModule must succeed.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="required"/>
+         <xs:enumeration value="requisite"/>
+         <xs:enumeration value="sufficient"/>
+         <xs:enumeration value="optional"/>
+      </xs:restriction>
+   </xs:simpleType>
+
+   <xs:complexType name="loginModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="propertyType">
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="value" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="loginModuleStackType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="authModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="login-module-stack-ref" type="xs:string" use="optional"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="policyModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="aclModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="mappingModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="type" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="providerModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="trustModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="jsseType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JSSE configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+        <xs:element name="additional-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="keystore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="client-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="server-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="service-auth-token" type="xs:string" use="optional"/>
+      <xs:attribute name="client-auth" type="xs:boolean" use="optional"/>
+      <xs:attribute name="cipher-suites" type="xs:string" use="optional"/>
+      <xs:attribute name="protocols" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="properties">
+      <xs:sequence>
+         <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Vault Configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:simpleType name="cacheTypeType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Cache type configuration. Default value is "default".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="default"/>
+         <xs:enumeration value="infinispan"/>
+      </xs:restriction>
+   </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-security_1_2.xsd b/wildfly/docs/schema/jboss-as-security_1_2.xsd
new file mode 100644
index 0000000..da54f25
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-security_1_2.xsd
@@ -0,0 +1,406 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security:1.2"
+           xmlns="urn:jboss:domain:security:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+   <!-- The security subsystem root element -->
+   <xs:element name="subsystem" type="security-containerType" />
+
+   <!-- The security container configuration -->
+   <xs:complexType name="security-containerType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The security subsystem, used to configure authentication and authorization.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:all>
+         <xs:element name="security-management" type="securityManagementType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+      </xs:all>
+   </xs:complexType>
+
+   <!-- The security management element -->
+   <xs:complexType name="securityManagementType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The optional "deep-copy-subject-mode" attribute sets the copy mode of subjects done by the security
+                    managers to be deep copies that makes copies of the subject principals and credentials if they are
+                    cloneable. It should be set to true if subject include mutable content that can be corrupted when
+                    multiple threads have the same identity and cache flushes/logout clearing the subject in one thread
+                    results in subject references affecting other threads. Default value is "false".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="deep-copy-subject-mode" type="xs:boolean" use="optional"/>
+   </xs:complexType>
+
+   <!-- Configuration for security domains -->
+   <xs:complexType name="securityDomainsType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Configures security domains for applications.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="security-domain" type="securityDomainType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityDomainType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Definition of a security domain.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:choice>
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="authentication-jaspi" type="authenticationJaspiType" minOccurs="0" maxOccurs="1"/>
+         </xs:choice>
+         <xs:element name="authorization" type="authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="acl" type="aclType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="mapping" type="mappingType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="audit" type="auditType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="identity-trust" type="identityTrustType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="cache-type" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationJaspiType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JASPI authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module-stack" type="loginModuleStackType" maxOccurs="unbounded"/>
+         <xs:element name="auth-module" type="authModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authorizationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="policy-module" type="policyModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="aclType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="acl-module" type="aclModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="mappingType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="mapping-module" type="mappingModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="auditType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="provider-module" type="providerModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="identityTrustType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="trust-module" type="trustModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:simpleType name="module-option-flag">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The flag attribute controls how a login module
+                    participates in the overall procedure.
+                    Required - The LoginModule is required to succeed. If it
+                    succeeds or fails, authentication still continues to proceed
+                    down the LoginModule list.
+
+                    Requisite - The LoginModule is required to succeed. If it succeeds,
+                    authentication continues down the LoginModule list. If it fails,
+                    control immediately returns to the application (authentication does not proceed
+                    down the LoginModule list).
+
+                    Sufficient - The LoginModule is  not required to succeed. If it does
+                    succeed, control immediately returns to the application (authentication
+                    does not proceed down the LoginModule list). If it fails,
+                    authentication continues down the LoginModule list.
+
+                    Optional - The LoginModule is not required to succeed. If it succeeds or
+                    fails, authentication still continues to proceed down the
+                    LoginModule list.
+
+                    The overall authentication succeeds only if
+                    all required and requisite LoginModules succeed. If a
+                    sufficient LoginModule is configured and succeeds, then only
+                    the required and requisite LoginModules prior to that
+                    sufficient LoginModule need to have succeeded for the overall
+                    authentication to succeed. If no required or requisite
+                    LoginModules are configured for an application, then at least
+                    one sufficient or optional LoginModule must succeed.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="required"/>
+         <xs:enumeration value="requisite"/>
+         <xs:enumeration value="sufficient"/>
+         <xs:enumeration value="optional"/>
+      </xs:restriction>
+   </xs:simpleType>
+
+   <xs:complexType name="loginModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="propertyType">
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="value" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="loginModuleStackType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="authModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="optional"/>
+      <xs:attribute name="login-module-stack-ref" type="xs:string" use="optional"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="policyModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="aclModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="mappingModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="type" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="providerModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="trustModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="jsseType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JSSE configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+        <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="keystore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="client-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="server-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="service-auth-token" type="xs:string" use="optional"/>
+      <xs:attribute name="client-auth" type="xs:boolean" use="optional"/>
+      <xs:attribute name="cipher-suites" type="xs:string" use="optional"/>
+      <xs:attribute name="protocols" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Vault Configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-threads_1_0.xsd b/wildfly/docs/schema/jboss-as-threads_1_0.xsd
new file mode 100644
index 0000000..a835c2c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-threads_1_0.xsd
@@ -0,0 +1,277 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:threads:1.0"
+            xmlns="urn:jboss:domain:threads:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The threading subsystem, used to declare manageable thread pools and resources.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="thread-factory" type="thread-factory"/>
+            <xs:element name="unbounded-queue-thread-pool" type="unbounded-queue-thread-pool"/>
+            <xs:element name="bounded-queue-thread-pool" type="bounded-queue-thread-pool"/>
+            <xs:element name="queueless-thread-pool" type="queueless-thread-pool"/>
+            <xs:element name="scheduled-thread-pool" type="scheduled-thread-pool"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="thread-factory">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread factory (implementing java.util.concurrent.ThreadFactory).  The "name" attribute is
+                the bean name of the created thread factory.  The optional "priority" attribute may be used to specify
+                the thread priority of created threads.  The optional "group-name" attribute specifies the name of a the
+                thread group to create for this thread factory.
+
+                The "thread-name-pattern" is the template used to create names for threads.  The following patterns
+                may be used:
+
+                 %% - emit a percent sign
+                 %t - emit the per-factory thread sequence number
+                 %g - emit the global thread sequence number
+                 %f - emit the factory sequence number
+                 %i - emit the thread ID
+                 %G - emit the thread group name
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group-name" type="xs:string" use="optional"/>
+        <xs:attribute name="thread-name-pattern" type="xs:string" use="optional"/>
+        <xs:attribute name="priority" type="priority" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="unbounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The nested "max-threads" element must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with a bounded queue.  Such a thread pool has a core and maximum size and a
+                specified queue length.  When a task is submitted, if the number of running threads is less than the
+                core size, a new thread is created.  Otherwise, if there is room in the queue, the task is enqueued.
+                Otherwise, if the number of running threads is less than the maximum size, a new thread is created.
+                Otherwise, if blocking is enabled, the caller blocks until room becomes available in the queue.
+                Otherwise, the task is handed off to the designated handoff executor, if one is specified.  Otherwise,
+                the task is rejected.
+
+                The "name" attribute is the bean name of the created executor.  The "allow-core-timeout" attribute
+                specifies whether core threads may time out; if false, only threads above the core size will time out.
+                The "blocking" attribute specifies whether the submitter thread will block if no space is available in
+                this executor.
+
+                The optional "core-threads" element may be used to specify the core thread pool size which is smaller
+                than the maximum pool size.  The required "max-threads" element specifies the maximum thread pool size.
+                The required "queue-length" element specifies the queue length.  The nested "keepalive-time" element may
+                used to specify the amount of time that threads beyond the core pool size should be kept running when idle.
+                The optional "thread-factory" element specifies the bean name of a specific thread factory to use to
+                create worker threads.  The optional "handoff-executor" element specifies an executor to delegate tasks
+                to in the event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="scaled-count" minOccurs="0"/>
+            <xs:element name="queue-length" type="scaled-count"/>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="handoff-executor" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="blocking" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueless-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with no queue.  When a task is submitted, if the number of running threads is
+                less than the maximum size, a new thread is created.  Otherwise, if blocking is enabled, the caller
+                blocks until another thread completes its task and accepts the new one.  Otherwise, the task is handed
+                off to the designated handoff executor, if one is specified.  Otherwise, the task is rejected.
+
+                The "name" attribute is the bean name of the created executor.  The "blocking" attribute specifies
+                whether the submitter thread will block if no space is available in this executor.
+
+                The "max-threads" element specifies the number of threads to use for this executor before
+                tasks cannot be accepted anymore.  The optional "keepalive-time" is used to specify the amount of time
+                that threads should be kept running when idle; by default threads run indefinitely.  The optional
+                "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.  The optional "handoff-executor" element specifies an executor to delegate tasks to in the
+                event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="handoff-executor" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="blocking" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A scheduled thread pool executor.  The "name" attribute is the bean name of the created executor.  The
+                "thread-factory" attribute specifies the bean name of the thread factory to use to create worker
+                threads.  The nested "max-threads" element may be used to specify the thread pool size.  The nested
+                "keepalive-time" element is used to specify the amount of time that threads should be kept running when idle.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="scaled-count"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="priority">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="scaled-count">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A scaled size designation.  The "count" attribute specifies a flat quantity.  The
+                "per-cpu" attribute specifies a quantity per available CPU, as determined by
+                java.lang.Runtime#availableProcessors().  The numbers are added together and rounded off
+                to an integer value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="count" type="xs:float" use="optional"/>
+        <xs:attribute name="per-cpu" type="xs:float" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="time">
+        <xs:annotation>
+            <xs:documentation>
+                An amount of time.  Comprised of a time value and a unit value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="time" type="xs:long" use="required"/>
+        <xs:attribute name="unit" type="time-unit-name" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="time-unit-name">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a unit of time.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="seconds"/>
+            <xs:enumeration value="minutes"/>
+            <xs:enumeration value="milliseconds"/>
+            <xs:enumeration value="nanoseconds"/>
+            <xs:enumeration value="hours"/>
+            <xs:enumeration value="days"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-threads_1_1.xsd b/wildfly/docs/schema/jboss-as-threads_1_1.xsd
new file mode 100644
index 0000000..44881b4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-threads_1_1.xsd
@@ -0,0 +1,298 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:threads:1.1"
+            xmlns="urn:jboss:domain:threads:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The threading subsystem, used to declare manageable thread pools and resources.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="thread-factory" type="thread-factory"/>
+            <xs:element name="unbounded-queue-thread-pool" type="unbounded-queue-thread-pool"/>
+            <xs:element name="bounded-queue-thread-pool" type="bounded-queue-thread-pool"/>
+            <xs:element name="blocking-bounded-queue-thread-pool" type="blocking-bounded-queue-thread-pool"/>
+            <xs:element name="queueless-thread-pool" type="queueless-thread-pool"/>
+            <xs:element name="blocking-queueless-thread-pool" type="blocking-queueless-thread-pool"/>
+            <xs:element name="scheduled-thread-pool" type="scheduled-thread-pool"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="thread-factory">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread factory (implementing java.util.concurrent.ThreadFactory).  The "name" attribute is
+                the bean name of the created thread factory.  The optional "priority" attribute may be used to specify
+                the thread priority of created threads.  The optional "group-name" attribute specifies the name of a the
+                thread group to create for this thread factory.
+
+                The "thread-name-pattern" is the template used to create names for threads.  The following patterns
+                may be used:
+
+                 %% - emit a percent sign
+                 %t - emit the per-factory thread sequence number
+                 %g - emit the global thread sequence number
+                 %f - emit the factory sequence number
+                 %i - emit the thread ID
+                 %G - emit the thread group name
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group-name" type="xs:string" use="optional"/>
+        <xs:attribute name="thread-name-pattern" type="xs:string" use="optional"/>
+        <xs:attribute name="priority" type="priority" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="unbounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="countType"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with a bounded queue, where threads attempting to submit tasks will not block.
+                Such a thread pool has a core and maximum size and a specified queue length.  When a task is submitted,
+                if the number of running threads is less than the core size, a new thread is created.  Otherwise, if
+                there is room in the queue, the task is enqueued. Otherwise, if the number of running threads is less
+                than the maximum size, a new thread is created. Otherwise, the task is handed off to the designated
+                handoff executor, if one is specified.  Otherwise, the task is discarded.
+
+                The "name" attribute is the bean name of the created executor.  The "allow-core-timeout" attribute
+                specifies whether core threads may time out; if false, only threads above the core size will time out.
+
+                The optional "core-threads" element may be used to specify the core thread pool size which is smaller
+                than the maximum pool size.  The required "max-threads" element specifies the maximum thread pool size.
+                The required "queue-length" element specifies the queue length.  The optional "keepalive-time" element may
+                used to specify the amount of time that threads beyond the core pool size should be kept running when idle.
+                The optional "thread-factory" element specifies the bean name of a specific thread factory to use to
+                create worker threads.  The optional "handoff-executor" element specifies an executor to delegate tasks
+                to in the event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="countType"/>
+            <xs:element name="max-threads" type="countType"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="handoff-executor" type="ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="blocking" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="blocking-bounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with a bounded queue, where threads attempting to submit tasks may block.
+                Such a thread pool has a core and maximum size and a specified queue length.  When a task is submitted,
+                if the number of running threads is less than the core size, a new thread is created.  Otherwise, if
+                there is room in the queue, the task is enqueued. Otherwise, if the number of running threads is less
+                than the maximum size, a new thread is created.Otherwise, the caller blocks until room becomes available
+                in the queue.
+
+                The "name" attribute is the bean name of the created executor.  The "allow-core-timeout" attribute
+                specifies whether core threads may time out; if false, only threads above the core size will time out.
+
+                The optional "core-threads" element may be used to specify the core thread pool size which is smaller
+                than the maximum pool size.  The required "max-threads" element specifies the maximum thread pool size.
+                The required "queue-length" element specifies the queue length.  The optional "keepalive-time" element may
+                used to specify the amount of time that threads beyond the core pool size should be kept running when idle.
+                The optional "thread-factory" element specifies the bean name of a specific thread factory to use to
+                create worker threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="countType"/>
+            <xs:element name="max-threads" type="countType"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueless-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with no queue, where threads attempting to submit tasks will not block.
+                When a task is submitted, if the number of running threads is less than the maximum size, a new thread
+                is created. Otherwise, the task is handed off to the designated handoff executor, if one is specified.
+                Otherwise, the task is discarded.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The "max-threads" attribute specifies the number of threads to use for this executor before
+                tasks cannot be accepted anymore.  The optional "keepalive-time" is used to specify the amount of time
+                that threads should be kept running when idle; by default threads run indefinitely.  The optional
+                "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.  The optional "handoff-executor" element specifies an executor to delegate tasks to in the
+                event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="countType"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+            <xs:element name="handoff-executor" type="ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="blocking-queueless-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A thread pool executor with no queue, where threads attempting to submit tasks may block.
+                When a task is submitted, if the number of running threads is less than the maximum size, a new thread
+                is created.  Otherwise, the caller blocks until another thread completes its task and accepts the new one.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The "max-threads" attribute specifies the number of threads to use for this executor before
+                tasks cannot be accepted anymore.  The optional "keepalive-time" is used to specify the amount of time
+                that threads should be kept running when idle; by default threads run indefinitely.  The optional
+                "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="countType"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A scheduled thread pool executor.  The "name" attribute is the bean name of the created executor.  The
+                "thread-factory" attribute specifies the bean name of the thread factory to use to create worker
+                threads.  The nested "max-threads" attribute may be used to specify the thread pool size.  The nested
+                "keepalive-time" element is used to specify the amount of time that threads should be kept running when idle.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="countType"/>
+            <xs:element name="keepalive-time" type="time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="priority">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="countType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A size designation.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="count" type="xs:int" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="time">
+        <xs:annotation>
+            <xs:documentation>
+                An amount of time.  Comprised of a time value and a unit value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="time" type="xs:long" use="required"/>
+        <xs:attribute name="unit" type="time-unit-name" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="time-unit-name">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a unit of time.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="seconds"/>
+            <xs:enumeration value="minutes"/>
+            <xs:enumeration value="milliseconds"/>
+            <xs:enumeration value="nanoseconds"/>
+            <xs:enumeration value="hours"/>
+            <xs:enumeration value="days"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_1_0.xsd b/wildfly/docs/schema/jboss-as-txn_1_0.xsd
new file mode 100644
index 0000000..c500c1b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_1_0.xsd
@@ -0,0 +1,153 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:1.0"
+            xmlns="urn:jboss:domain:transactions:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="recovery-environment" type="recovery-environment"/>
+            <xs:element name="core-environment" type="core-environment"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager core should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                enable-statistics - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_1_1.xsd b/wildfly/docs/schema/jboss-as-txn_1_1.xsd
new file mode 100644
index 0000000..06d4341
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_1_1.xsd
@@ -0,0 +1,164 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:1.1"
+            xmlns="urn:jboss:domain:transactions:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-environment" type="core-environment"/>
+            <xs:element name="recovery-environment" type="recovery-environment"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager core should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                enable-statistics - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_1_2.xsd b/wildfly/docs/schema/jboss-as-txn_1_2.xsd
new file mode 100644
index 0000000..413adbc
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_1_2.xsd
@@ -0,0 +1,175 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:1.2"
+            xmlns="urn:jboss:domain:transactions:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-environment" type="core-environment"/>
+            <xs:element name="recovery-environment" type="recovery-environment"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="use-hornetq-store" type="use-hornetq-store-Type" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager core should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                enable-statistics - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-hornetq-store-Type">
+            <xs:annotation>
+                <xs:documentation>
+                <![CDATA[
+                    The flag to enable the hornetq transaction log store.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_1_3.xsd b/wildfly/docs/schema/jboss-as-txn_1_3.xsd
new file mode 100644
index 0000000..c07f063
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_1_3.xsd
@@ -0,0 +1,240 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:1.3"
+            xmlns="urn:jboss:domain:transactions:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-hornetq-store" type="use-hornetq-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager core should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                enable-statistics - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-hornetq-store-Type">
+            <xs:annotation>
+                <xs:documentation>
+                <![CDATA[
+                    The flag to enable the hornetq transaction log store.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            Settings for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+            <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+            <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+        </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_1_4.xsd b/wildfly/docs/schema/jboss-as-txn_1_4.xsd
new file mode 100644
index 0000000..8dd405c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_1_4.xsd
@@ -0,0 +1,249 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:1.4"
+            xmlns="urn:jboss:domain:transactions:1.4"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.4">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-hornetq-store" type="use-hornetq-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager core should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                enable-statistics - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-hornetq-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable the hornetq transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the hornetq transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            Settings for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+            <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+            <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+        </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_1_5.xsd b/wildfly/docs/schema/jboss-as-txn_1_5.xsd
new file mode 100644
index 0000000..3eec1ee
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_1_5.xsd
@@ -0,0 +1,330 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:1.5"
+            xmlns="urn:jboss:domain:transactions:1.5"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.5">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-hornetq-store" type="use-hornetq-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+            <xs:element name="commit-markable-resources" type="cmr-resources-Type" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                Deprecated. Has no meaningful effect on the behavior of the transaction manager.
+            ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                Deprecated. Has no meaningful effect on the behavior of the transaction manager.
+            ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                enable-statistics - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-hornetq-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable the hornetq transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the hornetq transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            Settings for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+            <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+            <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resources-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of non XA aware datasources that can reliably participate in an XA transaction.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="commit-markable-resource" type="cmr-resource-Type" minOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resource-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for a single commit markable resource.
+					Each datasource must be defined in the datasources subsystem configuration and
+					each one must be marked with the connectable="true" attribute.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="xid-location" type="cmr-table-Type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="jndi-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-table-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Storage settings for a single commit markable resource. For datasource resources
+					this will specifiy the table name where the xid of the commit-markable-resource
+					is stored
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="optional" default="xids">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					A name for the storage location
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        <xs:attribute name="immediate-cleanup" type="xs:boolean" use="optional" default="true">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					Indicates whether the entry should be removed as soon as the transaction has
+					completed
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        <xs:attribute name="batch-size" type="xs:integer" use="optional" default="100">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					If deletion of entries are deferred to the recovery module (ie immediate-cleanup
+					is set to false) then the batch size specifies how many xids to remove per DML
+					statement. Tuning the batch size is resource manager specific.
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-txn_2_0.xsd b/wildfly/docs/schema/jboss-as-txn_2_0.xsd
new file mode 100644
index 0000000..2367f53
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-txn_2_0.xsd
@@ -0,0 +1,265 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:2.0"
+            xmlns="urn:jboss:domain:transactions:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-hornetq-store" type="use-hornetq-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+        <xs:attribute name="path" type="xs:string" default="var">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Deprecated. Has no meaningful effect on the behavior of the transaction manager.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Deprecated. Has no meaningful effect on the behavior of the transaction manager.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                statistics-enabled - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Deprecated. Use statistics-enabled. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-hornetq-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable the hornetq transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the hornetq transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            Settings for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+            <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+            <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+        </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-webservices_1_0.xsd b/wildfly/docs/schema/jboss-as-webservices_1_0.xsd
new file mode 100644
index 0000000..3d4d793
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-webservices_1_0.xsd
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+	targetNamespace="urn:jboss:domain:webservices:1.0" xmlns="urn:jboss:domain:webservices:1.0"
+	xmlns:jaxwsconfig="urn:jboss:jbossws-jaxws-config:4.0" elementFormDefault="qualified"
+	attributeFormDefault="unqualified" version="1.0">
+
+    <xs:import namespace="urn:jboss:jbossws-jaxws-config:4.0" schemaLocation="jbossws-jaxws-config_4_0.xsd"/>
+
+	<!-- The webservices subsystem root element -->
+	<xs:element name="subsystem" type="webservices-containerType" />
+
+	<!-- The webservices container configuration -->
+	<xs:complexType name="webservices-containerType">
+		<xs:annotation>
+			<xs:documentation>
+                <![CDATA[
+                    The webservices subsystem, used to configure JBossWS.
+                ]]>
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="modify-wsdl-address" minOccurs="0"
+				maxOccurs="1" type="xs:boolean" />
+			<xs:element name="wsdl-host" minOccurs="0" maxOccurs="1"
+				type="xs:string">
+				<xs:annotation>
+					<xs:documentation>
+               <![CDATA[
+                  The WSDL, that is a required deployment artifact for an endpoint, has a <soap:address>
+                  element which points to the location of the endpoint. JBoss supports rewriting of that SOAP address.
+
+                  If the content of <soap:address> is a valid URL, JBossWS will not rewrite it unless 'modify-soap-address' is true.
+                  If the content of <soap:address> is not a valid URL, JBossWS will rewrite it using the attribute values given below.
+
+                  If 'webServiceHost' is set to 'jbossws.undefined.host', JBossWS uses requesters host when rewriting the <soap:address>
+               ]]>
+					</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element name="wsdl-port" minOccurs="0" maxOccurs="1"
+				type="xs:int" />
+			<xs:element name="wsdl-secure-port" minOccurs="0"
+				maxOccurs="1" type="xs:int">
+				<xs:annotation>
+					<xs:documentation>
+               <![CDATA[
+                  Set these properties to explicitly define the ports that will be used for rewriting the SOAP address.
+                  Otherwise the ports will be identified by querying the list of installed connectors.
+               ]]>
+					</xs:documentation>
+				</xs:annotation>
+			</xs:element>
+			<xs:element minOccurs="0" maxOccurs="unbounded"
+				name="endpoint-config" type="jaxwsconfig:endpointConfigType" />
+		</xs:sequence>
+	</xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-webservices_1_1.xsd b/wildfly/docs/schema/jboss-as-webservices_1_1.xsd
new file mode 100644
index 0000000..e0edeaa
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-webservices_1_1.xsd
@@ -0,0 +1,240 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema
+  targetNamespace="urn:jboss:domain:webservices:1.1"
+  xmlns="urn:jboss:domain:webservices:1.1"
+  xmlns:xs="http://www.w3.org/2001/XMLSchema"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified"
+  version="1.1">
+
+  <xs:element name="subsystem" type="webservicesSubsystemType" />
+
+  <xs:complexType name="webservicesSubsystemType">
+    <xs:annotation>
+      <xs:documentation><![CDATA[
+
+        The webservices subsystem, used to configure JBossWS.
+
+        The WSDL, that is a required deployment artifact for an endpoint, has a <soap:address>
+        element which points to the location of the endpoint. JBoss supports rewriting of that SOAP address.
+
+        If the content of <soap:address> is a valid URL, JBossWS will not rewrite it unless 'modify-soap-address' is true.
+        If the content of <soap:address> is not a valid URL, JBossWS will rewrite it using the attribute values given below.
+
+        If 'webServiceHost' is set to 'jbossws.undefined.host', JBossWS uses requesters host when rewriting the <soap:address>
+
+      ]]></xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="modify-wsdl-address" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+      <xs:element name="wsdl-host" type="xs:string" minOccurs="0" maxOccurs="1"/>
+      <xs:element name="wsdl-port" type="xs:int" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+
+            Set this property to explicitly define the HTTP port that will be used for rewriting the SOAP address.
+            Otherwise the HTTP port will be identified by querying the list of installed HTTP connectors.
+
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-secure-port" type="xs:int" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+
+            Set this property to explicitly define the HTTPS port that will be used for rewriting the SOAP address.
+            Otherwise the HTTPS port will be identified by querying the list of installed HTTPS connectors.
+
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="endpoint-config" type="endpointConfigType" minOccurs="0" maxOccurs="unbounded"/>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="endpointConfigType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Endpoint config can define unique properties that are visible only to endpoints using this config.
+        It can also define PRE and POST handler chains associated with it.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="pre-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="post-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="propertyType"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Endpoint config name. Must be unique inside subsysten element.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="propertyType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Property that is private for endpoint config.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Property name. Must be unique inside endpoint config.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="value" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+
+          Property value. May be omitted.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="handlerChainType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Handlerchain can be defined such that the handlers in the
+        handlerchain operate on all endpoints or only for specified
+        protocol-bindings.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="handler" type="handlerType" minOccurs="1" maxOccurs="unbounded"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Handler chain name. Must be unique for every endpoint config.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="protocol-bindings" type="protocolBindingListType" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+
+          If protocol-bindings attribute on the handler chain element is omitted
+          then the handlers specified in the handler chain will be applied on 
+          every endpoint.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="handlerType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Declares the handler for an endpoint.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Defines the name of the JAX-WS handler. The name must be unique within the handler chain.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="class" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Defines a fully qualified class name for the JAX-WS handler implementation.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="protocolBindingListType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type used for specifying a list of
+        protocol-bindingType(s). For e.g.
+
+        ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:list itemType="protocolBindingType"/>
+  </xs:simpleType>
+
+  <xs:simpleType name="protocolBindingType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type used for specifying the URI for the
+        protocol binding used by the endpoint.  For
+        portability one could use one of the following tokens that
+        alias the standard binding types: 
+
+        ##SOAP11_HTTP
+        ##SOAP11_HTTP_MTOM
+        ##SOAP12_HTTP
+        ##SOAP12_HTTP_MTOM
+        ##XML_HTTP
+
+        Other specifications could define tokens that start with ##
+        to alias new standard binding URIs that are introduced.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:union memberTypes="xs:anyURI protocolAliasType"/>
+  </xs:simpleType>
+
+  <xs:simpleType name="protocolAliasType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type that is used for specifying tokens that
+        start with ## which are used to alias existing standard
+        protocol bindings and support aliases for new standard
+        binding URIs that are introduced in future specifications.
+
+        The following tokens alias the standard protocol binding
+        URIs:
+
+        ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+        ##SOAP11_HTTP_MTOM = 
+        "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+        ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+        ##SOAP12_HTTP_MTOM = 
+        "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+        ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:pattern value="##.+"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-webservices_1_2.xsd b/wildfly/docs/schema/jboss-as-webservices_1_2.xsd
new file mode 100644
index 0000000..e62244d
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-webservices_1_2.xsd
@@ -0,0 +1,301 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema
+  targetNamespace="urn:jboss:domain:webservices:1.2"
+  xmlns="urn:jboss:domain:webservices:1.2"
+  xmlns:xs="http://www.w3.org/2001/XMLSchema"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified"
+  version="1.2">
+
+  <xs:element name="subsystem" type="webservicesSubsystemType" />
+
+  <xs:complexType name="webservicesSubsystemType">
+    <xs:annotation>
+      <xs:documentation><![CDATA[
+
+        The WSDL, a required deployment artifact for an endpoint, has a <soap:address>
+        element which points to the location of the endpoint. JBossWS supports the rewriting
+        of that SOAP address using the attribute values of wsdl-host and wsdl-port or
+        wsdl-secure-port.
+
+        The webservices subsystem supports the pre-definition of endpoint configurations can
+        be used for JAX-WS client and JAX-WS endpoint implementations, elements client-config and
+        endpoint-config respectively.  These configurations can include JAX-WS handlers and key/value
+        properties declarations that control JBossWS and Apache CXF internals.
+
+      ]]></xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="modify-wsdl-address" type="xs:boolean" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+              <xs:documentation><![CDATA[
+
+                When modify-wsdl-address is set to true and the content of <soap:address> is a valid URL,
+                JBossWS will rewrite the URL using the values of wsdl-host and wsdl-port or wsdl-secure-port.
+
+                When modify-wsdl-address is set to false and the content of <soap:address> is a valid URL,
+                JBossWS will not rewrite the URL.  The <soap:address> URL will be used.
+
+                When the content of <soap:address> is not a valid URL, JBossWS will rewrite it no matter
+                what the setting of modify-wsdl-address.
+
+                If modify-wsdl-address is set to true and wsdl-host is not defined or explicitly set to 'jbossws.undefined.host'
+                the content of <soap:address> URL is use.  JBossWS uses the requester's host when rewriting the <soap:address>
+
+                When modify-wsdl-address is not defined JBossWS uses a default value of true.
+
+              ]]></xs:documentation>
+          </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-host" type="xs:string" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+              <xs:documentation><![CDATA[
+
+                This property explicitly defines the host name or the host's IP address
+                that will be used in the <soap:address> URL rewrite.
+
+                When wsdl-host is not defined JBossWS uses a value of 'jbossws.undefined.host'.
+
+                If wsdl-host is not defined or explicitly set to 'jbossws.undefined.host' and
+                modify-wsdl-address is set to true, the content of <soap:address> URL is use.
+                JBossWS uses requester's host when rewriting the <soap:address>
+
+              ]]></xs:documentation>
+          </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-port" type="xs:int" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+
+            Set this property to explicitly define the HTTP port that will be used for rewriting the SOAP address.
+            Otherwise the HTTP port will be identified by querying the list of installed HTTP connectors.
+
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-secure-port" type="xs:int" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+
+            Set this property to explicitly define the HTTPS port that will be used for rewriting the SOAP address.
+            Otherwise the HTTPS port will be identified by querying the list of installed HTTPS connectors.
+
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="endpoint-config" type="endpointConfigType" minOccurs="0" maxOccurs="unbounded"/>
+      <xs:element name="client-config" type="clientConfigType" minOccurs="0" maxOccurs="unbounded"/>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="endpointConfigType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Endpoint config can define unique properties that are visible only to endpoints using this config.
+        It can also define PRE and POST handler chains associated with it.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="pre-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="post-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="propertyType"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Endpoint config name. Must be unique inside subsystem element.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="clientConfigType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Client config can define unique properties that are visible only to clients using this config.
+        It can also define PRE and POST handler chains associated with it.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="pre-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="post-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="propertyType"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Client config name. Must be unique inside subsystem element.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="propertyType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Property that is private for endpoint config.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Property name. Must be unique inside endpoint config.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="value" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+
+          Property value. May be omitted.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="handlerChainType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Handlerchain can be defined such that the handlers in the
+        handlerchain operate on all endpoints or only for specified
+        protocol-bindings.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="handler" type="handlerType" minOccurs="1" maxOccurs="unbounded"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Handler chain name. Must be unique for every endpoint/client config.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="protocol-bindings" type="protocolBindingListType" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+
+          If protocol-bindings attribute on the handler chain element is omitted
+          then the handlers specified in the handler chain will be applied on 
+          every endpoint/client.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="handlerType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Declares the handler for an endpoint or client.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Defines the name of the JAX-WS handler. The name must be unique within the handler chain.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="class" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Defines a fully qualified class name for the JAX-WS handler implementation.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="protocolBindingListType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type used for specifying a list of
+        protocol-bindingType(s). For e.g.
+
+        ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:list itemType="protocolBindingType"/>
+  </xs:simpleType>
+
+  <xs:simpleType name="protocolBindingType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type used for specifying the URI for the
+        protocol binding used by the endpoint.  For
+        portability one could use one of the following tokens that
+        alias the standard binding types: 
+
+        ##SOAP11_HTTP
+        ##SOAP11_HTTP_MTOM
+        ##SOAP12_HTTP
+        ##SOAP12_HTTP_MTOM
+        ##XML_HTTP
+
+        Other specifications could define tokens that start with ##
+        to alias new standard binding URIs that are introduced.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:union memberTypes="xs:anyURI protocolAliasType"/>
+  </xs:simpleType>
+
+  <xs:simpleType name="protocolAliasType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type that is used for specifying tokens that
+        start with ## which are used to alias existing standard
+        protocol bindings and support aliases for new standard
+        binding URIs that are introduced in future specifications.
+
+        The following tokens alias the standard protocol binding
+        URIs:
+
+        ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+        ##SOAP11_HTTP_MTOM = 
+        "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+        ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+        ##SOAP12_HTTP_MTOM = 
+        "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+        ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:pattern value="##.+"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-webservices_2_0.xsd b/wildfly/docs/schema/jboss-as-webservices_2_0.xsd
new file mode 100644
index 0000000..00b6d46
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-webservices_2_0.xsd
@@ -0,0 +1,345 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema
+  targetNamespace="urn:jboss:domain:webservices:2.0"
+  xmlns="urn:jboss:domain:webservices:2.0"
+  xmlns:xs="http://www.w3.org/2001/XMLSchema"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified"
+  version="2.0">
+
+  <xs:element name="subsystem" type="webservicesSubsystemType" />
+
+  <xs:complexType name="webservicesSubsystemType">
+    <xs:annotation>
+      <xs:documentation><![CDATA[
+
+        The WSDL, a required deployment artifact for an endpoint, has a <soap:address>
+        element which points to the location of the endpoint. JBossWS supports the rewriting
+        of that SOAP address using the attribute values of wsdl-host and wsdl-port or
+        wsdl-secure-port.
+
+        The webservices subsystem supports the pre-definition of endpoint configurations can
+        be used for JAX-WS client and JAX-WS endpoint implementations, elements client-config and
+        endpoint-config respectively.  These configurations can include JAX-WS handlers and key/value
+        properties declarations that control JBossWS and Apache CXF internals.
+
+      ]]></xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="modify-wsdl-address" type="xs:boolean" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+              <xs:documentation><![CDATA[
+
+                When modify-wsdl-address is set to true and the content of <soap:address> is a valid URL,
+                JBossWS will rewrite the URL using the values of wsdl-host and wsdl-port or wsdl-secure-port.
+
+                When modify-wsdl-address is set to false and the content of <soap:address> is a valid URL,
+                JBossWS will not rewrite the URL.  The <soap:address> URL will be used.
+
+                When the content of <soap:address> is not a valid URL, JBossWS will rewrite it no matter
+                what the setting of modify-wsdl-address.
+
+                If modify-wsdl-address is set to true and wsdl-host is not defined or explicitly set to 'jbossws.undefined.host'
+                the content of <soap:address> URL is use.  JBossWS uses the requester's host when rewriting the <soap:address>
+
+                When modify-wsdl-address is not defined JBossWS uses a default value of true.
+
+              ]]></xs:documentation>
+          </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-host" type="xs:string" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+              <xs:documentation><![CDATA[
+
+                This property explicitly defines the host name or the host's IP address
+                that will be used in the <soap:address> URL rewrite.
+
+                When wsdl-host is not defined JBossWS uses a value of 'jbossws.undefined.host'.
+
+                If wsdl-host is not defined or explicitly set to 'jbossws.undefined.host' and
+                modify-wsdl-address is set to true, the content of <soap:address> URL is use.
+                JBossWS uses requester's host when rewriting the <soap:address>
+
+              ]]></xs:documentation>
+          </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-port" type="xs:int" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+
+            Set this property to explicitly define the HTTP port that will be used for rewriting the SOAP address.
+            Otherwise the HTTP port will be identified by querying the list of installed HTTP connectors.
+
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-secure-port" type="xs:int" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+
+            Set this property to explicitly define the HTTPS port that will be used for rewriting the SOAP address.
+            Otherwise the HTTPS port will be identified by querying the list of installed HTTPS connectors.
+
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-uri-scheme" type="uriSchemeType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation><![CDATA[
+
+           This property explicitly sets the URI scheme to use for rewriting <soap:address>. Valid values are 'http' and 'https'.
+           This configuration overrides scheme computed by processing the endpoint (even if a transport guarantee is specified).
+           The provided values for 'wsdl-port' and 'wsdl-secure-port' (or their default values) are used depending on specified scheme.  
+
+          ]]></xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="wsdl-path-rewrite-rule" type="xs:string" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation><![CDATA[
+
+            This property defines a SED substitution command (e.g., 's/regexp/replacement/g')
+            that JBossWS executes against the path component of each <soap:address> URL published
+            from the server.
+
+            When wsdl-path-rewrite-rule is not defined, JBossWS retains the original path component
+            of each <soap:address> URL.
+
+            When 'modify-wsdl-address' is set to "false" this element is ignored.
+
+            ]]></xs:documentation>
+         </xs:annotation>
+      </xs:element>
+      <xs:element name="endpoint-config" type="endpointConfigType" minOccurs="0" maxOccurs="unbounded"/>
+      <xs:element name="client-config" type="clientConfigType" minOccurs="0" maxOccurs="unbounded"/>
+    </xs:sequence>
+    <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+      <xs:annotation>
+        <xs:documentation>Whether statistics are to be gathered</xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:simpleType name="uriSchemeType">
+    <xs:annotation>
+      <xs:documentation>
+
+        The enumeration type to define the wsdl uri scheme, it can be http or https
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:string">
+      <xs:enumeration value="http"/>
+      <xs:enumeration value="https"/>
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="endpointConfigType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Endpoint config can define unique properties that are visible only to endpoints using this config.
+        It can also define PRE and POST handler chains associated with it.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="pre-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="post-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="propertyType"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Endpoint config name. Must be unique inside subsystem element.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="clientConfigType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Client config can define unique properties that are visible only to clients using this config.
+        It can also define PRE and POST handler chains associated with it.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="pre-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="post-handler-chain" minOccurs="0" maxOccurs="unbounded" type="handlerChainType"/>
+      <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="propertyType"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Client config name. Must be unique inside subsystem element.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="propertyType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Property that is private for endpoint config.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Property name. Must be unique inside endpoint config.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="value" type="xs:string" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+
+          Property value. May be omitted.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="handlerChainType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Handlerchain can be defined such that the handlers in the
+        handlerchain operate on all endpoints or only for specified
+        protocol-bindings.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:sequence>
+      <xs:element name="handler" type="handlerType" minOccurs="1" maxOccurs="unbounded"/>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Handler chain name. Must be unique for every endpoint/client config.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="protocol-bindings" type="protocolBindingListType" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+
+          If protocol-bindings attribute on the handler chain element is omitted
+          then the handlers specified in the handler chain will be applied on 
+          every endpoint/client.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="handlerType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Declares the handler for an endpoint or client.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="name" type="xs:NMTOKEN" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Defines the name of the JAX-WS handler. The name must be unique within the handler chain.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="class" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+
+          Defines a fully qualified class name for the JAX-WS handler implementation.
+
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="protocolBindingListType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type used for specifying a list of
+        protocol-bindingType(s). For e.g.
+
+        ##SOAP11_HTTP ##SOAP12_HTTP ##XML_HTTP
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:list itemType="protocolBindingType"/>
+  </xs:simpleType>
+
+  <xs:simpleType name="protocolBindingType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type used for specifying the URI for the
+        protocol binding used by the endpoint.  For
+        portability one could use one of the following tokens that
+        alias the standard binding types: 
+
+        ##SOAP11_HTTP
+        ##SOAP11_HTTP_MTOM
+        ##SOAP12_HTTP
+        ##SOAP12_HTTP_MTOM
+        ##XML_HTTP
+
+        Other specifications could define tokens that start with ##
+        to alias new standard binding URIs that are introduced.
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:union memberTypes="xs:anyURI protocolAliasType"/>
+  </xs:simpleType>
+
+  <xs:simpleType name="protocolAliasType">
+    <xs:annotation>
+      <xs:documentation>
+
+        Defines the type that is used for specifying tokens that
+        start with ## which are used to alias existing standard
+        protocol bindings and support aliases for new standard
+        binding URIs that are introduced in future specifications.
+
+        The following tokens alias the standard protocol binding
+        URIs:
+
+        ##SOAP11_HTTP = "http://schemas.xmlsoap.org/wsdl/soap/http"
+        ##SOAP11_HTTP_MTOM = 
+        "http://schemas.xmlsoap.org/wsdl/soap/http?mtom=true"
+        ##SOAP12_HTTP = "http://www.w3.org/2003/05/soap/bindings/HTTP/"
+        ##SOAP12_HTTP_MTOM = 
+        "http://www.w3.org/2003/05/soap/bindings/HTTP/?mtom=true"
+        ##XML_HTTP = "http://www.w3.org/2004/08/wsdl/http"
+
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:pattern value="##.+"/>
+    </xs:restriction>
+  </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-weld_1_0.xsd b/wildfly/docs/schema/jboss-as-weld_1_0.xsd
new file mode 100644
index 0000000..7c830b4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-weld_1_0.xsd
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:weld:1.0"
+            xmlns="urn:jboss:domain:weld:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem"/>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-weld_2_0.xsd b/wildfly/docs/schema/jboss-as-weld_2_0.xsd
new file mode 100644
index 0000000..a80061e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-weld_2_0.xsd
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:weld:2.0"
+            xmlns="urn:jboss:domain:weld:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The Weld subsystem root element -->
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:attribute name="require-bean-descriptor" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then implicit bean archives without bean descriptor file (beans.xml) are ignored by Weld</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="non-portable-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then the non-portable mode is enabled. The non-portable mode is suggested by the specification to overcome problems with legacy applications that do not use CDI SPI properly and may be rejected by more strict validation in CDI 1.1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-weld_3_0.xsd b/wildfly/docs/schema/jboss-as-weld_3_0.xsd
new file mode 100644
index 0000000..a2c6ce2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-weld_3_0.xsd
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:weld:3.0"
+            xmlns="urn:jboss:domain:weld:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <!-- The Weld subsystem root element -->
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:attribute name="require-bean-descriptor" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then implicit bean archives without bean descriptor file (beans.xml) are ignored by Weld</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="non-portable-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then the non-portable mode is enabled. The non-portable mode is suggested by the specification to overcome problems with legacy applications that do not use CDI SPI properly and may be rejected by more strict validation in CDI 1.1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="development-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Weld comes with a special mode for application development. When the development mode is enabled, certain built-in tools, which facilitate the development of CDI applications, are available. Setting this attribute to true activates the development mode.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-weld_4_0.xsd b/wildfly/docs/schema/jboss-as-weld_4_0.xsd
new file mode 100644
index 0000000..0a0fcb1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-weld_4_0.xsd
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:weld:4.0"
+            xmlns="urn:jboss:domain:weld:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <!-- The Weld subsystem root element -->
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:attribute name="require-bean-descriptor" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then implicit bean archives without bean descriptor file (beans.xml) are ignored by Weld</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="non-portable-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then the non-portable mode is enabled. The non-portable mode is suggested by the specification to overcome problems with legacy applications that do not use CDI SPI properly and may be rejected by more strict validation in CDI 1.1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="development-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Weld comes with a special mode for application development. When the development mode is enabled, certain built-in tools, which facilitate the development of CDI applications, are available. Setting this attribute to true activates the development mode.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>The number of threads to be used by the Weld thread pool. The pool is shared across all CDI-enabled deployments and used primarily for parallel Weld bootstrap.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-weld_5_0.xsd b/wildfly/docs/schema/jboss-as-weld_5_0.xsd
new file mode 100644
index 0000000..9ac399a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-weld_5_0.xsd
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:weld:5.0"
+           xmlns="urn:jboss:domain:weld:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="5.0">
+
+    <!-- The Weld subsystem root element -->
+
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:attribute name="require-bean-descriptor" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then implicit bean archives without bean descriptor file (beans.xml) are ignored by Weld</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="non-portable-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then the non-portable mode is enabled. The non-portable mode is suggested by the specification to overcome problems with legacy applications that do not use CDI SPI properly and may be rejected by more strict validation in CDI 1.1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="development-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Weld comes with a special mode for application development. When the development mode is enabled, certain built-in tools, which facilitate the development of CDI applications, are available. Setting this attribute to true activates the development mode.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="thread-pool-size" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>The number of threads to be used by the Weld thread pool. The pool is shared across all CDI-enabled deployments and used primarily for parallel Weld bootstrap.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="legacy-empty-beans-xml-treatment" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Treats bean archives with empty beans.xml as having discovery mode ALL.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-xts_1_0.xsd b/wildfly/docs/schema/jboss-as-xts_1_0.xsd
new file mode 100644
index 0000000..fee7f41
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-xts_1_0.xsd
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:xts:1.0"
+            xmlns="urn:jboss:domain:xts:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The xts subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the XTS subsystem.
+
+                This is just the minimum to get XTS bootstrapped as an AS7 extension.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="xts-environment" type="xts-environment" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="xts-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                url configures XTS clients to use remote transaction coordination services.
+                if it is left unset then clients employ the local coordinator services.
+                the value should identify an OASIS WSTX 1.1 Activation Coordinator service.
+                The local JBoss Activation Service url has the format
+                    "http://<bindadd>r:<webport>/ws-c11/ActivationService"
+                where
+                    <bindaddr> is the app server bind address (localhost by default) and
+                    <webport> is the unsecured JBoss Web server port (8080 by default).
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="url" type="xs:string" use="optional" />
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-as-xts_2_0.xsd b/wildfly/docs/schema/jboss-as-xts_2_0.xsd
new file mode 100644
index 0000000..3129d0c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-xts_2_0.xsd
@@ -0,0 +1,81 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:xts:2.0"
+            xmlns="urn:jboss:domain:xts:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The xts subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the XTS subsystem.
+
+                This is just the minimum to get XTS bootstrapped as an AS7 extension.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="host" type="host" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="xts-environment" type="xts-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-context-propagation" type="default-context-propagation" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="host">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    name configures which host should be used by the XTS subsystem to register endpoints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="xts-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                url configures XTS clients to use remote transaction coordination services.
+                if it is left unset then clients employ the local coordinator services.
+                the value should identify an OASIS WSTX 1.1 Activation Coordinator service.
+                The local JBoss Activation Service url has the format
+                    "http://<bindadd>r:<webport>/ws-c11/ActivationService"
+                where
+                    <bindaddr> is the app server bind address (localhost by default) and
+                    <webport> is the unsecured JBoss Web server port (8080 by default).
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="url" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="default-context-propagation">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                'enabled' states whether to automatically propagate transactional context.
+                When set to 'true', Web Service clients will automatically propagate a WS-AT
+                transactional context if a JTA or WS-AT transaction is running when the call is made.
+                Similarly, a WS-BA transactional context will be propagated if a WS-BA transaction
+                is running when the call is made. This behavior can be overridden on a per client
+                basis using the org.jboss.jbossts.txbridge.outbound.JTAOverWSATFeature and
+                com.arjuna.mw.wst11.client.WSTXFeature features.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-as-xts_3_0.xsd b/wildfly/docs/schema/jboss-as-xts_3_0.xsd
new file mode 100644
index 0000000..6ad76d1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-as-xts_3_0.xsd
@@ -0,0 +1,95 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:xts:3.0"
+            xmlns="urn:jboss:domain:xts:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <!-- The xts subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the XTS subsystem.
+
+                This is just the minimum to get XTS bootstrapped as an AS7 extension.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="host" type="host" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="xts-environment" type="xts-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-context-propagation" type="default-context-propagation" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async-registration" type="async-registration" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="host">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    name configures which host should be used by the XTS subsystem to register endpoints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="xts-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                url configures XTS clients to use remote transaction coordination services.
+                if it is left unset then clients employ the local coordinator services.
+                the value should identify an OASIS WSTX 1.1 Activation Coordinator service.
+                The local JBoss Activation Service url has the format
+                    "http://<bindadd>r:<webport>/ws-c11/ActivationService"
+                where
+                    <bindaddr> is the app server bind address (localhost by default) and
+                    <webport> is the unsecured JBoss Web server port (8080 by default).
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="url" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="default-context-propagation">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                'enabled' states whether to automatically propagate transactional context.
+                When set to 'true', Web Service clients will automatically propagate a WS-AT
+                transactional context if a JTA or WS-AT transaction is running when the call is made.
+                Similarly, a WS-BA transactional context will be propagated if a WS-BA transaction
+                is running when the call is made. This behavior can be overridden on a per client
+                basis using the org.jboss.jbossts.txbridge.outbound.JTAOverWSATFeature and
+                com.arjuna.mw.wst11.client.WSTXFeature features.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="async-registration">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                'enabled' feature of asynchronous registration of endpoints. This is way how to integrate
+                Narayana WS-AT with .NET (even this is non-standard non-spec defined).
+                The details of implementation could be consulted at JBTM-2928
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-client_6_0.xsd b/wildfly/docs/schema/jboss-client_6_0.xsd
new file mode 100644
index 0000000..6137d88
--- /dev/null
+++ b/wildfly/docs/schema/jboss-client_6_0.xsd
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            version="6.0"
+            elementFormDefault="qualified"
+        >
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss 6.0 application client deployment descriptor.
+	The deployment descriptor must be named "META-INF/jboss-client.xml" in
+	the application client's jar file.  All the application client deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-client xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee
+                            http://www.jboss.org/j2ee/schema/jboss-client_6_0.xsd"
+             version="6.0">
+	       ...
+            </jboss-client>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-client_6_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://java.sun.com/xml/ns/javaee/javaee_6.xsd"/>
+   <xsd:include schemaLocation="http://www.jboss.org/j2ee/schema/jboss-common_6_0.xsd"/>
+
+   <xsd:element name="jboss-client" type="jboss:jboss-clientType"/>
+
+   <xsd:complexType name="jboss-clientType">
+      <xsd:sequence>
+         <xsd:element name="module-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="callback-handler" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="metadata-complete" type="xsd:boolean" minOccurs="0"/>
+         <xsd:element name="jndi-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destinations" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="depends" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:string"/>
+      <xsd:attribute name="version" type="xsd:string"/>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-client_8_0.xsd b/wildfly/docs/schema/jboss-client_8_0.xsd
new file mode 100644
index 0000000..ee8f321
--- /dev/null
+++ b/wildfly/docs/schema/jboss-client_8_0.xsd
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            version="8.0"
+            elementFormDefault="qualified"
+        >
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss 8.0 application client deployment descriptor.
+	The deployment descriptor must be named "META-INF/jboss-client.xml" in
+	the application client's jar file.  All the application client deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-client xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee
+                            http://www.jboss.org/j2ee/schema/jboss-client_8_0.xsd"
+             version="8.0">
+	       ...
+            </jboss-client>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-client_8_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="http://www.jboss.org/schema/jbossas/javaee_8.xsd"/>
+   <xsd:include schemaLocation="http://www.jboss.org/j2ee/schema/jboss-common_8_0.xsd"/>
+
+   <xsd:element name="jboss-client" type="jboss:jboss-clientType"/>
+
+   <xsd:complexType name="jboss-clientType">
+      <xsd:sequence>
+         <xsd:element name="module-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="callback-handler" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="metadata-complete" type="xsd:boolean" minOccurs="0"/>
+         <xsd:element name="jndi-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destinations" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="depends" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:string"/>
+      <xsd:attribute name="version" type="xsd:string"/>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-client_8_1.xsd b/wildfly/docs/schema/jboss-client_8_1.xsd
new file mode 100644
index 0000000..451faa8
--- /dev/null
+++ b/wildfly/docs/schema/jboss-client_8_1.xsd
@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            version="8.1"
+            elementFormDefault="qualified"
+        >
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss 8.0 application client deployment descriptor.
+	The deployment descriptor must be named "META-INF/jboss-client.xml" in
+	the application client's jar file.  All the application client deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+	http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-client xmlns="http://www.jboss.com/xml/ns/javaee"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee
+                            https://www.jboss.org/j2ee/schema/jboss-client_8_1.xsd"
+             version="8.1">
+	       ...
+            </jboss-client>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-client_8_1.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="https://www.jboss.org/schema/jbossas/javaee_8.xsd"/>
+   <xsd:include schemaLocation="https://www.jboss.org/j2ee/schema/jboss-common_8_1.xsd"/>
+
+   <xsd:element name="jboss-client" type="jboss:jboss-clientType"/>
+
+   <xsd:complexType name="jboss-clientType">
+      <xsd:sequence>
+         <xsd:element name="module-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="callback-handler" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="metadata-complete" type="xsd:boolean" minOccurs="0"/>
+         <xsd:element name="jndi-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destinations" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="depends" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:string"/>
+      <xsd:attribute name="version" type="xsd:string"/>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-client_9_0.xsd b/wildfly/docs/schema/jboss-client_9_0.xsd
new file mode 100644
index 0000000..d332bd2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-client_9_0.xsd
@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:jboss="urn:jboss:jakartaee:1.0"
+            targetNamespace="urn:jboss:jakartaee:1.0"
+            version="9.0"
+            elementFormDefault="qualified"
+        >
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss 9.0 application client deployment descriptor.
+	The deployment descriptor must be named "META-INF/jboss-client.xml" in
+	the application client's jar file.  All the application client deployment descriptors must indicate
+	the JBoss schema by using the Jakarta EE namespace:
+
+	urn:jboss:jakartaee:1.0
+
+	and by indicating the version of the schema by
+	using the version attribute as shown below:
+
+	    <jboss-client xmlns="urn:jboss:jakartaee:1.0"
+             xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+             xsi:schemaLocation="urn:jboss:jakartaee:1.0
+                            https://www.jboss.org/schema/jbossas/jboss-client_9_0.xsd"
+             version="9.0">
+	       ...
+            </jboss-client>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Jakarta EE namespace with the following location:
+
+	https://www.jboss.org/schema/jbossas/jboss-client_9_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://jakarta.ee/xml/ns/jakartaee/application-client_10.xsd"/>
+   <xsd:include schemaLocation="https://www.jboss.org/schema/jbossas/jboss-common_9_0.xsd"/>
+
+   <xsd:element name="jboss-client" type="jboss:jboss-clientType"/>
+
+   <xsd:complexType name="jboss-clientType">
+      <xsd:sequence>
+         <xsd:element name="module-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="callback-handler" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="metadata-complete" type="xsd:boolean" minOccurs="0"/>
+         <xsd:element name="jndi-name" type="xsd:string" minOccurs="0"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destinations" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="depends" type="xsd:string" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:string"/>
+      <xsd:attribute name="version" type="xsd:string"/>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_5_1.xsd b/wildfly/docs/schema/jboss-common_5_1.xsd
new file mode 100644
index 0000000..c29dea0
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_5_1.xsd
@@ -0,0 +1,546 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified" 
+            attributeFormDefault="unqualified"
+            version="5.0">
+
+   <xsd:annotation>
+      <xsd:documentation> JBoss, Home of Professional Open Source Copyright 2005, JBoss Inc., and
+         individual contributors as indicated by the @authors tag. See the copyright.txt in the
+         distribution for a full listing of individual contributors. This is free software; you can
+         redistribute it and/or modify it under the terms of the GNU Lesser General Public License as
+         published by the Free Software Foundation; either version 2.1 of the License, or (at your
+         option) any later version. This software is distributed in the hope that it will be useful,
+         but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+         A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should
+         have received a copy of the GNU Lesser General Public License along with this software; if
+         not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+         02110-1301 USA, or see the FSF site: http://www.fsf.org. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	http://www.jboss.com/xml/ns/javaee
+
+        Online URL https://www.jboss.org/j2ee/schema/jboss-common_5_1.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://java.sun.com/xml/ns/javaee/javaee_5.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="javaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="javaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="javaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="javaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="javaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="javaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="javaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="javaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="javaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="javaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="javaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="javaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="javaee:handler" />
+               <xsd:field xpath="javaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all j2ee components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+      
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="javaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="javaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      
+      <!-- 
+      <xsd:complexContent>
+         <xsd:extension base="javaee:ejb-refType">
+            <xsd:sequence>
+               <xsd:element name="jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+               <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+            </xsd:sequence>
+         </xsd:extension>
+      </xsd:complexContent>
+      -->
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="javaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="javaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="javaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="javaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="javaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="javaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="javaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+            <xsd:element name="res-url" type="javaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[     
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="javaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_6_0.xsd b/wildfly/docs/schema/jboss-common_6_0.xsd
new file mode 100644
index 0000000..d2169da
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_6_0.xsd
@@ -0,0 +1,572 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified" 
+            attributeFormDefault="unqualified"
+            version="6.0">
+
+   <xsd:annotation>
+      <xsd:documentation> JBoss, Home of Professional Open Source Copyright 2005, JBoss Inc., and
+         individual contributors as indicated by the @authors tag. See the copyright.txt in the
+         distribution for a full listing of individual contributors. This is free software; you can
+         redistribute it and/or modify it under the terms of the GNU Lesser General Public License as
+         published by the Free Software Foundation; either version 2.1 of the License, or (at your
+         option) any later version. This software is distributed in the hope that it will be useful,
+         but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+         A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should
+         have received a copy of the GNU Lesser General Public License along with this software; if
+         not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+         02110-1301 USA, or see the FSF site: http://www.fsf.org. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	http://www.jboss.com/xml/ns/javaee
+
+        Online URL https://www.jboss.org/j2ee/schema/jboss-common_6_0.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://java.sun.com/xml/ns/javaee/javaee_6.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="javaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="javaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="data-source" type="jboss:data-sourceType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="javaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="javaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="javaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="javaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="javaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="javaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="javaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="javaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="javaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" />
+      <xsd:element name="name" type="javaee:jndi-nameType" />
+      <xsd:element name="class-name" type="javaee:fully-qualified-classType" minOccurs="0" />
+      <xsd:element name="server-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="port-number" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="database-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="url" type="javaee:jdbc-urlType" minOccurs="0" />
+      <xsd:element name="user" type="javaee:string" minOccurs="0" />
+      <xsd:element name="password" type="javaee:string" minOccurs="0" />
+      <xsd:element name="property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+      <xsd:element name="login-timeout" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="transactional" type="javaee:xsdBooleanType" minOccurs="0" />
+      <xsd:element name="isolation-level" type="javaee:isolation-levelType" minOccurs="0" />
+      <xsd:element name="initial-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="min-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-idle-time" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-statements" type="javaee:xsdIntegerType" minOccurs="0" />
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="javaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="javaee:handler" />
+               <xsd:field xpath="javaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all j2ee components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+      
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="javaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="javaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      
+      <!-- 
+      <xsd:complexContent>
+         <xsd:extension base="javaee:ejb-refType">
+            <xsd:sequence>
+               <xsd:element name="jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+               <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+            </xsd:sequence>
+         </xsd:extension>
+      </xsd:complexContent>
+      -->
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="javaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="javaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="javaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="javaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="javaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="javaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="javaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+            <xsd:element name="res-url" type="javaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[     
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="javaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="lookup-name" type="javaee:xsdStringType"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_7_0.xsd b/wildfly/docs/schema/jboss-common_7_0.xsd
new file mode 100644
index 0000000..2182fbc
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_7_0.xsd
@@ -0,0 +1,573 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.0">
+
+   <xsd:annotation>
+      <xsd:documentation> JBoss, Home of Professional Open Source Copyright 2005, JBoss Inc., and
+         individual contributors as indicated by the @authors tag. See the copyright.txt in the
+         distribution for a full listing of individual contributors. This is free software; you can
+         redistribute it and/or modify it under the terms of the GNU Lesser General Public License as
+         published by the Free Software Foundation; either version 2.1 of the License, or (at your
+         option) any later version. This software is distributed in the hope that it will be useful,
+         but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+         A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should
+         have received a copy of the GNU Lesser General Public License along with this software; if
+         not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+         02110-1301 USA, or see the FSF site: http://www.fsf.org. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	http://www.jboss.com/xml/ns/javaee
+
+        Online URL https://www.jboss.org/j2ee/schema/jboss-common_7_0.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_1.xsd"/>
+   <xsd:include schemaLocation="jboss-common_7_0.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="javaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="javaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="data-source" type="jboss:data-sourceType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="javaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="javaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="javaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="javaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="javaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="javaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="javaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="javaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="javaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" />
+      <xsd:element name="name" type="javaee:jndi-nameType" />
+      <xsd:element name="class-name" type="javaee:fully-qualified-classType" minOccurs="0" />
+      <xsd:element name="server-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="port-number" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="database-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="url" type="javaee:jdbc-urlType" minOccurs="0" />
+      <xsd:element name="user" type="javaee:string" minOccurs="0" />
+      <xsd:element name="password" type="javaee:string" minOccurs="0" />
+      <xsd:element name="property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+      <xsd:element name="login-timeout" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="transactional" type="javaee:xsdBooleanType" minOccurs="0" />
+      <xsd:element name="isolation-level" type="javaee:isolation-levelType" minOccurs="0" />
+      <xsd:element name="initial-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="min-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-idle-time" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-statements" type="javaee:xsdIntegerType" minOccurs="0" />
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="javaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="javaee:handler" />
+               <xsd:field xpath="javaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all j2ee components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="javaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="javaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+
+      <!--
+      <xsd:complexContent>
+         <xsd:extension base="javaee:ejb-refType">
+            <xsd:sequence>
+               <xsd:element name="jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+               <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+            </xsd:sequence>
+         </xsd:extension>
+      </xsd:complexContent>
+      -->
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="javaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="javaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="javaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="javaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="javaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="javaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="javaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+            <xsd:element name="res-url" type="javaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="javaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="lookup-name" type="javaee:xsdStringType"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_7_1.xsd b/wildfly/docs/schema/jboss-common_7_1.xsd
new file mode 100644
index 0000000..d98d936
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_7_1.xsd
@@ -0,0 +1,572 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.1">
+
+   <xsd:annotation>
+      <xsd:documentation> JBoss, Home of Professional Open Source Copyright 2005, JBoss Inc., and
+         individual contributors as indicated by the @authors tag. See the copyright.txt in the
+         distribution for a full listing of individual contributors. This is free software; you can
+         redistribute it and/or modify it under the terms of the GNU Lesser General Public License as
+         published by the Free Software Foundation; either version 2.1 of the License, or (at your
+         option) any later version. This software is distributed in the hope that it will be useful,
+         but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+         A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should
+         have received a copy of the GNU Lesser General Public License along with this software; if
+         not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+         02110-1301 USA, or see the FSF site: http://www.fsf.org. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	http://www.jboss.com/xml/ns/javaee
+
+        Online URL https://www.jboss.org/j2ee/schema/jboss-common_7_1.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="https://www.jboss.org/schema/jbossas/javaee_7.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="javaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="javaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="data-source" type="jboss:data-sourceType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="javaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="javaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="javaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="javaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="javaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="javaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="javaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="javaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="javaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" />
+      <xsd:element name="name" type="javaee:jndi-nameType" />
+      <xsd:element name="class-name" type="javaee:fully-qualified-classType" minOccurs="0" />
+      <xsd:element name="server-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="port-number" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="database-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="url" type="javaee:jdbc-urlType" minOccurs="0" />
+      <xsd:element name="user" type="javaee:string" minOccurs="0" />
+      <xsd:element name="password" type="javaee:string" minOccurs="0" />
+      <xsd:element name="property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+      <xsd:element name="login-timeout" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="transactional" type="javaee:xsdBooleanType" minOccurs="0" />
+      <xsd:element name="isolation-level" type="javaee:isolation-levelType" minOccurs="0" />
+      <xsd:element name="initial-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="min-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-idle-time" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-statements" type="javaee:xsdIntegerType" minOccurs="0" />
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="javaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="javaee:handler" />
+               <xsd:field xpath="javaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all j2ee components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="javaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="javaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+
+      <!--
+      <xsd:complexContent>
+         <xsd:extension base="javaee:ejb-refType">
+            <xsd:sequence>
+               <xsd:element name="jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+               <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+            </xsd:sequence>
+         </xsd:extension>
+      </xsd:complexContent>
+      -->
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="javaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="javaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="javaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="javaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="javaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="javaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="javaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+            <xsd:element name="res-url" type="javaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="javaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="lookup-name" type="javaee:xsdStringType"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_8_0.xsd b/wildfly/docs/schema/jboss-common_8_0.xsd
new file mode 100644
index 0000000..92cb1e7
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_8_0.xsd
@@ -0,0 +1,572 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8.0">
+
+   <xsd:annotation>
+      <xsd:documentation> JBoss, Home of Professional Open Source Copyright 2005, JBoss Inc., and
+         individual contributors as indicated by the @authors tag. See the copyright.txt in the
+         distribution for a full listing of individual contributors. This is free software; you can
+         redistribute it and/or modify it under the terms of the GNU Lesser General Public License as
+         published by the Free Software Foundation; either version 2.1 of the License, or (at your
+         option) any later version. This software is distributed in the hope that it will be useful,
+         but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR
+         A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. You should
+         have received a copy of the GNU Lesser General Public License along with this software; if
+         not, write to the Free Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+         02110-1301 USA, or see the FSF site: http://www.fsf.org. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	http://www.jboss.com/xml/ns/javaee
+
+        Online URL https://www.jboss.org/j2ee/schema/jboss-common_8_0.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="https://www.jboss.org/schema/jbossas/javaee_8.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="javaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="javaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="data-source" type="jboss:data-sourceType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="javaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="javaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="javaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="javaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="javaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="javaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="javaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="javaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="javaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" />
+      <xsd:element name="name" type="javaee:jndi-nameType" />
+      <xsd:element name="class-name" type="javaee:fully-qualified-classType" minOccurs="0" />
+      <xsd:element name="server-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="port-number" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="database-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="url" type="javaee:jdbc-urlType" minOccurs="0" />
+      <xsd:element name="user" type="javaee:string" minOccurs="0" />
+      <xsd:element name="password" type="javaee:string" minOccurs="0" />
+      <xsd:element name="property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+      <xsd:element name="login-timeout" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="transactional" type="javaee:xsdBooleanType" minOccurs="0" />
+      <xsd:element name="isolation-level" type="javaee:isolation-levelType" minOccurs="0" />
+      <xsd:element name="initial-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="min-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-idle-time" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-statements" type="javaee:xsdIntegerType" minOccurs="0" />
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="javaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="javaee:handler" />
+               <xsd:field xpath="javaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all j2ee components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="javaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="javaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+
+      <!--
+      <xsd:complexContent>
+         <xsd:extension base="javaee:ejb-refType">
+            <xsd:sequence>
+               <xsd:element name="jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+               <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+            </xsd:sequence>
+         </xsd:extension>
+      </xsd:complexContent>
+      -->
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="javaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="javaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="javaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="javaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="javaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="javaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="javaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+            <xsd:element name="res-url" type="javaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="javaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="lookup-name" type="javaee:xsdStringType"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_8_1.xsd b/wildfly/docs/schema/jboss-common_8_1.xsd
new file mode 100644
index 0000000..c7a5e8e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_8_1.xsd
@@ -0,0 +1,574 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8.1">
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	http://www.jboss.com/xml/ns/javaee
+
+        Online URL https://www.jboss.org/j2ee/schema/jboss-common_8_1.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="https://www.jboss.org/schema/jbossas/javaee_8.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="javaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="javaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="data-source" type="jboss:data-sourceType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="javaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="javaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="javaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="javaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="javaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="javaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="javaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="javaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="javaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="javaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="javaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="javaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="javaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" />
+      <xsd:element name="name" type="javaee:jndi-nameType" />
+      <xsd:element name="class-name" type="javaee:fully-qualified-classType" minOccurs="0" />
+      <xsd:element name="server-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="port-number" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="database-name" type="javaee:string" minOccurs="0" />
+      <xsd:element name="url" type="javaee:jdbc-urlType" minOccurs="0" />
+      <xsd:element name="user" type="javaee:string" minOccurs="0" />
+      <xsd:element name="password" type="javaee:string" minOccurs="0" />
+      <xsd:element name="property" type="javaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+      <xsd:element name="login-timeout" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="transactional" type="javaee:xsdBooleanType" minOccurs="0" />
+      <xsd:element name="isolation-level" type="javaee:isolation-levelType" minOccurs="0" />
+      <xsd:element name="initial-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="min-pool-size" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-idle-time" type="javaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-statements" type="javaee:xsdIntegerType" minOccurs="0" />
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="javaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="javaee:handler" />
+               <xsd:field xpath="javaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all j2ee components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="javaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="javaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+
+      <!--
+      <xsd:complexContent>
+         <xsd:extension base="javaee:ejb-refType">
+            <xsd:sequence>
+               <xsd:element name="jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+               <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+            </xsd:sequence>
+         </xsd:extension>
+      </xsd:complexContent>
+      -->
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="javaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="javaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="javaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="javaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="javaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="javaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="javaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="javaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="javaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="javaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="javaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+            <xsd:element name="res-url" type="javaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+
+         <xsd:element name="ignore-dependency" type="javaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="javaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="javaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="javaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="lookup-name" type="javaee:xsdStringType"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-common_9_0.xsd b/wildfly/docs/schema/jboss-common_9_0.xsd
new file mode 100644
index 0000000..139b9b2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-common_9_0.xsd
@@ -0,0 +1,564 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2022, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:jakartaee:1.0"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jboss="urn:jboss:jakartaee:1.0"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="9.0">
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This XML Schema defines types, elements and model groups that common to all application-specific JBoss schemas.
+        The target namespace is
+
+	urn:jboss:jakartaee:1.0
+
+        Online URL https://www.jboss.org/schema/jbossas/jboss-common_9_0.xsd
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Jakarta EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://jakarta.ee/xml/ns/jakartaee/jakartaee_10.xsd"/>
+
+   <xsd:group name="descriptionGroup">
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="display-name" type="jakartaee:display-nameType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="icon" type="jakartaee:iconType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="jndiEnvironmentRefsGroup">
+      <xsd:sequence>
+         <xsd:element name="env-entry" type="jboss:env-entryType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-ref" type="jboss:ejb-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ejb-local-ref" type="jboss:ejb-local-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:service-refGroup" />
+         <xsd:element name="resource-ref" type="jboss:resource-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref" type="jboss:resource-env-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref" type="jboss:message-destination-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref" type="jboss:persistence-context-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref" type="jboss:persistence-unit-refType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="post-construct" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="pre-destroy" type="jboss:lifecycle-callbackType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="data-source" type="jboss:data-sourceType" minOccurs="0" maxOccurs="unbounded" />
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:complexType name="env-entryType">
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="env-entry-name" type="jakartaee:jndi-nameType" />
+         <xsd:element name="env-entry-type" type="jakartaee:env-entry-type-valuesType" minOccurs="0" />
+         <xsd:element name="env-entry-value" type="jakartaee:xsdStringType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="injection-targetType">
+      <xsd:sequence>
+         <xsd:element name="injection-target-class" type="jakartaee:fully-qualified-classType" />
+         <xsd:element name="injection-target-name" type="jakartaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="lifecycle-callbackType">
+      <xsd:sequence>
+         <xsd:element name="lifecycle-callback-class" type="jakartaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:element name="lifecycle-callback-method" type="jakartaee:java-identifierType" />
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destination-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="message-destination-ref-name" type="jakartaee:jndi-nameType"/>
+         <xsd:element name="message-destination-type" type="jakartaee:message-destination-typeType" minOccurs="0" />
+         <xsd:element name="message-destination-usage" type="jakartaee:message-destination-usageType" minOccurs="0" />
+         <xsd:element name="message-destination-link" type="jakartaee:message-destination-linkType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <!-- Bring persistence-context-refType info jboss namespace -->
+   <xsd:complexType name="persistence-context-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-context-ref-name" type="jakartaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="jakartaee:string" minOccurs="0" />
+         <xsd:element name="persistence-context-type" type="jakartaee:persistence-context-typeType" minOccurs="0" />
+         <xsd:element name="persistence-property" type="jakartaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="persistence-unit-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="persistence-unit-ref-name" type="jakartaee:jndi-nameType" />
+         <xsd:element name="persistence-unit-name" type="jakartaee:string" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-env-refType">
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="resource-env-ref-name" type="jakartaee:jndi-nameType" />
+         <xsd:element name="resource-env-ref-type" type="jakartaee:fully-qualified-classType" minOccurs="0" />
+         <xsd:group ref="jboss:resourceGroup" />
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+  <xsd:complexType name="data-sourceType">
+    <xsd:sequence>
+      <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" />
+      <xsd:element name="name" type="jakartaee:jndi-nameType" />
+      <xsd:element name="class-name" type="jakartaee:fully-qualified-classType" minOccurs="0" />
+      <xsd:element name="server-name" type="jakartaee:string" minOccurs="0" />
+      <xsd:element name="port-number" type="jakartaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="database-name" type="jakartaee:string" minOccurs="0" />
+      <xsd:element name="url" type="jakartaee:jdbc-urlType" minOccurs="0" />
+      <xsd:element name="user" type="jakartaee:string" minOccurs="0" />
+      <xsd:element name="password" type="jakartaee:string" minOccurs="0" />
+      <xsd:element name="property" type="jakartaee:propertyType" minOccurs="0" maxOccurs="unbounded" />
+      <xsd:element name="login-timeout" type="jakartaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="transactional" type="jakartaee:xsdBooleanType" minOccurs="0" />
+      <xsd:element name="isolation-level" type="jakartaee:isolation-levelType" minOccurs="0" />
+      <xsd:element name="initial-pool-size" type="jakartaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-pool-size" type="jakartaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="min-pool-size" type="jakartaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-idle-time" type="jakartaee:xsdIntegerType" minOccurs="0" />
+      <xsd:element name="max-statements" type="jakartaee:xsdIntegerType" minOccurs="0" />
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:group name="resourceGroup">
+      <xsd:sequence>
+         <!-- In jboss xml we allow the use of jndi-name instead of mapped-name -->
+         <xsd:choice minOccurs="0">
+            <xsd:element name="jndi-name" type="jakartaee:jndi-nameType"/>
+            <xsd:element name="mapped-name" type="jakartaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+         <xsd:element name="ignore-dependency" type="jakartaee:emptyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:group>
+
+   <xsd:group name="service-refGroup">
+      <xsd:sequence>
+         <xsd:element name="service-ref" type="jboss:service-refType" minOccurs="0" maxOccurs="unbounded">
+            <xsd:key name="service-ref_handler-name-key">
+               <xsd:selector xpath="jakartaee:handler" />
+               <xsd:field xpath="jakartaee:handler-name" />
+            </xsd:key>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:group>
+
+  <xsd:complexType name="jndi-binding-policyType">
+    <xsd:annotation>
+      <xsd:documentation>
+	<![CDATA[
+
+	  The jndiBindingPolicyType defines the fully-qualified name of
+	  a class that implements the JNDI binding policy.
+
+	  ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+   <xsd:complexType name="jmx-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The jmx-name element allows one to specify the JMX ObjectName to use for
+            the MBean associated with the ejb-jar module. This must be a unique name and valid JMX
+            ObjectName string. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="jakartaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-domainType">
+      <xsd:annotation>
+         <xsd:documentation> The security-domain element specifies the JNDI name of the security
+            manager that implements the EJBSecurityManager and RealmMapping for the domain. When
+            specified at the jboss level it specifies the security domain for all Jakarta EE components in the
+            deployment unit. One can override the global security-domain at the container level using
+            the security-domain element at the container-configuration level. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="jakartaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="security-roleType">
+      <xsd:annotation>
+         <xsd:documentation> The security-role element contains the definition of a security role.
+            The definition consists of an the security role name and principal name element(s). </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="description"
+            type="jakartaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xsd:element name="role-name"
+            type="jakartaee:role-nameType"/>
+         <xsd:element name="principal-name" type="jboss:principal-nameType" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="principal-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="jakartaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="dependsType">
+      <xsd:annotation>
+         <xsd:documentation> The depends element gives a JMX ObjectName of a service on which the
+            container or ejb depends. (default) </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="jakartaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="local-jndi-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The JNDI name under with the local interface should be bound. If it is not
+            provided jboss will assume "jndi-name" = "beanClass/local" </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="jakartaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml Used in: entity, session,
+            message-driven, consumer, and service </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="jakartaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="jakartaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="home" type="jakartaee:homeType" minOccurs="0"/>
+         <xsd:element name="remote" type="jakartaee:remoteType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="jakartaee:ejb-linkType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+
+   </xsd:complexType>
+
+   <xsd:complexType name="ejb-local-refType">
+      <xsd:annotation>
+         <xsd:documentation> The ejb-local-ref element is used to give the jndi-name of an external ejb
+            reference. In the case of an external ejb reference, you don't provide a ejb-link element in
+            ejb-jar.xml, but you provide a jndi-name in jboss.xml </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="ejb-ref-name" type="jakartaee:ejb-ref-nameType" minOccurs="0"/>
+         <xsd:element name="ejb-ref-type" type="jakartaee:ejb-ref-typeType" minOccurs="0"/>
+         <xsd:element name="local-home" type="jakartaee:local-homeType" minOccurs="0"/>
+         <xsd:element name="local" type="jakartaee:localType" minOccurs="0"/>
+         <xsd:element name="ejb-link" type="jakartaee:ejb-linkType" minOccurs="0"/>
+         <xsd:element name="local-jndi-name" type="jakartaee:jndi-nameType" minOccurs="0"/>
+         <xsd:group ref="jboss:resourceGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="resource-refType">
+      <xsd:annotation>
+         <xsd:documentation> The resource-ref element gives a mapping between the "code name" of a
+            resource (res-ref-name, provided by the Bean Developer) and its "xml name" (resource-name,
+            provided by the Application Assembler). If no resource-ref is provided, jboss will assume
+            that "xml-name" = "code name" See resource-managers. </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="res-ref-name" type="jakartaee:jndi-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-ref-name element specifies the name of a resource manager
+                  connection factory reference. The name is a JNDI name relative to the java:comp/env
+                  context. The name must be unique within a Deployment File. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-type" type="jakartaee:fully-qualified-classType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation> The res-type element specifies the type of the data source. The type
+                  is specified by the fully qualified Java language class or interface expected to be
+                  implemented by the data source. </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+
+         <xsd:element name="res-auth" type="jakartaee:res-authType" minOccurs="0"/>
+
+         <xsd:element name="res-sharing-scope" type="jakartaee:res-sharing-scopeType" minOccurs="0"/>
+
+         <!-- We redefine part of the resourceGroup here, so we can't ref it -->
+         <xsd:choice>
+            <xsd:element name="resource-name" type="jakartaee:xsdStringType"/>
+            <xsd:element name="jndi-name" type="jakartaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="jakartaee:xsdStringType"/>
+            <xsd:element name="res-url" type="jakartaee:xsdStringType"/>
+         </xsd:choice>
+
+         <xsd:element name="injection-target" type="jboss:injection-targetType" minOccurs="0" maxOccurs="unbounded" />
+
+         <xsd:element name="ignore-dependency" type="jakartaee:emptyType" minOccurs="0"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-ref-nameType">
+      <xsd:annotation>
+         <xsd:documentation> The service-ref-name element gives the ENC relative name used in the
+            ejb-jar.xml service-ref-name element. </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="jakartaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="loader-repositoryType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+      The loader-repository specifies the name of the UnifiedLoaderRepository
+   MBean to use for the ear to provide ear level scoping of classes deployed
+   in the ear. It is a unique JMX ObjectName string. It may also specify
+   an arbitrary configuration by including a loader-repository-config element.
+
+Examples:
+   <loader-repository>jboss.test:loader=cts-cmp2v1-sar.ear</loader-repository>
+
+   <loader-repository loaderRepositoryClass='dot.com.LoaderRepository'>
+      dot.com:loader=unique-archive-name
+      <loader-repository-config configParserClass='dot.com.LoaderParser'>
+         java2ParentDelegaton=true
+      </loader-repository-config>
+   </loader-repository>
+        </loader-repository>
+        ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="loader-repository-config" type="jboss:loader-repository-configType"
+                      minOccurs="0" maxOccurs="unbounded"/>
+
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="loaderRepositoryClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <!-- **************************************************** -->
+
+   <xsd:complexType name="loader-repository-configType" mixed="true">
+      <xsd:annotation>
+         <xsd:documentation> The loader-repository-config element specifies any arbitrary configuration
+            fragment for use in configuring the loader-repository instance. The actual content of this
+            element is specific to the loaderRepositoryClass and the code parsing the element.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:attribute name="id" type="xsd:ID"/>
+      <xsd:attribute name="configParserClass" type="xsd:string"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="service-refType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+  Runtime settings for a web service reference. In the simplest case,
+  there is no runtime information required for a service ref.  Runtime info
+  is only needed in the following cases :
+
+  * to define the port that should be used to resolve a container-managed port
+  * to define default Stub property settings for Stub objects
+  * to define the URL of a final WSDL document to be used
+
+  Example:
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <wsdl-override>file:/wsdlRepository/organization-service.wsdl</wsdl-override>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>OrganizationService</service-ref-name>
+   <config-name>Secure Client Config</config-name>
+   <config-file>META-INF/jbossws-client-config.xml</config-file>
+   <handler-chain>META-INF/jbossws-client-handlers.xml</handler-chain>
+  </service-ref>
+
+  <service-ref>
+   <service-ref-name>SecureService</service-ref-name>
+   <service-impl-class>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpointService</service-impl-class>
+   <service-qname>{http://org.jboss.ws/wsref}SecureEndpointService</service-qname>
+    <port-component-ref>
+     <service-endpoint-interface>org.jboss.tests.ws.jaxws.webserviceref.SecureEndpoint</service-endpoint-interface>
+     <port-qname>{http://org.jboss.ws/wsref}SecureEndpointPort</port-qname>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.username</name>
+      <value>kermit</value>
+     </stub-property>
+     <stub-property>
+      <name>javax.xml.ws.security.auth.password</name>
+      <value>thefrog</value>
+     </stub-property>
+   </port-component-ref>
+  </service-ref>
+    ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="service-ref-name" type="xsd:string"/>
+         <xsd:element name="service-impl-class" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="service-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="handler-chain" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-component-ref" type="jboss:port-component-refType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="wsdl-override" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <!--
+     Information for a port within a service-ref.
+
+     Either service-endpoint-interface or wsdl-port or both
+     (service-endpoint-interface and wsdl-port) should be specified.
+
+     If both are specified, wsdl-port represents the
+     port the container should choose for container-managed port selection.
+
+     The same wsdl-port value must not appear in
+     more than one port-component-ref entry within the same service-ref.
+
+     If a particular service-endpoint-interface is using container-managed port
+     selection, it must not appear in more than one port-component-ref entry
+     within the same service-ref.
+   -->
+   <xsd:complexType name="port-component-refType">
+      <xsd:sequence>
+         <xsd:element name="service-endpoint-interface" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="port-qname" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="stub-property" type="jboss:stub-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="call-property" type="jboss:call-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="stub-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="call-propertyType">
+      <xsd:sequence>
+         <xsd:element name="prop-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="prop-value" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="message-destinationType">
+      <xsd:annotation>
+         <xsd:documentation> The message-destination element is used to configure the jndi-name for a
+            message-destination in ejb-jar.xml Used in: assembly-descriptor </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:group ref="jboss:descriptionGroup"/>
+         <xsd:element name="message-destination-name" type="jakartaee:xsdStringType"/>
+         <xsd:choice>
+            <xsd:element name="jndi-name" type="jakartaee:xsdStringType"/>
+            <xsd:element name="mapped-name" type="jakartaee:xsdStringType"/>
+         </xsd:choice>
+         <xsd:element name="lookup-name" type="jakartaee:xsdStringType"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="webservice-descriptionType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+            Runtime information about a web service.
+            wsdl-publish-location is optionally used to specify
+            where the final wsdl and any dependent files should be stored.  This location
+            resides on the file system from which deployment is initiated.
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="webservice-description-name" type="xsd:string"/>
+         <xsd:element name="config-name" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="config-file" type="xsd:string" minOccurs="0"/>
+         <xsd:element name="wsdl-publish-location" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="id" type="xsd:ID" />
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-deployment-dependencies-1_0.xsd b/wildfly/docs/schema/jboss-deployment-dependencies-1_0.xsd
new file mode 100644
index 0000000..8d791fb
--- /dev/null
+++ b/wildfly/docs/schema/jboss-deployment-dependencies-1_0.xsd
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:deployment-dependencies:1.0"
+            xmlns="urn:jboss:deployment-dependencies:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-deployment-dependencies" type="jbossDependenciesType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-dependencies file.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jbossDependenciesType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The root type, contains the dependencies elements.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="dependency" type="dependencyType" minOccurs="0" maxOccurs="unbounded" >
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element containing the name of the top level deployment that this deployment depends on.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+
+    </xsd:complexType>
+    <xsd:complexType name="dependencyType">
+        <xsd:attribute name="name" type="xsd:string" use="required" />
+    </xsd:complexType>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-deployment-structure-1_0.xsd b/wildfly/docs/schema/jboss-deployment-structure-1_0.xsd
new file mode 100644
index 0000000..e4d12dd
--- /dev/null
+++ b/wildfly/docs/schema/jboss-deployment-structure-1_0.xsd
@@ -0,0 +1,564 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:deployment-structure:1.0"
+            xmlns="urn:jboss:deployment-structure:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-deployment-structure" type="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-structure file.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss structure declaration type; contains deployments and additional modules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="ear-subdeployments-isolated" type="xsd:boolean" minOccurs="0" maxOccurs="1" >
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                    Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                    another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                    see classes belonging to other subdeployments within the .ear.
+                    For example:
+                    myapp.ear
+                     |
+                     |--- web.war
+                     |
+                     |--- ejb1.jar
+                     |
+                     |--- ejb2.jar
+
+                    If the ear-subdeployments-isolated is set to false, then the classes in web.war can access classes
+                    belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from ejb2.jar
+                    (and vice-versa).
+
+                    *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e. irrespective
+                    of whether this flag is set to true or false, the .war within a .ear will have a isolated classloader
+                    and other subdeployments within that .ear will not be able to access classes from that .war. This is
+                    as per spec*
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="deployment" type="deploymentType" minOccurs="0" maxOccurs="1" >
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="sub-deployment" type="subDeploymentType" minOccurs="0" maxOccurs="unbounded" >
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="module" type="moduleType" minOccurs="0" maxOccurs="unbounded" >
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Additional module declaration. This can be used to create additional modules
+                        from resource roots inside or outside the deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="deploymentType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The declaration type; contains additional dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclusions" type="exclusionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the excluded module dependencies.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="transformers" type="transformerSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the class file transformers that should be applied for classes loaded by this module.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="subDeploymentType">
+        <xsd:complexContent>
+            <xsd:extension base="deploymentType">
+                <xsd:attribute name="name" type="xsd:string" use="required">
+                   <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                      <documentation>
+                            The deployment name.
+                        </documentation>
+                    </annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="exports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="exclusionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more excluded module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleExclusionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module exclusion.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleExclusionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency exclusion.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of java.lang.instrument.ClassFileTransformer implementations that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="transformer" type="transformerType">
+                 <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The transformer class to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A java.lang.instrument.ClassFileTransformer that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+           <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name of the transformer
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-deployment-structure-1_1.xsd b/wildfly/docs/schema/jboss-deployment-structure-1_1.xsd
new file mode 100644
index 0000000..7571efe
--- /dev/null
+++ b/wildfly/docs/schema/jboss-deployment-structure-1_1.xsd
@@ -0,0 +1,722 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:deployment-structure:1.1"
+            xmlns="urn:jboss:deployment-structure:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-deployment-structure" type="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-structure file.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss structure declaration type; contains deployments and additional modules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ear-subdeployments-isolated" type="xsd:boolean" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                        another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                        see classes belonging to other subdeployments within the .ear.
+                        For example:
+                        myapp.ear
+                        |
+                        |--- web.war
+                        |
+                        |--- ejb1.jar
+                        |
+                        |--- ejb2.jar
+
+                        If the ear-subdeployments-isolated is set to false, then the classes in web.war can access
+                        classes
+                        belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from
+                        ejb2.jar
+                        (and vice-versa).
+
+                        *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e.
+                        irrespective
+                        of whether this flag is set to true or false, the .war within a .ear will have a isolated
+                        classloader
+                        and other subdeployments within that .ear will not be able to access classes from that .war.
+                        This is
+                        as per spec*
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="deployment" type="deploymentType" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="sub-deployment" type="subDeploymentType" minOccurs="0" maxOccurs="unbounded">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="module" type="moduleType" minOccurs="0" maxOccurs="unbounded">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Additional module declaration. This can be used to create additional modules
+                        from resource roots inside or outside the deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="deploymentType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The declaration type; contains additional dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="module-alias" type="moduleAliasType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element for a module alias declaration.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclusions" type="exclusionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the excluded module dependencies.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="transformers" type="transformerSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the class file transformers that should be applied for classes loaded by this module.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="local-last" type="localLast" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        If this is true then local resources will have the lowest priority in the dependency list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="subDeploymentType">
+        <xsd:complexContent>
+            <xsd:extension base="deploymentType">
+                <xsd:attribute name="name" type="xsd:string" use="required">
+                    <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                        <documentation>
+                            The deployment name.
+                        </documentation>
+                    </annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="module-alias" type="moduleAliasType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element for a module alias declaration.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and
+                hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern
+                    value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="exports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject". Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module. Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="annotations" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether annotation indexes found in the dependency should be imported.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="meta-inf" type="metaInfDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how META-INF entries in this dependency are used (default is "none").
+                    Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/** path from the dependency module. Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject". Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="exclusionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more excluded module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleExclusionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module exclusion.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleExclusionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency exclusion.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="metaInfDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for META-INF handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export META-INF items from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, META-INF items from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export META-INF items found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are
+                        accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="use-physical-code-source" type="xsd:boolean" default="false" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    A boolean which signifies how the code source URL for this resource should be established.
+                    If true, the physical location of the deployment is used; if false, the VFS location of the
+                    deployment is used. Default is false.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of java.lang.instrument.ClassFileTransformer implementations that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="transformer" type="transformerType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The transformer class to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A java.lang.instrument.ClassFileTransformer that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name of the transformer
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="localLast">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                If set to true the modules local content will have the lowest priority in the
+                dependency list.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="value" type="xsd:boolean" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-deployment-structure-1_2.xsd b/wildfly/docs/schema/jboss-deployment-structure-1_2.xsd
new file mode 100644
index 0000000..16c3770
--- /dev/null
+++ b/wildfly/docs/schema/jboss-deployment-structure-1_2.xsd
@@ -0,0 +1,756 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:ex="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:deployment-structure:1.2"
+            xmlns="urn:jboss:deployment-structure:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-deployment-structure" type="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-structure file.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss structure declaration type; contains deployments and additional modules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ear-subdeployments-isolated" type="xsd:boolean" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                        another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                        see classes belonging to other subdeployments within the .ear.
+                        For example:
+                        myapp.ear
+                        |
+                        |--- web.war
+                        |
+                        |--- ejb1.jar
+                        |
+                        |--- ejb2.jar
+
+                        If the ear-subdeployments-isolated is set to false, then the classes in web.war can access
+                        classes
+                        belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from
+                        ejb2.jar
+                        (and vice-versa).
+
+                        *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e.
+                        irrespective
+                        of whether this flag is set to true or false, the .war within a .ear will have a isolated
+                        classloader
+                        and other subdeployments within that .ear will not be able to access classes from that .war.
+                        This is
+                        as per spec*
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="deployment" type="deploymentType" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="sub-deployment" type="subDeploymentType" minOccurs="0" maxOccurs="unbounded">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="module" type="moduleType" minOccurs="0" maxOccurs="unbounded">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Additional module declaration. This can be used to create additional modules
+                        from resource roots inside or outside the deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="deploymentType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The declaration type; contains additional dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="module-alias" type="moduleAliasType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element for a module alias declaration.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclusions" type="exclusionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the excluded module dependencies.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="transformers" type="transformerSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the class file transformers that should be applied for classes loaded by this module.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="local-last" type="localLast" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        If this is true then local resources will have the lowest priority in the dependency list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-subsystems" type="exclude-subsystemsType" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        List of subsystems to be excluded. If this is specified for the top level it will be inherited by
+                        sub deployments, unless the sub deployments specify their own (possibly empty) list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="subDeploymentType">
+        <xsd:complexContent>
+            <xsd:extension base="deploymentType">
+                <xsd:attribute name="name" type="xsd:string" use="required">
+                    <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                        <documentation>
+                            The deployment name.
+                        </documentation>
+                    </annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="module-alias" type="moduleAliasType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element for a module alias declaration.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and
+                hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern
+                    value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="exports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject". Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module. Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="annotations" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether annotation indexes found in the dependency should be imported.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="meta-inf" type="metaInfDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how META-INF entries in this dependency are used (default is "none").
+                    Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/** path from the dependency module. Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject". Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="exclusionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more excluded module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleExclusionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module exclusion.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleExclusionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency exclusion.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="metaInfDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for META-INF handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export META-INF items from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, META-INF items from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export META-INF items found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are
+                        accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="use-physical-code-source" type="xsd:boolean" default="false" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    A boolean which signifies how the code source URL for this resource should be established.
+                    If true, the physical location of the deployment is used; if false, the VFS location of the
+                    deployment is used. Default is false.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of java.lang.instrument.ClassFileTransformer implementations that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="transformer" type="transformerType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The transformer class to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A java.lang.instrument.ClassFileTransformer that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name of the transformer
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="localLast">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                If set to true the modules local content will have the lowest priority in the
+                dependency list.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="value" type="xsd:boolean" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="exclude-subsystemsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more subsystems that should not have their DeploymentUnitProcessor's run.
+            </documentation>
+        </annotation>
+        <xsd:sequence>
+            <ex:element name="subsystem" type="subsystemType"  minOccurs="0" maxOccurs="unbounded" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="subsystemType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A subsystem that should be excluded from processing the deployment.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this subsystem (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-deployment-structure-1_3.xsd b/wildfly/docs/schema/jboss-deployment-structure-1_3.xsd
new file mode 100644
index 0000000..75acd36
--- /dev/null
+++ b/wildfly/docs/schema/jboss-deployment-structure-1_3.xsd
@@ -0,0 +1,764 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:ex="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:deployment-structure:1.3"
+            xmlns="urn:jboss:deployment-structure:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-deployment-structure" type="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-structure file.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jbossStructureType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss structure declaration type; contains deployments and additional modules.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="ear-subdeployments-isolated" type="xsd:boolean" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Flag indicating whether each of the subdeployments within a .ear can access classes belonging to
+                        another subdeployment within the same .ear. Setting this to false, allows the subdeployments to
+                        see classes belonging to other subdeployments within the .ear.
+                        For example:
+                        myapp.ear
+                        |
+                        |--- web.war
+                        |
+                        |--- ejb1.jar
+                        |
+                        |--- ejb2.jar
+
+                        If the ear-subdeployments-isolated is set to false, then the classes in web.war can access
+                        classes
+                        belonging to ejb1.jar and ejb2.jar. Similarly, classes from ejb1.jar can access classes from
+                        ejb2.jar
+                        (and vice-versa).
+
+                        *Note that this flag, has no effect on the isolated classloader of the .war file(s). i.e.
+                        irrespective
+                        of whether this flag is set to true or false, the .war within a .ear will have a isolated
+                        classloader
+                        and other subdeployments within that .ear will not be able to access classes from that .war.
+                        This is
+                        as per spec*
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="ear-exclusions-cascaded-to-subdeployments" type="xsd:boolean" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Flag indicating whether .ear module exclusions should be cascaded to sub-deployments.
+                        When this flag is set to true, module exclusions declared at the .ear level will be
+                        applied (casacaded) to each subdployment defined within the .ear.  This is useful in
+                        cases where an .ear has many subdeployments and it is desired to exclude a module
+                        dependency from every subdeployment within the .ear.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="deployment" type="deploymentType" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="sub-deployment" type="subDeploymentType" minOccurs="0" maxOccurs="unbounded">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element that corresponds to a deployment. This is used to customise
+                        class loading for a deployment or a sub deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="module" type="moduleType" minOccurs="0" maxOccurs="unbounded">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Additional module declaration. This can be used to create additional modules
+                        from resource roots inside or outside the deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="deploymentType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The declaration type; contains additional dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="module-alias" type="moduleAliasType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element for a module alias declaration.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclusions" type="exclusionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the excluded module dependencies.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="transformers" type="transformerSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the class file transformers that should be applied for classes loaded by this module.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="local-last" type="localLast" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        If this is true then local resources will have the lowest priority in the dependency list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-subsystems" type="exclude-subsystemsType" minOccurs="0" maxOccurs="1">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        List of subsystems to be excluded. If this is specified for the top level it will be inherited by
+                        sub deployments, unless the sub deployments specify their own (possibly empty) list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="subDeploymentType">
+        <xsd:complexContent>
+            <xsd:extension base="deploymentType">
+                <xsd:attribute name="name" type="xsd:string" use="required">
+                    <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                        <documentation>
+                            The deployment name.
+                        </documentation>
+                    </annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies and resources.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="module-alias" type="moduleAliasType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Element for a module alias declaration.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and
+                hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern
+                    value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="exports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject". Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module. Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="annotations" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether annotation indexes found in the dependency should be imported.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="meta-inf" type="metaInfDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how META-INF entries in this dependency are used (default is "none").
+                    Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/** path from the dependency module. Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject". Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="exclusionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more excluded module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleExclusionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module exclusion.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleExclusionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency exclusion.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The excluded module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="metaInfDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for META-INF handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export META-INF items from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, META-INF items from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export META-INF items found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are
+                        accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="use-physical-code-source" type="xsd:boolean" default="false" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    A boolean which signifies how the code source URL for this resource should be established.
+                    If true, the physical location of the deployment is used; if false, the VFS location of the
+                    deployment is used. Default is false.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of java.lang.instrument.ClassFileTransformer implementations that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="transformer" type="transformerType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The transformer class to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="transformerType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A java.lang.instrument.ClassFileTransformer that will be applied at classloading
+            </documentation>
+        </annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name of the transformer
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="localLast">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                If set to true the modules local content will have the lowest priority in the
+                dependency list.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="value" type="xsd:boolean" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="exclude-subsystemsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more subsystems that should not have their DeploymentUnitProcessor's run.
+            </documentation>
+        </annotation>
+        <xsd:sequence>
+            <ex:element name="subsystem" type="subsystemType"  minOccurs="0" maxOccurs="unbounded" />
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="subsystemType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A subsystem that should be excluded from processing the deployment.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this subsystem (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-cache_1_0.xsd b/wildfly/docs/schema/jboss-ejb-cache_1_0.xsd
new file mode 100644
index 0000000..11f36ae
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-cache_1_0.xsd
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:ejb-cache:1.0" xmlns:javaee="http://java.sun.com/xml/ns/javaee" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:ejb-cache:1.0" version="1.0" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="cache" substitutionGroup="javaee:assembly-descriptor-entry" type="cacheType"/>
+
+   <xs:complexType name="cacheType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="cache-ref" type="xs:string"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-cache_2_0.xsd b/wildfly/docs/schema/jboss-ejb-cache_2_0.xsd
new file mode 100644
index 0000000..e63ec20
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-cache_2_0.xsd
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:ejb-cache:2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee" 
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:ejb-cache:2.0"
+           version="2.0"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="cache" substitutionGroup="jakartaee:assembly-descriptor-entry" type="cacheType"/>
+
+   <xs:complexType name="cacheType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="cache-ref" type="xs:string"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-client_1_0.xsd b/wildfly/docs/schema/jboss-ejb-client_1_0.xsd
new file mode 100644
index 0000000..d4eb3a4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-client_1_0.xsd
@@ -0,0 +1,94 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:ejb-client:1.0"
+            xmlns="urn:jboss:ejb-client:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-ejb-client" type="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-ejb-client.xml file
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The EJB client configurations
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="client-context" type="client-contextType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configurations that will be used to setup an EJB client context for the
+                        deployment.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="client-contextType">
+        <xsd:all>
+            <xsd:element name="ejb-receivers" type="ejb-receiversType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures EJB receivers for the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ejb-receiversType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a remoting based EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="exclude-local-receiver" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to true if the local receiver which gets added to the EJB client context by default, has to be
+                    excluded from the context
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="local-receiver-pass-by-value" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to false if the local receiver that's available in the EJB client context, should use
+                    pass-by-reference (instead of pass-by-value) semantics for the EJB invocations.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="remoting-ejb-receiverType">
+        <xsd:attribute name="outbound-connection-ref" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Reference to an outbound connection configured in the remoting subsystem
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-ejb-client_1_1.xsd b/wildfly/docs/schema/jboss-ejb-client_1_1.xsd
new file mode 100644
index 0000000..86500ba
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-client_1_1.xsd
@@ -0,0 +1,260 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:ejb-client:1.1"
+            xmlns="urn:jboss:ejb-client:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-ejb-client" type="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-ejb-client.xml file
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The EJB client configurations
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="client-context" type="client-contextType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configurations that will be used to setup an EJB client context for the
+                        deployment.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="client-contextType">
+        <xsd:all>
+            <xsd:element name="ejb-receivers" type="ejb-receiversType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures EJB receivers for the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="clusters" type="clustersType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Cluster configurations applicable for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="ejb-receiversType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a remoting based EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="exclude-local-receiver" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to true if the local receiver which gets added to the EJB client context by default, has to be
+                    excluded from the context
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="local-receiver-pass-by-value" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to false if the local receiver that's available in the EJB client context, should use
+                    pass-by-reference (instead of pass-by-value) semantics for the EJB invocations.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="remoting-ejb-receiverType">
+        <xsd:attribute name="outbound-connection-ref" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Reference to an outbound connection configured in the remoting subsystem
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clustersType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="cluster" type="clusterType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a cluster in the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="node" type="clusterNodeType" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the nodes in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="max-allowed-connected-nodes" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of nodes to which the connection will be established in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cluster-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.ClusterNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, within the cluster, for
+                    handling invocations
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterNodeType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="channel-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the property. Example org.xnio.Options.SASL_POLICY_NOANONYMOUS
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the property.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+
+    </xsd:complexType>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-ejb-client_1_2.xsd b/wildfly/docs/schema/jboss-ejb-client_1_2.xsd
new file mode 100644
index 0000000..b3c0415
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-client_1_2.xsd
@@ -0,0 +1,296 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:ejb-client:1.2"
+            xmlns="urn:jboss:ejb-client:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.2">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-ejb-client" type="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-ejb-client.xml file
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The EJB client configurations
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="client-context" type="client-contextType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configurations that will be used to setup an EJB client context for the
+                        deployment.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+
+    </xsd:complexType>
+
+    <xsd:complexType name="client-contextType">
+        <xsd:all>
+            <xsd:element name="ejb-receivers" type="ejb-receiversType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures EJB receivers for the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="clusters" type="clustersType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Cluster configurations applicable for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="invocation-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A timeout, in milliseconds, that will be used for EJB invocations. A value of zero
+                    or a negative value will imply a "wait forever" semantic where the invocation will never timeout
+                    and the client will wait for the invocation result indefinitely.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="deployment-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.DeploymentNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, from among multiple eligible
+                    nodes within an EJB client context, which can handle a particular deployment
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ejb-receiversType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a remoting based EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="exclude-local-receiver" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to true if the local receiver which gets added to the EJB client context by default, has to be
+                    excluded from the context
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="local-receiver-pass-by-value" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to false if the local receiver that's available in the EJB client context, should use
+                    pass-by-reference (instead of pass-by-value) semantics for the EJB invocations.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="remoting-ejb-receiverType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for this remoting EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="outbound-connection-ref" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Reference to an outbound connection configured in the remoting subsystem
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in milliseconds, to be used while creating a connection
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clustersType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="cluster" type="clusterType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a cluster in the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="node" type="clusterNodeType" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the nodes in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="max-allowed-connected-nodes" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of nodes to which the connection will be established in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cluster-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.ClusterNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, within the cluster, for
+                    handling invocations
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterNodeType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="channel-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the property. Example org.xnio.Options.SASL_POLICY_NOANONYMOUS
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the property.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+
+    </xsd:complexType>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jboss-ejb-client_1_3.xsd b/wildfly/docs/schema/jboss-ejb-client_1_3.xsd
new file mode 100644
index 0000000..5a6a710
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-client_1_3.xsd
@@ -0,0 +1,310 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:ejb-client:1.3"
+            xmlns="urn:jboss:ejb-client:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.3">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-ejb-client" type="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-ejb-client.xml file
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The EJB client configurations
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="client-context" type="client-contextType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configurations that will be used to setup an EJB client context for the
+                        deployment.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-contextType">
+        <xsd:all>
+            <xsd:element name="ejb-receivers" type="ejb-receiversType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures EJB receivers for the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="clusters" type="clustersType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Cluster configurations applicable for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="profile" type="profileType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Remote connection profile selected for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="invocation-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A timeout, in milliseconds, that will be used for EJB invocations. A value of zero
+                    or a negative value will imply a "wait forever" semantic where the invocation will never timeout
+                    and the client will wait for the invocation result indefinitely.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="deployment-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.DeploymentNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, from among multiple eligible
+                    nodes within an EJB client context, which can handle a particular deployment
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ejb-receiversType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a remoting based EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="exclude-local-receiver" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to true if the local receiver which gets added to the EJB client context by default, has to be
+                    excluded from the context
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="local-receiver-pass-by-value" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to false if the local receiver that's available in the EJB client context, should use
+                    pass-by-reference (instead of pass-by-value) semantics for the EJB invocations.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="remoting-ejb-receiverType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for this remoting EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="outbound-connection-ref" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Reference to an outbound connection configured in the remoting subsystem
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in milliseconds, to be used while creating a connection
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clustersType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="cluster" type="clusterType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a cluster in the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="node" type="clusterNodeType" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the nodes in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="max-allowed-connected-nodes" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of nodes to which the connection will be established in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cluster-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.ClusterNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, within the cluster, for
+                    handling invocations
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterNodeType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="channel-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the property. Example org.xnio.Options.SASL_POLICY_NOANONYMOUS
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the property.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="profileType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the profile.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>  
+
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-ejb-client_1_4.xsd b/wildfly/docs/schema/jboss-ejb-client_1_4.xsd
new file mode 100644
index 0000000..5fdd37c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-client_1_4.xsd
@@ -0,0 +1,347 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:ejb-client:1.4"
+            xmlns="urn:jboss:ejb-client:1.4"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.4">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-ejb-client" type="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-ejb-client.xml file
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The EJB client configurations
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="client-context" type="client-contextType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configurations that will be used to setup an EJB client context for the
+                        deployment.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-contextType">
+        <xsd:all>
+            <xsd:element name="ejb-receivers" type="ejb-receiversType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures EJB receivers for the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="clusters" type="clustersType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Cluster configurations applicable for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="profile" type="profileType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Remote connection profile selected for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="http-connections" type="http-connectionsType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures remote http-connection for EJB invocation
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="invocation-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A timeout, in milliseconds, that will be used for EJB invocations. A value of zero
+                    or a negative value will imply a "wait forever" semantic where the invocation will never timeout
+                    and the client will wait for the invocation result indefinitely.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="deployment-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.DeploymentNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, from among multiple eligible
+                    nodes within an EJB client context, which can handle a particular deployment
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="default-compression" type="xsd:short" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Default compression level (from 0 to 9) of request and response message payload.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ejb-receiversType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a remoting based EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="exclude-local-receiver" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to true if the local receiver which gets added to the EJB client context by default, has to be
+                    excluded from the context
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="local-receiver-pass-by-value" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to false if the local receiver that's available in the EJB client context, should use
+                    pass-by-reference (instead of pass-by-value) semantics for the EJB invocations.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="remoting-ejb-receiverType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for this remoting EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="outbound-connection-ref" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Reference to an outbound connection configured in the remoting subsystem
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in milliseconds, to be used while creating a connection
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-connectionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="http-connection" type="http-connectionType" >
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures remote HTTP Connection for EJB invocation
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-connectionType">
+        <xsd:attribute name="uri" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Uniform Resource Identifier for the HTTP connection
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="clustersType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="cluster" type="clusterType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a cluster in the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="node" type="clusterNodeType" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the nodes in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="max-allowed-connected-nodes" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of nodes to which the connection will be established in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cluster-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.ClusterNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, within the cluster, for
+                    handling invocations
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterNodeType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="username" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-realm" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    This attribute is no longer supported and must be removed from the configuration.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="channel-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the property. Example org.xnio.Options.SASL_POLICY_NOANONYMOUS
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the property.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="profileType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the profile.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-ejb-client_1_5.xsd b/wildfly/docs/schema/jboss-ejb-client_1_5.xsd
new file mode 100644
index 0000000..be00499
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-client_1_5.xsd
@@ -0,0 +1,319 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:ejb-client:1.5"
+            xmlns="urn:jboss:ejb-client:1.5"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.5">
+
+    <!-- Root element -->
+    <xsd:element name="jboss-ejb-client" type="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a jboss-ejb-client.xml file
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="jboss-ejb-clientType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The EJB client configurations
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="client-context" type="client-contextType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configurations that will be used to setup an EJB client context for the
+                        deployment.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="client-contextType">
+        <xsd:all>
+            <xsd:element name="ejb-receivers" type="ejb-receiversType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures EJB receivers for the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="clusters" type="clustersType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Cluster configurations applicable for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="profile" type="profileType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Remote connection profile selected for this client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="http-connections" type="http-connectionsType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures remote http-connection for EJB invocation
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="invocation-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    A timeout, in milliseconds, that will be used for EJB invocations. A value of zero
+                    or a negative value will imply a "wait forever" semantic where the invocation will never timeout
+                    and the client will wait for the invocation result indefinitely.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="deployment-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.DeploymentNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, from among multiple eligible
+                    nodes within an EJB client context, which can handle a particular deployment
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="default-compression" type="xsd:short" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Default compression level (from 0 to 9) of request and response message payload.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="ejb-receiversType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a remoting based EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="exclude-local-receiver" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to true if the local receiver which gets added to the EJB client context by default, has to be
+                    excluded from the context
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="local-receiver-pass-by-value" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Set to false if the local receiver that's available in the EJB client context, should use
+                    pass-by-reference (instead of pass-by-value) semantics for the EJB invocations.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="remoting-ejb-receiverType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for this remoting EJB receiver
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="outbound-connection-ref" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Reference to an outbound connection configured in the remoting subsystem
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in milliseconds, to be used while creating a connection
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-connectionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="http-connection" type="http-connectionType" >
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures remote HTTP Connection for EJB invocation
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-connectionType">
+        <xsd:attribute name="uri" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    Uniform Resource Identifier for the HTTP connection
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="clustersType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="cluster" type="clusterType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures a cluster in the client context
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="node" type="clusterNodeType" maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the nodes in this cluster
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the nodes in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="max-allowed-connected-nodes" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of nodes to which the connection will be established in the cluster
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cluster-node-selector" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The fully qualified class name of the class which implements the
+                    org.jboss.ejb.client.ClusterNodeSelector
+                    interface. The instance of this class will be used for selecting nodes, within the cluster, for
+                    handling invocations
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="clusterNodeType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="channel-creation-options" type="channel-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the channel creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connection-creation-options" type="connection-creation-optionsType" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Configures the connection creation options for the node
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the cluster node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="connect-timeout" type="xsd:long" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout in milliseconds while creating a connection for the node
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="channel-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-creation-optionsType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the property. Example org.xnio.Options.SASL_POLICY_NOANONYMOUS
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The value of the property.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="profileType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the profile.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-ejb-clustering_1_1.xsd b/wildfly/docs/schema/jboss-ejb-clustering_1_1.xsd
new file mode 100644
index 0000000..76f8a2e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-clustering_1_1.xsd
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:clustering:1.1"
+           targetNamespace="urn:clustering:1.1"
+           version="1.1"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="clustering" substitutionGroup="javaee:assembly-descriptor-entry" type="clusteringType"/>
+
+   <xs:complexType name="clusteringType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:choice>
+                <xs:element name="clustered-singleton" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>Indicates that the mdb will be active in a single node of the cluster.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-clustering_2_0.xsd b/wildfly/docs/schema/jboss-ejb-clustering_2_0.xsd
new file mode 100644
index 0000000..a44e233
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-clustering_2_0.xsd
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:clustering:2.0"
+           targetNamespace="urn:clustering:2.0"
+           version="2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="clustering" substitutionGroup="jakartaee:assembly-descriptor-entry" type="clusteringType"/>
+
+   <xs:complexType name="clusteringType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:choice>
+                <xs:element name="clustered-singleton" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>Indicates that the mdb will be active in a single node of the cluster.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-container-interceptors_1_0.xsd b/wildfly/docs/schema/jboss-ejb-container-interceptors_1_0.xsd
new file mode 100644
index 0000000..227116b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-container-interceptors_1_0.xsd
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:container-interceptors:1.0" xmlns:javaee="http://java.sun.com/xml/ns/javaee" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:container-interceptors:1.0" version="1.0" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+    <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+    <xs:element name="container-interceptors" substitutionGroup="javaee:assembly-descriptor-entry" type="container-interceptorsType"/>
+
+    <xs:complexType name="container-interceptorsType">
+        <xs:complexContent>
+            <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+                <xs:annotation>
+                    <xs:documentation>The container interceptor bindings applicable for various EJBs in the deployment</xs:documentation>
+                </xs:annotation>
+                <xs:sequence>
+                    <xs:element name="interceptor-binding" type="javaee:interceptor-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-container-interceptors_2_0.xsd b/wildfly/docs/schema/jboss-ejb-container-interceptors_2_0.xsd
new file mode 100644
index 0000000..674ae53
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-container-interceptors_2_0.xsd
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:container-interceptors:2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           targetNamespace="urn:container-interceptors:2.0"
+           version="2.0" xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+    <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+    <xs:element name="container-interceptors" substitutionGroup="jakartaee:assembly-descriptor-entry" type="container-interceptorsType"/>
+
+    <xs:complexType name="container-interceptorsType">
+        <xs:complexContent>
+            <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+                <xs:annotation>
+                    <xs:documentation>The container interceptor bindings applicable for various EJBs in the deployment</xs:documentation>
+                </xs:annotation>
+                <xs:sequence>
+                    <xs:element name="interceptor-binding" type="jakartaee:interceptor-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-delivery-active_1_0.xsd b/wildfly/docs/schema/jboss-ejb-delivery-active_1_0.xsd
new file mode 100644
index 0000000..e620a82
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-delivery-active_1_0.xsd
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:delivery-active:1.0"
+           targetNamespace="urn:delivery-active:1.0"
+           version="1.0"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="delivery" substitutionGroup="javaee:assembly-descriptor-entry" type="deliveryType"/>
+
+   <xs:complexType name="deliveryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+                <xs:element name="active" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-active states whether messages will be delivered to the message-driven bean as soon as it is deployed (default is true).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-delivery-active_1_1.xsd b/wildfly/docs/schema/jboss-ejb-delivery-active_1_1.xsd
new file mode 100644
index 0000000..4676f67
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-delivery-active_1_1.xsd
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:delivery-active:1.1"
+           targetNamespace="urn:delivery-active:1.1"
+           version="1.1"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="delivery" substitutionGroup="javaee:assembly-descriptor-entry" type="deliveryType"/>
+
+   <xs:complexType name="deliveryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:choice>
+                <xs:element name="active" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-active states whether messages will be delivered to the message-driven bean as soon as it is deployed (default is true).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="group" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-group allows management of message delivery for a group of message-driven beans: messages will be delivered to the bean whenever the group is active.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-delivery-active_1_2.xsd b/wildfly/docs/schema/jboss-ejb-delivery-active_1_2.xsd
new file mode 100644
index 0000000..dbdb483
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-delivery-active_1_2.xsd
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:delivery-active:1.2"
+           targetNamespace="urn:delivery-active:1.2"
+           version="1.2"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="delivery" substitutionGroup="javaee:assembly-descriptor-entry" type="deliveryType"/>
+
+   <xs:complexType name="deliveryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:choice>
+                <xs:element name="active" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-active states whether messages will be delivered to the message-driven bean as soon as it is deployed (default is true).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="group" type="xs:string" maxOccurs="unbounded">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-group allows management of message delivery for a group of message-driven beans: messages will be delivered to the bean
+                            whenever the group is active. If more than one group is specified, the messages will be delivered only when all groups are active.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-delivery-active_2_0.xsd b/wildfly/docs/schema/jboss-ejb-delivery-active_2_0.xsd
new file mode 100644
index 0000000..c47e817
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-delivery-active_2_0.xsd
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:delivery-active:2.0"
+           targetNamespace="urn:delivery-active:2.0"
+           version="2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="delivery" substitutionGroup="jakartaee:assembly-descriptor-entry" type="deliveryType"/>
+
+   <xs:complexType name="deliveryType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:choice>
+                <xs:element name="active" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-active states whether messages will be delivered to the message-driven bean as soon as it is deployed (default is true).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="group" type="xs:string" maxOccurs="unbounded">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-group allows management of message delivery for a group of message-driven beans: messages will be delivered to the bean
+                            whenever the group is active. If more than one group is specified, the messages will be delivered only when all groups are active.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-delivery_3_0.xsd b/wildfly/docs/schema/jboss-ejb-delivery_3_0.xsd
new file mode 100644
index 0000000..5d7aa4a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-delivery_3_0.xsd
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:delivery:3.0"
+           targetNamespace="urn:delivery:3.0"
+           version="3.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="delivery" substitutionGroup="jakartaee:assembly-descriptor-entry" type="deliveryType"/>
+
+   <xs:complexType name="deliveryType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:choice>
+                <xs:element name="active" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-active states whether messages will be delivered to the message-driven bean as soon as it is deployed (default is true).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="group" type="xs:string" maxOccurs="unbounded">
+                    <xs:annotation>
+                        <xs:documentation>The delivery-group allows management of message delivery for a group of message-driven beans: messages will be delivered to the bean
+                            whenever the group is active. If more than one group is specified, the messages will be delivered only when all groups are active.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-iiop_1_0.xsd b/wildfly/docs/schema/jboss-ejb-iiop_1_0.xsd
new file mode 100644
index 0000000..de73914
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-iiop_1_0.xsd
@@ -0,0 +1,148 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright (c) 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+<xs:schema xmlns="urn:iiop" xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:iiop" version="1.0"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="iiop" type="iiopConfigType" substitutionGroup="javaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="iiopConfigType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:annotation>
+               <xs:documentation>
+                  <![CDATA[
+                  The iiop element contains the IIOP settings that are to be applied to an EJB. It must identify the
+                  bean to which the settings apply via the ejb-name sub-element. A wildcard "*" is allowed to convey
+                  that the settings are to be applied to all EJBs in the deployment.
+
+                  The binding-name sub-element can be used to specify the name that must be used to bind the EJB IOR
+                  in the COSNaming service. If a wildcard "*" is used as bean-name, this setting is ignored.
+
+                  The ior-security-config sub-element contains the security settings that are to be inserted into the
+                  EJB IOR. These include transport config requirements, authentication service settings, and secure
+                  attribute service settings. If a wildcard "*" is used as bean-name, the IOR settings will be applied
+                  to all beans in the deployment, except for the ones that override these settings in their own iiop
+                  element.
+                  ]]>
+               </xs:documentation>
+            </xs:annotation>
+            <xs:sequence>
+               <xs:element name="ejb-name" type="javaee:ejb-nameType" minOccurs="0" maxOccurs="1"/>
+               <xs:element name="binding-name" type="xs:string" minOccurs="0" maxOccurs="1"/>
+               <xs:element name="ior-security-config" type="iorSecurityConfigType" minOccurs="0"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="iorSecurityConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorSecurityConfigType specifies the elements that can be used to configure security constraints of IIOP
+             enabled EJB3 beans.
+
+             - transport-config: contains the attributes that are used to specify the transport security requirements.
+             - as-context: contains the attributes that are used to configure the authentication service (AS) context.
+             - sas-context: contains the attributes that are used to configure the security attribute service (SAS) context.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="as-context" type="iorASContextType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="sas-context" type="iorSASContextType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="iorTransportConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorTransportConfigType specifies attributes that can be used to configure the transport requirements of
+             an IIOP enabled EJB3 bean.
+
+             * integrity: indicates if the server (target) supports integrity protected messages. The valid values are
+                          NONE, SUPPORTED or REQUIRED.
+             * confidentiality: indicates if the server (target) supports privacy protected messages. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * detect-misordering: indicates if the server (target) supports detection of message sequence errors. The
+                          values are NONE, SUPPORTED or REQUIRED.
+             * detect-replay: indicates if the server (target) supports detection of message replay attempts. The values
+                          are NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-client: indicates if the target is capable of authenticating a client. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-target: indicates if the target is capable of authenticating to a client. The values
+                         are NONE or SUPPORTED.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="integrity" type="xs:string" use="required"/>
+      <xs:attribute name="confidentiality" type="xs:string" use="required"/>
+      <xs:attribute name="detect-misordering" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="detect-replay" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="establish-trust-in-client" type="xs:string" use="required"/>
+      <xs:attribute name="establish-trust-in-target" type="xs:string" use="required"/>
+   </xs:complexType>
+    
+    <xs:complexType name="iorASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the authentication service (AS) context.
+
+              * auth-method:describes the authentication method. The only supported values are USERNAME_PASSWORD and NONE.
+              * realm: describes the realm in which the user is authenticated. Must be a valid realm that is registered
+                       in server configuration.
+              * required: specifies if the supplied authentication method is required to be used for client authentication.
+                       If so the EstablishTrustInClient bit will be set in the target_requires field of the AS_Context.
+                       The attribute value is either true or false.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="auth-method" type="xs:string" use="required"/>
+       <xs:attribute name="realm" type="xs:string" use="required"/>
+       <xs:attribute name="required" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="iorSASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the security attribute service.
+
+              * caller-propagation: indicates if the target will accept propagated caller identities The values are
+                       NONE or SUPPORTED.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="caller-propagation" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-iiop_1_1.xsd b/wildfly/docs/schema/jboss-ejb-iiop_1_1.xsd
new file mode 100644
index 0000000..167c9a7
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-iiop_1_1.xsd
@@ -0,0 +1,147 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright (c) 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+<xs:schema xmlns="urn:iiop" xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:iiop" version="1.1"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="iiop" type="iiopConfigType" substitutionGroup="javaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="iiopConfigType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:annotation>
+               <xs:documentation>
+                  <![CDATA[
+                  The iiop element contains the IIOP settings that are to be applied to an EJB. It must identify the
+                  bean to which the settings apply via the ejb-name sub-element. A wildcard "*" is allowed to convey
+                  that the settings are to be applied to all EJBs in the deployment.
+
+                  The binding-name sub-element can be used to specify the name that must be used to bind the EJB IOR
+                  in the COSNaming service. If a wildcard "*" is used as bean-name, this setting is ignored.
+
+                  The ior-security-config sub-element contains the security settings that are to be inserted into the
+                  EJB IOR. These include transport config requirements, authentication service settings, and secure
+                  attribute service settings. If a wildcard "*" is used as bean-name, the IOR settings will be applied
+                  to all beans in the deployment, except for the ones that override these settings in their own iiop
+                  element.
+                  ]]>
+               </xs:documentation>
+            </xs:annotation>
+            <xs:sequence>
+               <xs:element name="binding-name" type="xs:string" minOccurs="0" maxOccurs="1"/>
+               <xs:element name="ior-security-config" type="iorSecurityConfigType"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="iorSecurityConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorSecurityConfigType specifies the elements that can be used to configure security constraints of IIOP
+             enabled EJB3 beans.
+
+             - transport-config: contains the attributes that are used to specify the transport security requirements.
+             - as-context: contains the attributes that are used to configure the authentication service (AS) context.
+             - sas-context: contains the attributes that are used to configure the security attribute service (SAS) context.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="as-context" type="iorASContextType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="sas-context" type="iorSASContextType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="iorTransportConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorTransportConfigType specifies attributes that can be used to configure the transport requirements of
+             an IIOP enabled EJB3 bean.
+
+             * integrity: indicates if the server (target) supports integrity protected messages. The valid values are
+                          NONE, SUPPORTED or REQUIRED.
+             * confidentiality: indicates if the server (target) supports privacy protected messages. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * detect-misordering: indicates if the server (target) supports detection of message sequence errors. The
+                          values are NONE, SUPPORTED or REQUIRED.
+             * detect-replay: indicates if the server (target) supports detection of message replay attempts. The values
+                          are NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-client: indicates if the target is capable of authenticating a client. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-target: indicates if the target is capable of authenticating to a client. The values
+                         are NONE or SUPPORTED.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="integrity" type="xs:string" use="required"/>
+      <xs:attribute name="confidentiality" type="xs:string" use="required"/>
+      <xs:attribute name="detect-misordering" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="detect-replay" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="establish-trust-in-client" type="xs:string" use="required"/>
+      <xs:attribute name="establish-trust-in-target" type="xs:string" use="required"/>
+   </xs:complexType>
+
+    <xs:complexType name="iorASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the authentication service (AS) context.
+
+              * auth-method:describes the authentication method. The only supported values are USERNAME_PASSWORD and NONE.
+              * realm: describes the realm in which the user is authenticated. Must be a valid realm that is registered
+                       in server configuration.
+              * required: specifies if the supplied authentication method is required to be used for client authentication.
+                       If so the EstablishTrustInClient bit will be set in the target_requires field of the AS_Context.
+                       The attribute value is either true or false.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="auth-method" type="xs:string" use="required"/>
+       <xs:attribute name="realm" type="xs:string" use="required"/>
+       <xs:attribute name="required" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="iorSASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the security attribute service.
+
+              * caller-propagation: indicates if the target will accept propagated caller identities The values are
+                       NONE or SUPPORTED.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="caller-propagation" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-iiop_1_2.xsd b/wildfly/docs/schema/jboss-ejb-iiop_1_2.xsd
new file mode 100644
index 0000000..dd57eb2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-iiop_1_2.xsd
@@ -0,0 +1,142 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns="urn:iiop" xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:iiop" version="1.2"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_01.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_1.xsd"/>
+
+   <xs:element name="iiop" type="iiopConfigType" substitutionGroup="javaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="iiopConfigType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:annotation>
+               <xs:documentation>
+                  <![CDATA[
+                  The iiop element contains the IIOP settings that are to be applied to an EJB. It must identify the
+                  bean to which the settings apply via the ejb-name sub-element. A wildcard "*" is allowed to convey
+                  that the settings are to be applied to all EJBs in the deployment.
+
+                  The binding-name sub-element can be used to specify the name that must be used to bind the EJB IOR
+                  in the COSNaming service. If a wildcard "*" is used as bean-name, this setting is ignored.
+
+                  The ior-security-config sub-element contains the security settings that are to be inserted into the
+                  EJB IOR. These include transport config requirements, authentication service settings, and secure
+                  attribute service settings. If a wildcard "*" is used as bean-name, the IOR settings will be applied
+                  to all beans in the deployment, except for the ones that override these settings in their own iiop
+                  element.
+                  ]]>
+               </xs:documentation>
+            </xs:annotation>
+            <xs:sequence>
+               <xs:element name="binding-name" type="xs:string" minOccurs="0" maxOccurs="1"/>
+               <xs:element name="ior-security-config" type="iorSecurityConfigType"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="iorSecurityConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorSecurityConfigType specifies the elements that can be used to configure security constraints of IIOP
+             enabled EJB3 beans.
+
+             - transport-config: contains the attributes that are used to specify the transport security requirements.
+             - as-context: contains the attributes that are used to configure the authentication service (AS) context.
+             - sas-context: contains the attributes that are used to configure the security attribute service (SAS) context.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="as-context" type="iorASContextType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="sas-context" type="iorSASContextType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="iorTransportConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorTransportConfigType specifies attributes that can be used to configure the transport requirements of
+             an IIOP enabled EJB3 bean.
+
+             * integrity: indicates if the server (target) supports integrity protected messages. The valid values are
+                          NONE, SUPPORTED or REQUIRED.
+             * confidentiality: indicates if the server (target) supports privacy protected messages. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * detect-misordering: indicates if the server (target) supports detection of message sequence errors. The
+                          values are NONE, SUPPORTED or REQUIRED.
+             * detect-replay: indicates if the server (target) supports detection of message replay attempts. The values
+                          are NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-client: indicates if the target is capable of authenticating a client. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-target: indicates if the target is capable of authenticating to a client. The values
+                         are NONE or SUPPORTED.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="integrity" type="xs:string" use="required"/>
+      <xs:attribute name="confidentiality" type="xs:string" use="required"/>
+      <xs:attribute name="detect-misordering" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="detect-replay" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="establish-trust-in-client" type="xs:string" use="required"/>
+      <xs:attribute name="establish-trust-in-target" type="xs:string" use="required"/>
+   </xs:complexType>
+
+    <xs:complexType name="iorASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the authentication service (AS) context.
+
+              * auth-method:describes the authentication method. The only supported values are USERNAME_PASSWORD and NONE.
+              * realm: describes the realm in which the user is authenticated. Must be a valid realm that is registered
+                       in server configuration.
+              * required: specifies if the supplied authentication method is required to be used for client authentication.
+                       If so the EstablishTrustInClient bit will be set in the target_requires field of the AS_Context.
+                       The attribute value is either true or false.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="auth-method" type="xs:string" use="required"/>
+       <xs:attribute name="realm" type="xs:string" use="required"/>
+       <xs:attribute name="required" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="iorSASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the security attribute service.
+
+              * caller-propagation: indicates if the target will accept propagated caller identities The values are
+                       NONE or SUPPORTED.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="caller-propagation" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-iiop_2_0.xsd b/wildfly/docs/schema/jboss-ejb-iiop_2_0.xsd
new file mode 100644
index 0000000..53e5e8e
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-iiop_2_0.xsd
@@ -0,0 +1,142 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2022, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns="urn:iiop" xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:iiop" version="2.0"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="iiop" type="iiopConfigType" substitutionGroup="jakartaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="iiopConfigType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:annotation>
+               <xs:documentation>
+                  <![CDATA[
+                  The iiop element contains the IIOP settings that are to be applied to an EJB. It must identify the
+                  bean to which the settings apply via the ejb-name sub-element. A wildcard "*" is allowed to convey
+                  that the settings are to be applied to all EJBs in the deployment.
+
+                  The binding-name sub-element can be used to specify the name that must be used to bind the EJB IOR
+                  in the COSNaming service. If a wildcard "*" is used as bean-name, this setting is ignored.
+
+                  The ior-security-config sub-element contains the security settings that are to be inserted into the
+                  EJB IOR. These include transport config requirements, authentication service settings, and secure
+                  attribute service settings. If a wildcard "*" is used as bean-name, the IOR settings will be applied
+                  to all beans in the deployment, except for the ones that override these settings in their own iiop
+                  element.
+                  ]]>
+               </xs:documentation>
+            </xs:annotation>
+            <xs:sequence>
+               <xs:element name="binding-name" type="xs:string" minOccurs="0" maxOccurs="1"/>
+               <xs:element name="ior-security-config" type="iorSecurityConfigType"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="iorSecurityConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorSecurityConfigType specifies the elements that can be used to configure security constraints of IIOP
+             enabled EJB3 beans.
+
+             - transport-config: contains the attributes that are used to specify the transport security requirements.
+             - as-context: contains the attributes that are used to configure the authentication service (AS) context.
+             - sas-context: contains the attributes that are used to configure the security attribute service (SAS) context.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="as-context" type="iorASContextType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="sas-context" type="iorSASContextType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="iorTransportConfigType">
+      <xs:annotation>
+         <xs:documentation>
+             <![CDATA[
+             The iorTransportConfigType specifies attributes that can be used to configure the transport requirements of
+             an IIOP enabled EJB3 bean.
+
+             * integrity: indicates if the server (target) supports integrity protected messages. The valid values are
+                          NONE, SUPPORTED or REQUIRED.
+             * confidentiality: indicates if the server (target) supports privacy protected messages. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * detect-misordering: indicates if the server (target) supports detection of message sequence errors. The
+                          values are NONE, SUPPORTED or REQUIRED.
+             * detect-replay: indicates if the server (target) supports detection of message replay attempts. The values
+                          are NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-client: indicates if the target is capable of authenticating a client. The values are
+                          NONE, SUPPORTED or REQUIRED.
+             * establish-trust-in-target: indicates if the target is capable of authenticating to a client. The values
+                         are NONE or SUPPORTED.
+                     ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="integrity" type="xs:string" use="required"/>
+      <xs:attribute name="confidentiality" type="xs:string" use="required"/>
+      <xs:attribute name="detect-misordering" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="detect-replay" type="xs:string" use="optional" default="NONE"/>
+      <xs:attribute name="establish-trust-in-client" type="xs:string" use="required"/>
+      <xs:attribute name="establish-trust-in-target" type="xs:string" use="required"/>
+   </xs:complexType>
+
+    <xs:complexType name="iorASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the authentication service (AS) context.
+
+              * auth-method:describes the authentication method. The only supported values are USERNAME_PASSWORD and NONE.
+              * realm: describes the realm in which the user is authenticated. Must be a valid realm that is registered
+                       in server configuration.
+              * required: specifies if the supplied authentication method is required to be used for client authentication.
+                       If so the EstablishTrustInClient bit will be set in the target_requires field of the AS_Context.
+                       The attribute value is either true or false.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="auth-method" type="xs:string" use="required"/>
+       <xs:attribute name="realm" type="xs:string" use="required"/>
+       <xs:attribute name="required" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="iorSASContextType">
+       <xs:annotation>
+          <xs:documentation>
+              <![CDATA[
+              The iorASConfigType specifies attributes that can be used to configure the security attribute service.
+
+              * caller-propagation: indicates if the target will accept propagated caller identities The values are
+                       NONE or SUPPORTED.
+                      ]]>
+          </xs:documentation>
+       </xs:annotation>
+       <xs:attribute name="caller-propagation" type="xs:string" use="required"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-pool_1_0.xsd b/wildfly/docs/schema/jboss-ejb-pool_1_0.xsd
new file mode 100644
index 0000000..d759e99
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-pool_1_0.xsd
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:ejb-pool:1.0" xmlns:javaee="http://java.sun.com/xml/ns/javaee" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:ejb-pool:1.0" version="1.0" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="pool" substitutionGroup="javaee:assembly-descriptor-entry" type="poolType"/>
+
+   <xs:complexType name="poolType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+	      <xs:sequence>
+    	     <xs:element name="bean-instance-pool-ref" type="xs:string"/>
+      	</xs:sequence>
+      	</xs:extension>
+      	</xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-pool_2_0.xsd b/wildfly/docs/schema/jboss-ejb-pool_2_0.xsd
new file mode 100644
index 0000000..d88ddd4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-pool_2_0.xsd
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:ejb-pool:2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:ejb-pool:2.0" version="2.0"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="pool" substitutionGroup="jakartaee:assembly-descriptor-entry" type="poolType"/>
+
+   <xs:complexType name="poolType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+	      <xs:sequence>
+    	     <xs:element name="bean-instance-pool-ref" type="xs:string"/>
+      	</xs:sequence>
+      	</xs:extension>
+      	</xs:complexContent>
+   </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-resource-adapter-binding_1_0.xsd b/wildfly/docs/schema/jboss-ejb-resource-adapter-binding_1_0.xsd
new file mode 100644
index 0000000..7012623
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-resource-adapter-binding_1_0.xsd
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:resource-adapter-binding" xmlns:javaee="http://java.sun.com/xml/ns/javaee" xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="urn:resource-adapter-binding" version="1.0" xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="resource-adapter-binding" substitutionGroup="javaee:assembly-descriptor-entry" type="resource-adapter-bindingType"/>
+
+   <xs:complexType name="resource-adapter-bindingType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+		    <xs:annotation>
+        	 <xs:documentation> The resource-adapter-binding element contains the binding of a message driven bean to the 
+         		resource adapter.
+            	The definition consists of the name of the resource adapter the message driven bean should be bound to.</xs:documentation>
+      		</xs:annotation>
+	      <xs:sequence>
+    	     <xs:element name="resource-adapter-name" type="xs:string"/>
+      	</xs:sequence>
+      	</xs:extension>
+      	</xs:complexContent>
+   </xs:complexType>
+   
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-resource-adapter-binding_2_0.xsd b/wildfly/docs/schema/jboss-ejb-resource-adapter-binding_2_0.xsd
new file mode 100644
index 0000000..4dea558
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-resource-adapter-binding_2_0.xsd
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:resource-adapter-binding:2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           attributeFormDefault="unqualified" elementFormDefault="qualified"
+           targetNamespace="urn:resource-adapter-binding:2.0"
+           version="2.0" xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="resource-adapter-binding" substitutionGroup="jakartaee:assembly-descriptor-entry" type="resource-adapter-bindingType"/>
+
+   <xs:complexType name="resource-adapter-bindingType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+		    <xs:annotation>
+        	 <xs:documentation> The resource-adapter-binding element contains the binding of a message driven bean to the 
+         		resource adapter.
+            	The definition consists of the name of the resource adapter the message driven bean should be bound to.</xs:documentation>
+      		</xs:annotation>
+	      <xs:sequence>
+    	     <xs:element name="resource-adapter-name" type="xs:string"/>
+      	</xs:sequence>
+      	</xs:extension>
+      	</xs:complexContent>
+   </xs:complexType>
+   
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-security-role_1_0.xsd b/wildfly/docs/schema/jboss-ejb-security-role_1_0.xsd
new file mode 100644
index 0000000..26d158d
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-security-role_1_0.xsd
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:security-role"
+           xmlns="urn:security-role"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="security-role" type="security-roleType" substitutionGroup="javaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="security-roleType">
+      <xs:annotation>
+         <xs:documentation> The security-role element contains the definition of a security role.
+            The definition consists of the security role name and principal name element(s). </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="description"
+            type="javaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xs:element name="role-name"
+            type="javaee:role-nameType"/>
+         <xs:element name="principal-name" type="principal-nameType" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="id" type="xs:ID"/>
+   </xs:complexType>
+   
+   <xs:complexType name="principal-nameType">
+      <xs:annotation>
+         <xs:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xs:documentation>
+      </xs:annotation>
+      <xs:simpleContent>
+         <xs:restriction base="javaee:string"/>
+      </xs:simpleContent>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-security-role_2_0.xsd b/wildfly/docs/schema/jboss-ejb-security-role_2_0.xsd
new file mode 100644
index 0000000..b963e06
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-security-role_2_0.xsd
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:security-role:2.0"
+           xmlns="urn:security-role:2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="security-role" type="security-roleType" substitutionGroup="jakartaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="security-roleType">
+      <xs:annotation>
+         <xs:documentation> The security-role element contains the definition of a security role.
+            The definition consists of the security role name and principal name element(s). </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="description"
+            type="jakartaee:descriptionType"
+            minOccurs="0"
+            maxOccurs="unbounded"/>
+         <xs:element name="role-name"
+            type="jakartaee:role-nameType"/>
+         <xs:element name="principal-name" type="principal-nameType" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="id" type="xs:ID"/>
+   </xs:complexType>
+   
+   <xs:complexType name="principal-nameType">
+      <xs:annotation>
+         <xs:documentation> The principal-name element is the name of the principal that is mapped
+            to the assembly role-name. </xs:documentation>
+      </xs:annotation>
+      <xs:simpleContent>
+         <xs:restriction base="jakartaee:string"/>
+      </xs:simpleContent>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-security_1_0.xsd b/wildfly/docs/schema/jboss-ejb-security_1_0.xsd
new file mode 100644
index 0000000..cb4b1f6
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-security_1_0.xsd
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:security"
+           xmlns="urn:security"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee"/>
+
+   <xs:element name="security" type="securityType" substitutionGroup="javaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="securityType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="security-domain" type="xs:string"/>
+               <xs:element name="run-as-principal" type="xs:string"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb-security_1_1.xsd b/wildfly/docs/schema/jboss-ejb-security_1_1.xsd
new file mode 100644
index 0000000..2de3d41
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-security_1_1.xsd
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:security:1.1"
+           xmlns="urn:security:1.1"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.1">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee"/>
+
+   <xs:element name="security" type="securityType" substitutionGroup="javaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="securityType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="security-domain" type="xs:string" minOccurs="0"/>
+               <xs:element name="run-as-principal" type="xs:string" minOccurs="0"/>
+               <xs:element name="missing-method-permissions-deny-access" type="xs:boolean" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                    If an EJB is secured but certain methods haven't been marked with explicit roles or @PermitAll/@DenyAll
+                                    then the EJB container uses this missing-method-permissions-deny-access element to decide whether or not
+                                    access is allowed to such methods.
+                                    Setting this element to true will prevent access to this by any role (i.e.
+                                    the method is as good as being marked as @DenyAll).
+                                    Setting this element to false will allow access to this method by any role (i.e. the method is as
+                                    good as being marked as @PemitAll)
+
+                            ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-ejb-security_2_0.xsd b/wildfly/docs/schema/jboss-ejb-security_2_0.xsd
new file mode 100644
index 0000000..aecc7fc
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-security_2_0.xsd
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:security:2.0"
+           xmlns="urn:security:2.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee/"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee/"/>
+
+   <xs:element name="security" type="securityType" substitutionGroup="jakartaee:assembly-descriptor-entry"/>
+
+   <xs:complexType name="securityType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="security-domain" type="xs:string" minOccurs="0"/>
+               <xs:element name="run-as-principal" type="xs:string" minOccurs="0"/>
+               <xs:element name="missing-method-permissions-deny-access" type="xs:boolean" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                    If an EJB is secured but certain methods haven't been marked with explicit roles or @PermitAll/@DenyAll
+                                    then the EJB container uses this missing-method-permissions-deny-access element to decide whether or not
+                                    access is allowed to such methods.
+                                    Setting this element to true will prevent access to this by any role (i.e.
+                                    the method is as good as being marked as @DenyAll).
+                                    Setting this element to false will allow access to this method by any role (i.e. the method is as
+                                    good as being marked as @PemitAll)
+
+                            ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-ejb-timer-service_2_0.xsd b/wildfly/docs/schema/jboss-ejb-timer-service_2_0.xsd
new file mode 100644
index 0000000..32e4cc9
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb-timer-service_2_0.xsd
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns="urn:timer-service:2.0"
+        targetNamespace="urn:timer-service:2.0"
+        version="2.0"
+        xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+        xmlns:xs="http://www.w3.org/2001/XMLSchema"
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        attributeFormDefault="unqualified"
+        elementFormDefault="qualified"
+        xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+    <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+    <xs:element name="timer-service" substitutionGroup="jakartaee:assembly-descriptor-entry" type="timer-serviceType"/>
+
+    <xs:complexType name="timer-serviceType">
+        <xs:complexContent>
+            <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+                <xs:choice minOccurs="0">
+                    <xs:element name="persistence-store-name" type="xs:string" maxOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>Identifies the name of the data store to use for persistent timers.</xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:sequence>
+                        <xs:element name="persistent-timer-management" type="xs:string" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>Identifies the timer-management provider to use for persistent timers.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="transient-timer-management" type="xs:string" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>Identifies the timer-management provider to use for transient (i.e. non-persistent) timers.</xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb3-2_0.xsd b/wildfly/docs/schema/jboss-ejb3-2_0.xsd
new file mode 100644
index 0000000..c673fb1
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb3-2_0.xsd
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright (c) 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="http://www.jboss.com/xml/ns/javaee"
+           xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+   <!-- xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="ejb-jar_3_1.xsd"/ -->
+   <!-- xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd"/ -->
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee"/>
+
+   <xs:element name="ejb" type="javaee:jboss-ejb-beanType"/>
+
+   <xs:element name="ejb-jar" type="javaee:jboss-ejb-jarType"/>
+
+   <xs:element name="enterprise-beans" type="javaee:jboss-enterprise-beansType"/>
+
+   <xs:element name="destination-jndi-name" type="xs:string" />
+
+   <xs:element name="distinct-name" type="xs:string">
+       <xs:annotation>
+           <xs:documentation>
+               The distinct-name for this EJB module.
+           </xs:documentation>
+       </xs:annotation>
+   </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb3-2_1.xsd b/wildfly/docs/schema/jboss-ejb3-2_1.xsd
new file mode 100644
index 0000000..975b0f2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb3-2_1.xsd
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="http://www.jboss.com/xml/ns/javaee"
+           xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.1">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee"/>
+
+   <xs:element name="ejb" type="javaee:jboss-ejb-beanType"/>
+
+   <xs:element name="ejb-jar" type="javaee:jboss-ejb-jarType"/>
+
+   <xs:element name="enterprise-beans" type="javaee:jboss-enterprise-beansType"/>
+
+   <xs:element name="destination-jndi-name" type="xs:string" />
+
+   <xs:element name="distinct-name" type="xs:string">
+       <xs:annotation>
+           <xs:documentation>
+               The distinct-name for this EJB module.
+           </xs:documentation>
+       </xs:annotation>
+   </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb3-4_0.xsd b/wildfly/docs/schema/jboss-ejb3-4_0.xsd
new file mode 100644
index 0000000..4c00eb7
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb3-4_0.xsd
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2022, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:jakartaee:1.0"
+           xmlns="urn:jboss:jakartaee:1.0"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="ejb" type="jakartaee:jboss-ejb-beanType"/>
+
+   <xs:element name="ejb-jar" type="jakartaee:jboss-ejb-jarType"/>
+
+   <xs:element name="enterprise-beans" type="jakartaee:jboss-enterprise-beansType"/>
+
+   <xs:element name="destination-jndi-name" type="xs:string" />
+
+   <xs:element name="distinct-name" type="xs:string">
+       <xs:annotation>
+           <xs:documentation>
+               The distinct-name for this EJB module.
+           </xs:documentation>
+       </xs:annotation>
+   </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb3-spec-2_0.xsd b/wildfly/docs/schema/jboss-ejb3-spec-2_0.xsd
new file mode 100644
index 0000000..fcbbf1a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb3-spec-2_0.xsd
@@ -0,0 +1,461 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright (c) 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="http://java.sun.com/xml/ns/javaee"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:jboss="http://www.jboss.com/xml/ns/javaee"           
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+   <!-- xs:include schemaLocation="ejb-jar_3_1.xsd"/ -->
+   <!--
+   <xs:include schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd"/>
+   -->
+
+   <xs:import namespace="http://www.jboss.com/xml/ns/javaee"/>
+
+   <xs:redefine schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd">
+      <xs:complexType name="assembly-descriptorType">
+         <xs:complexContent>
+            <xs:extension base="javaee:assembly-descriptorType">
+               <xs:sequence>
+                  <xs:element ref="javaee:assembly-descriptor-entry" minOccurs="0" maxOccurs="unbounded"/>
+               </xs:sequence>
+            </xs:extension>
+         </xs:complexContent>
+      </xs:complexType>
+   </xs:redefine>
+
+   <xs:redefine schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd">
+      <xs:complexType name="container-transactionType">
+         <xs:complexContent>
+            <xs:extension base="javaee:container-transactionType">
+               <xs:sequence>
+                  <xs:element ref="javaee:container-transaction-entry" minOccurs="0" maxOccurs="unbounded"/>
+               </xs:sequence>
+            </xs:extension>
+         </xs:complexContent>
+      </xs:complexType>
+   </xs:redefine>
+
+   <xs:element name="assembly-descriptor-entry" abstract="true" type="javaee:jboss-assembly-descriptor-entryType"/>
+
+   <xs:complexType abstract="true" name="jboss-assembly-descriptor-entryType">
+      <xs:sequence>
+         <xs:element name="description"
+                     type="javaee:descriptionType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-bean-entryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-entryType">
+            <xs:sequence>
+               <xs:element name="ejb-name"
+                           type="javaee:string"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-bean-method-entryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="method"
+                           type="javaee:named-methodType"
+                           minOccurs="0"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-method-entryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-entryType">
+            <xs:sequence>
+               <xs:element name="method"
+                           type="javaee:methodType"
+                           maxOccurs="unbounded"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:element name="container-transaction-entry" abstract="true" type="javaee:jboss-container-transaction-entryType"/>
+
+   <xs:complexType abstract="true" name="jboss-container-transaction-entryType"/>
+
+   <xs:complexType name="jboss-ejb-beanType">
+      <xs:sequence>
+         <xs:group ref="javaee:descriptionGroup"/>
+         <xs:element name="ejb-name"
+                     type="javaee:ejb-nameType"/>
+         <xs:element name="mapped-name"
+                     type="javaee:xsdStringType"
+                     minOccurs="0"/>
+         <xs:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-ejb-jarType">
+      <xs:complexContent>
+         <xs:extension base="javaee:ejb-jarType">
+            <xs:sequence>
+               <xs:element ref="jboss:enterprise-beans" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="impl-version" type="javaee:dewey-versionType" fixed="2.0" use="required"/>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <!--
+      The standard enterprise-beansType starts with a choice which mandates at least one element.
+      This effectively makes it non-extensible.
+   -->
+   <xs:complexType name="jboss-enterprise-beansType">
+      <!--
+      <xs:complexContent>
+         <xs:extension base="javaee:enterprise-beansType">
+            <xs:choice maxOccurs="unbounded">
+               <xs:element ref="jboss:ejb" minOccurs="0" maxOccurs="unbounded"/>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+      -->
+      <xs:annotation>
+        <xs:documentation>
+
+          The enterprise-beansType declares one or more enterprise
+          beans. Each bean can be a session, entity or message-driven
+          bean.
+
+        </xs:documentation>
+      </xs:annotation>
+      <xs:choice maxOccurs="unbounded">
+        <xs:element ref="jboss:ejb"/>
+        <xs:element name="session"
+                     type="javaee:session-beanType">
+          <!--
+          <xs:unique name="session-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-local-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-env-ref"/>
+            <xs:field xpath="javaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:message-destination-ref"/>
+            <xs:field xpath="javaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-ref"/>
+            <xs:field xpath="javaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:env-entry"/>
+            <xs:field xpath="javaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+        <xs:element name="entity"
+                     type="javaee:entity-beanType">
+          <!--
+          <xs:unique name="entity-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-local-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-env-ref"/>
+            <xs:field xpath="javaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:message-destination-ref"/>
+            <xs:field xpath="javaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-ref"/>
+            <xs:field xpath="javaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:env-entry"/>
+            <xs:field xpath="javaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+        <xs:element name="message-driven"
+                     type="javaee:message-driven-beanType">
+          <!--
+          <xs:unique name="messaged-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-local-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-env-ref"/>
+            <xs:field xpath="javaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:message-destination-ref"/>
+            <xs:field xpath="javaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-ref"/>
+            <xs:field xpath="javaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:env-entry"/>
+            <xs:field xpath="javaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+      </xs:choice>
+      <xs:attribute name="id"
+                     type="xs:ID"/>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb3-spec-2_1.xsd b/wildfly/docs/schema/jboss-ejb3-spec-2_1.xsd
new file mode 100644
index 0000000..37182d2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb3-spec-2_1.xsd
@@ -0,0 +1,457 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="http://java.sun.com/xml/ns/javaee"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+   <!-- xs:include schemaLocation="ejb-jar_3_1.xsd"/ -->
+   <!--
+   <xs:include schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd"/>
+   -->
+
+   <xs:import namespace="http://www.jboss.com/xml/ns/javaee"/>
+
+   <xs:redefine schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd">
+      <xs:complexType name="assembly-descriptorType">
+         <xs:complexContent>
+            <xs:extension base="javaee:assembly-descriptorType">
+               <xs:sequence>
+                  <xs:element ref="javaee:assembly-descriptor-entry" minOccurs="0" maxOccurs="unbounded"/>
+               </xs:sequence>
+            </xs:extension>
+         </xs:complexContent>
+      </xs:complexType>
+   </xs:redefine>
+
+   <xs:redefine schemaLocation="http://java.sun.com/xml/ns/javaee/ejb-jar_3_1.xsd">
+      <xs:complexType name="container-transactionType">
+         <xs:complexContent>
+            <xs:extension base="javaee:container-transactionType">
+               <xs:sequence>
+                  <xs:element ref="javaee:container-transaction-entry" minOccurs="0" maxOccurs="unbounded"/>
+               </xs:sequence>
+            </xs:extension>
+         </xs:complexContent>
+      </xs:complexType>
+   </xs:redefine>
+
+   <xs:element name="assembly-descriptor-entry" abstract="true" type="javaee:jboss-assembly-descriptor-entryType"/>
+
+   <xs:complexType abstract="true" name="jboss-assembly-descriptor-entryType">
+      <xs:sequence>
+         <xs:element name="description"
+                     type="javaee:descriptionType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-bean-entryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-entryType">
+            <xs:sequence>
+               <xs:element name="ejb-name"
+                           type="javaee:string"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-bean-method-entryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="method"
+                           type="javaee:named-methodType"
+                           minOccurs="0"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-method-entryType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-assembly-descriptor-entryType">
+            <xs:sequence>
+               <xs:element name="method"
+                           type="javaee:methodType"
+                           maxOccurs="unbounded"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:element name="container-transaction-entry" abstract="true" type="javaee:jboss-container-transaction-entryType"/>
+
+   <xs:complexType abstract="true" name="jboss-container-transaction-entryType"/>
+
+   <xs:complexType name="jboss-ejb-beanType">
+      <xs:sequence>
+         <xs:group ref="javaee:descriptionGroup"/>
+         <xs:element name="ejb-name"
+                     type="javaee:ejb-nameType"/>
+         <xs:element name="mapped-name"
+                     type="javaee:xsdStringType"
+                     minOccurs="0"/>
+         <xs:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-ejb-jarType">
+      <xs:complexContent>
+         <xs:extension base="javaee:ejb-jarType">
+            <xs:sequence>
+               <xs:element ref="jboss:enterprise-beans" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="impl-version" type="javaee:dewey-versionType" fixed="2.0" use="required"/>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <!--
+      The standard enterprise-beansType starts with a choice which mandates at least one element.
+      This effectively makes it non-extensible.
+   -->
+   <xs:complexType name="jboss-enterprise-beansType">
+      <!--
+      <xs:complexContent>
+         <xs:extension base="javaee:enterprise-beansType">
+            <xs:choice maxOccurs="unbounded">
+               <xs:element ref="jboss:ejb" minOccurs="0" maxOccurs="unbounded"/>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+      -->
+      <xs:annotation>
+        <xs:documentation>
+
+          The enterprise-beansType declares one or more enterprise
+          beans. Each bean can be a session, entity or message-driven
+          bean.
+
+        </xs:documentation>
+      </xs:annotation>
+      <xs:choice maxOccurs="unbounded">
+        <xs:element ref="jboss:ejb"/>
+        <xs:element name="session"
+                     type="javaee:session-beanType">
+          <!--
+          <xs:unique name="session-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-local-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-env-ref"/>
+            <xs:field xpath="javaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:message-destination-ref"/>
+            <xs:field xpath="javaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-ref"/>
+            <xs:field xpath="javaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:env-entry"/>
+            <xs:field xpath="javaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+        <xs:element name="entity"
+                     type="javaee:entity-beanType">
+          <!--
+          <xs:unique name="entity-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-local-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-env-ref"/>
+            <xs:field xpath="javaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:message-destination-ref"/>
+            <xs:field xpath="javaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-ref"/>
+            <xs:field xpath="javaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:env-entry"/>
+            <xs:field xpath="javaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+        <xs:element name="message-driven"
+                     type="javaee:message-driven-beanType">
+          <!--
+          <xs:unique name="messaged-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-local-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:ejb-ref"/>
+            <xs:field xpath="javaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-env-ref"/>
+            <xs:field xpath="javaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:message-destination-ref"/>
+            <xs:field xpath="javaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:resource-ref"/>
+            <xs:field xpath="javaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="javaee:env-entry"/>
+            <xs:field xpath="javaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+      </xs:choice>
+      <xs:attribute name="id"
+                     type="xs:ID"/>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-ejb3-spec-4_0.xsd b/wildfly/docs/schema/jboss-ejb3-spec-4_0.xsd
new file mode 100644
index 0000000..c779026
--- /dev/null
+++ b/wildfly/docs/schema/jboss-ejb3-spec-4_0.xsd
@@ -0,0 +1,457 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2022, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:jboss="urn:jboss:jakartaee:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+
+   <!-- xs:include schemaLocation="ejb-jar_4_0.xsd"/ -->
+   <!--
+   <xs:include schemaLocation="https://jakarta.ee/xml/ns/jakartaee/ejb-jar_4_0.xsd"/>
+   -->
+
+   <xs:import namespace="urn:jboss:jakartaee:1.0"/>
+
+   <xs:redefine schemaLocation="https://jakarta.ee/xml/ns/jakartaee/ejb-jar_4_0.xsd">
+      <xs:complexType name="assembly-descriptorType">
+         <xs:complexContent>
+            <xs:extension base="jakartaee:assembly-descriptorType">
+               <xs:sequence>
+                  <xs:element ref="jakartaee:assembly-descriptor-entry" minOccurs="0" maxOccurs="unbounded"/>
+               </xs:sequence>
+            </xs:extension>
+         </xs:complexContent>
+      </xs:complexType>
+   </xs:redefine>
+
+   <xs:redefine schemaLocation="https://jakarta.ee/xml/ns/jakartaee/ejb-jar_4_0.xsd">
+      <xs:complexType name="container-transactionType">
+         <xs:complexContent>
+            <xs:extension base="jakartaee:container-transactionType">
+               <xs:sequence>
+                  <xs:element ref="jakartaee:container-transaction-entry" minOccurs="0" maxOccurs="unbounded"/>
+               </xs:sequence>
+            </xs:extension>
+         </xs:complexContent>
+      </xs:complexType>
+   </xs:redefine>
+
+   <xs:element name="assembly-descriptor-entry" abstract="true" type="jakartaee:jboss-assembly-descriptor-entryType"/>
+
+   <xs:complexType abstract="true" name="jboss-assembly-descriptor-entryType">
+      <xs:sequence>
+         <xs:element name="description"
+                     type="jakartaee:descriptionType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-bean-entryType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-entryType">
+            <xs:sequence>
+               <xs:element name="ejb-name"
+                           type="jakartaee:string"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-bean-method-entryType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-bean-entryType">
+            <xs:sequence>
+               <xs:element name="method"
+                           type="jakartaee:named-methodType"
+                           minOccurs="0"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-assembly-descriptor-method-entryType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-assembly-descriptor-entryType">
+            <xs:sequence>
+               <xs:element name="method"
+                           type="jakartaee:methodType"
+                           maxOccurs="unbounded"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <xs:element name="container-transaction-entry" abstract="true" type="jakartaee:jboss-container-transaction-entryType"/>
+
+   <xs:complexType abstract="true" name="jboss-container-transaction-entryType"/>
+
+   <xs:complexType name="jboss-ejb-beanType">
+      <xs:sequence>
+         <xs:group ref="jakartaee:descriptionGroup"/>
+         <xs:element name="ejb-name"
+                     type="jakartaee:ejb-nameType"/>
+         <xs:element name="mapped-name"
+                     type="jakartaee:xsdStringType"
+                     minOccurs="0"/>
+         <xs:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="jboss-ejb-jarType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:ejb-jarType">
+            <xs:sequence>
+               <xs:element ref="jboss:enterprise-beans" minOccurs="0"/>
+            </xs:sequence>
+            <xs:attribute name="impl-version" type="jakartaee:dewey-versionType" fixed="2.0" use="required"/>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+
+   <!--
+      The standard enterprise-beansType starts with a choice which mandates at least one element.
+      This effectively makes it non-extensible.
+   -->
+   <xs:complexType name="jboss-enterprise-beansType">
+      <!--
+      <xs:complexContent>
+         <xs:extension base="jakartaee:enterprise-beansType">
+            <xs:choice maxOccurs="unbounded">
+               <xs:element ref="jboss:ejb" minOccurs="0" maxOccurs="unbounded"/>
+            </xs:choice>
+         </xs:extension>
+      </xs:complexContent>
+      -->
+      <xs:annotation>
+        <xs:documentation>
+
+          The enterprise-beansType declares one or more enterprise
+          beans. Each bean can be a session, entity or message-driven
+          bean.
+
+        </xs:documentation>
+      </xs:annotation>
+      <xs:choice maxOccurs="unbounded">
+        <xs:element ref="jboss:ejb"/>
+        <xs:element name="session"
+                     type="jakartaee:session-beanType">
+          <!--
+          <xs:unique name="session-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:ejb-local-ref"/>
+            <xs:field xpath="jakartaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:ejb-ref"/>
+            <xs:field xpath="jakartaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:resource-env-ref"/>
+            <xs:field xpath="jakartaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:message-destination-ref"/>
+            <xs:field xpath="jakartaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:resource-ref"/>
+            <xs:field xpath="jakartaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="session-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:env-entry"/>
+            <xs:field xpath="jakartaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+        <xs:element name="entity"
+                     type="jakartaee:entity-beanType">
+          <!--
+          <xs:unique name="entity-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:ejb-local-ref"/>
+            <xs:field xpath="jakartaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:ejb-ref"/>
+            <xs:field xpath="jakartaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:resource-env-ref"/>
+            <xs:field xpath="jakartaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:message-destination-ref"/>
+            <xs:field xpath="jakartaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:resource-ref"/>
+            <xs:field xpath="jakartaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="entity-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:env-entry"/>
+            <xs:field xpath="jakartaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+        <xs:element name="message-driven"
+                     type="jakartaee:message-driven-beanType">
+          <!--
+          <xs:unique name="messaged-ejb-local-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of
+                an EJB reference. The EJB reference is an entry in
+                the component's environment and is relative to the
+                java:comp/env context.  The name must be unique within
+                the component.
+
+                It is recommended that name be prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:ejb-local-ref"/>
+            <xs:field xpath="jakartaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-ejb-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The ejb-ref-name element contains the name of an EJB
+                reference. The EJB reference is an entry in the
+                component's environment and is relative to the
+                java:comp/env context. The name must be unique
+                within the component.
+
+                It is recommended that name is prefixed with "ejb/".
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:ejb-ref"/>
+            <xs:field xpath="jakartaee:ejb-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-resource-env-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The resource-env-ref-name element specifies the name
+                of a resource environment reference; its value is
+                the environment entry name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:resource-env-ref"/>
+            <xs:field xpath="jakartaee:resource-env-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-message-destination-ref-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The message-destination-ref-name element specifies the name
+                of a message destination reference; its value is
+                the message destination reference name used in the component
+                code. The name is a JNDI name relative to the
+                java:comp/env context and must be unique within an
+                component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:message-destination-ref"/>
+            <xs:field xpath="jakartaee:message-destination-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-res-ref-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The res-ref-name element specifies the name of a
+                resource manager connection factory reference.  The name
+                is a JNDI name relative to the java:comp/env context.
+                The name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:resource-ref"/>
+            <xs:field xpath="jakartaee:res-ref-name"/>
+          </xs:unique>
+          <xs:unique name="messaged-env-entry-name-uniqueness">
+            <xs:annotation>
+              <xs:documentation>
+
+                The env-entry-name element contains the name of a
+                component's environment entry.  The name is a JNDI
+                name relative to the java:comp/env context.  The
+                name must be unique within an component.
+
+              </xs:documentation>
+            </xs:annotation>
+            <xs:selector xpath="jakartaee:env-entry"/>
+            <xs:field xpath="jakartaee:env-entry-name"/>
+          </xs:unique>
+          -->
+        </xs:element>
+      </xs:choice>
+      <xs:attribute name="id"
+                     type="xs:ID"/>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-jpa_1_0.xsd b/wildfly/docs/schema/jboss-jpa_1_0.xsd
new file mode 100644
index 0000000..c79a623
--- /dev/null
+++ b/wildfly/docs/schema/jboss-jpa_1_0.xsd
@@ -0,0 +1,76 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+  <xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" 
+  targetNamespace="urn:jboss:jboss-jpa:1.0"     
+  xmlns="urn:jboss:jboss-jpa:1.0"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified" 
+  version="1.0">
+
+  <!-- jboss-jpa may be in a jboss-all.xml deployment descriptor to choose between 
+       deep/shallow extended persistence inheritance.
+  -->  
+  
+  <!-- example of using shallow inheritance 
+      <jboss>
+       <jboss-jpa xmlns="http://www.jboss.com/xml/ns/javaee">
+       <extended-persistence inheritance="SHALLOW"/>
+       </jboss-jpa>
+      </jboss>
+  -->
+  
+  <!-- example of using deep inheritance 
+      <jboss>
+       <jboss-jpa xmlns="http://www.jboss.com/xml/ns/javaee">
+       <extended-persistence inheritance="DEEP"/>
+       </jboss-jpa>
+      </jboss>
+  -->
+  
+  <!-- Root element -->  
+  
+  <xs:element name="jboss-jpa" type="jboss-jpa-type"/>
+  <xs:complexType name="jboss-jpa-type">
+    <xs:all>
+      <xs:element name="extended-persistence" type="extended-persistence-type" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="extended-persistence-type">
+    <xs:attribute name="inheritance" type="extended-persistence-inheritance-type" default="DEEP" use="optional">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Controls how JPA extended persistence context (XPC) inheritance is performed.  
+              XPC inheritance only occurs between stateful session beans used within the same EJB3 thread.
+              This might be a stateful bean that injects other stateful beans (directly or via JNDI lookup).
+              
+              With DEEP extended persistence inheritance, the extended persistence context is always shared at 
+              the top most stateful bean level.  Even if the top level bean does not have an extended persistence 
+              context, sub-beans (siblings) will share the extended persistence context (requiring fewer copies of 
+              entities to be loaded).
+              
+              With SHALLOW extended persistence inheritance, the extended persistence context is only shared between 
+              a stateful bean and its parent bean.  This means that sibling stateful beans with the same parent bean, 
+              will have isolated persistence contexts (assuming the parent bean doesn't have an extended persistence 
+              context).
+             ]]>
+          </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="extended-persistence-inheritance-type">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="DEEP" />
+      <xs:enumeration value="SHALLOW" />
+    </xs:restriction>
+  </xs:simpleType>
+
+</xs:schema>
+
diff --git a/wildfly/docs/schema/jboss-pojo_7_0.xsd b/wildfly/docs/schema/jboss-pojo_7_0.xsd
new file mode 100644
index 0000000..3e0f963
--- /dev/null
+++ b/wildfly/docs/schema/jboss-pojo_7_0.xsd
@@ -0,0 +1,175 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:pojo:7.0"
+            xmlns="urn:jboss:pojo:7.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.0">
+
+    <xs:complexType name="deployment">
+        <xs:sequence>
+            <xs:element name="bean" type="bean" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bean">
+        <xs:sequence>
+            <xs:element name="alias" type="alias" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="classloader" type="classloader" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="constructor" type="constructor" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="property" type="property" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="create" type="lifecycle" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="start" type="lifecycle" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stop" type="lifecycle" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="destroy" type="lifecycle" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="install" type="install" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="uninstall" type="install" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="incallback" type="callback" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="uncallback" type="callback" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="depends" type="depends" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="optional"/>
+        <xs:attribute name="mode" type="mode" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="alias" mixed="true" />
+
+    <xs:complexType name="classloader">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="constructor">
+        <xs:sequence>
+            <xs:element name="factory" type="parameter" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="parameter" type="parameter" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="factory-class" type="xs:string" use="optional"/>
+        <xs:attribute name="factory-method" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="active"/>
+            <xs:enumeration value="passive"/>
+            <xs:enumeration value="on demand"/>
+            <xs:enumeration value="never"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="property">
+        <xs:choice minOccurs="0" maxOccurs="1">
+            <xs:element name="value" type="value"/>
+            <xs:element name="inject" type="inject"/>
+            <xs:element name="value-factory" type="value-factory"/>
+            <xs:element name="list" type="collection"/>
+            <xs:element name="set" type="collection"/>
+            <xs:element name="map" type="map"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="depends">
+        <xs:attribute name="state" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="inject">
+        <xs:attribute name="bean" type="xs:string" use="optional"/>
+        <xs:attribute name="service" type="xs:string" use="optional"/>
+        <xs:attribute name="property" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="value-factory">
+        <xs:sequence>
+            <xs:element name="parameter" type="parameter" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="bean" type="xs:string" use="required"/>
+        <xs:attribute name="method" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="collection">
+        <xs:sequence>
+            <xs:element name="value" type="value"/>
+            <xs:element name="inject" type="inject"/>
+            <xs:element name="value-factory" type="value-factory"/>
+            <xs:element name="list" type="collection"/>
+            <xs:element name="set" type="collection"/>
+            <xs:element name="map" type="map"/>
+        </xs:sequence>
+        <xs:attribute name="class" type="xs:string" use="optional"/>
+        <xs:attribute name="elementClass" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="map">
+        <xs:sequence>
+            <xs:element name="entry" type="entry"/>
+        </xs:sequence>
+        <xs:attribute name="class" type="xs:string" use="optional"/>
+        <xs:attribute name="keyClass" type="xs:string" use="optional"/>
+        <xs:attribute name="valueClass" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="entry">
+        <xs:sequence>
+            <xs:element name="key" type="value-value"/>
+            <xs:element name="value" type="value-value"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="value-value" mixed="true">
+        <xs:sequence>
+            <xs:element name="value" type="value"/>
+            <xs:element name="inject" type="inject"/>
+            <xs:element name="value-factory" type="value-factory"/>
+            <xs:element name="list" type="collection"/>
+            <xs:element name="set" type="collection"/>
+            <xs:element name="map" type="map"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="lifecycle">
+        <xs:sequence>
+            <xs:element name="parameter" type="parameter" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="method" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="install">
+        <xs:sequence>
+            <xs:element name="parameter" type="parameter" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="bean" type="xs:string" use="optional"/>
+        <xs:attribute name="method" type="xs:string" use="required"/>
+        <xs:attribute name="whenRequired" type="xs:string" use="optional"/>
+        <xs:attribute name="state" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="callback">
+        <xs:attribute name="method" type="xs:string" use="required"/>
+        <xs:attribute name="whenRequired" type="xs:string" use="optional"/>
+        <xs:attribute name="state" type="xs:string" use="optional"/>
+        <xs:attribute name="signature" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="value" mixed="true">
+        <xs:attribute name="replace" type="xs:boolean" use="optional"/>
+        <xs:attribute name="trim" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="parameter" mixed="true">
+        <xs:sequence>
+            <xs:element name="value" type="value" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="class" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <!-- Root elements -->
+
+    <xs:element name="deployment" type="deployment"/>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-remoting_5_0.xsd b/wildfly/docs/schema/jboss-remoting_5_0.xsd
new file mode 100644
index 0000000..af1f0dc
--- /dev/null
+++ b/wildfly/docs/schema/jboss-remoting_5_0.xsd
@@ -0,0 +1,69 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss-remoting:5.0"
+            xmlns="urn:jboss-remoting:5.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="endpoint" type="endpoint-type"/>
+
+    <xs:complexType name="endpoint-type">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="providers" type="providers-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connections" type="connections-type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="providers-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="provider" type="provider-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:attribute name="scheme" use="required" type="xs:string"/>
+        <xs:attribute name="aliases" use="optional" type="string-list-type"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+        <xs:attribute name="class" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="connections-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="connection" type="connection-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="connection-type">
+        <xs:attribute name="destination" use="required" type="xs:anyURI"/>
+        <xs:attribute name="read-timeout" use="optional" type="xs:positiveInteger"/>
+        <xs:attribute name="write-timeout" use="optional" type="xs:positiveInteger"/>
+        <xs:attribute name="ip-traffic-class" use="optional" type="xs:positiveInteger"/>
+        <xs:attribute name="tcp-keepalive" use="optional" type="xs:boolean"/>
+        <xs:attribute name="heartbeat-interval" use="optional" type="xs:positiveInteger"/>
+    </xs:complexType>
+
+    <xs:simpleType name="string-list-type">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-remoting_5_1.xsd b/wildfly/docs/schema/jboss-remoting_5_1.xsd
new file mode 100644
index 0000000..7bb36d3
--- /dev/null
+++ b/wildfly/docs/schema/jboss-remoting_5_1.xsd
@@ -0,0 +1,73 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss-remoting:5.1"
+            xmlns="urn:jboss-remoting:5.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="endpoint" type="endpoint-type"/>
+
+    <xs:complexType name="endpoint-type">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="providers" type="providers-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connections" type="connections-type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="optional" type="xs:string"/>
+        <xs:attribute name="read-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="write-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="tcp-keepalive" use="optional" type="xs:boolean"/>
+        <xs:attribute name="heartbeat-interval" use="optional" type="xs:nonNegativeInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="providers-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="provider" type="provider-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:attribute name="scheme" use="required" type="xs:string"/>
+        <xs:attribute name="aliases" use="optional" type="string-list-type"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+        <xs:attribute name="class" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="connections-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="connection" type="connection-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="connection-type">
+        <xs:attribute name="destination" use="required" type="xs:anyURI"/>
+        <xs:attribute name="read-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="write-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="ip-traffic-class" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="tcp-keepalive" use="optional" type="xs:boolean"/>
+        <xs:attribute name="heartbeat-interval" use="optional" type="xs:nonNegativeInteger"/>
+    </xs:complexType>
+
+    <xs:simpleType name="string-list-type">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-remoting_5_2.xsd b/wildfly/docs/schema/jboss-remoting_5_2.xsd
new file mode 100644
index 0000000..390b2d2
--- /dev/null
+++ b/wildfly/docs/schema/jboss-remoting_5_2.xsd
@@ -0,0 +1,101 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2022 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss-remoting:5.2"
+            xmlns="urn:jboss-remoting:5.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="endpoint" type="endpoint-type"/>
+
+    <xs:complexType name="endpoint-type">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="providers" type="providers-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connections" type="connections-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="options" type="connections-type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="optional" type="xs:string"/>
+        <xs:attribute name="read-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="write-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="tcp-keepalive" use="optional" type="xs:boolean"/>
+        <xs:attribute name="heartbeat-interval" use="optional" type="xs:nonNegativeInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="providers-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="provider" type="provider-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:attribute name="scheme" use="required" type="xs:string"/>
+        <xs:attribute name="aliases" use="optional" type="string-list-type"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+        <xs:attribute name="class" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="connections-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="connection" type="connection-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="connection-type">
+        <xs:attribute name="destination" use="required" type="xs:anyURI"/>
+        <xs:attribute name="read-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="write-timeout" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="ip-traffic-class" use="optional" type="xs:nonNegativeInteger"/>
+        <xs:attribute name="tcp-keepalive" use="optional" type="xs:boolean"/>
+        <xs:attribute name="heartbeat-interval" use="optional" type="xs:nonNegativeInteger"/>
+    </xs:complexType>
+
+    <xs:complexType name="options-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="connection" type="option-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="option-type">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="type" use="required" type="option-type-type"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="option-type-type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+          Define the type of option.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="remoting" />
+            <xs:enumeration value="xnio" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="string-list-type">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-service_7_0.xsd b/wildfly/docs/schema/jboss-service_7_0.xsd
new file mode 100644
index 0000000..bca9338
--- /dev/null
+++ b/wildfly/docs/schema/jboss-service_7_0.xsd
@@ -0,0 +1,106 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:service:7.0"
+            xmlns="urn:jboss:service:7.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.0">
+
+    <xs:complexType name="server">
+        <xs:sequence>
+            <xs:element name="mbean" type="mbean" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="mode" type="mode" default="active" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mbean">
+        <xs:sequence>
+            <xs:element name="constructor" type="constructor" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="attribute" type="attribute" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="depends" type="depends" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="depends-list" type="depends-list" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="alias" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="annotation" type="xs:string" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="code" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="constructor">
+        <xs:sequence>
+            <xs:element name="arg" type="arg" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="arg">
+        <xs:attribute name="type" type="xs:string" default="java.lang.String" use="optional"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="mode">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="active"/>
+            <xs:enumeration value="passive"/>
+            <xs:enumeration value="on demand"/>
+            <xs:enumeration value="never"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="attribute" mixed="true">
+        <xs:choice minOccurs="0" maxOccurs="1">
+            <xs:element name="inject" type="inject"/>
+            <xs:element name="value-factory" type="value-factory"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="replace" type="xs:boolean" use="optional"/>
+        <xs:attribute name="trim" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="depends">
+        <xs:sequence>
+            <xs:element name="mbean" type="mbean" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="optional-attribute-name" type="xs:string" use="optional"/>
+        <xs:attribute name="proxy-type" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="depends-list">
+        <xs:sequence>
+            <xs:element name="depends-list-element" type="depends-list-element" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="optional-attribute-name" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="depends-list-element">
+        <xs:sequence>
+            <xs:element name="mbean" type="mbean" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="inject">
+        <xs:attribute name="bean" type="xs:string" use="required"/>
+        <xs:attribute name="property" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="value-factory">
+        <xs:sequence>
+            <xs:element name="parameter" type="parameter" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="bean" type="xs:string" use="required"/>
+        <xs:attribute name="method" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="parameter">
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <!-- Root elements -->
+
+    <xs:element name="server" type="server"/>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/jboss-web_10_0.xsd b/wildfly/docs/schema/jboss-web_10_0.xsd
new file mode 100644
index 0000000..1d31a8f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_10_0.xsd
@@ -0,0 +1,598 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="10.0">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the WildFly 10.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_10_0.xsd"
+           version="10.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_10_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_1.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="10.0"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <!--<xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <!--<xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+            <xsd:annotation>
+               <xsd:documentation>
+                  Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                  this limit, the resulting behavior is determined by the session manager.
+
+                  If the session manager supports passivation, then sessions accessed least recently will be
+                  passivated to make room for new sessions.
+                  If the session manager does not support passivation then any attempt to create more than
+                  max-active-sessions will fail.
+
+                  If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                  and sessions will never passivate.
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+          <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+          <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+
+   <xsd:complexType name="httpHandlerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container HTTPHandler. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A handler
+            is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+            The class specified can either be a HttpHandler that has a constructor that takes the
+             next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             Thesymbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:restriction base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment 
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The servlet-container element specifies the which servlet container this application
+             should be using.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The server-instance element specifies the which server instance configuration this application belongs to.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+      <xsd:annotation>
+         <xsd:documentation>
+             Default encoding to use for this application
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scrope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated reglardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_10_1.xsd b/wildfly/docs/schema/jboss-web_10_1.xsd
new file mode 100644
index 0000000..9c79c52
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_10_1.xsd
@@ -0,0 +1,599 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="10.0">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the WildFly 10.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_10_1.xsd"
+           version="10.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_10_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_1.xsd"/>
+   <xsd:include schemaLocation="jboss-common_7_0.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="10.0"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <!--<xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <!--<xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+            <xsd:annotation>
+               <xsd:documentation>
+                  Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                  this limit, the resulting behavior is determined by the session manager.
+
+                  If the session manager supports passivation, then sessions accessed least recently will be
+                  passivated to make room for new sessions.
+                  If the session manager does not support passivation then any attempt to create more than
+                  max-active-sessions will fail.
+
+                  If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                  and sessions will never passivate.
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+          <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+          <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will receive from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+
+   <xsd:complexType name="httpHandlerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container HTTPHandler. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A handler
+            is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+            The class specified can either be a HttpHandler that has a constructor that takes the
+             next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             Thesymbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:extension base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment 
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The servlet-container element specifies the which servlet container this application
+             should be using.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The server-instance element specifies the which server instance configuration this application belongs to.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+      <xsd:annotation>
+         <xsd:documentation>
+             Default encoding to use for this application
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated regardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_11_0.xsd b/wildfly/docs/schema/jboss-web_11_0.xsd
new file mode 100644
index 0000000..bde62bf
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_11_0.xsd
@@ -0,0 +1,618 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2016, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="11.0">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the WildFly 11.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_11_0.xsd"
+           version="11.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_11_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_1.xsd"/>
+   <xsd:include schemaLocation="jboss-common_7_0.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="11.0"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <!--<xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <!--<xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+            <xsd:annotation>
+               <xsd:documentation>
+                  Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                  this limit, the resulting behavior is determined by the session manager.
+
+                  If the session manager supports passivation, then sessions accessed least recently will be
+                  passivated to make room for new sessions.
+                  If the session manager does not support passivation then any attempt to create more than
+                  max-active-sessions will fail.
+
+                  If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                  and sessions will never passivate.
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+          <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+          <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+
+   <xsd:complexType name="httpHandlerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container HTTPHandler. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A handler
+            is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+            The class specified can either be a HttpHandler that has a constructor that takes the
+             next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             Thesymbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:restriction base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment 
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The servlet-container element specifies the which servlet container this application
+             should be using.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The server-instance element specifies the which server instance configuration this application belongs to.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+      <xsd:annotation>
+         <xsd:documentation>
+             Default encoding to use for this application
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scrope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated reglardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_11_1.xsd b/wildfly/docs/schema/jboss-web_11_1.xsd
new file mode 100644
index 0000000..ed9a976
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_11_1.xsd
@@ -0,0 +1,602 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2016, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="11.1">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the WildFly 11.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee http://www.jboss.org/schema/jbossas/jboss-web_11_0.xsd"
+           version="11.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-web_11_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="http://www.jboss.org/schema/jbossas/web-app_3_1.xsd"/>
+   <xsd:include schemaLocation="http://www.jboss.org/schema/jbossas/jboss-common_7_1.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="11.1"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <!--<xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <!--<xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:web-security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+            <xsd:annotation>
+               <xsd:documentation>
+                  Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                  this limit, the resulting behavior is determined by the session manager.
+
+                  If the session manager supports passivation, then sessions accessed least recently will be
+                  passivated to make room for new sessions.
+                  If the session manager does not support passivation then any attempt to create more than
+                  max-active-sessions will fail.
+
+                  If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                  and sessions will never passivate.
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+          <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+          <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will receive from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+
+   <xsd:complexType name="httpHandlerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container HTTPHandler. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A handler
+            is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+            The class specified can either be a HttpHandler that has a constructor that takes the
+             next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="web-security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:extension base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The servlet-container element specifies the which servlet container this application
+             should be using.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The server-instance element specifies the which server instance configuration this application belongs to.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+      <xsd:annotation>
+         <xsd:documentation>
+             Default encoding to use for this application
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated reglardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_12_0.xsd b/wildfly/docs/schema/jboss-web_12_0.xsd
new file mode 100644
index 0000000..bfbcd68
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_12_0.xsd
@@ -0,0 +1,604 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2018, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="12.0">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the WildFly 12.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_12_0.xsd"
+           version="12.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_12_0.xsd
+
+	]]>
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+            The following conventions apply to all Java EE deployment descriptor
+            elements unless indicated otherwise. - In elements that specify a pathname to a file within
+            the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+            relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+            with "/") also specify names in the root of the JAR file's namespace. In general, relative
+            names are preferred. The exception is .war files where absolute names are preferred for
+            consistency with the Servlet API.
+        </xsd:documentation>
+    </xsd:annotation>
+
+
+    <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="https://www.jboss.org/schema/jbossas/web-app_3_1.xsd"/>
+    <xsd:include schemaLocation="https://www.jboss.org/schema/jbossas/jboss-common_7_0.xsd"/>
+
+    <xsd:element name="jboss-web" type="jboss:jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                This is the root element of jboss-web deployment descriptor.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:simpleType name="jboss-web-versionType">
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="12.0"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss-web element is the root element of jboss-web.xml file. It contains
+                all the information used by jboss but not described in the web.xml file. All of it is optional.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+            <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                        this limit, the resulting behavior is determined by the session manager.
+
+                        If the session manager supports passivation, then sessions accessed least recently will be
+                        passivated to make room for new sessions.
+                        If the session manager does not support passivation then any attempt to create more than
+                        max-active-sessions will fail.
+
+                        If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                        and sessions will never passivate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+            <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listenerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container listener. The module element allows specifying from which
+                module in the application server the specified class will be loaded. The listener type
+                element defines which events the listener will receive from the web container.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listener-typeType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="LIFECYCLE"/>
+                <xsd:enumeration value="CONTAINER"/>
+                <xsd:enumeration value="SERVLET_INSTANCE"/>
+                <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+                <xsd:enumeration value="SERVLET_CONTAINER"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="valveType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container valve. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A container
+                valve is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="httpHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container HTTPHandler. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A handler
+                is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+                The class specified can either be a HttpHandler that has a constructor that takes the
+                next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="overlayType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The overlay element specifies additional static files overlays for this
+                web application. The content of the element should be a folder in the
+                filesystem containing the static files that will overlay the webapp's
+                static files, similar to what happens with regular JAR overlays.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-cross-contextType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-cross-context element specifies if cross context
+                access should be enabled for this webapp, allowing it to use the
+                request dispatcher to access other webapps deployed in the
+                application server.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="use-jboss-authorizationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The use-jboss-authorization element specifies if the JBoss
+                authorization layer should be used.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-auditType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-audit element specifies if the security audit logging
+                should be disabled.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+    <xsd:complexType name="distinct-nameType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The distinct-name element specifies the EJB 3 distinct name for this
+                web application.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="symbolic-linked-allowedType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-star-role-allowType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-star-role-allow element specifies whether the
+                jacc permission generating agent in the web layer needs to generate a
+                WebResourcePermission(url,null) permission such that the jacc provider can
+                make a decision as to bypass authorization or not.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The context-root element specifies the context root of a web
+                application. This is normally specified at the ear level using the standard
+                JEE application.xml descriptor, but it may be given here for standalone wars.
+                This should not override the application.xml level specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet-container element specifies the which servlet container this application
+                should be using.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The server-instance element specifies the which server instance configuration this application belongs to.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Default encoding to use for this application
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="virtual-hostType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="replication-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated regardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="replication-granularityType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="SESSION"/>
+                <xsd:enumeration value="ATTRIBUTE"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servletType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet element specifies servlet specific bindings. Currently this
+                is only the run-as principal identity.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="servlet-name" type="javaee:string"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The run-as-principal element specifies whether a specific run-as identity is
+                        to be used. If there is a run-as role defined for a servlet, there can also
+                        be a run-as-principal defined here. If you don't define a run-as principal
+                        the callee will see ctx.getUserPrincipal() == 'anonymous'
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="max-active-sessionsType">
+        <xsd:restriction base="xsd:integer"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="annotationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The annotation element specifies annotation specific bindings. This allows
+                overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+                on a Servlet class rather than a Servlet name. They have the same structure
+                and element names as the corresponding annotation.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string"/>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="run-asType">
+        <xsd:sequence>
+            <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="role-name" type="javaee:string"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-securityType">
+        <xsd:sequence>
+            <xsd:element name="empty-role-semantic" type="javaee:string"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-method-constraintType">
+        <xsd:sequence>
+            <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-role-semanticType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="PERMIT"/>
+                <xsd:enumeration value="DENY"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="multipart-configType">
+        <xsd:sequence>
+            <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_12_1.xsd b/wildfly/docs/schema/jboss-web_12_1.xsd
new file mode 100644
index 0000000..036db4b
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_12_1.xsd
@@ -0,0 +1,603 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2018, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="12.1">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the WildFly 12.1 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee http://www.jboss.org/schema/jbossas/jboss-web_12_1.xsd"
+           version="12.1">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-web_12_1.xsd
+
+	]]>
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+            The following conventions apply to all Java EE deployment descriptor
+            elements unless indicated otherwise. - In elements that specify a pathname to a file within
+            the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+            relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+            with "/") also specify names in the root of the JAR file's namespace. In general, relative
+            names are preferred. The exception is .war files where absolute names are preferred for
+            consistency with the Servlet API.
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="http://www.jboss.org/schema/jbossas/web-app_3_1.xsd"/>
+    <xsd:include schemaLocation="http://www.jboss.org/schema/jbossas/jboss-common_7_1.xsd"/>
+
+    <xsd:element name="jboss-web" type="jboss:jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                This is the root element of jboss-web deployment descriptor.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:simpleType name="jboss-web-versionType">
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="12.1"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss-web element is the root element of jboss-web.xml file. It contains
+                all the information used by jboss but not described in the web.xml file. All of it is optional.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="security-domain" type="jboss:web-security-domainType" minOccurs="0"/>
+            <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                        this limit, the resulting behavior is determined by the session manager.
+
+                        If the session manager supports passivation, then sessions accessed least recently will be
+                        passivated to make room for new sessions.
+                        If the session manager does not support passivation then any attempt to create more than
+                        max-active-sessions will fail.
+
+                        If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                        and sessions will never passivate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+            <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listenerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container listener. The module element allows specifying from which
+                module in the application server the specified class will be loaded. The listener type
+                element defines which events the listener will receive from the web container.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listener-typeType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="LIFECYCLE"/>
+                <xsd:enumeration value="CONTAINER"/>
+                <xsd:enumeration value="SERVLET_INSTANCE"/>
+                <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+                <xsd:enumeration value="SERVLET_CONTAINER"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="valveType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container valve. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A container
+                valve is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="httpHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container HTTPHandler. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A handler
+                is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+                The class specified can either be a HttpHandler that has a constructor that takes the
+                next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="overlayType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The overlay element specifies additional static files overlays for this
+                web application. The content of the element should be a folder in the
+                filesystem containing the static files that will overlay the webapp's
+                static files, similar to what happens with regular JAR overlays.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="web-security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-cross-contextType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-cross-context element specifies if cross context
+                access should be enabled for this webapp, allowing it to use the
+                request dispatcher to access other webapps deployed in the
+                application server.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="use-jboss-authorizationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The use-jboss-authorization element specifies if the JBoss
+                authorization layer should be used.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-auditType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-audit element specifies if the security audit logging
+                should be disabled.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+    <xsd:complexType name="distinct-nameType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The distinct-name element specifies the EJB 3 distinct name for this
+                web application.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="symbolic-linked-allowedType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:boolean"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-star-role-allowType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-star-role-allow element specifies whether the
+                jacc permission generating agent in the web layer needs to generate a
+                WebResourcePermission(url,null) permission such that the jacc provider can
+                make a decision as to bypass authorization or not.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The context-root element specifies the context root of a web
+                application. This is normally specified at the ear level using the standard
+                JEE application.xml descriptor, but it may be given here for standalone wars.
+                This should not override the application.xml level specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet-container element specifies the which servlet container this application
+                should be using.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The server-instance element specifies the which server instance configuration this application belongs to.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Default encoding to use for this application
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="virtual-hostType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="replication-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/or are modified infrequently, since all attributes must be replicated regardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="replication-granularityType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="SESSION"/>
+                <xsd:enumeration value="ATTRIBUTE"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servletType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet element specifies servlet specific bindings. Currently this
+                is only the run-as principal identity.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="servlet-name" type="javaee:string"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The run-as-principal element specifies whether a specific run-as identity is
+                        to be used. If there is a run-as role defined for a servlet, there can also
+                        be a run-as-principal defined here. If you don't define a run-as principal
+                        the callee will see ctx.getUserPrincipal() == 'anonymous'
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="max-active-sessionsType">
+        <xsd:restriction base="xsd:integer"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="annotationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The annotation element specifies annotation specific bindings. This allows
+                overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+                on a Servlet class rather than a Servlet name. They have the same structure
+                and element names as the corresponding annotation.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string"/>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="run-asType">
+        <xsd:sequence>
+            <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="role-name" type="javaee:string"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-securityType">
+        <xsd:sequence>
+            <xsd:element name="empty-role-semantic" type="javaee:string"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-method-constraintType">
+        <xsd:sequence>
+            <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-role-semanticType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="PERMIT"/>
+                <xsd:enumeration value="DENY"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="multipart-configType">
+        <xsd:sequence>
+            <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_13_0.xsd b/wildfly/docs/schema/jboss-web_13_0.xsd
new file mode 100644
index 0000000..349ecad
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_13_0.xsd
@@ -0,0 +1,603 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2018, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="13.0">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the WildFly 13.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee http://www.jboss.org/schema/jbossas/jboss-web_13_0.xsd"
+           version="13.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-web_13_0.xsd
+
+	]]>
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+            The following conventions apply to all Java EE deployment descriptor
+            elements unless indicated otherwise. - In elements that specify a pathname to a file within
+            the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+            relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+            with "/") also specify names in the root of the JAR file's namespace. In general, relative
+            names are preferred. The exception is .war files where absolute names are preferred for
+            consistency with the Servlet API.
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="http://www.jboss.org/schema/jbossas/web-app_4_0.xsd"/>
+    <xsd:include schemaLocation="http://www.jboss.org/schema/jbossas/jboss-common_8_0.xsd"/>
+
+    <xsd:element name="jboss-web" type="jboss:jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                This is the root element of jboss-web deployment descriptor.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:simpleType name="jboss-web-versionType">
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="13.0"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss-web element is the root element of jboss-web.xml file. It contains
+                all the information used by jboss but not described in the web.xml file. All of it is optional.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="security-domain" type="jboss:web-security-domainType" minOccurs="0"/>
+            <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                        this limit, the resulting behavior is determined by the session manager.
+
+                        If the session manager supports passivation, then sessions accessed least recently will be
+                        passivated to make room for new sessions.
+                        If the session manager does not support passivation then any attempt to create more than
+                        max-active-sessions will fail.
+
+                        If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                        and sessions will never passivate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+            <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listenerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container listener. The module element allows specifying from which
+                module in the application server the specified class will be loaded. The listener type
+                element defines which events the listener will receive from the web container.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listener-typeType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="LIFECYCLE"/>
+                <xsd:enumeration value="CONTAINER"/>
+                <xsd:enumeration value="SERVLET_INSTANCE"/>
+                <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+                <xsd:enumeration value="SERVLET_CONTAINER"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="valveType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container valve. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A container
+                valve is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="httpHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container HTTPHandler. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A handler
+                is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+                The class specified can either be a HttpHandler that has a constructor that takes the
+                next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="overlayType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The overlay element specifies additional static files overlays for this
+                web application. The content of the element should be a folder in the
+                filesystem containing the static files that will overlay the webapp's
+                static files, similar to what happens with regular JAR overlays.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="web-security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-cross-contextType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-cross-context element specifies if cross context
+                access should be enabled for this webapp, allowing it to use the
+                request dispatcher to access other webapps deployed in the
+                application server.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="use-jboss-authorizationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The use-jboss-authorization element specifies if the JBoss
+                authorization layer should be used.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-auditType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-audit element specifies if the security audit logging
+                should be disabled.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+    <xsd:complexType name="distinct-nameType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The distinct-name element specifies the EJB 3 distinct name for this
+                web application.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="symbolic-linked-allowedType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:boolean"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-star-role-allowType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-star-role-allow element specifies whether the
+                jacc permission generating agent in the web layer needs to generate a
+                WebResourcePermission(url,null) permission such that the jacc provider can
+                make a decision as to bypass authorization or not.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The context-root element specifies the context root of a web
+                application. This is normally specified at the ear level using the standard
+                JEE application.xml descriptor, but it may be given here for standalone wars.
+                This should not override the application.xml level specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet-container element specifies the which servlet container this application
+                should be using.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The server-instance element specifies the which server instance configuration this application belongs to.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Default encoding to use for this application
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="virtual-hostType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="replication-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/or are modified infrequently, since all attributes must be replicated regardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="replication-granularityType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="SESSION"/>
+                <xsd:enumeration value="ATTRIBUTE"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servletType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet element specifies servlet specific bindings. Currently this
+                is only the run-as principal identity.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="servlet-name" type="javaee:string"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The run-as-principal element specifies whether a specific run-as identity is
+                        to be used. If there is a run-as role defined for a servlet, there can also
+                        be a run-as-principal defined here. If you don't define a run-as principal
+                        the callee will see ctx.getUserPrincipal() == 'anonymous'
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="max-active-sessionsType">
+        <xsd:restriction base="xsd:integer"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="annotationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The annotation element specifies annotation specific bindings. This allows
+                overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+                on a Servlet class rather than a Servlet name. They have the same structure
+                and element names as the corresponding annotation.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string"/>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="run-asType">
+        <xsd:sequence>
+            <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="role-name" type="javaee:string"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-securityType">
+        <xsd:sequence>
+            <xsd:element name="empty-role-semantic" type="javaee:string"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-method-constraintType">
+        <xsd:sequence>
+            <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-role-semanticType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="PERMIT"/>
+                <xsd:enumeration value="DENY"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="multipart-configType">
+        <xsd:sequence>
+            <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_14_0.xsd b/wildfly/docs/schema/jboss-web_14_0.xsd
new file mode 100644
index 0000000..0dd9346
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_14_0.xsd
@@ -0,0 +1,529 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2018, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="14.0">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the WildFly 14.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee http://www.jboss.org/schema/jbossas/jboss-web_14_0.xsd"
+           version="14.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-web_14_0.xsd
+
+	]]>
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+            The following conventions apply to all Java EE deployment descriptor
+            elements unless indicated otherwise. - In elements that specify a pathname to a file within
+            the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+            relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+            with "/") also specify names in the root of the JAR file's namespace. In general, relative
+            names are preferred. The exception is .war files where absolute names are preferred for
+            consistency with the Servlet API.
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="http://www.jboss.org/schema/jbossas/web-app_4_0.xsd"/>
+    <xsd:include schemaLocation="http://www.jboss.org/schema/jbossas/jboss-common_8_0.xsd"/>
+
+    <xsd:element name="jboss-web" type="jboss:jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                This is the root element of jboss-web deployment descriptor.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:simpleType name="jboss-web-versionType">
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="14.0"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss-web element is the root element of jboss-web.xml file. It contains
+                all the information used by jboss but not described in the web.xml file. All of it is optional.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="security-domain" type="jboss:web-security-domainType" minOccurs="0"/>
+            <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                        this limit, the resulting behavior is determined by the session manager.
+
+                        If the session manager supports passivation, then sessions accessed least recently will be
+                        passivated to make room for new sessions.
+                        If the session manager does not support passivation then any attempt to create more than
+                        max-active-sessions will fail.
+
+                        If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                        and sessions will never passivate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+            <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listenerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container listener. The module element allows specifying from which
+                module in the application server the specified class will be loaded. The listener type
+                element defines which events the listener will receive from the web container.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listener-typeType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="LIFECYCLE"/>
+                <xsd:enumeration value="CONTAINER"/>
+                <xsd:enumeration value="SERVLET_INSTANCE"/>
+                <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+                <xsd:enumeration value="SERVLET_CONTAINER"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="valveType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container valve. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A container
+                valve is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="httpHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container HTTPHandler. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A handler
+                is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+                The class specified can either be a HttpHandler that has a constructor that takes the
+                next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="overlayType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The overlay element specifies additional static files overlays for this
+                web application. The content of the element should be a folder in the
+                filesystem containing the static files that will overlay the webapp's
+                static files, similar to what happens with regular JAR overlays.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="web-security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-cross-contextType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-cross-context element specifies if cross context
+                access should be enabled for this webapp, allowing it to use the
+                request dispatcher to access other webapps deployed in the
+                application server.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="use-jboss-authorizationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The use-jboss-authorization element specifies if the JBoss
+                authorization layer should be used.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-auditType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-audit element specifies if the security audit logging
+                should be disabled.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+    <xsd:complexType name="distinct-nameType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The distinct-name element specifies the EJB 3 distinct name for this
+                web application.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="symbolic-linked-allowedType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:boolean"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-star-role-allowType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-star-role-allow element specifies whether the
+                jacc permission generating agent in the web layer needs to generate a
+                WebResourcePermission(url,null) permission such that the jacc provider can
+                make a decision as to bypass authorization or not.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The context-root element specifies the context root of a web
+                application. This is normally specified at the ear level using the standard
+                JEE application.xml descriptor, but it may be given here for standalone wars.
+                This should not override the application.xml level specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet-container element specifies the which servlet container this application
+                should be using.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The server-instance element specifies the which server instance configuration this application belongs to.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Default encoding to use for this application
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="virtual-hostType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servletType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet element specifies servlet specific bindings. Currently this
+                is only the run-as principal identity.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="servlet-name" type="javaee:string"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The run-as-principal element specifies whether a specific run-as identity is
+                        to be used. If there is a run-as role defined for a servlet, there can also
+                        be a run-as-principal defined here. If you don't define a run-as principal
+                        the callee will see ctx.getUserPrincipal() == 'anonymous'
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="max-active-sessionsType">
+        <xsd:restriction base="xsd:integer"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="annotationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The annotation element specifies annotation specific bindings. This allows
+                overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+                on a Servlet class rather than a Servlet name. They have the same structure
+                and element names as the corresponding annotation.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string"/>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="run-asType">
+        <xsd:sequence>
+            <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="role-name" type="javaee:string"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-securityType">
+        <xsd:sequence>
+            <xsd:element name="empty-role-semantic" type="javaee:string"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-method-constraintType">
+        <xsd:sequence>
+            <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-role-semanticType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="PERMIT"/>
+                <xsd:enumeration value="DENY"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="multipart-configType">
+        <xsd:sequence>
+            <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_14_1.xsd b/wildfly/docs/schema/jboss-web_14_1.xsd
new file mode 100644
index 0000000..d332ece
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_14_1.xsd
@@ -0,0 +1,529 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="14.1">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the WildFly 14.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/schema/jbossas/jboss-web_14_0.xsd"
+           version="14.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_14_0.xsd
+
+	]]>
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+            The following conventions apply to all Java EE deployment descriptor
+            elements unless indicated otherwise. - In elements that specify a pathname to a file within
+            the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+            relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+            with "/") also specify names in the root of the JAR file's namespace. In general, relative
+            names are preferred. The exception is .war files where absolute names are preferred for
+            consistency with the Servlet API.
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:import namespace="http://xmlns.jcp.org/xml/ns/javaee" schemaLocation="https://www.jboss.org/schema/jbossas/web-app_4_0.xsd"/>
+    <xsd:include schemaLocation="https://www.jboss.org/schema/jbossas/jboss-common_8_1.xsd"/>
+
+    <xsd:element name="jboss-web" type="jboss:jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                This is the root element of jboss-web deployment descriptor.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:simpleType name="jboss-web-versionType">
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="14.0"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss-web element is the root element of jboss-web.xml file. It contains
+                all the information used by jboss but not described in the web.xml file. All of it is optional.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="security-domain" type="jboss:web-security-domainType" minOccurs="0"/>
+            <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                        this limit, the resulting behavior is determined by the session manager.
+
+                        If the session manager supports passivation, then sessions accessed least recently will be
+                        passivated to make room for new sessions.
+                        If the session manager does not support passivation then any attempt to create more than
+                        max-active-sessions will fail.
+
+                        If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                        and sessions will never passivate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+            <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listenerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container listener. The module element allows specifying from which
+                module in the application server the specified class will be loaded. The listener type
+                element defines which events the listener will receive from the web container.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listener-typeType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="LIFECYCLE"/>
+                <xsd:enumeration value="CONTAINER"/>
+                <xsd:enumeration value="SERVLET_INSTANCE"/>
+                <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+                <xsd:enumeration value="SERVLET_CONTAINER"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="valveType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container valve. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A container
+                valve is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="httpHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container HTTPHandler. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A handler
+                is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+                The class specified can either be a HttpHandler that has a constructor that takes the
+                next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="overlayType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The overlay element specifies additional static files overlays for this
+                web application. The content of the element should be a folder in the
+                filesystem containing the static files that will overlay the webapp's
+                static files, similar to what happens with regular JAR overlays.
+                If a file is found in both the deployment and in the overlay folder,
+                the file in the deployment takes precedence. If more than one overlay
+                is provided, the order in which the overlay elements are declared
+                determines precedence for files that can be found in multiple overlay
+                folders.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="web-security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-cross-contextType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-cross-context element specifies if cross context
+                access should be enabled for this webapp, allowing it to use the
+                request dispatcher to access other webapps deployed in the
+                application server.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="use-jboss-authorizationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The use-jboss-authorization element specifies if the JBoss
+                authorization layer should be used.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-auditType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-audit element specifies if the security audit logging
+                should be disabled.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+    <xsd:complexType name="distinct-nameType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The distinct-name element specifies the EJB 3 distinct name for this
+                web application.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="symbolic-linked-allowedType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:boolean"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-star-role-allowType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-star-role-allow element specifies whether the
+                jacc permission generating agent in the web layer needs to generate a
+                WebResourcePermission(url,null) permission such that the jacc provider can
+                make a decision as to bypass authorization or not.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The context-root element specifies the context root of a web
+                application. This is normally specified at the ear level using the standard
+                JEE application.xml descriptor, but it may be given here for standalone wars.
+                This should not override the application.xml level specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet-container element specifies the which servlet container this application
+                should be using.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The server-instance element specifies the which server instance configuration this application belongs to.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Default encoding to use for this application
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="virtual-hostType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servletType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet element specifies servlet specific bindings. Currently this
+                is only the run-as principal identity.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="servlet-name" type="javaee:string"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The run-as-principal element specifies whether a specific run-as identity is
+                        to be used. If there is a run-as role defined for a servlet, there can also
+                        be a run-as-principal defined here. If you don't define a run-as principal
+                        the callee will see ctx.getUserPrincipal() == 'anonymous'
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="max-active-sessionsType">
+        <xsd:restriction base="xsd:integer"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="annotationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The annotation element specifies annotation specific bindings. This allows
+                overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+                on a Servlet class rather than a Servlet name. They have the same structure
+                and element names as the corresponding annotation.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="class-name" type="javaee:string"/>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="run-asType">
+        <xsd:sequence>
+            <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="role-name" type="javaee:string"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-securityType">
+        <xsd:sequence>
+            <xsd:element name="empty-role-semantic" type="javaee:string"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-method-constraintType">
+        <xsd:sequence>
+            <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+            <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-role-semanticType">
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="PERMIT"/>
+                <xsd:enumeration value="DENY"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="multipart-configType">
+        <xsd:sequence>
+            <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_15_0.xsd b/wildfly/docs/schema/jboss-web_15_0.xsd
new file mode 100644
index 0000000..5fc522c
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_15_0.xsd
@@ -0,0 +1,529 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2022, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:jakartaee:1.0"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jboss="urn:jboss:jakartaee:1.0"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="15.0">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            <![CDATA[
+
+	This is the XML Schema for the 15.0 version of the WildFly web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Jakarta EE namespace:
+
+        urn:jboss:jakartaee:1.0
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="urn:jboss:jakartaee:1.0"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="urn:jboss:jakartaee:1.0 https://www.jboss.org/schema/jbossas/jboss-web_15_0.xsd"
+           version="15.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Jakarta EE namespace with the following location:
+
+	https://www.jboss.org/schema/jbossas/jboss-web_15_0.xsd
+
+	]]>
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+            The following conventions apply to all Jakarta EE deployment descriptor
+            elements unless indicated otherwise. - In elements that specify a pathname to a file within
+            the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+            relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+            with "/") also specify names in the root of the JAR file's namespace. In general, relative
+            names are preferred. The exception is .war files where absolute names are preferred for
+            consistency with the Servlet API.
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://jakarta.ee/xml/ns/jakartaee/web-app_6_0.xsd"/>
+    <xsd:include schemaLocation="https://www.jboss.org/schema/jbossas/jboss-common_9_0.xsd"/>
+
+    <xsd:element name="jboss-web" type="jboss:jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                This is the root element of jboss-web deployment descriptor.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:simpleType name="jboss-web-versionType">
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="15.0"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="jboss-webType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jboss-web element is the root element of jboss-web.xml file. It contains
+                all the information used by jboss but not described in the web.xml file. All of it is optional.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="session-config" type="jakartaee:session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="security-domain" type="jboss:web-security-domainType" minOccurs="0"/>
+            <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="max-active-sessions" type="jakartaee:xsdIntegerType" minOccurs="0" maxOccurs="1" default="-1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                        this limit, the resulting behavior is determined by the session manager.
+
+                        If the session manager supports passivation, then sessions accessed least recently will be
+                        passivated to make room for new sessions.
+                        If the session manager does not support passivation then any attempt to create more than
+                        max-active-sessions will fail.
+
+                        If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                        and sessions will never passivate.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="proactive-authentication" type="jboss:proactive-authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+            <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listenerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container listener. The module element allows specifying from which
+                module in the application server the specified class will be loaded. The listener type
+                element defines which events the listener will receive from the web container.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="jakartaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="jakartaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="param" type="jakartaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="container-listener-typeType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecycle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string">
+                <xsd:enumeration value="LIFECYCLE"/>
+                <xsd:enumeration value="CONTAINER"/>
+                <xsd:enumeration value="SERVLET_INSTANCE"/>
+                <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+                <xsd:enumeration value="SERVLET_CONTAINER"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="valveType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container valve. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A container
+                valve is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="jakartaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="jakartaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="jakartaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="httpHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Defines a web container HTTPHandler. The module element allows specifying from which
+                module in the application server the specified class will be loaded. A handler
+                is used to intercept the request that will be processed by the servlet. It
+                is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+                The class specified can either be a HttpHandler that has a constructor that takes the
+                next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="class-name" type="jakartaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="module" type="jakartaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="param" type="jakartaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="overlayType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The overlay element specifies additional static files overlays for this
+                web application. The content of the element should be a folder in the
+                filesystem containing the static files that will overlay the webapp's
+                static files, similar to what happens with regular JAR overlays.
+                If a file is found in both the deployment and in the overlay folder,
+                the file in the deployment takes precedence. If more than one overlay
+                is provided, the order in which the overlay elements are declared
+                determines precedence for files that can be found in multiple overlay
+                folders.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="web-security-domainType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The name of a security-domain that will be used to authenticate and authorize users.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="jakartaee:string">
+                <xsd:attribute name="flushOnSessionInvalidation" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            Whether the domain's cache should be flushed when the session invalidates.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-cross-contextType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-cross-context element specifies if cross context
+                access should be enabled for this webapp, allowing it to use the
+                request dispatcher to access other webapps deployed in the
+                application server.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="use-jboss-authorizationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The use-jboss-authorization element specifies if the JBoss
+                authorization layer should be used.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="disable-auditType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The disable-audit element specifies if the security audit logging
+                should be disabled.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="proactive-authenticationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                If this is set to false then authentication will not be performed unless it is required,
+                even if credentials are present.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+    <xsd:complexType name="distinct-nameType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The distinct-name element specifies the EJB 3 distinct name for this
+                web application.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="symbolic-linked-allowedType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="xsd:boolean"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-star-role-allowType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-star-role-allow element specifies whether the
+                jacc permission generating agent in the web layer needs to generate a
+                WebResourcePermission(url,null) permission such that the jacc provider can
+                make a decision as to bypass authorization or not.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The context-root element specifies the context root of a web
+                application. This is normally specified at the ear level using the standard
+                JEE application.xml descriptor, but it may be given here for standalone wars.
+                This should not override the application.xml level specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet-container element specifies the which servlet container this application
+                should be using.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The server-instance element specifies the which server instance configuration this application belongs to.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Default encoding to use for this application
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="virtual-hostType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="servletType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The servlet element specifies servlet specific bindings. Currently this
+                is only the run-as principal identity.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="servlet-name" type="jakartaee:string"/>
+            <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as-principal" type="jakartaee:role-nameType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        The run-as-principal element specifies whether a specific run-as identity is
+                        to be used. If there is a run-as role defined for a servlet, there can also
+                        be a run-as-principal defined here. If you don't define a run-as principal
+                        the callee will see ctx.getUserPrincipal() == 'anonymous'
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="max-active-sessionsType">
+        <xsd:restriction base="xsd:integer"/>
+    </xsd:simpleType>
+
+    <xsd:complexType name="annotationType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The annotation element specifies annotation specific bindings. This allows
+                overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+                on a Servlet class rather than a Servlet name. They have the same structure
+                and element names as the corresponding annotation.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="class-name" type="jakartaee:string"/>
+            <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="run-asType">
+        <xsd:sequence>
+            <xsd:element name="description" type="jakartaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="role-name" type="jakartaee:string"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="servlet-securityType">
+        <xsd:sequence>
+            <xsd:element name="empty-role-semantic" type="jakartaee:string"/>
+            <xsd:element name="transport-guarantee" type="jakartaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="jakartaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+            <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="http-method-constraintType">
+        <xsd:sequence>
+            <xsd:element name="method" type="jakartaee:string" minOccurs="1" maxOccurs="1"/>
+            <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+            <xsd:element name="transport-guarantee" type="jakartaee:transport-guaranteeType"/>
+            <xsd:element name="roles-allowed" type="jakartaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="empty-role-semanticType">
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:string">
+                <xsd:enumeration value="PERMIT"/>
+                <xsd:enumeration value="DENY"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="multipart-configType">
+        <xsd:sequence>
+            <xsd:element name="location" type="jakartaee:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="enable-websocketsType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Legacy enable-websockets option. Websockets are enabled by default, this option allows them to be
+                turned off.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="jakartaee:generic-booleanType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_7_0.xsd b/wildfly/docs/schema/jboss-web_7_0.xsd
new file mode 100644
index 0000000..744d72f
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_7_0.xsd
@@ -0,0 +1,828 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified" 
+            attributeFormDefault="unqualified"
+            version="7.0">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss AS 7.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_7_0.xsd"
+           version="7.0">                                     
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_7_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_0.xsd"/>
+   <xsd:include schemaLocation="jboss-common_6_0.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="7.0"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="passivation-config" type="jboss:passivation-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destination" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="webservice-description" type="jboss:webservice-descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="jboss:cache-nameType" minOccurs="0"/>
+         <xsd:element name="replication-trigger" type="jboss:replication-triggerType" minOccurs="0"/>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0"/>
+         <xsd:element name="replication-mode" type="jboss:replication-modeType" minOccurs="0"/>
+         <xsd:element name="backups" type="jboss:backupsType" minOccurs="0"/>
+         <xsd:element name="use-jk" type="jboss:use-jkType" minOccurs="0"/>
+         <xsd:element name="max-unreplicated-interval" type="jboss:max-unreplicated-intervalType" minOccurs="0"/>
+         <xsd:element name="snapshot-mode" type="jboss:snapshot-modeType" minOccurs="0"/>
+         <xsd:element name="snapshot-interval" type="jboss:snapshot-intervalType" minOccurs="0"/>
+         <xsd:element name="session-notification-policy" type="jboss:session-notification-policyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="cache-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Name of the JBoss Cache or PojoCache configuration that 
+            should be used for storing distributable sessions and replicating them around the
+            cluster.
+        
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-triggerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines when the container should consider that a session
+            must be replicated across the cluster.
+            Possible values are:
+               1 - "ACCESS"
+               2 - "SET_AND_GET"
+               3 - "SET_AND_NON_PRIMITIVE_GET" (default value)
+               4 - "SET"
+   
+            The rationale for this setting is that after a mutable object stored as a session attribute
+            is accessed from the session, in the absence of a setAttribute call the container has no 
+            clear way to know if the object (and hence the session state) has been modified.
+   
+            In all cases, calling setAttribute marks the session as needing replication.
+   
+            ACCESS - merely accessing the session marks the session as dirty.
+
+            SET_AND_GET is conservative but not optimal (performance-wise): it will always replicate the
+            session even if its content has not been modified but simply accessed.
+
+            SET_AND_NON_PRIMITIVE_GET is conservative but will only replicate if a non-primitive Object
+            has been accessed (i.e. the object is not of a well-known immutable JDK type such as Integer,
+            Long, String, etc.) This is the default value.
+
+            SET assumes that the developer will explicitly call setAttribute on the session
+            if it needs to be replicated. This setting prevents unnecessary replication, but requires very
+            good coding practices to ensure setAttribute is always called whenever an attribute value
+            is modified.
+
+            Examples:
+                  <replication-trigger>SET_AND_GET</replication-trigger>
+               or
+                  <replication-trigger>SET_AND_NON_PRIMITIVE_GET</replication-trigger>
+               or
+                  <replication-trigger>SET</replication-trigger>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="ACCESS"/>
+            <xsd:enumeration value="SET_AND_GET"/>
+            <xsd:enumeration value="SET_AND_NON_PRIMITIVE_GET"/>
+            <xsd:enumeration value="SET"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication granularity level.
+            Possible values are:
+                    1 - "SESSION" (default)
+                    2 - "ATTRIBUTE"
+
+            The first option indicates that replication is done per session instance, i.e. when
+            the session is considered modified, the whole session object will be serialized
+            and replicated. This is the preferred policy when the sessions are generally small.
+
+            The second option indicates that replication is performed only for the the dirty
+            attributes in the session, plus some session data, like lastAccessTime. For sessions
+            carrying large amounts of data, parts of which are infrequently accessed,
+            this option can increase replication performance.
+   
+            A third option, "FIELD" was available in AS 4.x and AS 5.x, but it
+            is not supported by AS 6.
+    
+            Examples:
+                  <replication-granularity>SESSION</replication-granularity>
+               or
+                  <replication-granularity>ATTRIBUTE</replication-granularity>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication mode.
+            Possible values are:
+                1 - "SYNCHRONOUS"
+                2 - "ASYNCHRONOUS"
+
+            In SYNCHRONOUS mode, session replication occurs in the same thread that processes a given
+            request.  A request will not complete until the associated session is successfully replicated.
+
+            In ASYNCHRONOUS mode, session replication occurs in a separate thread from the one that processes
+            a given request.  The request thread only initiates replication, but does not wait for it to complete.
+
+            If not defined, the replication mode defined in the distributed cache configuration will be used.
+            In the default distributed session cache configuration, sessions replicate asynchronously.
+            
+            Examples:
+                  <replication-mode>SYNCHRONOUS</replication-mode>
+               or
+                  <replication-mode>ASYNCHRONOUS</replication-mode>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SYNCHRONOUS"/>
+            <xsd:enumeration value="ASYNCHRONOUS"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="backupsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines the number of backup nodes on which to replicate
+            a given session.
+            
+            Possible values are:
+                > 0 : Session will be replicated to *all* nodes (i.e. total replication)
+                  0 : Session will not be replicated (i.e. local mode)
+                < 0 : Session will be replicated only to the specified number of nodes (i.e. distribution mode)
+            
+            Default value, if not explicitly set, is taken from the distributed cache
+            configuration.  By default, this is -1, i.e. total replication.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="use-jkType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Whether the container should assume mod_jk is used for 
+            load balancing for this webapp. If set to 'true', the container will examine 
+            the session id associated with every request and replace the JvmRoute portion of
+            the session id if it detects a failover. In addition, for each host you will 
+            need to set a unique JvmRoute inside the server.xml file, e.g.,
+      
+            <Engine name="jboss.web" jvmRoute="Node1" defaultHost="localhost">
+               ...
+            </Engine>
+        
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set 
+            to "false".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-unreplicated-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the maximum interval between requests, in 
+            seconds, after which a request will trigger replication of the session's 
+            timestamp and other metadata regardless of whether the request has otherwise 
+            made the session dirty.  Such replication ensures that other nodes in the 
+            cluster are aware of the most recent value for the session's timestamp 
+            and won't incorrectly expire an unreplicated session upon failover. It also
+            results in correct values for HttpSession.getLastAccessedTime() calls 
+            following failover.
+
+            The cost of this metadata replication depends on the configured
+            replication-granularity. With <code>SESSION</code>, the session's 
+            attribute map is replicated along with the metadata, so it can be fairly 
+            costly.  With other granularities, the metadata object is replicated 
+            separately from the attributes and only contains a String, and a few longs, 
+            ints and booleans.
+   
+            A value of 0 means the metadata will be replicated whenever the session is
+            accessed.  A value of -1 means the metadata will be replicated only if some
+            other activity during the request (e.g. modifying an attribute) has
+            resulted in other replication work involving the session. A positive value
+            greater than the HttpSession.getMaxInactiveInterval() value will be treated 
+            as a likely misconfiguration and converted to 0; i.e. replicate the 
+            metadata on every request.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="snapshot-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines when the sessions are replicated to the other nodes.
+            The typical value, "instant", replicates changes to the other nodes at the end 
+            of requests, using the request processing thread to perform the replication. 
+            In this case, the "snapshot-interval" property is ignored.
+            With "interval" mode, a background process is created that runs every 
+            "snapshot-interval" milliseconds, checking for modified sessions and replicating
+            them.   
+      
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set 
+            to "instant".
+      
+            Note that this property has no effect if replication-granularity
+            is set to FIELD. If it is FIELD, "instant" mode will be used.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="INSTANT"/>
+            <xsd:enumeration value="FIELD"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="snapshot-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines how often (in milliseconds) the background
+            process that replicates modified sessions should be started for this
+            web app.  Only meaningful if snapshot-mode is set to "interval".   
+      
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set 
+            to "1000".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="session-notification-policyType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Fully qualified class name of the implementation of the
+            org.jboss.web.tomcat.service.session.notification.ClusteredSessionNotificationPolicy
+            interface that should be used to govern whether servlet specification
+            notifications should be emitted to any registered HttpSessionListener, 
+            HttpSessionAttributeListener and/or HttpSessionBindingListener.
+            Event notifications that may make sense in a non-clustered environment
+            may or may not make sense in a clustered environment; configuring an
+            appropriate ClusteredSessionNotificationPolicy gives the application
+            author fine-grained control over what notifications are issued.
+      
+            Default value if not explicitly set is the 
+            org.jboss.web.tomcat.service.session.notification.IgnoreUndeployLegacyClusteredSessionNotificationPolicy.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:fully-qualified-classType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the max number of active sessions allowed.
+            If the number of sessions managed by the the session manager exceeds this value and 
+            passivation is enabled, the excess will be passivated based on the configured 
+            passivation-min-idle-time.
+            If after passivation is completed (or if passivation is disabled), the number of
+            active sessions still exceeds this limit, attempts to create new sessions
+            will be rejected.
+            If set to -1, means no limit
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="passivation-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: HTTP Session passivation configuration.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="use-session-passivation" type="jboss:use-session-passivationType" minOccurs="0"/>
+         <xsd:element name="passivation-min-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the minimum time (in seconds) that a session must have been inactive
+                  before the container will consider passivating it in order to reduce the
+                  active session count below max-active-sessions.
+                  A value of -1 (the default) disables passivating sessions before 
+                  passivation-max-idle-time.  Neither a value of -1 nor a high 
+                  value are recommended if max-active-sessions is set
+
+                  Example:           
+                     <passivation-min-idle-time>30</passivation-min-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="passivation-max-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the maximum time (in seconds) that a session can be inactive before
+                  the container should attempt to passivate it to save memory. Passivation of such 
+                  sessions will take place regardless of whether the active session count exceeds
+                  max-active-sessions.
+                  Should be less than the web.xml session-timeout setting.
+                  A value of -1 disables passivation based on maximum inactivity.
+
+                  Example:          
+                     <passivation-max-idle-time>300</passivation-max-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-session-passivationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines whether the web application should use session passivation or not
+
+            Examples:
+                  <use-session-passivation>true</use-session-passivation>
+               or
+                  <use-session-passivation>false</use-session-passivation> (default value)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="passivation-idle-timeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Determines the time (in seconds) that a session can be inactive before
+            the container should attempt to passivate it.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+   
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_7_1.xsd b/wildfly/docs/schema/jboss-web_7_1.xsd
new file mode 100644
index 0000000..4ff31c4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_7_1.xsd
@@ -0,0 +1,840 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.1">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss AS 7.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_7_1.xsd"
+           version="7.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_7_1.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_0.xsd"/>
+   <xsd:include schemaLocation="jboss-common_6_0.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="7.1"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="passivation-config" type="jboss:passivation-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destination" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="webservice-description" type="jboss:webservice-descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             Thesymbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:restriction base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="jboss:cache-nameType" minOccurs="0"/>
+         <xsd:element name="replication-trigger" type="jboss:replication-triggerType" minOccurs="0"/>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0"/>
+         <xsd:element name="replication-mode" type="jboss:replication-modeType" minOccurs="0"/>
+         <xsd:element name="backups" type="jboss:backupsType" minOccurs="0"/>
+         <xsd:element name="use-jk" type="jboss:use-jkType" minOccurs="0"/>
+         <xsd:element name="max-unreplicated-interval" type="jboss:max-unreplicated-intervalType" minOccurs="0"/>
+         <xsd:element name="snapshot-mode" type="jboss:snapshot-modeType" minOccurs="0"/>
+         <xsd:element name="snapshot-interval" type="jboss:snapshot-intervalType" minOccurs="0"/>
+         <xsd:element name="session-notification-policy" type="jboss:session-notification-policyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="cache-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Name of the JBoss Cache or PojoCache configuration that
+            should be used for storing distributable sessions and replicating them around the
+            cluster.
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-triggerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines when the container should consider that a session
+            must be replicated across the cluster.
+            Possible values are:
+               1 - "ACCESS"
+               2 - "SET_AND_GET"
+               3 - "SET_AND_NON_PRIMITIVE_GET" (default value)
+               4 - "SET"
+
+            The rationale for this setting is that after a mutable object stored as a session attribute
+            is accessed from the session, in the absence of a setAttribute call the container has no
+            clear way to know if the object (and hence the session state) has been modified.
+
+            In all cases, calling setAttribute marks the session as needing replication.
+
+            ACCESS - merely accessing the session marks the session as dirty.
+
+            SET_AND_GET is conservative but not optimal (performance-wise): it will always replicate the
+            session even if its content has not been modified but simply accessed.
+
+            SET_AND_NON_PRIMITIVE_GET is conservative but will only replicate if a non-primitive Object
+            has been accessed (i.e. the object is not of a well-known immutable JDK type such as Integer,
+            Long, String, etc.) This is the default value.
+
+            SET assumes that the developer will explicitly call setAttribute on the session
+            if it needs to be replicated. This setting prevents unnecessary replication, but requires very
+            good coding practices to ensure setAttribute is always called whenever an attribute value
+            is modified.
+
+            Examples:
+                  <replication-trigger>SET_AND_GET</replication-trigger>
+               or
+                  <replication-trigger>SET_AND_NON_PRIMITIVE_GET</replication-trigger>
+               or
+                  <replication-trigger>SET</replication-trigger>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="ACCESS"/>
+            <xsd:enumeration value="SET_AND_GET"/>
+            <xsd:enumeration value="SET_AND_NON_PRIMITIVE_GET"/>
+            <xsd:enumeration value="SET"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication granularity level.
+            Possible values are:
+                    1 - "SESSION" (default)
+                    2 - "ATTRIBUTE"
+
+            The first option indicates that replication is done per session instance, i.e. when
+            the session is considered modified, the whole session object will be serialized
+            and replicated. This is the preferred policy when the sessions are generally small.
+
+            The second option indicates that replication is performed only for the the dirty
+            attributes in the session, plus some session data, like lastAccessTime. For sessions
+            carrying large amounts of data, parts of which are infrequently accessed,
+            this option can increase replication performance.
+
+            A third option, "FIELD" was available in AS 4.x and AS 5.x, but it
+            is not supported by AS 6.
+
+            Examples:
+                  <replication-granularity>SESSION</replication-granularity>
+               or
+                  <replication-granularity>ATTRIBUTE</replication-granularity>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication mode.
+            Possible values are:
+                1 - "SYNCHRONOUS"
+                2 - "ASYNCHRONOUS"
+
+            In SYNCHRONOUS mode, session replication occurs in the same thread that processes a given
+            request.  A request will not complete until the associated session is successfully replicated.
+
+            In ASYNCHRONOUS mode, session replication occurs in a separate thread from the one that processes
+            a given request.  The request thread only initiates replication, but does not wait for it to complete.
+
+            If not defined, the replication mode defined in the distributed cache configuration will be used.
+            In the default distributed session cache configuration, sessions replicate asynchronously.
+
+            Examples:
+                  <replication-mode>SYNCHRONOUS</replication-mode>
+               or
+                  <replication-mode>ASYNCHRONOUS</replication-mode>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SYNCHRONOUS"/>
+            <xsd:enumeration value="ASYNCHRONOUS"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="backupsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines the number of backup nodes on which to replicate
+            a given session.
+
+            Possible values are:
+                > 0 : Session will be replicated to *all* nodes (i.e. total replication)
+                  0 : Session will not be replicated (i.e. local mode)
+                < 0 : Session will be replicated only to the specified number of nodes (i.e. distribution mode)
+
+            Default value, if not explicitly set, is taken from the distributed cache
+            configuration.  By default, this is -1, i.e. total replication.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="use-jkType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Whether the container should assume mod_jk is used for
+            load balancing for this webapp. If set to 'true', the container will examine
+            the session id associated with every request and replace the JvmRoute portion of
+            the session id if it detects a failover. In addition, for each host you will
+            need to set a unique JvmRoute inside the server.xml file, e.g.,
+
+            <Engine name="jboss.web" jvmRoute="Node1" defaultHost="localhost">
+               ...
+            </Engine>
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "false".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-unreplicated-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the maximum interval between requests, in
+            seconds, after which a request will trigger replication of the session's
+            timestamp and other metadata regardless of whether the request has otherwise
+            made the session dirty.  Such replication ensures that other nodes in the
+            cluster are aware of the most recent value for the session's timestamp
+            and won't incorrectly expire an unreplicated session upon failover. It also
+            results in correct values for HttpSession.getLastAccessedTime() calls
+            following failover.
+
+            The cost of this metadata replication depends on the configured
+            replication-granularity. With <code>SESSION</code>, the session's
+            attribute map is replicated along with the metadata, so it can be fairly
+            costly.  With other granularities, the metadata object is replicated
+            separately from the attributes and only contains a String, and a few longs,
+            ints and booleans.
+
+            A value of 0 means the metadata will be replicated whenever the session is
+            accessed.  A value of -1 means the metadata will be replicated only if some
+            other activity during the request (e.g. modifying an attribute) has
+            resulted in other replication work involving the session. A positive value
+            greater than the HttpSession.getMaxInactiveInterval() value will be treated
+            as a likely misconfiguration and converted to 0; i.e. replicate the
+            metadata on every request.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="snapshot-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines when the sessions are replicated to the other nodes.
+            The typical value, "instant", replicates changes to the other nodes at the end
+            of requests, using the request processing thread to perform the replication.
+            In this case, the "snapshot-interval" property is ignored.
+            With "interval" mode, a background process is created that runs every
+            "snapshot-interval" milliseconds, checking for modified sessions and replicating
+            them.
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "instant".
+
+            Note that this property has no effect if replication-granularity
+            is set to FIELD. If it is FIELD, "instant" mode will be used.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="INSTANT"/>
+            <xsd:enumeration value="FIELD"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="snapshot-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines how often (in milliseconds) the background
+            process that replicates modified sessions should be started for this
+            web app.  Only meaningful if snapshot-mode is set to "interval".
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "1000".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="session-notification-policyType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Fully qualified class name of the implementation of the
+            org.jboss.web.tomcat.service.session.notification.ClusteredSessionNotificationPolicy
+            interface that should be used to govern whether servlet specification
+            notifications should be emitted to any registered HttpSessionListener,
+            HttpSessionAttributeListener and/or HttpSessionBindingListener.
+            Event notifications that may make sense in a non-clustered environment
+            may or may not make sense in a clustered environment; configuring an
+            appropriate ClusteredSessionNotificationPolicy gives the application
+            author fine-grained control over what notifications are issued.
+
+            Default value if not explicitly set is the
+            org.jboss.web.tomcat.service.session.notification.IgnoreUndeployLegacyClusteredSessionNotificationPolicy.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:fully-qualified-classType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the max number of active sessions allowed.
+            If the number of sessions managed by the the session manager exceeds this value and
+            passivation is enabled, the excess will be passivated based on the configured
+            passivation-min-idle-time.
+            If after passivation is completed (or if passivation is disabled), the number of
+            active sessions still exceeds this limit, attempts to create new sessions
+            will be rejected.
+            If set to -1, means no limit
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="passivation-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: HTTP Session passivation configuration.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="use-session-passivation" type="jboss:use-session-passivationType" minOccurs="0"/>
+         <xsd:element name="passivation-min-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the minimum time (in seconds) that a session must have been inactive
+                  before the container will consider passivating it in order to reduce the
+                  active session count below max-active-sessions.
+                  A value of -1 (the default) disables passivating sessions before
+                  passivation-max-idle-time.  Neither a value of -1 nor a high
+                  value are recommended if max-active-sessions is set
+
+                  Example:
+                     <passivation-min-idle-time>30</passivation-min-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="passivation-max-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the maximum time (in seconds) that a session can be inactive before
+                  the container should attempt to passivate it to save memory. Passivation of such
+                  sessions will take place regardless of whether the active session count exceeds
+                  max-active-sessions.
+                  Should be less than the web.xml session-timeout setting.
+                  A value of -1 disables passivation based on maximum inactivity.
+
+                  Example:
+                     <passivation-max-idle-time>300</passivation-max-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-session-passivationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines whether the web application should use session passivation or not
+
+            Examples:
+                  <use-session-passivation>true</use-session-passivation>
+               or
+                  <use-session-passivation>false</use-session-passivation> (default value)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="passivation-idle-timeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Determines the time (in seconds) that a session can be inactive before
+            the container should attempt to passivate it.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_7_2.xsd b/wildfly/docs/schema/jboss-web_7_2.xsd
new file mode 100644
index 0000000..c5cd7b4
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_7_2.xsd
@@ -0,0 +1,854 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.2">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss AS 7.0 web application deployment descriptor.
+	The deployment descriptor must be named "META-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_7_0.xsd"
+           version="7.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_7_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_0.xsd"/>
+   <xsd:include schemaLocation="jboss-common_6_0.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="7.2"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="passivation-config" type="jboss:passivation-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destination" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="webservice-description" type="jboss:webservice-descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             Thesymbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:restriction base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="jboss:cache-nameType" minOccurs="0"/>
+         <xsd:element name="replication-trigger" type="jboss:replication-triggerType" minOccurs="0"/>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0"/>
+         <xsd:element name="replication-mode" type="jboss:replication-modeType" minOccurs="0"/>
+         <xsd:element name="backups" type="jboss:backupsType" minOccurs="0"/>
+         <xsd:element name="use-jk" type="jboss:use-jkType" minOccurs="0"/>
+         <xsd:element name="max-unreplicated-interval" type="jboss:max-unreplicated-intervalType" minOccurs="0"/>
+         <xsd:element name="snapshot-mode" type="jboss:snapshot-modeType" minOccurs="0"/>
+         <xsd:element name="snapshot-interval" type="jboss:snapshot-intervalType" minOccurs="0"/>
+         <xsd:element name="session-notification-policy" type="jboss:session-notification-policyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="cache-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Name of the JBoss Cache or PojoCache configuration that
+            should be used for storing distributable sessions and replicating them around the
+            cluster.
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-triggerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines when the container should consider that a session
+            must be replicated across the cluster.
+            Possible values are:
+               1 - "ACCESS"
+               2 - "SET_AND_GET"
+               3 - "SET_AND_NON_PRIMITIVE_GET" (default value)
+               4 - "SET"
+
+            The rationale for this setting is that after a mutable object stored as a session attribute
+            is accessed from the session, in the absence of a setAttribute call the container has no
+            clear way to know if the object (and hence the session state) has been modified.
+
+            In all cases, calling setAttribute marks the session as needing replication.
+
+            ACCESS - merely accessing the session marks the session as dirty.
+
+            SET_AND_GET is conservative but not optimal (performance-wise): it will always replicate the
+            session even if its content has not been modified but simply accessed.
+
+            SET_AND_NON_PRIMITIVE_GET is conservative but will only replicate if a non-primitive Object
+            has been accessed (i.e. the object is not of a well-known immutable JDK type such as Integer,
+            Long, String, etc.) This is the default value.
+
+            SET assumes that the developer will explicitly call setAttribute on the session
+            if it needs to be replicated. This setting prevents unnecessary replication, but requires very
+            good coding practices to ensure setAttribute is always called whenever an attribute value
+            is modified.
+
+            Examples:
+                  <replication-trigger>SET_AND_GET</replication-trigger>
+               or
+                  <replication-trigger>SET_AND_NON_PRIMITIVE_GET</replication-trigger>
+               or
+                  <replication-trigger>SET</replication-trigger>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="ACCESS"/>
+            <xsd:enumeration value="SET_AND_GET"/>
+            <xsd:enumeration value="SET_AND_NON_PRIMITIVE_GET"/>
+            <xsd:enumeration value="SET"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication granularity level.
+            Possible values are:
+                    1 - "SESSION" (default)
+                    2 - "ATTRIBUTE"
+
+            The first option indicates that replication is done per session instance, i.e. when
+            the session is considered modified, the whole session object will be serialized
+            and replicated. This is the preferred policy when the sessions are generally small.
+
+            The second option indicates that replication is performed only for the the dirty
+            attributes in the session, plus some session data, like lastAccessTime. For sessions
+            carrying large amounts of data, parts of which are infrequently accessed,
+            this option can increase replication performance.
+
+            A third option, "FIELD" was available in AS 4.x and AS 5.x, but it
+            is not supported by AS 6.
+
+            Examples:
+                  <replication-granularity>SESSION</replication-granularity>
+               or
+                  <replication-granularity>ATTRIBUTE</replication-granularity>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication mode.
+            Possible values are:
+                1 - "SYNCHRONOUS"
+                2 - "ASYNCHRONOUS"
+
+            In SYNCHRONOUS mode, session replication occurs in the same thread that processes a given
+            request.  A request will not complete until the associated session is successfully replicated.
+
+            In ASYNCHRONOUS mode, session replication occurs in a separate thread from the one that processes
+            a given request.  The request thread only initiates replication, but does not wait for it to complete.
+
+            If not defined, the replication mode defined in the distributed cache configuration will be used.
+            In the default distributed session cache configuration, sessions replicate asynchronously.
+
+            Examples:
+                  <replication-mode>SYNCHRONOUS</replication-mode>
+               or
+                  <replication-mode>ASYNCHRONOUS</replication-mode>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SYNCHRONOUS"/>
+            <xsd:enumeration value="ASYNCHRONOUS"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="backupsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines the number of backup nodes on which to replicate
+            a given session.
+
+            Possible values are:
+                > 0 : Session will be replicated to *all* nodes (i.e. total replication)
+                  0 : Session will not be replicated (i.e. local mode)
+                < 0 : Session will be replicated only to the specified number of nodes (i.e. distribution mode)
+
+            Default value, if not explicitly set, is taken from the distributed cache
+            configuration.  By default, this is -1, i.e. total replication.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="use-jkType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Whether the container should assume mod_jk is used for
+            load balancing for this webapp. If set to 'true', the container will examine
+            the session id associated with every request and replace the JvmRoute portion of
+            the session id if it detects a failover. In addition, for each host you will
+            need to set a unique JvmRoute inside the server.xml file, e.g.,
+
+            <Engine name="jboss.web" jvmRoute="Node1" defaultHost="localhost">
+               ...
+            </Engine>
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "false".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-unreplicated-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the maximum interval between requests, in
+            seconds, after which a request will trigger replication of the session's
+            timestamp and other metadata regardless of whether the request has otherwise
+            made the session dirty.  Such replication ensures that other nodes in the
+            cluster are aware of the most recent value for the session's timestamp
+            and won't incorrectly expire an unreplicated session upon failover. It also
+            results in correct values for HttpSession.getLastAccessedTime() calls
+            following failover.
+
+            The cost of this metadata replication depends on the configured
+            replication-granularity. With <code>SESSION</code>, the session's
+            attribute map is replicated along with the metadata, so it can be fairly
+            costly.  With other granularities, the metadata object is replicated
+            separately from the attributes and only contains a String, and a few longs,
+            ints and booleans.
+
+            A value of 0 means the metadata will be replicated whenever the session is
+            accessed.  A value of -1 means the metadata will be replicated only if some
+            other activity during the request (e.g. modifying an attribute) has
+            resulted in other replication work involving the session. A positive value
+            greater than the HttpSession.getMaxInactiveInterval() value will be treated
+            as a likely misconfiguration and converted to 0; i.e. replicate the
+            metadata on every request.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="snapshot-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines when the sessions are replicated to the other nodes.
+            The typical value, "instant", replicates changes to the other nodes at the end
+            of requests, using the request processing thread to perform the replication.
+            In this case, the "snapshot-interval" property is ignored.
+            With "interval" mode, a background process is created that runs every
+            "snapshot-interval" milliseconds, checking for modified sessions and replicating
+            them.
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "instant".
+
+            Note that this property has no effect if replication-granularity
+            is set to FIELD. If it is FIELD, "instant" mode will be used.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="INSTANT"/>
+            <xsd:enumeration value="FIELD"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="snapshot-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines how often (in milliseconds) the background
+            process that replicates modified sessions should be started for this
+            web app.  Only meaningful if snapshot-mode is set to "interval".
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "1000".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="session-notification-policyType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Fully qualified class name of the implementation of the
+            org.jboss.web.tomcat.service.session.notification.ClusteredSessionNotificationPolicy
+            interface that should be used to govern whether servlet specification
+            notifications should be emitted to any registered HttpSessionListener,
+            HttpSessionAttributeListener and/or HttpSessionBindingListener.
+            Event notifications that may make sense in a non-clustered environment
+            may or may not make sense in a clustered environment; configuring an
+            appropriate ClusteredSessionNotificationPolicy gives the application
+            author fine-grained control over what notifications are issued.
+
+            Default value if not explicitly set is the
+            org.jboss.web.tomcat.service.session.notification.IgnoreUndeployLegacyClusteredSessionNotificationPolicy.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:fully-qualified-classType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the max number of active sessions allowed.
+            If the number of sessions managed by the the session manager exceeds this value and
+            passivation is enabled, the excess will be passivated based on the configured
+            passivation-min-idle-time.
+            If after passivation is completed (or if passivation is disabled), the number of
+            active sessions still exceeds this limit, attempts to create new sessions
+            will be rejected.
+            If set to -1, means no limit
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="passivation-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: HTTP Session passivation configuration.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="use-session-passivation" type="jboss:use-session-passivationType" minOccurs="0"/>
+         <xsd:element name="passivation-min-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the minimum time (in seconds) that a session must have been inactive
+                  before the container will consider passivating it in order to reduce the
+                  active session count below max-active-sessions.
+                  A value of -1 (the default) disables passivating sessions before
+                  passivation-max-idle-time.  Neither a value of -1 nor a high
+                  value are recommended if max-active-sessions is set
+
+                  Example:
+                     <passivation-min-idle-time>30</passivation-min-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="passivation-max-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the maximum time (in seconds) that a session can be inactive before
+                  the container should attempt to passivate it to save memory. Passivation of such
+                  sessions will take place regardless of whether the active session count exceeds
+                  max-active-sessions.
+                  Should be less than the web.xml session-timeout setting.
+                  A value of -1 disables passivation based on maximum inactivity.
+
+                  Example:
+                     <passivation-max-idle-time>300</passivation-max-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-session-passivationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines whether the web application should use session passivation or not
+
+            Examples:
+                  <use-session-passivation>true</use-session-passivation>
+               or
+                  <use-session-passivation>false</use-session-passivation> (default value)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="passivation-idle-timeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Determines the time (in seconds) that a session can be inactive before
+            the container should attempt to passivate it.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  
+  <xsd:complexType name="enable-websocketsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The enable-websockets element specifies if websockets
+            access should be enabled for this webapp. Java version should be at least
+             1.7 for this to work.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_7_3.xsd b/wildfly/docs/schema/jboss-web_7_3.xsd
new file mode 100644
index 0000000..9caa710
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_7_3.xsd
@@ -0,0 +1,854 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.3">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss AS 7.0 web application deployment descriptor.
+	The deployment descriptor must be named "META-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee http://www.jboss.org/j2ee/schema/jboss-web_7_3.xsd"
+           version="7.3">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	http://www.jboss.org/j2ee/schema/jboss-web_7_3.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://www.jboss.org/schema/jbossas/web-app_3_0.xsd"/>
+   <xsd:include schemaLocation="http://www.jboss.org/j2ee/schema/jboss-common_6_0.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="7.3"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="passivation-config" type="jboss:passivation-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+         <xsd:element name="message-destination" type="jboss:message-destinationType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="webservice-description" type="jboss:webservice-descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="enable-websockets" type="jboss:enable-websocketsType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             The symbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:restriction base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="jboss:cache-nameType" minOccurs="0"/>
+         <xsd:element name="replication-trigger" type="jboss:replication-triggerType" minOccurs="0"/>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0"/>
+         <xsd:element name="replication-mode" type="jboss:replication-modeType" minOccurs="0"/>
+         <xsd:element name="backups" type="jboss:backupsType" minOccurs="0"/>
+         <xsd:element name="use-jk" type="jboss:use-jkType" minOccurs="0"/>
+         <xsd:element name="max-unreplicated-interval" type="jboss:max-unreplicated-intervalType" minOccurs="0"/>
+         <xsd:element name="snapshot-mode" type="jboss:snapshot-modeType" minOccurs="0"/>
+         <xsd:element name="snapshot-interval" type="jboss:snapshot-intervalType" minOccurs="0"/>
+         <xsd:element name="session-notification-policy" type="jboss:session-notification-policyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="cache-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Name of the JBoss Cache or PojoCache configuration that
+            should be used for storing distributable sessions and replicating them around the
+            cluster.
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-triggerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines when the container should consider that a session
+            must be replicated across the cluster.
+            Possible values are:
+               1 - "ACCESS"
+               2 - "SET_AND_GET"
+               3 - "SET_AND_NON_PRIMITIVE_GET" (default value)
+               4 - "SET"
+
+            The rationale for this setting is that after a mutable object stored as a session attribute
+            is accessed from the session, in the absence of a setAttribute call the container has no
+            clear way to know if the object (and hence the session state) has been modified.
+
+            In all cases, calling setAttribute marks the session as needing replication.
+
+            ACCESS - merely accessing the session marks the session as dirty.
+
+            SET_AND_GET is conservative but not optimal (performance-wise): it will always replicate the
+            session even if its content has not been modified but simply accessed.
+
+            SET_AND_NON_PRIMITIVE_GET is conservative but will only replicate if a non-primitive Object
+            has been accessed (i.e. the object is not of a well-known immutable JDK type such as Integer,
+            Long, String, etc.) This is the default value.
+
+            SET assumes that the developer will explicitly call setAttribute on the session
+            if it needs to be replicated. This setting prevents unnecessary replication, but requires very
+            good coding practices to ensure setAttribute is always called whenever an attribute value
+            is modified.
+
+            Examples:
+                  <replication-trigger>SET_AND_GET</replication-trigger>
+               or
+                  <replication-trigger>SET_AND_NON_PRIMITIVE_GET</replication-trigger>
+               or
+                  <replication-trigger>SET</replication-trigger>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="ACCESS"/>
+            <xsd:enumeration value="SET_AND_GET"/>
+            <xsd:enumeration value="SET_AND_NON_PRIMITIVE_GET"/>
+            <xsd:enumeration value="SET"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication granularity level.
+            Possible values are:
+                    1 - "SESSION" (default)
+                    2 - "ATTRIBUTE"
+
+            The first option indicates that replication is done per session instance, i.e. when
+            the session is considered modified, the whole session object will be serialized
+            and replicated. This is the preferred policy when the sessions are generally small.
+
+            The second option indicates that replication is performed only for the the dirty
+            attributes in the session, plus some session data, like lastAccessTime. For sessions
+            carrying large amounts of data, parts of which are infrequently accessed,
+            this option can increase replication performance.
+
+            A third option, "FIELD" was available in AS 4.x and AS 5.x, but it
+            is not supported by AS 6.
+
+            Examples:
+                  <replication-granularity>SESSION</replication-granularity>
+               or
+                  <replication-granularity>ATTRIBUTE</replication-granularity>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the session replication mode.
+            Possible values are:
+                1 - "SYNCHRONOUS"
+                2 - "ASYNCHRONOUS"
+
+            In SYNCHRONOUS mode, session replication occurs in the same thread that processes a given
+            request.  A request will not complete until the associated session is successfully replicated.
+
+            In ASYNCHRONOUS mode, session replication occurs in a separate thread from the one that processes
+            a given request.  The request thread only initiates replication, but does not wait for it to complete.
+
+            If not defined, the replication mode defined in the distributed cache configuration will be used.
+            In the default distributed session cache configuration, sessions replicate asynchronously.
+
+            Examples:
+                  <replication-mode>SYNCHRONOUS</replication-mode>
+               or
+                  <replication-mode>ASYNCHRONOUS</replication-mode>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SYNCHRONOUS"/>
+            <xsd:enumeration value="ASYNCHRONOUS"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="backupsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines the number of backup nodes on which to replicate
+            a given session.
+
+            Possible values are:
+                > 0 : Session will be replicated to *all* nodes (i.e. total replication)
+                  0 : Session will not be replicated (i.e. local mode)
+                < 0 : Session will be replicated only to the specified number of nodes (i.e. distribution mode)
+
+            Default value, if not explicitly set, is taken from the distributed cache
+            configuration.  By default, this is -1, i.e. total replication.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="use-jkType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Whether the container should assume mod_jk is used for
+            load balancing for this webapp. If set to 'true', the container will examine
+            the session id associated with every request and replace the JvmRoute portion of
+            the session id if it detects a failover. In addition, for each host you will
+            need to set a unique JvmRoute inside the server.xml file, e.g.,
+
+            <Engine name="jboss.web" jvmRoute="Node1" defaultHost="localhost">
+               ...
+            </Engine>
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "false".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-unreplicated-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the maximum interval between requests, in
+            seconds, after which a request will trigger replication of the session's
+            timestamp and other metadata regardless of whether the request has otherwise
+            made the session dirty.  Such replication ensures that other nodes in the
+            cluster are aware of the most recent value for the session's timestamp
+            and won't incorrectly expire an unreplicated session upon failover. It also
+            results in correct values for HttpSession.getLastAccessedTime() calls
+            following failover.
+
+            The cost of this metadata replication depends on the configured
+            replication-granularity. With <code>SESSION</code>, the session's
+            attribute map is replicated along with the metadata, so it can be fairly
+            costly.  With other granularities, the metadata object is replicated
+            separately from the attributes and only contains a String, and a few longs,
+            ints and booleans.
+
+            A value of 0 means the metadata will be replicated whenever the session is
+            accessed.  A value of -1 means the metadata will be replicated only if some
+            other activity during the request (e.g. modifying an attribute) has
+            resulted in other replication work involving the session. A positive value
+            greater than the HttpSession.getMaxInactiveInterval() value will be treated
+            as a likely misconfiguration and converted to 0; i.e. replicate the
+            metadata on every request.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="snapshot-modeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines when the sessions are replicated to the other nodes.
+            The typical value, "instant", replicates changes to the other nodes at the end
+            of requests, using the request processing thread to perform the replication.
+            In this case, the "snapshot-interval" property is ignored.
+            With "interval" mode, a background process is created that runs every
+            "snapshot-interval" milliseconds, checking for modified sessions and replicating
+            them.
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "instant".
+
+            Note that this property has no effect if replication-granularity
+            is set to FIELD. If it is FIELD, "instant" mode will be used.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="INSTANT"/>
+            <xsd:enumeration value="FIELD"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="snapshot-intervalType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Defines how often (in milliseconds) the background
+            process that replicates modified sessions should be started for this
+            web app.  Only meaningful if snapshot-mode is set to "interval".
+
+            Default value if not explicitly set is the overall web container default
+            as set in the deployers/jbossweb.deployer service. By default that is set
+            to "1000".
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="session-notification-policyType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Fully qualified class name of the implementation of the
+            org.jboss.web.tomcat.service.session.notification.ClusteredSessionNotificationPolicy
+            interface that should be used to govern whether servlet specification
+            notifications should be emitted to any registered HttpSessionListener,
+            HttpSessionAttributeListener and/or HttpSessionBindingListener.
+            Event notifications that may make sense in a non-clustered environment
+            may or may not make sense in a clustered environment; configuring an
+            appropriate ClusteredSessionNotificationPolicy gives the application
+            author fine-grained control over what notifications are issued.
+
+            Default value if not explicitly set is the
+            org.jboss.web.tomcat.service.session.notification.IgnoreUndeployLegacyClusteredSessionNotificationPolicy.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:fully-qualified-classType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines the max number of active sessions allowed.
+            If the number of sessions managed by the the session manager exceeds this value and
+            passivation is enabled, the excess will be passivated based on the configured
+            passivation-min-idle-time.
+            If after passivation is completed (or if passivation is disabled), the number of
+            active sessions still exceeds this limit, attempts to create new sessions
+            will be rejected.
+            If set to -1, means no limit
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="passivation-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: HTTP Session passivation configuration.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="use-session-passivation" type="jboss:use-session-passivationType" minOccurs="0"/>
+         <xsd:element name="passivation-min-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the minimum time (in seconds) that a session must have been inactive
+                  before the container will consider passivating it in order to reduce the
+                  active session count below max-active-sessions.
+                  A value of -1 (the default) disables passivating sessions before
+                  passivation-max-idle-time.  Neither a value of -1 nor a high
+                  value are recommended if max-active-sessions is set
+
+                  Example:
+                     <passivation-min-idle-time>30</passivation-min-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="passivation-max-idle-time" type="jboss:passivation-idle-timeType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  <![CDATA[
+
+                  Determines the maximum time (in seconds) that a session can be inactive before
+                  the container should attempt to passivate it to save memory. Passivation of such
+                  sessions will take place regardless of whether the active session count exceeds
+                  max-active-sessions.
+                  Should be less than the web.xml session-timeout setting.
+                  A value of -1 disables passivation based on maximum inactivity.
+
+                  Example:
+                     <passivation-max-idle-time>300</passivation-max-idle-time> (seconds)
+
+                  ]]>
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-session-passivationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Clustering only: Determines whether the web application should use session passivation or not
+
+            Examples:
+                  <use-session-passivation>true</use-session-passivation>
+               or
+                  <use-session-passivation>false</use-session-passivation> (default value)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:simpleType name="passivation-idle-timeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Determines the time (in seconds) that a session can be inactive before
+            the container should attempt to passivate it.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+  
+  <xsd:complexType name="enable-websocketsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The enable-websockets element specifies if websockets
+            access should be enabled for this webapp. Java version should be at least
+             1.7 for this to work.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-web_8_0.xsd b/wildfly/docs/schema/jboss-web_8_0.xsd
new file mode 100644
index 0000000..0fdec52
--- /dev/null
+++ b/wildfly/docs/schema/jboss-web_8_0.xsd
@@ -0,0 +1,574 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2012, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://www.jboss.com/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="8.0">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+
+	This is the XML Schema for the JBoss AS 8.0 web application deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/jboss-web.xml" in
+	the WAR file.  All JBoss Web deployment descriptors must indicate
+	the JBoss schema by using the Java EE namespace:
+
+        http://www.jboss.com/xml/ns/javaee
+
+	and by indicating the version of the schema using the version element as shown below:
+
+        <jboss-web xmlns="http://www.jboss.com/xml/ns/javaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://www.jboss.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-web_8_0.xsd"
+           version="8.0">
+
+	       ...
+
+        </jboss-web>
+
+	Instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for the
+	Java EE namespace with the following location:
+
+	https://www.jboss.org/j2ee/schema/jboss-web_8_0.xsd
+
+	]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:annotation>
+      <xsd:documentation> The following conventions apply to all Java EE deployment descriptor
+         elements unless indicated otherwise. - In elements that specify a pathname to a file within
+         the same JAR file, relative filenames (i.e., those not starting with "/") are considered
+         relative to the root of the JAR file's namespace. Absolute filenames (i.e., those starting
+         with "/") also specify names in the root of the JAR file's namespace. In general, relative
+         names are preferred. The exception is .war files where absolute names are preferred for
+         consistency with the Servlet API. </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="web-app_3_1.xsd"/>
+
+   <xsd:element name="jboss-web" type="jboss:jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the root element of jboss-web deployment descriptor.
+         </xsd:documentation>
+      </xsd:annotation>
+   </xsd:element>
+
+  <xsd:simpleType name="jboss-web-versionType">
+      <xsd:restriction base="xsd:token">
+         <xsd:enumeration value="8.0"/>
+      </xsd:restriction>
+  </xsd:simpleType>
+
+   <xsd:complexType name="jboss-webType">
+      <xsd:annotation>
+         <xsd:documentation> The jboss-web element is the root element of jboss-web.xml file. It contains
+            all the information used by jboss but not described in the web.xml file. All of it is optional.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="deny-uncovered-http-methods" type="xsd:boolean" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="context-root" type="jboss:context-rootType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="virtual-host" type="jboss:virtual-hostType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet-container" type="jboss:servlet-containerType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="server-instance" type="jboss:server-instanceType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="default-encoding" type="jboss:defaultEncodingType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="annotation" type="jboss:annotationType" minOccurs="0" maxOccurs="unbounded"/>
+         <!--<xsd:element name="listener" type="jboss:container-listenerType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="session-config" type="javaee:session-configType" minOccurs="0" maxOccurs="1"/>
+         <!--<xsd:element name="valve" type="jboss:valveType" minOccurs="0" maxOccurs="unbounded"/>-->
+         <xsd:element name="http-handler" type="jboss:httpHandlerType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="overlay" type="jboss:overlayType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="security-domain" type="jboss:security-domainType" minOccurs="0"/>
+         <xsd:element name="security-role" type="jboss:security-roleType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="jacc-star-role-allow" type="jboss:jacc-star-role-allowType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="jacc-context-id" type="jboss:jacc-context-idType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-cross-context" type="jboss:disable-cross-contextType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="use-jboss-authorization" type="jboss:use-jboss-authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="disable-audit" type="jboss:disable-auditType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="servlet" type="jboss:servletType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="max-active-sessions" type="javaee:xsdIntegerType" minOccurs="0" maxOccurs="1">
+            <xsd:annotation>
+               <xsd:documentation>
+                  Determines the maximum number of sessions to retain in memory. If the application attempts to exceed
+                  this limit, the resulting behavior is determined by the session manager.
+
+                  If the session manager supports passivation, then sessions accessed least recently will be
+                  passivated to make room for new sessions.
+                  If the session manager does not support passivation then any attempt to create more than
+                  max-active-sessions will fail.
+
+                  If undefined, or if set to -1, then no limit is placed on the number of sessions retained in memory,
+                  and sessions will never passivate.
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-config" type="jboss:replication-configType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="distinct-name" type="jboss:distinct-nameType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="symbolic-linking-enabled" type="jboss:symbolic-linked-allowedType" minOccurs="0" maxOccurs="1"/>
+         <xsd:group ref="jboss:jndiEnvironmentRefsGroup"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="jboss:jboss-web-versionType" use="required"/>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listenerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container listener. The module element allows specifying from which
+            module in the application server the specified class will be loaded. The listener type
+            element defines which events the listener will recieve from the web container.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="listener-type" type="jboss:container-listener-typeType" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="container-listener-typeType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            Sets the type of the container listener:
+                    1 - "LIFECYCLE": webapp lifecycle listener
+                    2 - "CONTAINER": webapp container listener
+                    3 - "SERVLET_INSTANCE": servlet instance listener
+                    4 - "SERVLET_LIFECYCLE": servlet lifecyle listener
+                    5 - "SERVLET_CONTAINER": servlet container (Catalina wrapper) listener
+
+            Example:
+                  <listener-type>LIFECYCLE</listener-type>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="LIFECYCLE"/>
+            <xsd:enumeration value="CONTAINER"/>
+            <xsd:enumeration value="SERVLET_INSTANCE"/>
+            <xsd:enumeration value="SERVLET_LIFECYCLE"/>
+            <xsd:enumeration value="SERVLET_CONTAINER"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="valveType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container valve. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A container
+            valve is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+
+   <xsd:complexType name="httpHandlerType">
+      <xsd:annotation>
+         <xsd:documentation>
+            Defines a web container HTTPHandler. The module element allows specifying from which
+            module in the application server the specified class will be loaded. A handler
+            is used to intercept the request that will be processed by the servlet. It
+            is invoked as part of a chain, before the invocation of the webapp's filter chain.
+
+            The class specified can either be a HttpHandler that has a constructor that takes the
+             next HttpHandler, or can be a HandlerWrapper that produces the next handler.
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+         <xsd:element name="module" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="param" type="javaee:param-valueType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="overlayType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The overlay element specifies additional static files overlays for this
+            web application. The content of the element should be a folder in the
+            filesystem containing the static files that will overlay the webapp's
+            static files, similar to what happens with regular JAR overlays.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-cross-contextType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-cross-context element specifies if cross context
+            access should be enabled for this webapp, allowing it to use the
+            request dispatcher to access other webapps deployed in the
+            application server.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="use-jboss-authorizationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The use-jboss-authorization element specifies if the JBoss
+            authorization layer should be used.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="disable-auditType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The disable-audit element specifies if the security audit logging
+            should be disabled.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="distinct-nameType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The distinct-name element specifies the EJB 3 distinct name for this
+            web application.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="symbolic-linked-allowedType">
+       <xsd:annotation>
+          <xsd:documentation>
+             Thesymbolic-linked-allowed element specifies if symlinking is allowed in exploded deployments.
+          </xsd:documentation>
+       </xsd:annotation>
+       <xsd:simpleContent>
+          <xsd:restriction base="xsd:boolean"/>
+       </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="jacc-star-role-allowType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The jacc-star-role-allow element specifies whether the
+            jacc permission generating agent in the web layer needs to generate a
+            WebResourcePermission(url,null) permission such that the jacc provider can
+            make a decision as to bypass authorization or not.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:generic-booleanType"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="jacc-context-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The jacc-context-id element allows for the specification of the JACC contextID that should
+                be used to identify the web application when checking for permissions. If not set the deployment 
+                unit name is used as JACC contextID.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="context-rootType">
+      <xsd:annotation>
+         <xsd:documentation>
+            The context-root element specifies the context root of a web
+            application. This is normally specified at the ear level using the standard
+            JEE application.xml descriptor, but it may be given here for standalone wars.
+            This should not override the application.xml level specification.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="servlet-containerType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The servlet-container element specifies the which servlet container this application
+             should be using.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+
+    <xsd:complexType name="server-instanceType">
+      <xsd:annotation>
+         <xsd:documentation>
+             The server-instance element specifies the which server instance configuration this application belongs to.
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+    <xsd:complexType name="defaultEncodingType">
+      <xsd:annotation>
+         <xsd:documentation>
+             Default encoding to use for this application
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="virtual-hostType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The virtual-host element allows one to specify which virtual host the war
+            should be deployed to. Example, to specify that a war should be deployed to the
+            www.jboss-store.org virtual host add the following virtual-host element:
+            <virtual-host>www.jboss-store.org</virtual-host>
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string"/>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-configType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:sequence>
+         <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container/cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container/cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web/dist</cache-name>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="replication-granularity" type="jboss:replication-granularityType" minOccurs="0" default="SESSION">
+            <xsd:annotation>
+                <xsd:documentation>
+                    <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scrope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated reglardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="replication-granularityType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="servletType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The servlet element specifies servlet specific bindings. Currently this
+            is only the run-as principal identity.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="servlet-name" type="javaee:string"/>
+         <xsd:element name="executor-name" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as-principal" type="javaee:role-nameType" minOccurs="0">
+            <xsd:annotation>
+               <xsd:documentation>
+                  The run-as-principal element specifies whether a specific run-as identity is
+                  to be used. If there is a run-as role defined for a servlet, there can also
+                  be a run-as-principal defined here. If you don't define a run-as principal
+                  the callee will see ctx.getUserPrincipal() == 'anonymous'
+               </xsd:documentation>
+            </xsd:annotation>
+         </xsd:element>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:simpleType name="max-active-sessionsType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:restriction base="xsd:integer"/>
+   </xsd:simpleType>
+
+   <xsd:complexType name="annotationType">
+      <xsd:annotation>
+         <xsd:documentation>
+            <![CDATA[
+
+            The annotation element specifies annotation specific bindings. This allows
+            overriding the @ServletSecurity, @RunAs and @MultipartConfig, which apply
+            on a Servlet class rather than a Servlet name. They have the same structure
+            and element names as the corresponding annotation.
+
+            ]]>
+         </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+         <xsd:element name="class-name" type="javaee:string"/>
+         <xsd:element name="servlet-security" type="jboss:servlet-securityType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="run-as" type="jboss:run-asType" minOccurs="0" maxOccurs="1"/>
+         <xsd:element name="multipart-config" type="jboss:multipart-configType" minOccurs="0" maxOccurs="1"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="run-asType">
+    <xsd:sequence>
+      <xsd:element name="description" type="javaee:descriptionType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name" type="javaee:string"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="servlet-securityType">
+    <xsd:sequence>
+      <xsd:element name="empty-role-semantic" type="javaee:string"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="http-method-constraint" type="jboss:http-method-constraintType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="http-method-constraintType">
+    <xsd:sequence>
+      <xsd:element name="method" type="javaee:string" minOccurs="1" maxOccurs="1"/>
+      <xsd:element name="empty-role-semantic" type="jboss:empty-role-semanticType"/>
+      <xsd:element name="transport-guarantee" type="javaee:transport-guaranteeType"/>
+      <xsd:element name="roles-allowed" type="javaee:role-nameType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="empty-role-semanticType">
+      <xsd:simpleContent>
+         <xsd:restriction base="javaee:string">
+            <xsd:enumeration value="PERMIT"/>
+            <xsd:enumeration value="DENY"/>
+         </xsd:restriction>
+      </xsd:simpleContent>
+   </xsd:complexType>
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:sequence>
+      <xsd:element name="location" type="javaee:string" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-file-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="max-request-size" type="xsd:long" minOccurs="0" maxOccurs="1"/>
+      <xsd:element name="file-size-threshold" type="xsd:integer" minOccurs="0" maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jboss-weld-1_0.xsd b/wildfly/docs/schema/jboss-weld-1_0.xsd
new file mode 100644
index 0000000..92cab73
--- /dev/null
+++ b/wildfly/docs/schema/jboss-weld-1_0.xsd
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:weld:1.0"
+            xmlns="urn:jboss:weld:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="weld" type="configuration"/>
+
+    <xs:complexType name="configuration">
+        <xs:attribute name="require-bean-descriptor" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then implicit bean archives without bean descriptor file (beans.xml) are ignored by Weld</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="non-portable-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then the non-portable mode is enabled. The non-portable mode is suggested by the specification to overcome problems with legacy applications that do not use CDI SPI properly and may be rejected by more strict validation in CDI 1.1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jboss-weld-1_1.xsd b/wildfly/docs/schema/jboss-weld-1_1.xsd
new file mode 100644
index 0000000..030253a
--- /dev/null
+++ b/wildfly/docs/schema/jboss-weld-1_1.xsd
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:weld:1.1"
+            xmlns="urn:jboss:weld:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <xs:element name="weld" type="configuration"/>
+
+    <xs:complexType name="configuration">
+        <xs:attribute name="require-bean-descriptor" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then implicit bean archives without bean descriptor file (beans.xml) are ignored by Weld</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="non-portable-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>If true then the non-portable mode is enabled. The non-portable mode is suggested by the specification to overcome problems with legacy applications that do not use CDI SPI properly and may be rejected by more strict validation in CDI 1.1.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="development-mode" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>Weld comes with a special mode for application development. When the development mode is enabled, certain built-in tools, which facilitate the development of CDI applications, are available. Setting this attribute to true activates the development mode.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/jbossws-jaxws-config_4_0.xsd b/wildfly/docs/schema/jbossws-jaxws-config_4_0.xsd
new file mode 100644
index 0000000..9a1c7fd
--- /dev/null
+++ b/wildfly/docs/schema/jbossws-jaxws-config_4_0.xsd
@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:jbossws-jaxws-config:4.0"
+            xmlns:tns="urn:jboss:jbossws-jaxws-config:4.0"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+            This is the schema definition for JBossWS JAXWS configurations.
+            It relies on the handler definitions that are part of the standard JavaEE 6 deployment descriptors.
+         ]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://java.sun.com/xml/ns/javaee/javaee_6.xsd"/>
+
+   <xsd:element name="jaxws-config" type="tns:jaxwsConfigType"/>
+   <xsd:complexType name="jaxwsConfigType">
+      <xsd:sequence>
+         <xsd:element name="endpoint-config" type="tns:endpointConfigType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="client-config" type="tns:clientConfigType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="endpointConfigType">
+      <xsd:complexContent>
+         <xsd:extension base="tns:commonConfigType"/>
+      </xsd:complexContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="clientConfigType">
+      <xsd:complexContent>
+         <xsd:extension base="tns:commonConfigType"/>
+      </xsd:complexContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="commonConfigType">
+      <xsd:sequence>
+         <xsd:element name="config-name" type="xsd:string"/>
+         <xsd:element name="pre-handler-chains" type="javaee:handler-chainsType" minOccurs="0"/>
+         <xsd:element name="post-handler-chains" type="javaee:handler-chainsType" minOccurs="0"/>
+         <xsd:element name="feature" type="tns:featureType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="property" type="tns:propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="featureType">
+      <xsd:sequence>
+         <xsd:element name="feature-name" type="xsd:string"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="propertyType">
+      <xsd:sequence>
+         <xsd:element name="property-name" type="xsd:string"/>
+         <xsd:element name="property-value" type="xsd:string"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jbossws-jaxws-config_5_0.xsd b/wildfly/docs/schema/jbossws-jaxws-config_5_0.xsd
new file mode 100644
index 0000000..6222264
--- /dev/null
+++ b/wildfly/docs/schema/jbossws-jaxws-config_5_0.xsd
@@ -0,0 +1,72 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:jbossws-jaxws-config:5.0"
+            xmlns:tns="urn:jboss:jbossws-jaxws-config:5.0"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+   <xsd:annotation>
+      <xsd:documentation>
+         <![CDATA[
+            This is the schema definition for JBossWS JAXWS configurations.
+            It relies on the handler definitions that are part of the standard Jakarta EE deployment descriptors.
+         ]]>
+      </xsd:documentation>
+   </xsd:annotation>
+
+   <xsd:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://jakarta.ee/xml/ns/jakartaee/jakartaee_10.xsd"/>
+
+   <xsd:element name="jaxws-config" type="tns:jaxwsConfigType"/>
+   <xsd:complexType name="jaxwsConfigType">
+      <xsd:sequence>
+         <xsd:element name="endpoint-config" type="tns:endpointConfigType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="client-config" type="tns:clientConfigType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="endpointConfigType">
+      <xsd:complexContent>
+         <xsd:extension base="tns:commonConfigType"/>
+      </xsd:complexContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="clientConfigType">
+      <xsd:complexContent>
+         <xsd:extension base="tns:commonConfigType"/>
+      </xsd:complexContent>
+   </xsd:complexType>
+
+   <xsd:complexType name="commonConfigType">
+      <xsd:sequence>
+         <xsd:element name="config-name" type="xsd:string"/>
+         <xsd:element name="pre-handler-chains" type="jakartaee:handler-chainsType" minOccurs="0"/>
+         <xsd:element name="post-handler-chains" type="jakartaee:handler-chainsType" minOccurs="0"/>
+         <xsd:element name="feature" type="tns:featureType" minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="property" type="tns:propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="featureType">
+      <xsd:sequence>
+         <xsd:element name="feature-name" type="xsd:string"/>
+         <xsd:element name="feature-data" type="xsd:anyType" minOccurs="0"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+   <xsd:complexType name="propertyType">
+      <xsd:sequence>
+         <xsd:element name="property-name" type="xsd:string"/>
+         <xsd:element name="property-value" type="xsd:string"/>
+      </xsd:sequence>
+   </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jbossws-web-services_1_0.xsd b/wildfly/docs/schema/jbossws-web-services_1_0.xsd
new file mode 100644
index 0000000..b0f8fff
--- /dev/null
+++ b/wildfly/docs/schema/jbossws-web-services_1_0.xsd
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema
+  targetNamespace="http://www.jboss.com/xml/ns/javaee"
+  xmlns:jboss="http://www.jboss.com/xml/ns/javaee"
+  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  elementFormDefault="qualified"
+  attributeFormDefault="unqualified"
+  version="1.0">
+
+  <xsd:element name="webservices" type="jboss:webservicesType"/>
+
+  <xsd:complexType name="webservicesType">
+    <xsd:sequence>
+      <xsd:element name="context-root" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="config-name" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="config-file" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="port-component" type="jboss:portComponentType" minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="webservice-description" type="jboss:webserviceDescriptionType" minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:complexType name="portComponentType">
+    <xsd:sequence>
+      <xsd:element name="ejb-name" type="xsd:token"/>
+      <xsd:element name="port-component-name" type="xsd:token"/>
+      <xsd:element name="port-component-uri" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="auth-method" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="transport-guarantee" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="secure-wsdl-access" type="xsd:boolean" minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:complexType name="webserviceDescriptionType">
+    <xsd:sequence>
+      <xsd:element name="webservice-description-name" type="xsd:token"/>
+      <xsd:element name="wsdl-publish-location" type="xsd:token" minOccurs="0"/>
+      <xsd:element name="port-component" type="jboss:portComponentType" minOccurs="1" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jbxb_1_0.xsd b/wildfly/docs/schema/jbxb_1_0.xsd
new file mode 100644
index 0000000..1a31e12
--- /dev/null
+++ b/wildfly/docs/schema/jbxb_1_0.xsd
@@ -0,0 +1,426 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xs:schema version="1.0beta"
+   attributeFormDefault="unqualified"
+   elementFormDefault="qualified"
+   targetNamespace="https://www.jboss.org/xml/ns/jbxb"
+   xmlns:jbxb="https://www.jboss.org/xml/ns/jbxb"
+   xmlns:xs="http://www.w3.org/2001/XMLSchema">
+    <xs:annotation>
+        <xs:documentation>The JBossXB schema customization
+        elements</xs:documentation>
+    </xs:annotation>
+    <xs:element name="schemaBindings">
+        <xs:annotation>
+            <xs:documentation>This element defines default bindings for the
+                schema</xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <!-- The child elements can be selected in any order. -->
+            <xs:choice maxOccurs="unbounded" minOccurs="1">
+                <xs:element maxOccurs="1" minOccurs="0" ref="jbxb:package"/>
+
+               <xs:element name="ignoreUnresolvedFieldOrClass" type="xs:boolean" default="true"
+                  maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                     <xs:documentation>The ignoreUnresolvedFieldOrClass specifies the behavior the parser chooses
+                        when a field is not found in the parent class for a child value, or when an element does not have
+                        any class assignement. If false, an exception will be thrown when either situation is encountered.
+                        If true, the missing mapping is ignored and the parse continues.
+                        </xs:documentation>
+                  </xs:annotation>
+               </xs:element>
+
+               <xs:element name="replacePropertyRefs" type="xs:boolean" default="true"
+                  maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                     <xs:documentation>The replacePropertyRefs flag indicates whether the
+                        text content of values has ${x} system property references replaced
+                        during parsing. The default is true.
+                        </xs:documentation>
+                  </xs:annotation>
+               </xs:element>
+            </xs:choice>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="package" type="xs:NCName">
+        <xs:annotation>
+            <xs:documentation> Defines the default package for the schema which
+                is used for searching classes when unmarshalling elements of
+                complex types. If jbxb:package is not present, schema's
+                namespace URI will be used as the base to generate the default
+                package name for the schema (the mapping is defined in JAXB2.0
+                spec D.5.1 Mapping from a Namespace URI). Example: <![CDATA[
+                   <xsd:annotation>
+                      <xsd:appinfo>
+                         <jbxb:schema>
+                            <jbxb:package name="org.jboss.test.xml.pojoserver.metadata"/>
+                         </jbxb:schema>
+                      </xsd:appinfo>
+                   </xsd:annotation>
+                ]]></xs:documentation>
+        </xs:annotation>
+    </xs:element>
+    <xs:element name="characters">
+        <xs:annotation>
+            <xs:documentation> Binds text content of complex types. This element
+                is just a container for jbxb:value, jbxb:property,
+                jbxb:mapEntryKey, jbxb:mapEntryValue elements, all of them are
+                optional. This element can only appear inside complex type
+                definitions. Example: <![CDATA[
+                   <xsd:complexType name="namedValueType" mixed="true">
+                      <xsd:annotation>
+                         <xsd:appinfo>
+                            <jbxb:class impl="org.jboss.test.xml.pojoserver.metadata.AbstractPropertyMetaData"/>
+                            <jbxb:characters>
+                               <jbxb:property name="value"/>
+                               <jbxb:value unmarshalMethod="org.jboss.test.xml.pojoserver.metadata.DataTypeConverter.unmarshalStringValue"/>
+                            </jbxb:characters>
+                         </xsd:appinfo>
+                      </xsd:annotation>
+                  <xsd:complexContent>
+                  ...
+                  </xsd:complexContent>
+               </xsd:complexType>
+                ]]></xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:choice>
+                <xs:element ref="jbxb:property"/>
+                <xs:element ref="jbxb:value"/>
+                <xs:element ref="jbxb:mapEntryKey"/>
+                <xs:element ref="jbxb:mapEntryValue"/>
+            </xs:choice>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="class">
+        <xs:annotation>
+            <xs:documentation> Binds XML element or complex type to a Java class
+                which is specified as a value of attribute 'impl'. If jbxb:class
+                is used inside complex type definition, all elements of this
+                complex type will be unmarshalled into the specified Java type
+                unless there is overriding jbxb:class in an element declaration.
+                Example: <![CDATA[
+               <xsd:complexType name="deploymentType">
+                  <xsd:annotation>
+                     <xsd:appinfo>
+                        <jbxb:class impl="org.jboss.test.xml.pojoserver.deployment.AbstractKernelDeployment"/>
+                     </xsd:appinfo>
+                  </xsd:annotation>
+                  <xsd:sequence>
+                     ...
+                  </xsd:sequence>
+               </xsd:complexType>
+            
+               <xsd:element name="list" type="listType">
+                  <xsd:annotation>
+                     <xsd:appinfo>
+                        <jbxb:class impl="org.jboss.test.xml.pojoserver.metadata.AbstractListMetaData"/>
+                     </xsd:appinfo>
+                  </xsd:annotation>
+               </xsd:element>
+                ]]></xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:attribute name="impl" type="xs:NCName" use="required"/>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="property">
+        <xs:annotation>
+            <xs:documentation> Binds an element to property/field in a class.
+                This element can appear inside an element definition or inside
+                jbxb:characters. If jbxb:property is not specified for an
+                element, the property name is resolved based on the element's
+                name using "D.2 The Name to Identifier Mapping Algorithm"
+                defined in JAXB2.0 spec. Example: <![CDATA[
+   <xsd:element name="list" type="listType">
+      <xsd:annotation>
+         <xsd:appinfo>
+            <jbxb:property name="value"/>
+            <jbxb:class impl="org.jboss.test.xml.pojoserver.metadata.AbstractListMetaData"/>
+         </xsd:appinfo>
+      </xsd:annotation>
+   </xsd:element>
+                ]]></xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:attribute name="name" type="xs:NCName" use="required"/>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="value">
+        <xs:annotation>
+            <xs:documentation> Binds text value (attribute value or text
+                content) to a Java value. There are two attributes:
+                unmarshalMethod which specfies a public static method that is
+                used to unmarshal text values and marshalMethod which also a
+                public static method that is used to marshal Java values. Both
+                methods are defined as concatenation of fully-qualified class
+                name, '.' and the method name. unmarshalMethod must have two
+                parameters: the first one of type java.lang.String and the
+                second one is of type javax.xml.namespace.NamespaceContext.
+                marshalMethod must also have two parameters: the first one is of
+                type java.lang.Object and the second one is of type
+                javax.xml.namespace.NamespaceContext. jbxb:value can appear
+                inside simple type definitions, attribute declarations and
+                jbxb:characters. If jbxb:value is not used, text values are
+                unmarshalled using default simple types to Java bindings
+                defained in JAXB2.0 spec. If simple type is a user-defined, by
+                default it is not unmarshalled and passed as a string. Example: <![CDATA[
+                <xsd:simpleType name="kernelControllerState">
+                    <xsd:annotation>
+                        <xsd:appinfo>
+                            <jbxb:value unmarshalMethod="org.jboss.test.xml.pojoserver.metadata.KernelControllerStateDatatypeConverter.unmarshal"/>
+                        </xsd:appinfo>
+                    </xsd:annotation>
+                    <xsd:restriction base="xsd:string">
+                        <xsd:enumeration value="Not Installed" />
+                        <xsd:enumeration value="Described" />
+                        <xsd:enumeration value="Instantiated" />
+                        <xsd:enumeration value="Configured" />
+                        <xsd:enumeration value="Lifecycle" />
+                        <xsd:enumeration value="Started" />
+                        <xsd:enumeration value="Installed" />
+                    </xsd:restriction>
+                </xsd:simpleType>
+
+                public class KernelControllerStateDatatypeConverter
+                {
+                    public static KernelControllerState unmarshal(String text, NamespaceContext nsCtx)
+                    {
+                        KernelControllerState state;
+                        if(KernelControllerState.NOT_INSTALLED.getStateString().equals(text))
+                        {
+                           state = KernelControllerState.NOT_INSTALLED;
+                        }
+                        else
+                        ...
+                ]]></xs:documentation>
+        </xs:annotation>
+    </xs:element>
+    <xs:element name="addMethod">
+        <xs:annotation>
+            <xs:documentation> Specified on an element that should be added to
+                its parent not with a setter (is not a property) and not with a
+                field but with a custom method. The attributes are: * name - the
+                name of the method. There is not default value for this
+                attribute. It must be set. * valueType - the type of the
+                argument. If not present, the default is java.lang.Object. And
+                there is a special value 'child' which means the type of the
+                child should be used as the argument's type. Example: <![CDATA[
+              <xs:element name="user">
+                <xsd:annotation>
+                  <xsd:appinfo>
+                    <jbxb:class impl="org.jboss.test.xml.mbeanserver.Users$User"/>
+                    <jbxb:addMethod name="addUser" valueType="child"/>
+                  </xsd:appinfo>
+                </xsd:annotation>
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element minOccurs="0" maxOccurs="unbounded" ref="ur:role"/>
+                  </xs:sequence>
+                  <xs:attribute name="name" use="required" type="xs:NCName"/>
+                  <xs:attribute name="password" use="required" type="xs:NCName"/>
+                </xs:complexType>
+              </xs:element> 
+                ]]></xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:attribute name="name" type="xs:NCName" use="required">
+                <xs:annotation>
+                    <xs:documentation>This required attribute specifies the name
+                        of the add method</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="java.lang.Object" name="valueType"
+                type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation> the type of the add method argument. If
+                        not present, the default is java.lang.Object. And there
+                        is a special value 'child' which means the type of the
+                        child should be used as the argument's type.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="putMethod">
+        <xs:annotation>
+            <xs:documentation/>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:attribute default="put" name="name" type="xs:NCName"
+                use="optional">
+                <xs:annotation>
+                    <xs:documentation> the method name in the parent object's
+                        class that adds child to to its parent object. If not
+                        present, the default is 'put'. </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="java.lang.Object" name="keyType"
+                type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation> fully qualified type name of the
+                        key-parameter to the put-method. If not present, the
+                        default is java.lang.Object. </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="java.lang.Object" name="valueType"
+                type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation>fully qualified type name of the
+                        value-parameter to the put-method. If not present, the
+                        default is java.lang.Object. </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="mapEntry">
+        <xs:annotation>
+            <xs:documentation> Specified on an element or a complex type
+                definition that is bound to a map entry. jbxb:class and
+                jbxb:mapEntry are mutually exclusive, meanning an element or a
+                complex type cannot be annotated with both jbxb:class and
+                jbxb:mapEntry at the same time. Otherwise, it will result in an
+                exception during binding. </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:attribute name="impl" type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation>an optional element that specifies a fully
+                        qualified name of the class that will represent map
+                        entry. If absent, a special class will be used by the
+                        framework internally.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="getKey" name="getKeyMethod" type="xs:NCName"
+                use="optional">
+                <xs:annotation>
+                    <xs:documentation>an optional attribute that specifies the
+                        name of the method that is used to get the key out of
+                        the object that represents a map
+                    entry.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="setKey" name="setKeyMethod" type="xs:NCName"
+                use="optional">
+                <xs:annotation>
+                    <xs:documentation>an optional attribute that specifies the
+                        name of the method that is used to set the key value on
+                        the object that represents a map
+                    entry.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="getValue" name="getValueMethod"
+                type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation>an optional element that specifies the
+                        name of the method that is used to get the value out of
+                        the object that represents a map entry. If absent and
+                        impl attribute is absent too, the default value is
+                        "getValue". If absent and impl attribute is present, the
+                        value will be the object that reprents the map entry
+                        itself.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="setValue" name="setValueMethod"
+                type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation>an optional element that specifies the
+                        name of the method that is used to set the value on the
+                        object that represents a map entry.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="valueType" type="xs:NCName" use="optional">
+                <xs:annotation>
+                    <xs:documentation>an optional attribute that specifies the
+                        type of the map entry value. Used when map entry value
+                        should be a parent for element/type's
+                    content.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute default="false" name="nonNullValue" type="xs:boolean"
+                use="optional">
+                <xs:annotation>
+                    <xs:documentation>If true, when a map entry is created, a
+                        non-null map entry value will also be created and set on
+                        the map entry. Otherwise, a map entry object is created
+                        with null value and the value will be created and set
+                        later when it is actually parsed. This attribute is used
+                        in combination with valueType.</xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+    <xs:element name="mapEntryKey">
+        <xs:annotation>
+            <xs:documentation>This element is a marker element that has no
+                attributes. It is specified on an element, attribute or inside
+                jbxb:characters to specify that the element, attribute or
+                characters should be used as the key in map
+            entry.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+    <xs:element name="mapEntryValue">
+        <xs:annotation>
+            <xs:documentation>This element is a marker element that has no
+                attributes. It is specified on an element, attribute or inside
+                jbxb:characters to specify that the element, attribute or
+                characters should be used as the value in map entry. Example:<![CDATA[
+         <xsd:element name="entry1">
+            <xsd:annotation>
+               <xsd:appinfo>
+                  <putMethod/>
+               </xsd:appinfo>
+            </xsd:annotation>
+            <xsd:complexType>
+               <xsd:annotation>
+                  <xsd:appinfo>
+                     <jbxb:mapEntry/>
+                  </xsd:appinfo>
+               </xsd:annotation>
+               <xsd:sequence>
+                  <xsd:element name="key1" type="xsd:string">
+                     <xsd:annotation>
+                        <xsd:appinfo>
+                           <jbxb:mapEntryKey/>
+                        </xsd:appinfo>
+                     </xsd:annotation>
+                  </xsd:element>
+                  <xsd:element name="value1" type="xsd:string">
+                     <xsd:annotation>
+                        <xsd:appinfo>
+                           <jbxb:mapEntryValue/>
+                        </xsd:appinfo>
+                     </xsd:annotation>
+                  </xsd:element>
+               </xsd:sequence>
+            </xsd:complexType>
+         </xsd:element>
+                ]]></xs:documentation>
+        </xs:annotation>
+    </xs:element>
+    <xs:element name="skip">
+        <xs:annotation>
+            <xs:documentation>This element can be used on an element declaration
+                or a complex type definition. Unmarshaller will not try to
+                create new objects for elements (or elements of complex types)
+                that are annotated with jbxb:skip. Instead, the object that was
+                created for the parent of such elements will be propagated and
+                values of attributes, character contents and child elements of
+                such elements will be set on their parent's
+            object. Example:<![CDATA[
+              <xs:element name="authentication">
+                <xsd:annotation>
+                   <xsd:appinfo>
+                      <jbxb:skip/>
+                   </xsd:appinfo>
+                </xsd:annotation>
+                <xs:complexType>
+                  <xs:sequence>
+                    <xs:element ref="jaas:login-module"/>
+                  </xs:sequence>
+                </xs:complexType>
+              </xs:element>
+                ]]>In the example above, login-modules will be added to the parent of authentication element.</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jndi-binding-service_1_0.xsd b/wildfly/docs/schema/jndi-binding-service_1_0.xsd
new file mode 100644
index 0000000..a1c96be
--- /dev/null
+++ b/wildfly/docs/schema/jndi-binding-service_1_0.xsd
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xs:schema version="1.0beta" attributeFormDefault="unqualified"
+           elementFormDefault="qualified"
+           targetNamespace="urn:jboss:jndi-binding-service:1.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:jbxb="https://www.jboss.org/xml/ns/jbxb"
+        >
+   <xs:annotation>
+      <xs:documentation>This schema defines the content model for the
+         JNDIBindingService BindingsConfig attribute content.<![CDATA[
+	    <jndi:bindings xmlns:jndi="urn:jboss:jndi-binding-service"
+	      version="1.0">
+	      ...
+	    </jndi:bindings>
+         ]]></xs:documentation>
+      <xs:appinfo>
+         <jbxb:schemaBindings>
+            <jbxb:ignoreUnresolvedFieldOrClass>false</jbxb:ignoreUnresolvedFieldOrClass>
+            <jbxb:replacePropertyRefs>true</jbxb:replacePropertyRefs>
+         </jbxb:schemaBindings>
+      </xs:appinfo>
+   </xs:annotation>
+   <xs:element name="bindings">
+      <xs:annotation>
+         <xs:appinfo>
+            <jbxb:class impl="org.jboss.naming.JNDIBindings"/>
+         </xs:appinfo>
+      </xs:annotation>
+      <xs:complexType>
+         <xs:sequence>
+            <xs:element name="binding" minOccurs="1"
+               maxOccurs="unbounded">
+               <xs:annotation>
+                  <xs:appinfo>
+                     <jbxb:class impl="org.jboss.naming.JNDIBinding"/>
+                     <jbxb:property name="Bindings" />
+                  </xs:appinfo>
+               </xs:annotation>
+               <xs:complexType>
+                  <xs:choice minOccurs="1" maxOccurs="1">
+                     <xs:element name="value">
+                        <xs:annotation>
+                           <xs:appinfo>
+                              <jbxb:skip/>
+                           </xs:appinfo>
+                        </xs:annotation>
+                        <xs:complexType>
+                           <xs:annotation>
+                              <xs:appinfo>
+                                 <jbxb:characters>
+                                    <jbxb:property name="text"/>
+                                 </jbxb:characters>
+                              </xs:appinfo>
+                           </xs:annotation>
+                           <xs:simpleContent>
+                              <xs:extension base="xs:string">
+                                 <xs:attribute name="type" type="xs:string" use="optional">
+                                 </xs:attribute>
+                                 <xs:attribute name="editor" type="xs:string" use="optional">
+                                 </xs:attribute>
+                                 <xs:attribute name="trim" type="xs:boolean" default="true">
+                                 </xs:attribute>
+                              </xs:extension>
+                           </xs:simpleContent>
+                        </xs:complexType>
+                     </xs:element>
+                     <xs:any namespace="##other">
+                        <xs:annotation>
+                           <xs:documentation>An extension point for arbitrary xml value fragments</xs:documentation>
+                           <xs:appinfo>
+                              <jbxb:property name="value"/>
+                           </xs:appinfo>
+                        </xs:annotation>
+                     </xs:any>
+                  </xs:choice>
+                  <xs:attribute name="name" type="xs:string" use="required">
+                     <xs:annotation>
+                        <xs:documentation>The JNDI name of the binding</xs:documentation>
+                     </xs:annotation>
+                  </xs:attribute>
+               </xs:complexType>
+            </xs:element>
+         </xs:sequence>
+      </xs:complexType>
+   </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/jsp_2_0.xsd b/wildfly/docs/schema/jsp_2_0.xsd
new file mode 100644
index 0000000..970a76d
--- /dev/null
+++ b/wildfly/docs/schema/jsp_2_0.xsd
@@ -0,0 +1,308 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="2.0">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)jsp_2_0.xsds	1.17 03/18/03
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      This is the XML Schema for the JSP 2.0 deployment descriptor
+      types.  The JSP 2.0 schema contains all the special
+      structures and datatypes that are necessary to use JSP files
+      from a web application.
+
+      The contents of this schema is used by the web-app_2_4.xsd
+      file to define JSP specific content.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all J2EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jsp-configType is used to provide global configuration
+	information for the JSP files in a web application. It has
+	two subelements, taglib and jsp-property-group.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="taglib"
+		   type="j2ee:taglibType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="jsp-property-group"
+		   type="j2ee:jsp-property-groupType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-fileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jsp-file element contains the full path to a JSP file
+	within the web application beginning with a `/'.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:pathType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-property-groupType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jsp-property-groupType is used to group a number of
+	files so they can be given global property information.
+	All files so described are deemed to be JSP files.  The
+	following additional properties can be described:
+
+	    - Control whether EL is ignored
+	    - Control whether scripting elements are invalid
+	    - Indicate pageEncoding information.
+	    - Indicate that a resource is a JSP document (XML)
+	    - Prelude and Coda automatic includes.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+		   type="j2ee:url-patternType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="el-ignored"
+		   type="j2ee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Can be used to easily set the isELIgnored
+	    property of a group of JSP pages.  By default, the
+	    EL evaluation is enabled for Web Applications using
+	    a Servlet 2.4 or greater web.xml, and disabled
+	    otherwise.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="page-encoding"
+		   type="j2ee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The valid values of page-encoding are those of the
+	    pageEncoding page directive.  It is a
+	    translation-time error to name different encodings
+	    in the pageEncoding attribute of the page directive
+	    of a JSP page and in a JSP configuration element
+	    matching the page.  It is also a translation-time
+	    error to name different encodings in the prolog
+	    or text declaration of a document in XML syntax and
+	    in a JSP configuration element matching the document.
+	    It is legal to name the same encoding through
+	    mulitple mechanisms.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scripting-invalid"
+		   type="j2ee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Can be used to easily disable scripting in a
+	    group of JSP pages.  By default, scripting is
+	    enabled.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="is-xml"
+		   type="j2ee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    If true, denotes that the group of resources
+	    that match the URL pattern are JSP documents,
+	    and thus must be interpreted as XML documents.
+	    If false, the resources are assumed to not
+	    be JSP documents, unless there is another
+	    property group that indicates otherwise.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-prelude"
+		   type="j2ee:pathType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The include-prelude element is a context-relative
+	    path that must correspond to an element in the
+	    Web Application.  When the element is present,
+	    the given path will be automatically included (as
+	    in an include directive) at the beginning of each
+	    JSP page in this jsp-property-group.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-coda"
+		   type="j2ee:pathType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The include-coda element is a context-relative
+	    path that must correspond to an element in the
+	    Web Application.  When the element is present,
+	    the given path will be automatically included (as
+	    in an include directive) at the end of each
+	    JSP page in this jsp-property-group.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The taglibType defines the syntax for declaring in
+	the deployment descriptor that a tag library is
+	available to the application.  This can be done
+	to override implicit map entries from TLD files and
+	from the container.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="taglib-uri"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    A taglib-uri element describes a URI identifying a
+	    tag library used in the web application.  The body
+	    of the taglib-uri element may be either an
+	    absolute URI specification, or a relative URI.
+	    There should be no entries in web.xml with the
+	    same taglib-uri value.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="taglib-location"
+		   type="j2ee:pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    the taglib-location element contains the location
+	    (as a resource relative to the root of the web
+	    application) where to find the Tag Library
+	    Description file for the tag library.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jsp_2_1.xsd b/wildfly/docs/schema/jsp_2_1.xsd
new file mode 100644
index 0000000..ab63388
--- /dev/null
+++ b/wildfly/docs/schema/jsp_2_1.xsd
@@ -0,0 +1,343 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/javaee"
+	    xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="2.1">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)jsp_2_1.xsds	1.5 08/11/05
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2005 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      This is the XML Schema for the JSP 2.1 deployment descriptor
+      types.  The JSP 2.1 schema contains all the special
+      structures and datatypes that are necessary to use JSP files
+      from a web application.
+
+      The contents of this schema is used by the web-app_2_5.xsd
+      file to define JSP specific content.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_5.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jsp-configType is used to provide global configuration
+	information for the JSP files in a web application. It has
+	two subelements, taglib and jsp-property-group.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="taglib"
+		   type="javaee:taglibType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="jsp-property-group"
+		   type="javaee:jsp-property-groupType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-fileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jsp-file element contains the full path to a JSP file
+	within the web application beginning with a `/'.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:pathType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-property-groupType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The jsp-property-groupType is used to group a number of
+	files so they can be given global property information.
+	All files so described are deemed to be JSP files.  The
+	following additional properties can be described:
+
+	    - Control whether EL is ignored.
+	    - Control whether scripting elements are invalid.
+	    - Indicate pageEncoding information.
+	    - Indicate that a resource is a JSP document (XML).
+	    - Prelude and Coda automatic includes.
+            - Control whether the character sequence #{ is allowed
+              when used as a String literal.
+            - Control whether template text containing only
+              whitespaces must be removed from the response output.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+		   type="javaee:url-patternType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="el-ignored"
+		   type="javaee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Can be used to easily set the isELIgnored
+	    property of a group of JSP pages.  By default, the
+	    EL evaluation is enabled for Web Applications using
+	    a Servlet 2.4 or greater web.xml, and disabled
+	    otherwise.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="page-encoding"
+		   type="javaee:string"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The valid values of page-encoding are those of the
+	    pageEncoding page directive.  It is a
+	    translation-time error to name different encodings
+	    in the pageEncoding attribute of the page directive
+	    of a JSP page and in a JSP configuration element
+	    matching the page.  It is also a translation-time
+	    error to name different encodings in the prolog
+	    or text declaration of a document in XML syntax and
+	    in a JSP configuration element matching the document.
+	    It is legal to name the same encoding through
+	    mulitple mechanisms.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scripting-invalid"
+		   type="javaee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Can be used to easily disable scripting in a
+	    group of JSP pages.  By default, scripting is
+	    enabled.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="is-xml"
+		   type="javaee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    If true, denotes that the group of resources
+	    that match the URL pattern are JSP documents,
+	    and thus must be interpreted as XML documents.
+	    If false, the resources are assumed to not
+	    be JSP documents, unless there is another
+	    property group that indicates otherwise.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-prelude"
+		   type="javaee:pathType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The include-prelude element is a context-relative
+	    path that must correspond to an element in the
+	    Web Application.  When the element is present,
+	    the given path will be automatically included (as
+	    in an include directive) at the beginning of each
+	    JSP page in this jsp-property-group.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-coda"
+		   type="javaee:pathType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The include-coda element is a context-relative
+	    path that must correspond to an element in the
+	    Web Application.  When the element is present,
+	    the given path will be automatically included (as
+	    in an include directive) at the end of each
+	    JSP page in this jsp-property-group.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deferred-syntax-allowed-as-literal"
+		   type="javaee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+             The character sequence #{ is reserved for EL expressions.
+             Consequently, a translation error occurs if the #{
+             character sequence is used as a String literal, unless
+             this element is enabled (true). Disabled (false) by
+             default.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="trim-directive-whitespaces"
+		   type="javaee:true-falseType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+             Indicates that template text containing only whitespaces
+             must be removed from the response output. It has no
+             effect on JSP documents (XML syntax). Disabled (false)
+             by default.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The taglibType defines the syntax for declaring in
+	the deployment descriptor that a tag library is
+	available to the application.  This can be done
+	to override implicit map entries from TLD files and
+	from the container.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="taglib-uri"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    A taglib-uri element describes a URI identifying a
+	    tag library used in the web application.  The body
+	    of the taglib-uri element may be either an
+	    absolute URI specification, or a relative URI.
+	    There should be no entries in web.xml with the
+	    same taglib-uri value.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="taglib-location"
+		   type="javaee:pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    the taglib-location element contains the location
+	    (as a resource relative to the root of the web
+	    application) where to find the Tag Library
+	    Description file for the tag library.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jsp_2_2.xsd b/wildfly/docs/schema/jsp_2_2.xsd
new file mode 100644
index 0000000..fecc993
--- /dev/null
+++ b/wildfly/docs/schema/jsp_2_2.xsd
@@ -0,0 +1,398 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.2">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      This is the XML Schema for the JSP 2.2 deployment descriptor
+      types.  The JSP 2.2 schema contains all the special
+      structures and datatypes that are necessary to use JSP files
+      from a web application. 
+      
+      The contents of this schema is used by the web-common_3_0.xsd 
+      file to define JSP specific content. 
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_6.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-configType is used to provide global configuration
+        information for the JSP files in a web application. It has
+        two subelements, taglib and jsp-property-group.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib"
+                   type="javaee:taglibType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jsp-property-group"
+                   type="javaee:jsp-property-groupType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-fileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-file element contains the full path to a JSP file
+        within the web application beginning with a `/'.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:pathType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-property-groupType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-property-groupType is used to group a number of
+        files so they can be given global property information.
+        All files so described are deemed to be JSP files.  The
+        following additional properties can be described:
+        
+        - Control whether EL is ignored.
+        - Control whether scripting elements are invalid.
+        - Indicate pageEncoding information.
+        - Indicate that a resource is a JSP document (XML).
+        - Prelude and Coda automatic includes.
+        - Control whether the character sequence #{ is allowed
+        when used as a String literal.
+        - Control whether template text containing only
+        whitespaces must be removed from the response output.
+        - Indicate the default contentType information.
+        - Indicate the default buffering model for JspWriter
+        - Control whether error should be raised for the use of
+        undeclared namespaces in a JSP page.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="el-ignored"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily set the isELIgnored
+            property of a group of JSP pages.  By default, the
+            EL evaluation is enabled for Web Applications using
+            a Servlet 2.4 or greater web.xml, and disabled
+            otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="page-encoding"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of page-encoding are those of the
+            pageEncoding page directive.  It is a
+            translation-time error to name different encodings
+            in the pageEncoding attribute of the page directive
+            of a JSP page and in a JSP configuration element
+            matching the page.  It is also a translation-time
+            error to name different encodings in the prolog
+            or text declaration of a document in XML syntax and
+            in a JSP configuration element matching the document.
+            It is legal to name the same encoding through
+            mulitple mechanisms.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scripting-invalid"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily disable scripting in a
+            group of JSP pages.  By default, scripting is
+            enabled.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="is-xml"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If true, denotes that the group of resources
+            that match the URL pattern are JSP documents,
+            and thus must be interpreted as XML documents.
+            If false, the resources are assumed to not
+            be JSP documents, unless there is another
+            property group that indicates otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-prelude"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-prelude element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the beginning of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-coda"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-coda element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the end of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deferred-syntax-allowed-as-literal"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The character sequence #{ is reserved for EL expressions.
+            Consequently, a translation error occurs if the #{
+            character sequence is used as a String literal, unless
+            this element is enabled (true). Disabled (false) by
+            default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="trim-directive-whitespaces"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Indicates that template text containing only whitespaces
+            must be removed from the response output. It has no
+            effect on JSP documents (XML syntax). Disabled (false)
+            by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-content-type"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of default-content-type are those of the
+            contentType page directive.  It specifies the default
+            response contentType if the page directive does not include
+            a contentType attribute.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="buffer"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of buffer are those of the
+            buffer page directive.  It specifies if buffering should be
+            used for the output to response, and if so, the size of the
+            buffer to use.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="error-on-undeclared-namespace"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The default behavior when a tag with unknown namespace is used
+            in a JSP page (regular syntax) is to silently ignore it.  If
+            set to true, then an error must be raised during the translation
+            time when an undeclared tag is used in a JSP page.  Disabled
+            (false) by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglibType defines the syntax for declaring in
+        the deployment descriptor that a tag library is
+        available to the application.  This can be done
+        to override implicit map entries from TLD files and
+        from the container.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib-uri"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A taglib-uri element describes a URI identifying a
+            tag library used in the web application.  The body
+            of the taglib-uri element may be either an
+            absolute URI specification, or a relative URI.
+            There should be no entries in web.xml with the
+            same taglib-uri value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="taglib-location"
+                   type="javaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            the taglib-location element contains the location
+            (as a resource relative to the root of the web
+            application) where to find the Tag Library
+            Description file for the tag library.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/jsp_2_3.xsd b/wildfly/docs/schema/jsp_2_3.xsd
new file mode 100644
index 0000000..564d309
--- /dev/null
+++ b/wildfly/docs/schema/jsp_2_3.xsd
@@ -0,0 +1,389 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.3">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      This is the XML Schema for the JSP 2.3 deployment descriptor
+      types.  The JSP 2.3 schema contains all the special
+      structures and datatypes that are necessary to use JSP files
+      from a web application. 
+      
+      The contents of this schema is used by the web-common_3_1.xsd 
+      file to define JSP specific content. 
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-configType is used to provide global configuration
+        information for the JSP files in a web application. It has
+        two subelements, taglib and jsp-property-group.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib"
+                   type="javaee:taglibType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jsp-property-group"
+                   type="javaee:jsp-property-groupType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-fileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-file element contains the full path to a JSP file
+        within the web application beginning with a `/'.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:pathType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-property-groupType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-property-groupType is used to group a number of
+        files so they can be given global property information.
+        All files so described are deemed to be JSP files.  The
+        following additional properties can be described:
+        
+        - Control whether EL is ignored.
+        - Control whether scripting elements are invalid.
+        - Indicate pageEncoding information.
+        - Indicate that a resource is a JSP document (XML).
+        - Prelude and Coda automatic includes.
+        - Control whether the character sequence #{ is allowed
+        when used as a String literal.
+        - Control whether template text containing only
+        whitespaces must be removed from the response output.
+        - Indicate the default contentType information.
+        - Indicate the default buffering model for JspWriter
+        - Control whether error should be raised for the use of
+        undeclared namespaces in a JSP page.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="el-ignored"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily set the isELIgnored
+            property of a group of JSP pages.  By default, the
+            EL evaluation is enabled for Web Applications using
+            a Servlet 2.4 or greater web.xml, and disabled
+            otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="page-encoding"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of page-encoding are those of the
+            pageEncoding page directive.  It is a
+            translation-time error to name different encodings
+            in the pageEncoding attribute of the page directive
+            of a JSP page and in a JSP configuration element
+            matching the page.  It is also a translation-time
+            error to name different encodings in the prolog
+            or text declaration of a document in XML syntax and
+            in a JSP configuration element matching the document.
+            It is legal to name the same encoding through
+            mulitple mechanisms.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scripting-invalid"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily disable scripting in a
+            group of JSP pages.  By default, scripting is
+            enabled.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="is-xml"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If true, denotes that the group of resources
+            that match the URL pattern are JSP documents,
+            and thus must be interpreted as XML documents.
+            If false, the resources are assumed to not
+            be JSP documents, unless there is another
+            property group that indicates otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-prelude"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-prelude element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the beginning of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-coda"
+                   type="javaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-coda element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the end of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deferred-syntax-allowed-as-literal"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The character sequence #{ is reserved for EL expressions.
+            Consequently, a translation error occurs if the #{
+            character sequence is used as a String literal, unless
+            this element is enabled (true). Disabled (false) by
+            default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="trim-directive-whitespaces"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Indicates that template text containing only whitespaces
+            must be removed from the response output. It has no
+            effect on JSP documents (XML syntax). Disabled (false)
+            by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-content-type"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of default-content-type are those of the
+            contentType page directive.  It specifies the default
+            response contentType if the page directive does not include
+            a contentType attribute.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="buffer"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of buffer are those of the
+            buffer page directive.  It specifies if buffering should be
+            used for the output to response, and if so, the size of the
+            buffer to use.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="error-on-undeclared-namespace"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The default behavior when a tag with unknown namespace is used
+            in a JSP page (regular syntax) is to silently ignore it.  If
+            set to true, then an error must be raised during the translation
+            time when an undeclared tag is used in a JSP page.  Disabled
+            (false) by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglibType defines the syntax for declaring in
+        the deployment descriptor that a tag library is
+        available to the application.  This can be done
+        to override implicit map entries from TLD files and
+        from the container.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib-uri"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A taglib-uri element describes a URI identifying a
+            tag library used in the web application.  The body
+            of the taglib-uri element may be either an
+            absolute URI specification, or a relative URI.
+            There should be no entries in web.xml with the
+            same taglib-uri value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="taglib-location"
+                   type="javaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            the taglib-location element contains the location
+            (as a resource relative to the root of the web
+            application) where to find the Tag Library
+            Description file for the tag library.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jsp_3_0.xsd b/wildfly/docs/schema/jsp_3_0.xsd
new file mode 100644
index 0000000..bb059b0
--- /dev/null
+++ b/wildfly/docs/schema/jsp_3_0.xsd
@@ -0,0 +1,365 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      This is the XML Schema for the JSP 3.0 deployment descriptor
+      types.  The JSP 3.0 schema contains all the special
+      structures and datatypes that are necessary to use JSP files
+      from a web application. 
+      
+      The contents of this schema is used by the web-common_5_0.xsd 
+      file to define JSP specific content. 
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-configType is used to provide global configuration
+        information for the JSP files in a web application. It has
+        two subelements, taglib and jsp-property-group.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib"
+                   type="jakartaee:taglibType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jsp-property-group"
+                   type="jakartaee:jsp-property-groupType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-fileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-file element contains the full path to a JSP file
+        within the web application beginning with a `/'.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:pathType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-property-groupType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-property-groupType is used to group a number of
+        files so they can be given global property information.
+        All files so described are deemed to be JSP files.  The
+        following additional properties can be described:
+        
+        - Control whether EL is ignored.
+        - Control whether scripting elements are invalid.
+        - Indicate pageEncoding information.
+        - Indicate that a resource is a JSP document (XML).
+        - Prelude and Coda automatic includes.
+        - Control whether the character sequence #{ is allowed
+        when used as a String literal.
+        - Control whether template text containing only
+        whitespaces must be removed from the response output.
+        - Indicate the default contentType information.
+        - Indicate the default buffering model for JspWriter
+        - Control whether error should be raised for the use of
+        undeclared namespaces in a JSP page.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="el-ignored"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily set the isELIgnored
+            property of a group of JSP pages.  By default, the
+            EL evaluation is enabled for Web Applications using
+            a Servlet 2.4 or greater web.xml, and disabled
+            otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="page-encoding"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of page-encoding are those of the
+            pageEncoding page directive.  It is a
+            translation-time error to name different encodings
+            in the pageEncoding attribute of the page directive
+            of a JSP page and in a JSP configuration element
+            matching the page.  It is also a translation-time
+            error to name different encodings in the prolog
+            or text declaration of a document in XML syntax and
+            in a JSP configuration element matching the document.
+            It is legal to name the same encoding through
+            mulitple mechanisms.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scripting-invalid"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily disable scripting in a
+            group of JSP pages.  By default, scripting is
+            enabled.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="is-xml"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If true, denotes that the group of resources
+            that match the URL pattern are JSP documents,
+            and thus must be interpreted as XML documents.
+            If false, the resources are assumed to not
+            be JSP documents, unless there is another
+            property group that indicates otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-prelude"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-prelude element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the beginning of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-coda"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-coda element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the end of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deferred-syntax-allowed-as-literal"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The character sequence #{ is reserved for EL expressions.
+            Consequently, a translation error occurs if the #{
+            character sequence is used as a String literal, unless
+            this element is enabled (true). Disabled (false) by
+            default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="trim-directive-whitespaces"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Indicates that template text containing only whitespaces
+            must be removed from the response output. It has no
+            effect on JSP documents (XML syntax). Disabled (false)
+            by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-content-type"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of default-content-type are those of the
+            contentType page directive.  It specifies the default
+            response contentType if the page directive does not include
+            a contentType attribute.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="buffer"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of buffer are those of the
+            buffer page directive.  It specifies if buffering should be
+            used for the output to response, and if so, the size of the
+            buffer to use.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="error-on-undeclared-namespace"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The default behavior when a tag with unknown namespace is used
+            in a JSP page (regular syntax) is to silently ignore it.  If
+            set to true, then an error must be raised during the translation
+            time when an undeclared tag is used in a JSP page.  Disabled
+            (false) by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglibType defines the syntax for declaring in
+        the deployment descriptor that a tag library is
+        available to the application.  This can be done
+        to override implicit map entries from TLD files and
+        from the container.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib-uri"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A taglib-uri element describes a URI identifying a
+            tag library used in the web application.  The body
+            of the taglib-uri element may be either an
+            absolute URI specification, or a relative URI.
+            There should be no entries in web.xml with the
+            same taglib-uri value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="taglib-location"
+                   type="jakartaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            the taglib-location element contains the location
+            (as a resource relative to the root of the web
+            application) where to find the Tag Library
+            Description file for the tag library.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/jsp_3_1.xsd b/wildfly/docs/schema/jsp_3_1.xsd
new file mode 100644
index 0000000..e3c2e46
--- /dev/null
+++ b/wildfly/docs/schema/jsp_3_1.xsd
@@ -0,0 +1,378 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.1">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      This is the XML Schema for the JSP 3.1 deployment descriptor
+      types.  The JSP 3.1 schema contains all the special
+      structures and datatypes that are necessary to use JSP files
+      from a web application. 
+      
+      The contents of this schema is used by the web-common_6_0.xsd 
+      file to define JSP specific content. 
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-configType is used to provide global configuration
+        information for the JSP files in a web application. It has
+        two subelements, taglib and jsp-property-group.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib"
+                   type="jakartaee:taglibType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="jsp-property-group"
+                   type="jakartaee:jsp-property-groupType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-fileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-file element contains the full path to a JSP file
+        within the web application beginning with a `/'.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:pathType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="jsp-property-groupType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The jsp-property-groupType is used to group a number of
+        files so they can be given global property information.
+        All files so described are deemed to be JSP files.  The
+        following additional properties can be described:
+        
+        - Control whether EL is ignored.
+        - Control whether scripting elements are invalid.
+        - Indicate pageEncoding information.
+        - Indicate that a resource is a JSP document (XML).
+        - Prelude and Coda automatic includes.
+        - Control whether the character sequence #{ is allowed
+        when used as a String literal.
+        - Control whether template text containing only
+        whitespaces must be removed from the response output.
+        - Indicate the default contentType information.
+        - Indicate the default buffering model for JspWriter
+        - Control whether error should be raised for the use of
+        undeclared namespaces in a JSP page.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="el-ignored"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily set the isELIgnored
+            property of a group of JSP pages.  By default, the
+            EL evaluation is enabled for Web Applications using
+            a Servlet 2.4 or greater web.xml, and disabled
+            otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="error-on-el-not-found"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily set the errorOnELNotFound
+            property of a group of JSP pages. By default, this
+            property is false.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="page-encoding"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of page-encoding are those of the
+            pageEncoding page directive.  It is a
+            translation-time error to name different encodings
+            in the pageEncoding attribute of the page directive
+            of a JSP page and in a JSP configuration element
+            matching the page.  It is also a translation-time
+            error to name different encodings in the prolog
+            or text declaration of a document in XML syntax and
+            in a JSP configuration element matching the document.
+            It is legal to name the same encoding through
+            mulitple mechanisms.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scripting-invalid"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Can be used to easily disable scripting in a
+            group of JSP pages.  By default, scripting is
+            enabled.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="is-xml"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            If true, denotes that the group of resources
+            that match the URL pattern are JSP documents,
+            and thus must be interpreted as XML documents.
+            If false, the resources are assumed to not
+            be JSP documents, unless there is another
+            property group that indicates otherwise.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-prelude"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-prelude element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the beginning of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="include-coda"
+                   type="jakartaee:pathType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The include-coda element is a context-relative
+            path that must correspond to an element in the
+            Web Application.  When the element is present,
+            the given path will be automatically included (as
+            in an include directive) at the end of each
+            JSP page in this jsp-property-group.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deferred-syntax-allowed-as-literal"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The character sequence #{ is reserved for EL expressions.
+            Consequently, a translation error occurs if the #{
+            character sequence is used as a String literal, unless
+            this element is enabled (true). Disabled (false) by
+            default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="trim-directive-whitespaces"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Indicates that template text containing only whitespaces
+            must be removed from the response output. It has no
+            effect on JSP documents (XML syntax). Disabled (false)
+            by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-content-type"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of default-content-type are those of the
+            contentType page directive.  It specifies the default
+            response contentType if the page directive does not include
+            a contentType attribute.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="buffer"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The valid values of buffer are those of the
+            buffer page directive.  It specifies if buffering should be
+            used for the output to response, and if so, the size of the
+            buffer to use.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="error-on-undeclared-namespace"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The default behavior when a tag with unknown namespace is used
+            in a JSP page (regular syntax) is to silently ignore it.  If
+            set to true, then an error must be raised during the translation
+            time when an undeclared tag is used in a JSP page.  Disabled
+            (false) by default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglibType defines the syntax for declaring in
+        the deployment descriptor that a tag library is
+        available to the application.  This can be done
+        to override implicit map entries from TLD files and
+        from the container.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="taglib-uri"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A taglib-uri element describes a URI identifying a
+            tag library used in the web application.  The body
+            of the taglib-uri element may be either an
+            absolute URI specification, or a relative URI.
+            There should be no entries in web.xml with the
+            same taglib-uri value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="taglib-location"
+                   type="jakartaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            the taglib-location element contains the location
+            (as a resource relative to the root of the web
+            application) where to find the Tag Library
+            Description file for the tag library.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_0.xsd b/wildfly/docs/schema/module-1_0.xsd
new file mode 100644
index 0000000..9310ac6
--- /dev/null
+++ b/wildfly/docs/schema/module-1_0.xsd
@@ -0,0 +1,462 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.0"
+            xmlns="urn:jboss:module:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="configuration" type="configurationType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a filesystem module loader configuration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="configurationType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A configuration for the default module loader.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="1" maxOccurs="unbounded">
+            <xsd:element name="loader" type="loaderType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A defined loader. More than one loader may be defined.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="default-loader" type="loaderNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The loader to use. The name matches the value of the "name" attribute of one of the defined loaders.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="loaderType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module-path" type="pathType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A module root path for this loader. Paths are relative to user directory (user.dir) by default.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="import" type="xsd:string">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies another loader whose content should be imported. Such loaders are visible to modules
+                        defined by this loader, but not to modules defined in other loaders.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="loaderNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this particular module loader.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="loaderNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A loader type name, which may consist of letters, numbers, hyphens, and underscores.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:pattern value="[-0-9a-zA-Z_]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/module-1_1.xsd b/wildfly/docs/schema/module-1_1.xsd
new file mode 100644
index 0000000..6366953
--- /dev/null
+++ b/wildfly/docs/schema/module-1_1.xsd
@@ -0,0 +1,582 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.1"
+            xmlns="urn:jboss:module:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="configuration" type="configurationType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a filesystem module loader configuration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="configurationType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A configuration for the default module loader.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="1" maxOccurs="unbounded">
+            <xsd:element name="loader" type="loaderType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A defined loader. More than one loader may be defined.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="default-loader" type="loaderNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The loader to use. The name matches the value of the "name" attribute of one of the defined loaders.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="loaderType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module-path" type="pathType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A module root path for this loader. Paths are relative to user directory (user.dir) by default.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="import" type="xsd:string">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies another loader whose content should be imported. Such loaders are visible to modules
+                        defined by this loader, but not to modules defined in other loaders.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+        <xsd:attribute name="name" type="loaderNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this particular module loader.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="loaderNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A loader type name, which may consist of letters, numbers, hyphens, and underscores.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:pattern value="[-0-9a-zA-Z_]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the module to which this alias refers (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="optional" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_2.xsd b/wildfly/docs/schema/module-1_2.xsd
new file mode 100644
index 0000000..6a801dd
--- /dev/null
+++ b/wildfly/docs/schema/module-1_2.xsd
@@ -0,0 +1,591 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.2"
+            xmlns="urn:jboss:module:1.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the module to which this alias refers (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the absent module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="optional" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_3.xsd b/wildfly/docs/schema/module-1_3.xsd
new file mode 100644
index 0000000..4459eb9
--- /dev/null
+++ b/wildfly/docs/schema/module-1_3.xsd
@@ -0,0 +1,623 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2014 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.3"
+            xmlns="urn:jboss:module:1.3"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven artifact within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="native-artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven native artifact within this deployment.  This is a jar that contains a lib/ directory
+                        with corresponding platform directories and binaries.  This element will cause the jar to
+                        be unzipped within the artifact's local repository directory.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="artifactType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A maven artifact within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    URI that points to the maven artifact "group:artifact:version[:classifier]"
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, relative to the path in which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the module to which this alias refers (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the absent module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="optional" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_5.xsd b/wildfly/docs/schema/module-1_5.xsd
new file mode 100644
index 0000000..cf27c99
--- /dev/null
+++ b/wildfly/docs/schema/module-1_5.xsd
@@ -0,0 +1,632 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2015 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.5"
+            xmlns="urn:jboss:module:1.5"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module name, which consists of one or more dot (.)-separated segments. Each segment must begin and end
+                with an alphanumeric or underscore (_), and may otherwise contain alphanumerics, underscores, and hyphens
+                (-).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?(\.[a-zA-Z0-9_]([-a-zA-Z0-9_]*[a-zA-Z0-9_])?)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:simpleType name="moduleSlotType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version slot. A slot may consist of one or more alphanumerics, hyphens (-), underscores (_),
+                plus signs (+), asterisks (*), or dots (.).
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="[-a-zA-Z0-9_+*.]+"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module version slot (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven artifact within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="native-artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven native artifact within this deployment.  This is a jar that contains a lib/ directory
+                        with corresponding platform directories and binaries.  This element will cause the jar to
+                        be unzipped within the artifact's local repository directory.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="artifactType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A maven artifact within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    URI that points to the maven artifact "group:artifact:version[:classifier]"
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, either absolute or relative.  Relative paths are resolved with respect to the location at which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of this module alias (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the module to which this alias refers (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="moduleNameType" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="slot" type="moduleSlotType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version slot of the absent module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="optional" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_6.xsd b/wildfly/docs/schema/module-1_6.xsd
new file mode 100644
index 0000000..c4a6763
--- /dev/null
+++ b/wildfly/docs/schema/module-1_6.xsd
@@ -0,0 +1,590 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2016 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.6"
+            xmlns="urn:jboss:module:1.6"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="version" type="moduleVersionType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleVersionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version string.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="([a-zA-Z0-9]+)([-_+.][a-zA-Z0-9]+)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven artifact within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="native-artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven native artifact within this deployment.  This is a jar that contains a lib/ directory
+                        with corresponding platform directories and binaries.  This element will cause the jar to
+                        be unzipped within the artifact's local repository directory.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="artifactType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A maven artifact within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    URI that points to the maven artifact "group:artifact:version[:classifier]"
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, either absolute or relative.  Relative paths are resolved with respect to the location at which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="optional" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_7.xsd b/wildfly/docs/schema/module-1_7.xsd
new file mode 100644
index 0000000..7a72a53
--- /dev/null
+++ b/wildfly/docs/schema/module-1_7.xsd
@@ -0,0 +1,650 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2016 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.7"
+            xmlns="urn:jboss:module:1.7"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="version" type="moduleVersionType" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleVersionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version string.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="([a-zA-Z0-9]+)([-_+.][a-zA-Z0-9]+)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="system" type="systemDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A dependency on the system (or embedding) class loader.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" use="optional" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="systemDependencyType">
+        <xsd:all>
+            <xsd:element name="paths" type="pathSetType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The list of paths which are applicable for this system dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="export" type="xsd:boolean" use="optional" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven artifact within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="native-artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven native artifact within this deployment.  This is a jar that contains a lib/ directory
+                        with corresponding platform directories and binaries.  This element will cause the jar to
+                        be unzipped within the artifact's local repository directory.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="artifactType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A maven artifact within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="conditions" type="conditionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition filter specification for this resource root (optional). If this resolves to false the resource will not be used.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    URI that points to the maven artifact "group:artifact:version[:classifier]"
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="conditions" type="conditionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition filter specification for this resource root (optional). If this resolves to false the resource will not be used.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    DEPRECATED. The name of this resource root (optional). If not specified, defaults to the value of the path
+                    attribute.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, either absolute or relative.  Relative paths are resolved with respect to the location at which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="optional" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string" use="optional">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="conditionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A condition that determines if a resource is used. All conditions must resolve to true for the resource to be included in the module.
+            </documentation>
+        </annotation>
+        <xsd:sequence>
+            <xsd:element name="property-equal" type="propertyConditionType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition that evaluates to true if the property is equal to the provided value.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="property-not-equal" type="propertyConditionType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition that evaluates to true if the property is equal to the provided value.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyConditionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A condition based on the value of a system property.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The property name
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The property value
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_8.xsd b/wildfly/docs/schema/module-1_8.xsd
new file mode 100644
index 0000000..e8c645b
--- /dev/null
+++ b/wildfly/docs/schema/module-1_8.xsd
@@ -0,0 +1,644 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2018 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.8"
+            xmlns="urn:jboss:module:1.8"
+            elementFormDefault="qualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="provides" type="providesType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Lists items that are statically provided by this module.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="version" type="moduleVersionType">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleVersionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version string.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="([a-zA-Z0-9]+)([-_+.][a-zA-Z0-9]+)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+       </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven artifact within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="native-artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven native artifact within this deployment.  This is a jar that contains a lib/ directory
+                        with corresponding platform directories and binaries.  This element will cause the jar to
+                        be unzipped within the artifact's local repository directory.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="artifactType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A maven artifact within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="conditions" type="conditionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition filter specification for this resource root (optional). If this resolves to false the resource will not be used.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    URI that points to the maven artifact "group:artifact:version[:classifier]"
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="conditions" type="conditionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition filter specification for this resource root (optional). If this resolves to false the resource will not be used.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, either absolute or relative.  Relative paths are resolved with respect to the location at which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="conditionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A condition that determines if a resource is used. All conditions must resolve to true for the resource to be included in the module.
+            </documentation>
+        </annotation>
+        <xsd:sequence>
+            <xsd:element name="property-equal" type="propertyConditionType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition that evaluates to true if the property is equal to the provided value.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="property-not-equal" type="propertyConditionType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition that evaluates to true if the property is equal to the provided value.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyConditionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A condition based on the value of a system property.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The property name
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The property value
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="providesType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The items that are provided by a module.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="service" type="providedServiceType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A service to provide.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="providedServiceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                A service that is provided by one or more implementations.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="with-class" type="classNameType"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the service type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/module-1_9.xsd b/wildfly/docs/schema/module-1_9.xsd
new file mode 100644
index 0000000..5ba2052
--- /dev/null
+++ b/wildfly/docs/schema/module-1_9.xsd
@@ -0,0 +1,651 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2018 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:module:1.9"
+            xmlns="urn:jboss:module:1.9"
+            elementFormDefault="qualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="module" type="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for a module declaration.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-alias" type="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for a module alias declaration.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <!-- Root element -->
+    <xsd:element name="module-absent" type="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                Root element for an absent module.
+            </documentation>
+        </annotation>
+    </xsd:element>
+
+    <xsd:complexType name="moduleType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The module declaration type; contains dependencies, resources, and the main class
+                specification.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists filter expressions to apply to the export filter of the local resources of this module
+                        (optional). By default, everything is exported. If filter expressions are provided, the default
+                        action is to accept all paths if no filters match.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="dependencies" type="dependenciesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the dependencies of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="resources" type="resourcesType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the resource roots of this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="main-class" type="classNameType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Specifies the main class of this module; used to run the module from the command-line
+                        (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="permissions" type="permissionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the requested permission set for this module. If the requested permissions cannot
+                        be assigned, the module cannot be loaded.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="provides" type="providesType" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Lists items that are statically provided by this module.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="version" type="moduleVersionType">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The version of this module (optional).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="moduleVersionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module version string.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="([a-zA-Z0-9]+)([-_+.][a-zA-Z0-9]+)*"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="dependenciesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more module dependencies.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="module" type="moduleDependencyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A specified module dependency.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+       </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleDependencyType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A single module dependency expression.
+            </documentation>
+        </annotation>
+        <xsd:all minOccurs="0">
+            <xsd:element name="properties" type="propertyListType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Lists the user-defined properties to be associated with this module dependency (optional).
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are re-exported by
+                        this module. See also the "export" and "services" attributes. The default action of this filter
+                        list is controlled by the value of the "export" attribute. Regardless of the setting of these
+                        attributes, this filter always behaves as if it has a final entry which rejects META-INF and
+                        all of its subdirectories.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="imports" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A filter used to restrict what packages or directories from this dependency are visible to this
+                        module. See also the "services" attribute. The default action of this filter list is to reject
+                        a path if not matched.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The dependency module name (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="export" type="xsd:boolean" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this module dependency is re-exported by default (default is "false"). Setting
+                    this attribute to true sets the default action for the export filter list to "accept"; leaving it
+                    as false sets the default action to "reject".  Thus you can still export dependency resources even
+                    if this attribute is false by listing explicit paths for the export list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="services" type="serviceDispositionType" default="none">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether and how services found in this dependency are used (default is "none"). Specifying
+                    a value of "import" for this attribute is equivalent to adding a filter at the end of the import
+                    filter list which includes the META-INF/services path from the dependency module.  Setting a value
+                    of "export" for this attribute is equivalent to the same action on the export filter list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="optional" type="xsd:boolean" default="false">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    Specifies whether this dependency is optional (defaults to false). An optional dependency will not
+                    cause the module to fail to load if not found; however if the module is added later, it will not be
+                    retroactively linked into this module's dependency list.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:simpleType name="serviceDispositionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                The requested behavior for service handling on a dependency.
+            </documentation>
+        </annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="none">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Do not import or export services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="import">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import, but do not re-export, services from this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+            <xsd:enumeration value="export">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        Import and re-export services found in this dependency.
+                    </documentation>
+                </annotation>
+            </xsd:enumeration>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="classNameType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A class name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The class name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filesystem path name.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="resourcesType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of zero or more resource roots for this deployment.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="resource-root" type="resourceType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A resource root within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven artifact within this deployment.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="native-artifact" type="artifactType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A maven native artifact within this deployment.  This is a jar that contains a lib/ directory
+                        with corresponding platform directories and binaries.  This element will cause the jar to
+                        be unzipped within the artifact's local repository directory.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="artifactType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A maven artifact within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="conditions" type="conditionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition filter specification for this resource root (optional). If this resolves to false the resource will not be used.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    URI that points to the maven artifact "group:artifact:version[:classifier]"
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="resourceType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A resource root within a deployment.
+            </documentation>
+        </annotation>
+        <xsd:all>
+            <xsd:element name="filter" type="filterType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path filter specification for this resource root (optional). By default all paths are accepted.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="conditions" type="conditionsType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition filter specification for this resource root (optional). If this resolves to false the resource will not be used.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path of this resource root, either absolute or relative.  Relative paths are resolved with respect to the location at which the module.xml file is found.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="filterType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A filter specification, consisting of zero or more filter items.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="include" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to include. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude" type="pathSpecType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A path to exclude. The path value can be a path name or a "glob" which may include the special
+                        wildcards "*", "**", and "?".
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="include-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to include. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="exclude-set" type="pathSetType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A set of literal path names to exclude. Wildcards are not supported.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSpecType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A path specification type, which may include wildcards.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="path" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The path name, which can be a literal path name or it may include the special wildcards "*", "**",
+                    and "?".
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="pathSetType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A set of literal path names which can be used for efficient matching against multiple possible values.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="path" type="pathType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The path name to include in the set.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAliasType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A module alias type, which defines the target for a module alias.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of this module alias (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="target-name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the module to which this alias refers (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="moduleAbsentType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                An explicitly absent module.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the absent module (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyListType">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="property" type="propertyType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A property in this property list.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyType">
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property name as a string (required).
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" default="true">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The property value (optional, defaults to "true").
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="permissionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A list of permissions that this module requires.
+            </documentation>
+        </annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="grant" type="permissionType">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        The permission to grant.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+    
+    <xsd:complexType name="permissionType">
+        <xsd:attribute name="permission" type="xsd:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The qualified class name of the permission to grant.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="name" type="xsd:string">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The permission name to provide to the permission class constructor.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+        <xsd:attribute name="actions" type="xsd:string">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The (optional) list of actions, required by some permission types.
+                </documentation>
+            </annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="conditionsType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A condition that determines if a resource is used. All conditions must resolve to true for the resource to be included in the module.
+            </documentation>
+        </annotation>
+        <xsd:sequence>
+            <xsd:element name="property-equal" type="propertyConditionType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition that evaluates to true if the property is equal to the provided value.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+            <xsd:element name="property-not-equal" type="propertyConditionType" minOccurs="0">
+                <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                    <documentation>
+                        A condition that evaluates to true if the property is equal to the provided value.
+                    </documentation>
+                </annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="propertyConditionType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A condition based on the value of a system property.
+            </documentation>
+        </annotation>
+        <xsd:attribute name="name" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The property name
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The property value
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="providesType">
+        <xsd:annotation>
+            <xsd:documentation>
+                The items that are provided by a module.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="service" type="providedServiceType">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        A service to provide.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="providedServiceType">
+        <xsd:annotation>
+            <xsd:documentation>
+                A service that is provided by one or more implementations.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="with-class" type="classNameType"/>
+        </xsd:choice>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the service type.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/mvc-krazo_1.0.xsd b/wildfly/docs/schema/mvc-krazo_1.0.xsd
new file mode 100644
index 0000000..8d2c53b
--- /dev/null
+++ b/wildfly/docs/schema/mvc-krazo_1.0.xsd
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:mvc-krazo:1.0"
+            xmlns="urn:jboss:domain:mvc-krazo:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/orm_1_0.xsd b/wildfly/docs/schema/orm_1_0.xsd
new file mode 100644
index 0000000..9a0d1dd
--- /dev/null
+++ b/wildfly/docs/schema/orm_1_0.xsd
@@ -0,0 +1,1516 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Java Persistence API object-relational mapping file schema -->
+<xsd:schema targetNamespace="http://java.sun.com/xml/ns/persistence/orm" 
+  xmlns:orm="http://java.sun.com/xml/ns/persistence/orm" 
+  xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
+  elementFormDefault="qualified" 
+  attributeFormDefault="unqualified" 
+  version="1.0">
+
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)orm_1_0.xsd 1.0  Feb 14 2006
+    </xsd:documentation>
+  </xsd:annotation>
+  <xsd:annotation>
+     <xsd:documentation><![CDATA[
+
+       This is the XML Schema for the persistence object-relational 
+       mapping file.
+       The file may be named "META-INF/orm.xml" in the persistence 
+       archive or it may be named some other name which would be 
+       used to locate the file as resource on the classpath.
+
+     ]]></xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:complexType name="emptyType"/>
+
+  <xsd:simpleType name="versionType">
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="entity-mappings">
+    <xsd:complexType>
+      <xsd:annotation>
+        <xsd:documentation>
+
+        The entity-mappings element is the root element of an mapping
+        file. It contains the following four types of elements:
+
+        1. The persistence-unit-metadata element contains metadata
+        for the entire persistence unit. It is undefined if this element
+        occurs in multiple mapping files within the same persistence unit.
+        
+        2. The package, schema, catalog and access elements apply to all of
+        the entity, mapped-superclass and embeddable elements defined in
+        the same file in which they occur.
+
+        3. The sequence-generator, table-generator, named-query,
+        named-native-query and sql-result-set-mapping elements are global
+        to the persistence unit. It is undefined to have more than one
+        sequence-generator or table-generator of the same name in the same
+        or different mapping files in a persistence unit. It is also 
+        undefined to have more than one named-query or named-native-query
+        of the same name in the same or different mapping files in a 
+        persistence unit.
+
+        4. The entity, mapped-superclass and embeddable elements each define
+        the mapping information for a managed persistent class. The mapping
+        information contained in these elements may be complete or it may
+        be partial.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+        <xsd:element name="description" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="persistence-unit-metadata" 
+                     type="orm:persistence-unit-metadata"
+                     minOccurs="0"/>
+        <xsd:element name="package" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="schema" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="catalog" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="access" type="orm:access-type"
+                     minOccurs="0"/>
+        <xsd:element name="sequence-generator" type="orm:sequence-generator"
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="table-generator" type="orm:table-generator" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="named-query" type="orm:named-query" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="named-native-query" type="orm:named-native-query"
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="sql-result-set-mapping" 
+                     type="orm:sql-result-set-mapping" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="mapped-superclass" type="orm:mapped-superclass" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="entity" type="orm:entity" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="embeddable" type="orm:embeddable" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="orm:versionType" 
+                     fixed="1.0" use="required"/>
+    </xsd:complexType>
+  </xsd:element>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-metadata">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Metadata that applies to the persistence unit and not just to 
+        the mapping file in which it is contained. 
+
+        If the xml-mapping-metadata-complete element is specified then 
+        the complete set of mapping metadata for the persistence unit 
+        is contained in the XML mapping files for the persistence unit.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="xml-mapping-metadata-complete" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-unit-defaults" 
+                   type="orm:persistence-unit-defaults"
+                   minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-defaults">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        These defaults are applied to the persistence unit as a whole 
+        unless they are overridden by local annotation or XML 
+        element settings. 
+        
+        schema - Used as the schema for all tables or secondary tables
+            that apply to the persistence unit
+        catalog - Used as the catalog for all tables or secondary tables
+            that apply to the persistence unit
+        access - Used as the access type for all managed classes in
+            the persistence unit
+        cascade-persist - Adds cascade-persist to the set of cascade options
+            in entity relationships of the persistence unit
+        entity-listeners - List of default entity listeners to be invoked 
+            on each entity in the persistence unit. 
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+        <xsd:element name="schema" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="catalog" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="access" type="orm:access-type"
+                     minOccurs="0"/>
+        <xsd:element name="cascade-persist" type="orm:emptyType" 
+                     minOccurs="0"/>
+        <xsd:element name="entity-listeners" type="orm:entity-listeners"
+                     minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="entity">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the settings and mappings for an entity. Is allowed to be
+        sparsely populated and used in conjunction with the annotations.
+        Alternatively, the metadata-complete attribute can be used to 
+        indicate that no annotations on the entity class (and its fields
+        or properties) are to be processed. If this is the case then 
+        the defaulting rules for the entity and its subelements will 
+        be recursively applied.
+
+        @Target(TYPE) @Retention(RUNTIME)
+          public @interface Entity {
+          String name() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="table" type="orm:table" 
+                   minOccurs="0"/>
+      <xsd:element name="secondary-table" type="orm:secondary-table" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="primary-key-join-column" 
+                   type="orm:primary-key-join-column" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="id-class" type="orm:id-class" minOccurs="0"/>
+      <xsd:element name="inheritance" type="orm:inheritance" minOccurs="0"/>
+      <xsd:element name="discriminator-value" type="orm:discriminator-value" 
+                   minOccurs="0"/>
+      <xsd:element name="discriminator-column" 
+                   type="orm:discriminator-column" 
+                   minOccurs="0"/>
+      <xsd:element name="sequence-generator" type="orm:sequence-generator" 
+                   minOccurs="0"/>
+      <xsd:element name="table-generator" type="orm:table-generator" 
+                   minOccurs="0"/>
+      <xsd:element name="named-query" type="orm:named-query" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="named-native-query" type="orm:named-native-query" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="sql-result-set-mapping" 
+                   type="orm:sql-result-set-mapping" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="exclude-default-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="exclude-superclass-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="entity-listeners" type="orm:entity-listeners" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-persist" type="orm:pre-persist" minOccurs="0"/>
+      <xsd:element name="post-persist" type="orm:post-persist" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-remove" type="orm:pre-remove" minOccurs="0"/>
+      <xsd:element name="post-remove" type="orm:post-remove" minOccurs="0"/>
+      <xsd:element name="pre-update" type="orm:pre-update" minOccurs="0"/>
+      <xsd:element name="post-update" type="orm:post-update" minOccurs="0"/>
+      <xsd:element name="post-load" type="orm:post-load" minOccurs="0"/>
+      <xsd:element name="attribute-override" type="orm:attribute-override" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="association-override" 
+                   type="orm:association-override"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="attributes" type="orm:attributes" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="attributes">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains the entity field or property mappings.
+        It may be sparsely populated to include only a subset of the
+        fields or properties. If metadata-complete for the entity is true
+        then the remainder of the attributes will be defaulted according
+        to the default rules.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="id" type="orm:id" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="embedded-id" type="orm:embedded-id" 
+                     minOccurs="0"/>
+      </xsd:choice>
+      <xsd:element name="basic" type="orm:basic"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="version" type="orm:version"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="many-to-one" type="orm:many-to-one"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="one-to-many" type="orm:one-to-many"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="one-to-one" type="orm:one-to-one"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="many-to-many" type="orm:many-to-many" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="embedded" type="orm:embedded"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="transient" type="orm:transient"
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="access-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element determines how the persistence provider accesses the
+        state of an entity or embedded object.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="PROPERTY"/>
+      <xsd:enumeration value="FIELD"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="entity-listeners">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface EntityListeners {
+          Class[] value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="entity-listener" type="orm:entity-listener" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="entity-listener">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines an entity listener to be invoked at lifecycle events
+        for the entities that list this listener.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="pre-persist" type="orm:pre-persist" minOccurs="0"/>
+      <xsd:element name="post-persist" type="orm:post-persist" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-remove" type="orm:pre-remove" minOccurs="0"/>
+      <xsd:element name="post-remove" type="orm:post-remove" minOccurs="0"/>
+      <xsd:element name="pre-update" type="orm:pre-update" minOccurs="0"/>
+      <xsd:element name="post-update" type="orm:post-update" minOccurs="0"/>
+      <xsd:element name="post-load" type="orm:post-load" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="pre-persist">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PrePersist {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="post-persist">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostPersist {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="pre-remove">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PreRemove {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="post-remove">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostRemove {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="pre-update">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PreUpdate {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="post-update">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostUpdate {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="post-load">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostLoad {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="query-hint">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME) 
+        public @interface QueryHint {
+          String name();
+          String value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="value" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="named-query">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface NamedQuery {
+          String name();
+          String query();
+          QueryHint[] hints() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="query" type="xsd:string"/>
+      <xsd:element name="hint" type="orm:query-hint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="named-native-query">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface NamedNativeQuery {
+          String name();
+          String query();
+          QueryHint[] hints() default {};
+          Class resultClass() default void.class;
+          String resultSetMapping() default ""; //named SqlResultSetMapping
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="query" type="xsd:string"/>
+      <xsd:element name="hint" type="orm:query-hint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="result-class" type="xsd:string"/>
+    <xsd:attribute name="result-set-mapping" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="sql-result-set-mapping">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface SqlResultSetMapping {
+          String name();
+          EntityResult[] entities() default {};
+          ColumnResult[] columns() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="entity-result" type="orm:entity-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="column-result" type="orm:column-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="entity-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface EntityResult {
+          Class entityClass();
+          FieldResult[] fields() default {};
+          String discriminatorColumn() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="field-result" type="orm:field-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="entity-class" type="xsd:string" use="required"/>
+    <xsd:attribute name="discriminator-column" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="field-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface FieldResult {
+          String name();
+          String column();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="column" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="column-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface ColumnResult {
+          String name();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface Table {
+          String name() default "";
+          String catalog() default "";
+          String schema() default "";
+          UniqueConstraint[] uniqueConstraints() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="secondary-table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface SecondaryTable {
+          String name();
+          String catalog() default "";
+          String schema() default "";
+          PrimaryKeyJoinColumn[] pkJoinColumns() default {};
+          UniqueConstraint[] uniqueConstraints() default {};
+         }
+
+       </xsd:documentation>
+     </xsd:annotation>
+     <xsd:sequence>
+       <xsd:element name="primary-key-join-column" 
+                    type="orm:primary-key-join-column" 
+                    minOccurs="0" maxOccurs="unbounded"/>
+       <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                    minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="unique-constraint">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface UniqueConstraint {
+          String[] columnNames();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column-name" type="xsd:string" 
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Column {
+          String name() default "";
+          boolean unique() default false;
+          boolean nullable() default true;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+          String table() default "";
+          int length() default 255;
+          int precision() default 0; // decimal precision
+          int scale() default 0; // decimal scale
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+    <xsd:attribute name="length" type="xsd:int"/>
+    <xsd:attribute name="precision" type="xsd:int"/>
+    <xsd:attribute name="scale" type="xsd:int"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="join-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface JoinColumn {
+          String name() default "";
+          String referencedColumnName() default "";
+          boolean unique() default false;
+          boolean nullable() default true;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+          String table() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="referenced-column-name" type="xsd:string"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="generation-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum GenerationType { TABLE, SEQUENCE, IDENTITY, AUTO };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="TABLE"/>
+      <xsd:enumeration value="SEQUENCE"/>
+      <xsd:enumeration value="IDENTITY"/>
+      <xsd:enumeration value="AUTO"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="attribute-override">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface AttributeOverride {
+          String name();
+          Column column();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="association-override">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface AssociationOverride {
+          String name();
+          JoinColumn[] joinColumns();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="join-column" type="orm:join-column"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="id-class">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface IdClass {
+          Class value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="id">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Id {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column" 
+                   minOccurs="0"/>
+      <xsd:element name="generated-value" type="orm:generated-value"
+                   minOccurs="0"/>
+      <xsd:element name="temporal" type="orm:temporal" 
+                   minOccurs="0"/>
+      <xsd:element name="table-generator" type="orm:table-generator" 
+                   minOccurs="0"/>
+      <xsd:element name="sequence-generator" type="orm:sequence-generator"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="embedded-id">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface EmbeddedId {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute-override" type="orm:attribute-override" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="transient">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Transient {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="version">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Version {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column" minOccurs="0"/>
+      <xsd:element name="temporal" type="orm:temporal" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="basic">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Basic {
+          FetchType fetch() default EAGER;
+          boolean optional() default true;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column" minOccurs="0"/>
+      <xsd:choice>
+        <xsd:element name="lob" type="orm:lob" minOccurs="0"/>
+        <xsd:element name="temporal" type="orm:temporal" minOccurs="0"/>
+        <xsd:element name="enumerated" type="orm:enumerated" minOccurs="0"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="optional" type="xsd:boolean"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="fetch-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum FetchType { LAZY, EAGER };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="LAZY"/>
+      <xsd:enumeration value="EAGER"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="lob">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Lob {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="temporal">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Temporal {
+          TemporalType value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="orm:temporal-type"/>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="temporal-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum TemporalType {
+          DATE, // java.sql.Date
+          TIME, // java.sql.Time
+          TIMESTAMP // java.sql.Timestamp
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+      <xsd:restriction base="xsd:token">
+        <xsd:enumeration value="DATE"/>
+        <xsd:enumeration value="TIME"/>
+        <xsd:enumeration value="TIMESTAMP"/>
+     </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="enumerated">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Enumerated {
+          EnumType value() default ORDINAL;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="orm:enum-type"/>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="enum-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum EnumType {
+          ORDINAL,
+          STRING
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="ORDINAL"/>
+      <xsd:enumeration value="STRING"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="many-to-one">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface ManyToOne {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default EAGER;
+          boolean optional() default true;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>       
+        <xsd:element name="join-column" type="orm:join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="join-table" type="orm:join-table" 
+                     minOccurs="0"/>
+      </xsd:choice>       
+      <xsd:element name="cascade" type="orm:cascade-type" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="optional" type="xsd:boolean"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="cascade-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum CascadeType { ALL, PERSIST, MERGE, REMOVE, REFRESH};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="cascade-all" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-persist" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-merge" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-remove" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-refresh" type="orm:emptyType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="one-to-one">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OneToOne {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default EAGER;
+          boolean optional() default true;
+          String mappedBy() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="primary-key-join-column" 
+                     type="orm:primary-key-join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="join-column" type="orm:join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="join-table" type="orm:join-table" 
+                     minOccurs="0"/>
+      </xsd:choice>
+      <xsd:element name="cascade" type="orm:cascade-type" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="optional" type="xsd:boolean"/>
+    <xsd:attribute name="mapped-by" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="one-to-many">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OneToMany {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default LAZY;
+          String mappedBy() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="order-by" type="orm:order-by" 
+                   minOccurs="0"/>
+      <xsd:element name="map-key" type="orm:map-key" 
+                   minOccurs="0"/>
+      <xsd:choice>       
+        <xsd:element name="join-table" type="orm:join-table" 
+                     minOccurs="0"/>
+        <xsd:element name="join-column" type="orm:join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:choice>       
+      <xsd:element name="cascade" type="orm:cascade-type" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="mapped-by" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="join-table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface JoinTable {
+          String name() default "";
+          String catalog() default "";
+          String schema() default "";
+          JoinColumn[] joinColumns() default {};
+          JoinColumn[] inverseJoinColumns() default {};
+          UniqueConstraint[] uniqueConstraints() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="join-column" type="orm:join-column" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="inverse-join-column" type="orm:join-column" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="many-to-many">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface ManyToMany {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default LAZY;
+          String mappedBy() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="order-by" type="orm:order-by" 
+                   minOccurs="0"/>
+      <xsd:element name="map-key" type="orm:map-key" 
+                   minOccurs="0"/>
+      <xsd:element name="join-table" type="orm:join-table" 
+                   minOccurs="0"/>
+      <xsd:element name="cascade" type="orm:cascade-type" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="mapped-by" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="generated-value">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface GeneratedValue {
+          GenerationType strategy() default AUTO;
+          String generator() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="strategy" type="orm:generation-type"/>
+    <xsd:attribute name="generator" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="map-key">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface MapKey {
+          String name() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="order-by">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OrderBy {
+          String value() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string"/>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="inheritance">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface Inheritance {
+          InheritanceType strategy() default SINGLE_TABLE;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="strategy" type="orm:inheritance-type"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="inheritance-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum InheritanceType
+          { SINGLE_TABLE, JOINED, TABLE_PER_CLASS};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="SINGLE_TABLE"/>
+      <xsd:enumeration value="JOINED"/>
+      <xsd:enumeration value="TABLE_PER_CLASS"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="discriminator-value">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface DiscriminatorValue {
+          String value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string"/>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="discriminator-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum DiscriminatorType { STRING, CHAR, INTEGER };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="STRING"/>
+      <xsd:enumeration value="CHAR"/>
+      <xsd:enumeration value="INTEGER"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="primary-key-join-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface PrimaryKeyJoinColumn {
+          String name() default "";
+          String referencedColumnName() default "";
+          String columnDefinition() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="referenced-column-name" type="xsd:string"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="discriminator-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface DiscriminatorColumn {
+          String name() default "DTYPE";
+          DiscriminatorType discriminatorType() default STRING;
+          String columnDefinition() default "";
+          int length() default 31;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="discriminator-type" type="orm:discriminator-type"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="length" type="xsd:int"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="embeddable">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the settings and mappings for embeddable objects. Is 
+        allowed to be sparsely populated and used in conjunction with 
+        the annotations. Alternatively, the metadata-complete attribute 
+        can be used to indicate that no annotations are to be processed 
+        in the class. If this is the case then the defaulting rules will 
+        be recursively applied.
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface Embeddable {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="attributes" type="orm:embeddable-attributes" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="embeddable-attributes">
+    <xsd:sequence>
+      <xsd:element name="basic" type="orm:basic" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="transient" type="orm:transient" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="embedded">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Embedded {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute-override" type="orm:attribute-override" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="mapped-superclass">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the settings and mappings for a mapped superclass. Is 
+        allowed to be sparsely populated and used in conjunction with 
+        the annotations. Alternatively, the metadata-complete attribute 
+        can be used to indicate that no annotations are to be processed 
+        If this is the case then the defaulting rules will be recursively 
+        applied.
+
+        @Target(TYPE) @Retention(RUNTIME)
+        public @interface MappedSuperclass{}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="id-class" type="orm:id-class" minOccurs="0"/>
+      <xsd:element name="exclude-default-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="exclude-superclass-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="entity-listeners" type="orm:entity-listeners" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-persist" type="orm:pre-persist" minOccurs="0"/>
+      <xsd:element name="post-persist" type="orm:post-persist" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-remove" type="orm:pre-remove" minOccurs="0"/>
+      <xsd:element name="post-remove" type="orm:post-remove" minOccurs="0"/>
+      <xsd:element name="pre-update" type="orm:pre-update" minOccurs="0"/>
+      <xsd:element name="post-update" type="orm:post-update" minOccurs="0"/>
+      <xsd:element name="post-load" type="orm:post-load" minOccurs="0"/>
+      <xsd:element name="attributes" type="orm:attributes" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="sequence-generator">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface SequenceGenerator {
+          String name();
+          String sequenceName() default "";
+          int initialValue() default 1;
+          int allocationSize() default 50;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="sequence-name" type="xsd:string"/>
+    <xsd:attribute name="initial-value" type="xsd:int"/>
+    <xsd:attribute name="allocation-size" type="xsd:int"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="table-generator">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface TableGenerator {
+          String name();
+          String table() default "";
+          String catalog() default "";
+          String schema() default "";
+          String pkColumnName() default "";
+          String valueColumnName() default "";
+          String pkColumnValue() default "";
+          int initialValue() default 0;
+          int allocationSize() default 50;
+          UniqueConstraint[] uniqueConstraints() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+    <xsd:attribute name="pk-column-name" type="xsd:string"/>
+    <xsd:attribute name="value-column-name" type="xsd:string"/>
+    <xsd:attribute name="pk-column-value" type="xsd:string"/>
+    <xsd:attribute name="initial-value" type="xsd:int"/>
+    <xsd:attribute name="allocation-size" type="xsd:int"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
+
diff --git a/wildfly/docs/schema/orm_3_1.xsd b/wildfly/docs/schema/orm_3_1.xsd
new file mode 100644
index 0000000..f233261
--- /dev/null
+++ b/wildfly/docs/schema/orm_3_1.xsd
@@ -0,0 +1,2325 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Copyright (c) 2022 Oracle and/or its affiliates. All rights reserved.
+
+    This program and the accompanying materials are made available under the
+    terms of the Eclipse Public License v. 2.0 which is available at
+    http://www.eclipse.org/legal/epl-2.0,
+    or the Eclipse Distribution License v. 1.0 which is available at
+    http://www.eclipse.org/org/documents/edl-v10.php.
+
+    SPDX-License-Identifier: EPL-2.0 OR BSD-3-Clause
+
+-->
+
+<!-- Jakarta Persistence API object/relational mapping file schema -->
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/persistence/orm" 
+  xmlns:orm="https://jakarta.ee/xml/ns/persistence/orm" 
+  xmlns:xsd="http://www.w3.org/2001/XMLSchema" 
+  elementFormDefault="qualified" 
+  attributeFormDefault="unqualified" 
+  version="3.1">
+
+  <xsd:annotation>
+     <xsd:documentation><![CDATA[
+
+       This is the XML Schema for the persistence object/relational 
+       mapping file.
+       The file may be named "META-INF/orm.xml" in the persistence 
+       archive or it may be named some other name which would be 
+       used to locate the file as resource on the classpath.
+
+       Object/relational mapping files must indicate the object/relational
+       mapping file schema by using the persistence namespace:
+
+       https://jakarta.ee/xml/ns/persistence/orm
+
+       and indicate the version of the schema by
+       using the version element as shown below:
+
+      <entity-mappings xmlns="https://jakarta.ee/xml/ns/persistence/orm"
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        xsi:schemaLocation="https://jakarta.ee/xml/ns/persistence/orm
+          https://jakarta.ee/xml/ns/persistence/orm/orm_3_1.xsd"
+        version="3.1">
+          ...
+      </entity-mappings>
+
+
+     ]]></xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:complexType name="emptyType"/>
+
+  <xsd:simpleType name="versionType">
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="entity-mappings">
+    <xsd:complexType>
+      <xsd:annotation>
+        <xsd:documentation>
+
+        The entity-mappings element is the root element of a mapping
+        file. It contains the following four types of elements:
+
+        1. The persistence-unit-metadata element contains metadata
+        for the entire persistence unit. It is undefined if this element
+        occurs in multiple mapping files within the same persistence unit.
+        
+        2. The package, schema, catalog and access elements apply to all of
+        the entity, mapped-superclass and embeddable elements defined in
+        the same file in which they occur.
+
+        3. The sequence-generator, table-generator, converter, named-query,
+        named-native-query, named-stored-procedure-query, and 
+        sql-result-set-mapping elements are global to the persistence
+        unit. It is undefined to have more than one sequence-generator
+        or table-generator of the same name in the same or different
+        mapping files in a persistence unit. It is undefined to have
+        more than one named-query, named-native-query, sql-result-set-mapping,
+        or named-stored-procedure-query of the same name in the same 
+        or different mapping files in a persistence unit.  It is also
+        undefined to have more than one converter for the same target
+        type in the same or different mapping files in a persistence unit.
+
+        4. The entity, mapped-superclass and embeddable elements each define
+        the mapping information for a managed persistent class. The mapping
+        information contained in these elements may be complete or it may
+        be partial.
+
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:sequence>
+        <xsd:element name="description" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="persistence-unit-metadata" 
+                     type="orm:persistence-unit-metadata"
+                     minOccurs="0"/>
+        <xsd:element name="package" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="schema" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="catalog" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="access" type="orm:access-type"
+                     minOccurs="0"/>
+        <xsd:element name="sequence-generator" type="orm:sequence-generator"
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="table-generator" type="orm:table-generator" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="named-query" type="orm:named-query" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="named-native-query" type="orm:named-native-query"
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="named-stored-procedure-query" 
+                     type="orm:named-stored-procedure-query"
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="sql-result-set-mapping" 
+                     type="orm:sql-result-set-mapping" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="mapped-superclass" type="orm:mapped-superclass" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="entity" type="orm:entity" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="embeddable" type="orm:embeddable" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="converter" type="orm:converter" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="orm:versionType" 
+                     fixed="3.1" use="required"/>
+    </xsd:complexType>
+  </xsd:element>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-metadata">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Metadata that applies to the persistence unit and not just to 
+        the mapping file in which it is contained. 
+
+        If the xml-mapping-metadata-complete element is specified,
+        the complete set of mapping metadata for the persistence unit 
+        is contained in the XML mapping files for the persistence unit.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="xml-mapping-metadata-complete" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="persistence-unit-defaults" 
+                   type="orm:persistence-unit-defaults"
+                   minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="persistence-unit-defaults">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        These defaults are applied to the persistence unit as a whole 
+        unless they are overridden by local annotation or XML 
+        element settings. 
+        
+        schema - Used as the schema for all tables, secondary tables, join
+            tables, collection tables, sequence generators, and table 
+            generators that apply to the persistence unit
+        catalog - Used as the catalog for all tables, secondary tables, join
+            tables, collection tables, sequence generators, and table 
+            generators that apply to the persistence unit
+        delimited-identifiers - Used to treat database identifiers as
+            delimited identifiers.
+        access - Used as the access type for all managed classes in
+            the persistence unit
+        cascade-persist - Adds cascade-persist to the set of cascade options
+            in all entity relationships of the persistence unit
+        entity-listeners - List of default entity listeners to be invoked 
+            on each entity in the persistence unit. 
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+        <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+        <xsd:element name="schema" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="catalog" type="xsd:string"
+                     minOccurs="0"/>
+        <xsd:element name="delimited-identifiers" type="orm:emptyType" 
+                     minOccurs="0"/>
+        <xsd:element name="access" type="orm:access-type"
+                     minOccurs="0"/>
+        <xsd:element name="cascade-persist" type="orm:emptyType" 
+                     minOccurs="0"/>
+        <xsd:element name="entity-listeners" type="orm:entity-listeners"
+                     minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="entity">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the settings and mappings for an entity. Is allowed to be
+        sparsely populated and used in conjunction with the annotations.
+        Alternatively, the metadata-complete attribute can be used to 
+        indicate that no annotations on the entity class (and its fields
+        or properties) are to be processed. If this is the case then 
+        the defaulting rules for the entity and its subelements will 
+        be recursively applied.
+
+        @Target(TYPE) @Retention(RUNTIME)
+          public @interface Entity {
+          String name() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="table" type="orm:table" 
+                   minOccurs="0"/>
+      <xsd:element name="secondary-table" type="orm:secondary-table" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:sequence>
+        <xsd:element name="primary-key-join-column" 
+                     type="orm:primary-key-join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="primary-key-foreign-key" 
+                     type="orm:foreign-key" 
+                     minOccurs="0"/>
+      </xsd:sequence>
+      <xsd:element name="id-class" type="orm:id-class" minOccurs="0"/>
+      <xsd:element name="inheritance" type="orm:inheritance" minOccurs="0"/>
+      <xsd:element name="discriminator-value" type="orm:discriminator-value" 
+                   minOccurs="0"/>
+      <xsd:element name="discriminator-column" 
+                   type="orm:discriminator-column" 
+                   minOccurs="0"/>
+      <xsd:element name="sequence-generator" type="orm:sequence-generator" 
+                   minOccurs="0"/>
+      <xsd:element name="table-generator" type="orm:table-generator" 
+                   minOccurs="0"/>
+      <xsd:element name="named-query" type="orm:named-query" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="named-native-query" type="orm:named-native-query" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="named-stored-procedure-query"
+                   type="orm:named-stored-procedure-query" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="sql-result-set-mapping" 
+                   type="orm:sql-result-set-mapping" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="exclude-default-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="exclude-superclass-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="entity-listeners" type="orm:entity-listeners" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-persist" type="orm:pre-persist" minOccurs="0"/>
+      <xsd:element name="post-persist" type="orm:post-persist" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-remove" type="orm:pre-remove" minOccurs="0"/>
+      <xsd:element name="post-remove" type="orm:post-remove" minOccurs="0"/>
+      <xsd:element name="pre-update" type="orm:pre-update" minOccurs="0"/>
+      <xsd:element name="post-update" type="orm:post-update" minOccurs="0"/>
+      <xsd:element name="post-load" type="orm:post-load" minOccurs="0"/>
+      <xsd:element name="attribute-override" type="orm:attribute-override" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="association-override" 
+                   type="orm:association-override"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="convert" type="orm:convert"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="named-entity-graph" type="orm:named-entity-graph"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="attributes" type="orm:attributes" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="cacheable" type="xsd:boolean"/>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="access-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element determines how the persistence provider accesses the
+        state of an entity or embedded object.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="PROPERTY"/>
+      <xsd:enumeration value="FIELD"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="association-override">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface AssociationOverride {
+          String name();
+          JoinColumn[] joinColumns() default{};
+          JoinTable joinTable() default @JoinTable;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:choice>
+        <xsd:sequence>
+          <xsd:element name="join-column" type="orm:join-column"
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="foreign-key" type="orm:foreign-key" 
+                       minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:element name="join-table" type="orm:join-table"
+                     minOccurs="0"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="attribute-override">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface AttributeOverride {
+          String name();
+          Column column();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="column" type="orm:column"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="attributes">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains the entity field or property mappings.
+        It may be sparsely populated to include only a subset of the
+        fields or properties. If metadata-complete for the entity is true
+        then the remainder of the attributes will be defaulted according
+        to the default rules.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:choice>
+        <xsd:element name="id" type="orm:id" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="embedded-id" type="orm:embedded-id" 
+                     minOccurs="0"/>
+      </xsd:choice>
+      <xsd:element name="basic" type="orm:basic"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="version" type="orm:version"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="many-to-one" type="orm:many-to-one"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="one-to-many" type="orm:one-to-many"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="one-to-one" type="orm:one-to-one"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="many-to-many" type="orm:many-to-many" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="element-collection" type="orm:element-collection" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="embedded" type="orm:embedded"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="transient" type="orm:transient"
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="basic">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Basic {
+          FetchType fetch() default EAGER;
+          boolean optional() default true;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column" minOccurs="0"/>
+      <xsd:choice>
+        <xsd:element name="lob" type="orm:lob" minOccurs="0"/>
+        <xsd:element name="temporal" type="orm:temporal" minOccurs="0"/>
+        <xsd:element name="enumerated" type="orm:enumerated" minOccurs="0"/>
+        <xsd:element name="convert" type="orm:convert" minOccurs="0"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="optional" type="xsd:boolean"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cascade-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum CascadeType { ALL, PERSIST, MERGE, REMOVE, REFRESH, DETACH};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="cascade-all" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-persist" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-merge" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-remove" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-refresh" type="orm:emptyType"
+                   minOccurs="0"/>
+      <xsd:element name="cascade-detach" type="orm:emptyType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="collection-table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface CollectionTable {
+          String name() default "";
+          String catalog() default "";
+          String schema() default "";
+          JoinColumn[] joinColumns() default {};
+          UniqueConstraint[] uniqueConstraints() default {};
+          Index[] indexes() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:sequence>
+        <xsd:element name="join-column" type="orm:join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="foreign-key" type="orm:foreign-key" 
+                     minOccurs="0"/>
+      </xsd:sequence>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="index" type="orm:index" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Column {
+          String name() default "";
+          boolean unique() default false;
+          boolean nullable() default true;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+          String table() default "";
+          int length() default 255;
+          int precision() default 0; // decimal precision
+          int scale() default 0; // decimal scale
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+    <xsd:attribute name="length" type="xsd:int"/>
+    <xsd:attribute name="precision" type="xsd:int"/>
+    <xsd:attribute name="scale" type="xsd:int"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="column-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface ColumnResult {
+          String name();
+          Class type() default void.class;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="class" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="constraint-mode">
+    <xsd:annotation>
+      <xsd:documentation>
+
+       public enum ConstraintMode {CONSTRAINT, NO_CONSTRAINT, PROVIDER_DEFAULT};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="CONSTRAINT"/>
+      <xsd:enumeration value="NO_CONSTRAINT"/>
+      <xsd:enumeration value="PROVIDER_DEFAULT"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+
+  <xsd:complexType name="constructor-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface ConstructorResult {
+          Class targetClass();
+          ColumnResult[] columns();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column-result" 
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="target-class" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="convert">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Convert {
+          Class converter() default void.class;
+          String attributeName() default "";
+          boolean disableConversion() default false;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="converter" type="xsd:string"/>
+    <xsd:attribute name="attribute-name" type="xsd:string"/>
+    <xsd:attribute name="disable-conversion" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="converter">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Converter {
+          boolean autoApply() default false;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="auto-apply" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="discriminator-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface DiscriminatorColumn {
+          String name() default "DTYPE";
+          DiscriminatorType discriminatorType() default STRING;
+          String columnDefinition() default "";
+          int length() default 31;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="discriminator-type" type="orm:discriminator-type"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="length" type="xsd:int"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="discriminator-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum DiscriminatorType { STRING, CHAR, INTEGER };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="STRING"/>
+      <xsd:enumeration value="CHAR"/>
+      <xsd:enumeration value="INTEGER"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="discriminator-value">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface DiscriminatorValue {
+          String value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+ <xsd:complexType name="element-collection">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface ElementCollection {
+          Class targetClass() default void.class;
+          FetchType fetch() default LAZY;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="order-by" type="orm:order-by"
+                     minOccurs="0"/>
+        <xsd:element name="order-column" type="orm:order-column"
+                     minOccurs="0"/>
+      </xsd:choice>
+      <xsd:choice>
+        <xsd:element name="map-key" type="orm:map-key"
+                     minOccurs="0"/>
+        <xsd:sequence>
+          <xsd:element name="map-key-class" type="orm:map-key-class"
+                       minOccurs="0"/>
+          <xsd:choice>
+            <xsd:element name="map-key-temporal"
+                         type="orm:temporal"
+                         minOccurs="0"/>
+            <xsd:element name="map-key-enumerated"
+                         type="orm:enumerated"
+                         minOccurs="0"/>
+            <xsd:sequence>
+               <xsd:element name="map-key-attribute-override"
+                            type="orm:attribute-override"
+                            minOccurs="0" maxOccurs="unbounded"/>
+               <xsd:element name="map-key-convert" type="orm:convert"
+                            minOccurs="0" maxOccurs="unbounded"/>
+            </xsd:sequence>
+          </xsd:choice>
+          <xsd:choice>
+            <xsd:element name="map-key-column"
+                         type="orm:map-key-column"
+                         minOccurs="0"/>
+            <xsd:sequence>
+              <xsd:element name="map-key-join-column"
+                           type="orm:map-key-join-column"
+                           minOccurs="0" maxOccurs="unbounded"/>
+              <xsd:element name="map-key-foreign-key" 
+                           type="orm:foreign-key" 
+                           minOccurs="0"/>
+            </xsd:sequence>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:choice>
+        <xsd:sequence>
+          <xsd:element name="column" type="orm:column" minOccurs="0"/>
+          <xsd:choice>
+            <xsd:element name="temporal"
+                         type="orm:temporal"
+                         minOccurs="0"/>
+            <xsd:element name="enumerated"
+                         type="orm:enumerated"
+                         minOccurs="0"/>
+            <xsd:element name="lob"
+                         type="orm:lob"
+                         minOccurs="0"/>
+          </xsd:choice>
+        </xsd:sequence>
+        <xsd:sequence>
+          <xsd:element name="attribute-override"
+                       type="orm:attribute-override"
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="association-override"
+                       type="orm:association-override"
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="convert" type="orm:convert"
+                       minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="collection-table" type="orm:collection-table"
+                     minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-class" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+</xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="embeddable">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the settings and mappings for embeddable objects. Is 
+        allowed to be sparsely populated and used in conjunction with 
+        the annotations. Alternatively, the metadata-complete attribute 
+        can be used to indicate that no annotations are to be processed 
+        in the class. If this is the case then the defaulting rules will 
+        be recursively applied.
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface Embeddable {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="attributes" type="orm:embeddable-attributes" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="embeddable-attributes">
+    <xsd:sequence>
+      <xsd:element name="basic" type="orm:basic" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="many-to-one" type="orm:many-to-one"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="one-to-many" type="orm:one-to-many"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="one-to-one" type="orm:one-to-one"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="many-to-many" type="orm:many-to-many" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="element-collection" type="orm:element-collection" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="embedded" type="orm:embedded"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="transient" type="orm:transient" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="embedded">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Embedded {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute-override" type="orm:attribute-override" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="association-override" 
+                   type="orm:association-override"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="convert" type="orm:convert"
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="embedded-id">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface EmbeddedId {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute-override" type="orm:attribute-override" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-listener">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines an entity listener to be invoked at lifecycle events
+        for the entities that list this listener.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="pre-persist" type="orm:pre-persist" minOccurs="0"/>
+      <xsd:element name="post-persist" type="orm:post-persist" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-remove" type="orm:pre-remove" minOccurs="0"/>
+      <xsd:element name="post-remove" type="orm:post-remove" minOccurs="0"/>
+      <xsd:element name="pre-update" type="orm:pre-update" minOccurs="0"/>
+      <xsd:element name="post-update" type="orm:post-update" minOccurs="0"/>
+      <xsd:element name="post-load" type="orm:post-load" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-listeners">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface EntityListeners {
+          Class[] value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="entity-listener" type="orm:entity-listener" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="entity-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface EntityResult {
+          Class entityClass();
+          FieldResult[] fields() default {};
+          String discriminatorColumn() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="field-result" type="orm:field-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="entity-class" type="xsd:string" use="required"/>
+    <xsd:attribute name="discriminator-column" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="enum-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum EnumType {
+          ORDINAL,
+          STRING
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="ORDINAL"/>
+      <xsd:enumeration value="STRING"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="enumerated">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Enumerated {
+          EnumType value() default ORDINAL;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="orm:enum-type"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="fetch-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum FetchType { LAZY, EAGER };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="LAZY"/>
+      <xsd:enumeration value="EAGER"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="field-result">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface FieldResult {
+          String name();
+          String column();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="column" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="foreign-key">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface ForeignKey {
+          String name() default "";
+	  ConstraintMode value() default CONSTRAINT;
+          String foreign-key-definition() default "";
+
+        Note that the elements that embed the use of the annotation
+        default this use as @ForeignKey(PROVIDER_DEFAULT).
+
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="constraint-mode" type="orm:constraint-mode"/>
+    <xsd:attribute name="foreign-key-definition" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="generated-value">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface GeneratedValue {
+          GenerationType strategy() default AUTO;
+          String generator() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="strategy" type="orm:generation-type"/>
+    <xsd:attribute name="generator" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="generation-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum GenerationType { TABLE, SEQUENCE, IDENTITY, UUID, AUTO };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="TABLE"/>
+      <xsd:enumeration value="SEQUENCE"/>
+      <xsd:enumeration value="IDENTITY"/>
+      <xsd:enumeration value="UUID"/>
+      <xsd:enumeration value="AUTO"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="id">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Id {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column" 
+                   minOccurs="0"/>
+      <xsd:element name="generated-value" type="orm:generated-value"
+                   minOccurs="0"/>
+      <xsd:element name="temporal" type="orm:temporal" 
+                   minOccurs="0"/>
+      <xsd:element name="table-generator" type="orm:table-generator" 
+                   minOccurs="0"/>
+      <xsd:element name="sequence-generator" type="orm:sequence-generator"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="id-class">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface IdClass {
+          Class value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="index">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface Index {
+          String name() default "";
+          String columnList();
+          boolean unique() default false;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="column-list" type="xsd:string" use="required"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="inheritance">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface Inheritance {
+          InheritanceType strategy() default SINGLE_TABLE;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="strategy" type="orm:inheritance-type"/>
+  </xsd:complexType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="inheritance-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum InheritanceType
+          { SINGLE_TABLE, JOINED, TABLE_PER_CLASS};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="SINGLE_TABLE"/>
+      <xsd:enumeration value="JOINED"/>
+      <xsd:enumeration value="TABLE_PER_CLASS"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="join-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface JoinColumn {
+          String name() default "";
+          String referencedColumnName() default "";
+          boolean unique() default false;
+          boolean nullable() default true;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+          String table() default "";
+          ForeignKey foreignKey() default @ForeignKey();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="referenced-column-name" type="xsd:string"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="join-table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface JoinTable {
+          String name() default "";
+          String catalog() default "";
+          String schema() default "";
+          JoinColumn[] joinColumns() default {};
+          JoinColumn[] inverseJoinColumns() default {};
+          UniqueConstraint[] uniqueConstraints() default {};
+          Index[] indexes() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:sequence>
+        <xsd:element name="join-column" type="orm:join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="foreign-key" type="orm:foreign-key" 
+                     minOccurs="0"/>
+      </xsd:sequence>
+      <xsd:sequence>
+        <xsd:element name="inverse-join-column" type="orm:join-column" 
+                     minOccurs="0" maxOccurs="unbounded"/>
+        <xsd:element name="inverse-foreign-key" type="orm:foreign-key" 
+                     minOccurs="0"/>
+      </xsd:sequence>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="index" type="orm:index" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="lob">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Lob {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="lock-mode-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum LockModeType { READ, WRITE, OPTIMISTIC, OPTIMISTIC_FORCE_INCREMENT, PESSIMISTIC_READ, PESSIMISTIC_WRITE, PESSIMISTIC_FORCE_INCREMENT, NONE};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="READ"/>
+      <xsd:enumeration value="WRITE"/>
+      <xsd:enumeration value="OPTIMISTIC"/>
+      <xsd:enumeration value="OPTIMISTIC_FORCE_INCREMENT"/>
+      <xsd:enumeration value="PESSIMISTIC_READ"/>
+      <xsd:enumeration value="PESSIMISTIC_WRITE"/>
+      <xsd:enumeration value="PESSIMISTIC_FORCE_INCREMENT"/>
+      <xsd:enumeration value="NONE"/>
+
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+<xsd:complexType name="many-to-many">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface ManyToMany {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default LAZY;
+          String mappedBy() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="order-by" type="orm:order-by"
+                   minOccurs="0"/>
+        <xsd:element name="order-column" type="orm:order-column"
+                   minOccurs="0"/>
+      </xsd:choice>
+      <xsd:choice>
+        <xsd:element name="map-key" type="orm:map-key"
+                   minOccurs="0"/>
+        <xsd:sequence>
+          <xsd:element name="map-key-class" type="orm:map-key-class"
+                   minOccurs="0"/>
+          <xsd:choice>
+            <xsd:element name="map-key-temporal"
+                         type="orm:temporal"
+                         minOccurs="0"/>
+            <xsd:element name="map-key-enumerated"
+                         type="orm:enumerated"
+                         minOccurs="0"/>
+            <xsd:sequence>
+               <xsd:element name="map-key-attribute-override"
+                            type="orm:attribute-override"
+                            minOccurs="0" maxOccurs="unbounded"/>
+               <xsd:element name="map-key-convert" type="orm:convert"
+                            minOccurs="0" maxOccurs="unbounded"/>
+            </xsd:sequence>
+          </xsd:choice>
+          <xsd:choice>
+            <xsd:element name="map-key-column" type="orm:map-key-column"
+                   minOccurs="0"/>
+            <xsd:sequence>
+              <xsd:element name="map-key-join-column"
+                     type="orm:map-key-join-column"
+                     minOccurs="0" maxOccurs="unbounded"/>
+              <xsd:element name="map-key-foreign-key" 
+                           type="orm:foreign-key" 
+                           minOccurs="0"/>
+            </xsd:sequence>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="join-table" type="orm:join-table"
+                   minOccurs="0"/>
+      <xsd:element name="cascade" type="orm:cascade-type"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="mapped-by" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="many-to-one">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface ManyToOne {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default EAGER;
+          boolean optional() default true;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>       
+        <xsd:sequence>
+          <xsd:element name="join-column" type="orm:join-column" 
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="foreign-key" type="orm:foreign-key" 
+                       minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:element name="join-table" type="orm:join-table" 
+                     minOccurs="0"/>
+      </xsd:choice>       
+      <xsd:element name="cascade" type="orm:cascade-type" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="optional" type="xsd:boolean"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="maps-id" type="xsd:string"/>
+    <xsd:attribute name="id" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="map-key">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface MapKey {
+          String name() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="map-key-class">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface MapKeyClass {
+          Class value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="map-key-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface MapKeyColumn {
+          String name() default "";
+          boolean unique() default false;
+          boolean nullable() default false;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+          String table() default "";
+          int length() default 255;
+          int precision() default 0; // decimal precision
+          int scale() default 0; // decimal scale
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+    <xsd:attribute name="length" type="xsd:int"/>
+    <xsd:attribute name="precision" type="xsd:int"/>
+    <xsd:attribute name="scale" type="xsd:int"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="map-key-join-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface MapKeyJoinColumn {
+          String name() default "";
+          String referencedColumnName() default "";
+          boolean unique() default false;
+          boolean nullable() default false;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+          String table() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="referenced-column-name" type="xsd:string"/>
+    <xsd:attribute name="unique" type="xsd:boolean"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mapped-superclass">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the settings and mappings for a mapped superclass. Is 
+        allowed to be sparsely populated and used in conjunction with 
+        the annotations. Alternatively, the metadata-complete attribute 
+        can be used to indicate that no annotations are to be processed 
+        If this is the case then the defaulting rules will be recursively 
+        applied.
+
+        @Target(TYPE) @Retention(RUNTIME)
+        public @interface MappedSuperclass{}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="id-class" type="orm:id-class" minOccurs="0"/>
+      <xsd:element name="exclude-default-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="exclude-superclass-listeners" type="orm:emptyType" 
+                   minOccurs="0"/>
+      <xsd:element name="entity-listeners" type="orm:entity-listeners" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-persist" type="orm:pre-persist" minOccurs="0"/>
+      <xsd:element name="post-persist" type="orm:post-persist" 
+                   minOccurs="0"/>
+      <xsd:element name="pre-remove" type="orm:pre-remove" minOccurs="0"/>
+      <xsd:element name="post-remove" type="orm:post-remove" minOccurs="0"/>
+      <xsd:element name="pre-update" type="orm:pre-update" minOccurs="0"/>
+      <xsd:element name="post-update" type="orm:post-update" minOccurs="0"/>
+      <xsd:element name="post-load" type="orm:post-load" minOccurs="0"/>
+      <xsd:element name="attributes" type="orm:attributes" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="metadata-complete" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-attribute-node">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface NamedAttributeNode {
+          String value();
+          String subgraph() default "";
+          String keySubgraph() default "";
+        }
+ 
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="subgraph" type="xsd:string"/>
+    <xsd:attribute name="key-subgraph" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-entity-graph">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface NamedEntityGraph {
+          String name() default "";
+          NamedAttributeNode[] attributeNodes() default {};
+          boolean includeAllAttributes() default false;
+          NamedSubgraph[] subgraphs() default {};
+          NamedSubGraph[] subclassSubgraphs() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="named-attribute-node" 
+                   type="orm:named-attribute-node" 
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="subgraph" 
+                   type="orm:named-subgraph" 
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="subclass-subgraph" 
+                   type="orm:named-subgraph" 
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="include-all-attributes" type="xsd:boolean"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-native-query">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface NamedNativeQuery {
+          String name();
+          String query();
+          QueryHint[] hints() default {};
+          Class resultClass() default void.class;
+          String resultSetMapping() default ""; //named SqlResultSetMapping
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="query" type="xsd:string"/>
+      <xsd:element name="hint" type="orm:query-hint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="result-class" type="xsd:string"/>
+    <xsd:attribute name="result-set-mapping" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-query">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface NamedQuery {
+          String name();
+          String query();
+          LockModeType lockMode() default NONE;
+          QueryHint[] hints() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="query" type="xsd:string"/>
+      <xsd:element name="lock-mode" type="orm:lock-mode-type" minOccurs="0"/>
+      <xsd:element name="hint" type="orm:query-hint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+</xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-stored-procedure-query">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface NamedStoredProcedureQuery {
+          String name();
+          String procedureName();
+          StoredProcedureParameter[] parameters() default {};
+          Class[] resultClasses() default {};
+          String[] resultSetMappings() default{};
+          QueryHint[] hints() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="parameter" 
+                   type="orm:stored-procedure-parameter" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="result-class" type="xsd:string"  
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="result-set-mapping" type="xsd:string"
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="hint" type="orm:query-hint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="procedure-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="named-subgraph">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface NamedSubgraph {
+          String name();
+          Class type() default void.class;
+          NamedAttributeNode[] attributeNodes();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="named-attribute-node" 
+                   type="orm:named-attribute-node" 
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="class" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+<xsd:complexType name="one-to-many">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OneToMany {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default LAZY;
+          String mappedBy() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:element name="order-by" type="orm:order-by"
+                   minOccurs="0"/>
+        <xsd:element name="order-column" type="orm:order-column"
+                   minOccurs="0"/>
+      </xsd:choice>
+      <xsd:choice>
+        <xsd:element name="map-key" type="orm:map-key"
+                   minOccurs="0"/>
+        <xsd:sequence>
+          <xsd:element name="map-key-class" type="orm:map-key-class"
+                   minOccurs="0"/>
+          <xsd:choice>
+            <xsd:element name="map-key-temporal"
+                         type="orm:temporal"
+                         minOccurs="0"/>
+            <xsd:element name="map-key-enumerated"
+                         type="orm:enumerated"
+                         minOccurs="0"/>
+            <xsd:sequence>
+               <xsd:element name="map-key-attribute-override"
+                            type="orm:attribute-override"
+                            minOccurs="0" maxOccurs="unbounded"/>
+               <xsd:element name="map-key-convert" type="orm:convert"
+                            minOccurs="0" maxOccurs="unbounded"/>
+            </xsd:sequence>
+          </xsd:choice>
+          <xsd:choice>
+            <xsd:element name="map-key-column" type="orm:map-key-column"
+                   minOccurs="0"/>
+            <xsd:sequence>
+              <xsd:element name="map-key-join-column"
+                           type="orm:map-key-join-column"
+                           minOccurs="0" maxOccurs="unbounded"/>
+              <xsd:element name="map-key-foreign-key" 
+                           type="orm:foreign-key" 
+                           minOccurs="0"/>
+            </xsd:sequence>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:choice>
+        <xsd:element name="join-table" type="orm:join-table"
+                     minOccurs="0"/>
+        <xsd:sequence>
+          <xsd:element name="join-column" type="orm:join-column"
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="foreign-key" type="orm:foreign-key" 
+                       minOccurs="0"/>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="cascade" type="orm:cascade-type"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="mapped-by" type="xsd:string"/>
+    <xsd:attribute name="orphan-removal" type="xsd:boolean"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="one-to-one">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OneToOne {
+          Class targetEntity() default void.class;
+          CascadeType[] cascade() default {};
+          FetchType fetch() default EAGER;
+          boolean optional() default true;
+          String mappedBy() default "";
+          boolean orphanRemoval() default false;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice>
+        <xsd:sequence>
+          <xsd:element name="primary-key-join-column" 
+                       type="orm:primary-key-join-column" 
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="primary-key-foreign-key" 
+                       type="orm:foreign-key" 
+                       minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:sequence>
+          <xsd:element name="join-column" type="orm:join-column" 
+                       minOccurs="0" maxOccurs="unbounded"/>
+          <xsd:element name="foreign-key" type="orm:foreign-key" 
+                       minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:element name="join-table" type="orm:join-table" 
+                     minOccurs="0"/>
+      </xsd:choice>
+      <xsd:element name="cascade" type="orm:cascade-type" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="target-entity" type="xsd:string"/>
+    <xsd:attribute name="fetch" type="orm:fetch-type"/>
+    <xsd:attribute name="optional" type="xsd:boolean"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+    <xsd:attribute name="mapped-by" type="xsd:string"/>
+    <xsd:attribute name="orphan-removal" type="xsd:boolean"/>
+    <xsd:attribute name="maps-id" type="xsd:string"/>
+    <xsd:attribute name="id" type="xsd:boolean"/>
+</xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="order-by">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OrderBy {
+          String value() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="order-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface OrderColumn {
+          String name() default "";
+          boolean nullable() default true;
+          boolean insertable() default true;
+          boolean updatable() default true;
+          String columnDefinition() default "";
+         }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="nullable" type="xsd:boolean"/>
+    <xsd:attribute name="insertable" type="xsd:boolean"/>
+    <xsd:attribute name="updatable" type="xsd:boolean"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="parameter-mode">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum ParameterMode { IN, INOUT, OUT, REF_CURSOR};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="IN"/>
+      <xsd:enumeration value="INOUT"/>
+      <xsd:enumeration value="OUT"/>
+      <xsd:enumeration value="REF_CURSOR"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="post-load">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostLoad {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="post-persist">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostPersist {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="post-remove">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostRemove {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="post-update">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PostUpdate {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pre-persist">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PrePersist {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pre-remove">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PreRemove {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="pre-update">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD}) @Retention(RUNTIME)
+        public @interface PreUpdate {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="method-name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="primary-key-join-column">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface PrimaryKeyJoinColumn {
+          String name() default "";
+          String referencedColumnName() default "";
+          String columnDefinition() default "";
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="referenced-column-name" type="xsd:string"/>
+    <xsd:attribute name="column-definition" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="query-hint">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME) 
+        public @interface QueryHint {
+          String name();
+          String value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="value" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="secondary-table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface SecondaryTable {
+          String name();
+          String catalog() default "";
+          String schema() default "";
+          PrimaryKeyJoinColumn[] pkJoinColumns() default {};
+          UniqueConstraint[] uniqueConstraints() default {};
+          Index[] indexes() default {};
+         }
+
+       </xsd:documentation>
+     </xsd:annotation>
+     <xsd:sequence>
+       <xsd:sequence>
+         <xsd:element name="primary-key-join-column" 
+                      type="orm:primary-key-join-column" 
+                      minOccurs="0" maxOccurs="unbounded"/>
+         <xsd:element name="primary-key-foreign-key" 
+                      type="orm:foreign-key" 
+                      minOccurs="0"/>
+       </xsd:sequence>
+       <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                    minOccurs="0" maxOccurs="unbounded"/>
+       <xsd:element name="index" type="orm:index" 
+                    minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="sequence-generator">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface SequenceGenerator {
+          String name();
+          String sequenceName() default "";
+          String catalog() default "";
+          String schema() default "";
+          int initialValue() default 1;
+          int allocationSize() default 50;
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="sequence-name" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+    <xsd:attribute name="initial-value" type="xsd:int"/>
+    <xsd:attribute name="allocation-size" type="xsd:int"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="sql-result-set-mapping">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface SqlResultSetMapping {
+          String name();
+          EntityResult[] entities() default {};
+          ConstructorResult[] classes() default{};
+          ColumnResult[] columns() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="entity-result" type="orm:entity-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="constructor-result" type="orm:constructor-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="column-result" type="orm:column-result" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="stored-procedure-parameter">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface StoredProcedureParameter {
+          String name() default "";
+          ParameterMode mode() default ParameterMode.IN;
+          Class type();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" 
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="class" type="xsd:string" use="required"/>
+    <xsd:attribute name="mode" type="orm:parameter-mode"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="table">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE}) @Retention(RUNTIME)
+        public @interface Table {
+          String name() default "";
+          String catalog() default "";
+          String schema() default "";
+          UniqueConstraint[] uniqueConstraints() default {};
+          Index[] indexes() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="index" type="orm:index" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="table-generator">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({TYPE, METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface TableGenerator {
+          String name();
+          String table() default "";
+          String catalog() default "";
+          String schema() default "";
+          String pkColumnName() default "";
+          String valueColumnName() default "";
+          String pkColumnValue() default "";
+          int initialValue() default 0;
+          int allocationSize() default 50;
+          UniqueConstraint[] uniqueConstraints() default {};
+          Indexes[] indexes() default {};
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description" type="xsd:string" minOccurs="0"/>
+      <xsd:element name="unique-constraint" type="orm:unique-constraint" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="index" type="orm:index" 
+                   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="table" type="xsd:string"/>
+    <xsd:attribute name="catalog" type="xsd:string"/>
+    <xsd:attribute name="schema" type="xsd:string"/>
+    <xsd:attribute name="pk-column-name" type="xsd:string"/>
+    <xsd:attribute name="value-column-name" type="xsd:string"/>
+    <xsd:attribute name="pk-column-value" type="xsd:string"/>
+    <xsd:attribute name="initial-value" type="xsd:int"/>
+    <xsd:attribute name="allocation-size" type="xsd:int"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="temporal">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Temporal {
+          TemporalType value();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="orm:temporal-type"/>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="temporal-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum TemporalType {
+          DATE, // java.sql.Date
+          TIME, // java.sql.Time
+          TIMESTAMP // java.sql.Timestamp
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+      <xsd:restriction base="xsd:token">
+        <xsd:enumeration value="DATE"/>
+        <xsd:enumeration value="TIME"/>
+        <xsd:enumeration value="TIMESTAMP"/>
+     </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transient">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Transient {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="unique-constraint">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({}) @Retention(RUNTIME)
+        public @interface UniqueConstraint {
+          String name() default "";
+          String[] columnNames();
+        }
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column-name" type="xsd:string" 
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="version">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        @Target({METHOD, FIELD}) @Retention(RUNTIME)
+        public @interface Version {}
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="column" type="orm:column" minOccurs="0"/>
+      <xsd:element name="temporal" type="orm:temporal" minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="name" type="xsd:string" use="required"/>
+    <xsd:attribute name="access" type="orm:access-type"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/persistence_1_0.xsd b/wildfly/docs/schema/persistence_1_0.xsd
new file mode 100644
index 0000000..88a61a9
--- /dev/null
+++ b/wildfly/docs/schema/persistence_1_0.xsd
@@ -0,0 +1,260 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- persistence.xml schema -->
+<xsd:schema targetNamespace="http://java.sun.com/xml/ns/persistence" 
+  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  xmlns:persistence="http://java.sun.com/xml/ns/persistence"
+  elementFormDefault="qualified" 
+  attributeFormDefault="unqualified" 
+  version="1.0">
+
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)persistence_1_0.xsd  1.0  Feb 9 2006
+    </xsd:documentation>
+  </xsd:annotation>
+   <xsd:annotation>
+     <xsd:documentation><![CDATA[
+
+     This is the XML Schema for the persistence configuration file.
+     The file must be named "META-INF/persistence.xml" in the 
+     persistence archive.
+     Persistence configuration files must indicate
+     the persistence schema by using the persistence namespace:
+
+     http://java.sun.com/xml/ns/persistence
+
+     and indicate the version of the schema by
+     using the version element as shown below:
+
+      <persistence xmlns="http://java.sun.com/xml/ns/persistence"
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        xsi:schemaLocation="http://java.sun.com/xml/ns/persistence
+          http://java.sun.com/xml/ns/persistence/persistence_1_0.xsd"
+        version="1.0">
+          ...
+      </persistence>
+
+    ]]></xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:simpleType name="versionType">
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="persistence">
+    <xsd:complexType>
+      <xsd:sequence>
+
+        <!-- **************************************************** -->
+
+        <xsd:element name="persistence-unit" 
+                     minOccurs="0" maxOccurs="unbounded">
+          <xsd:complexType>
+            <xsd:annotation>
+              <xsd:documentation>
+
+                Configuration of a persistence unit.
+
+              </xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+
+            <!-- **************************************************** -->
+
+              <xsd:element name="description" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Textual description of this persistence unit.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="provider" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Provider class that supplies EntityManagers for this 
+                    persistence unit.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="jta-data-source" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    The container-specific name of the JTA datasource to use.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="non-jta-data-source" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    The container-specific name of a non-JTA datasource to use.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="mapping-file" type="xsd:string" 
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    File containing mapping information. Loaded as a resource 
+                    by the persistence provider.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="jar-file" type="xsd:string" 
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Jar file that should be scanned for entities. 
+                    Not applicable to Java SE persistence units.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="class" type="xsd:string" 
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Class to scan for annotations.  It should be annotated 
+                    with either @Entity, @Embeddable or @MappedSuperclass.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="exclude-unlisted-classes" type="xsd:boolean" 
+                           default="false" minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    When set to true then only listed classes and jars will 
+                    be scanned for persistent classes, otherwise the enclosing 
+                    jar or directory will also be scanned. Not applicable to 
+                    Java SE persistence units.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="properties" minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    A list of vendor-specific properties.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                  <xsd:sequence>
+                    <xsd:element name="property" 
+                                 minOccurs="0" maxOccurs="unbounded">
+                      <xsd:annotation>
+                        <xsd:documentation>
+                          A name-value pair.
+                        </xsd:documentation>
+                      </xsd:annotation>
+                      <xsd:complexType>
+                        <xsd:attribute name="name" type="xsd:string" 
+                                       use="required"/>
+                        <xsd:attribute name="value" type="xsd:string" 
+                                       use="required"/>
+                      </xsd:complexType>
+                    </xsd:element>
+                  </xsd:sequence>
+                </xsd:complexType>
+              </xsd:element>
+
+            </xsd:sequence>
+
+            <!-- **************************************************** -->
+
+            <xsd:attribute name="name" type="xsd:string" use="required">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Name used in code to reference this persistence unit.
+
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:attribute>
+
+            <!-- **************************************************** -->
+
+            <xsd:attribute name="transaction-type" 
+                           type="persistence:persistence-unit-transaction-type">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Type of transactions used by EntityManagers from this 
+                  persistence unit.
+
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:attribute>
+
+          </xsd:complexType>
+        </xsd:element>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="persistence:versionType" 
+                     fixed="1.0" use="required"/>
+    </xsd:complexType>
+  </xsd:element>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="persistence-unit-transaction-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum TransactionType { JTA, RESOURCE_LOCAL };
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="JTA"/>
+      <xsd:enumeration value="RESOURCE_LOCAL"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/persistence_2_0.xsd b/wildfly/docs/schema/persistence_2_0.xsd
new file mode 100644
index 0000000..e9cd874
--- /dev/null
+++ b/wildfly/docs/schema/persistence_2_0.xsd
@@ -0,0 +1,253 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- persistence.xml schema -->
+<xsd:schema targetNamespace="http://java.sun.com/xml/ns/persistence"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:persistence="http://java.sun.com/xml/ns/persistence"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)persistence_2_0.xsd 1.0 October 1 2009
+    </xsd:documentation>
+  </xsd:annotation>
+  <xsd:annotation>
+    <xsd:documentation><![CDATA[
+     This is the XML Schema for the persistence configuration file.
+     The file must be named "META-INF/persistence.xml" in the
+     persistence archive.
+     Persistence configuration files must indicate
+     the persistence schema by using the persistence namespace:
+     http://java.sun.com/xml/ns/persistence
+     and indicate the version of the schema by
+     using the version element as shown below:
+      <persistence xmlns="http://java.sun.com/xml/ns/persistence"
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        xsi:schemaLocation="http://java.sun.com/xml/ns/persistence
+          http://java.sun.com/xml/ns/persistence/persistence_2_0.xsd"
+        version="2.0">
+          ...
+      </persistence>
+    ]]></xsd:documentation>
+  </xsd:annotation>
+  <xsd:simpleType name="versionType">
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- **************************************************** -->
+  <xsd:element name="persistence">
+    <xsd:complexType>
+      <xsd:sequence>
+        <!-- **************************************************** -->
+        <xsd:element name="persistence-unit"
+                     minOccurs="1" maxOccurs="unbounded">
+          <xsd:complexType>
+            <xsd:annotation>
+              <xsd:documentation>
+                Configuration of a persistence unit.
+              </xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+              <!-- **************************************************** -->
+              <xsd:element name="description" type="xsd:string"
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    Description of this persistence unit.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="provider" type="xsd:string"
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    Provider class that supplies EntityManagers for this
+                    persistence unit.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="jta-data-source" type="xsd:string"
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    The container-specific name of the JTA datasource to use.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="non-jta-data-source" type="xsd:string"
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    The container-specific name of a non-JTA datasource to use.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="mapping-file" type="xsd:string"
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    File containing mapping information. Loaded as a resource
+                    by the persistence provider.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="jar-file" type="xsd:string"
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    Jar file that is to be scanned for managed classes.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="class" type="xsd:string"
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    Managed class to be included in the persistence unit and
+                    to scan for annotations. It should be annotated
+                    with either @Entity, @Embeddable or @MappedSuperclass.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="exclude-unlisted-classes" type="xsd:boolean"
+                           default="true" minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    When set to true then only listed classes and jars will
+                    be scanned for persistent classes, otherwise the
+                    enclosing jar or directory will also be scanned.
+                    Not applicable to Java SE persistence units.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="shared-cache-mode"
+                           type="persistence:persistence-unit-caching-type"
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    Defines whether caching is enabled for the
+                    persistence unit if caching is supported by the
+                    persistence provider. When set to ALL, all entities
+                    will be cached. When set to NONE, no entities will
+                    be cached. When set to ENABLE_SELECTIVE, only entities
+                    specified as cacheable will be cached. When set to
+                    DISABLE_SELECTIVE, entities specified as not cacheable
+                    will not be cached. When not specified or when set to
+                    UNSPECIFIED, provider defaults may apply.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="validation-mode"
+                           type="persistence:persistence-unit-validation-mode-type"
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    The validation mode to be used for the persistence unit.
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+              <!-- **************************************************** -->
+              <xsd:element name="properties" minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+                    A list of standard and vendor-specific properties
+                    and hints.
+                  </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                  <xsd:sequence>
+                    <xsd:element name="property"
+                                 minOccurs="0" maxOccurs="unbounded">
+                      <xsd:annotation>
+                        <xsd:documentation>
+                          A name-value pair.
+                        </xsd:documentation>
+                      </xsd:annotation>
+                      <xsd:complexType>
+                        <xsd:attribute name="name" type="xsd:string"
+                                       use="required"/>
+                        <xsd:attribute name="value" type="xsd:string"
+                                       use="required"/>
+                      </xsd:complexType>
+                    </xsd:element>
+                  </xsd:sequence>
+                </xsd:complexType>
+              </xsd:element>
+            </xsd:sequence>
+            <!-- **************************************************** -->
+            <xsd:attribute name="name" type="xsd:string" use="required">
+              <xsd:annotation>
+                <xsd:documentation>
+                  Name used in code to reference this persistence unit.
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:attribute>
+            <!-- **************************************************** -->
+            <xsd:attribute name="transaction-type"
+                           type="persistence:persistence-unit-transaction-type">
+              <xsd:annotation>
+                <xsd:documentation>
+                  Type of transactions used by EntityManagers from this
+                  persistence unit.
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:attribute>
+          </xsd:complexType>
+        </xsd:element>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="persistence:versionType"
+                     fixed="2.0" use="required"/>
+    </xsd:complexType>
+  </xsd:element>
+  <!-- **************************************************** -->
+  <xsd:simpleType name="persistence-unit-transaction-type">
+    <xsd:annotation>
+      <xsd:documentation>
+        public enum PersistenceUnitTransactionType {JTA, RESOURCE_LOCAL};
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="JTA"/>
+      <xsd:enumeration value="RESOURCE_LOCAL"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- **************************************************** -->
+  <xsd:simpleType name="persistence-unit-caching-type">
+    <xsd:annotation>
+      <xsd:documentation>
+        public enum SharedCacheMode { ALL, NONE, ENABLE_SELECTIVE,
+        DISABLE_SELECTIVE, UNSPECIFIED};
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="ALL"/>
+      <xsd:enumeration value="NONE"/>
+      <xsd:enumeration value="ENABLE_SELECTIVE"/>
+      <xsd:enumeration value="DISABLE_SELECTIVE"/>
+      <xsd:enumeration value="UNSPECIFIED"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+  <!-- **************************************************** -->
+  <xsd:simpleType name="persistence-unit-validation-mode-type">
+    <xsd:annotation>
+      <xsd:documentation>
+        public enum ValidationMode { AUTO, CALLBACK, NONE};
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="AUTO"/>
+      <xsd:enumeration value="CALLBACK"/>
+      <xsd:enumeration value="NONE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/persistence_3_0.xsd b/wildfly/docs/schema/persistence_3_0.xsd
new file mode 100644
index 0000000..e2a2943
--- /dev/null
+++ b/wildfly/docs/schema/persistence_3_0.xsd
@@ -0,0 +1,342 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+    Copyright (c) 2008, 2020 Oracle and/or its affiliates. All rights reserved.
+
+    This program and the accompanying materials are made available under the
+    terms of the Eclipse Public License v. 2.0 which is available at
+    http://www.eclipse.org/legal/epl-2.0,
+    or the Eclipse Distribution License v. 1.0 which is available at
+    http://www.eclipse.org/org/documents/edl-v10.php.
+
+    SPDX-License-Identifier: EPL-2.0 OR BSD-3-Clause
+
+-->
+
+<!-- persistence.xml schema -->
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/persistence" 
+  xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+  xmlns:persistence="https://jakarta.ee/xml/ns/persistence"
+  elementFormDefault="qualified" 
+  attributeFormDefault="unqualified" 
+  version="3.0">
+
+   <xsd:annotation>
+     <xsd:documentation><![CDATA[
+
+     This is the XML Schema for the persistence configuration file.
+     The file must be named "META-INF/persistence.xml" in the 
+     persistence archive.
+
+     Persistence configuration files must indicate
+     the persistence schema by using the persistence namespace:
+
+     https://jakarta.ee/xml/ns/persistence
+
+     and indicate the version of the schema by
+     using the version element as shown below:
+
+      <persistence xmlns="https://jakarta.ee/xml/ns/persistence"
+        xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+        xsi:schemaLocation="https://jakarta.ee/xml/ns/persistence
+          https://jakarta.ee/xml/ns/persistence/persistence_3_0.xsd"
+        version="3.0">
+          ...
+      </persistence>
+
+    ]]></xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:simpleType name="versionType">
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[0-9]+(\.[0-9]+)*"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="persistence">
+    <xsd:complexType>
+      <xsd:sequence>
+
+        <!-- **************************************************** -->
+
+        <xsd:element name="persistence-unit" 
+                     minOccurs="1" maxOccurs="unbounded">
+          <xsd:complexType>
+            <xsd:annotation>
+              <xsd:documentation>
+
+                Configuration of a persistence unit.
+
+              </xsd:documentation>
+            </xsd:annotation>
+            <xsd:sequence>
+
+            <!-- **************************************************** -->
+
+              <xsd:element name="description" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Description of this persistence unit.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="provider" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Provider class that supplies EntityManagers for this 
+                    persistence unit.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="jta-data-source" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    The container-specific name of the JTA datasource to use.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="non-jta-data-source" type="xsd:string" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    The container-specific name of a non-JTA datasource to use.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="mapping-file" type="xsd:string" 
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    File containing mapping information. Loaded as a resource 
+                    by the persistence provider.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="jar-file" type="xsd:string" 
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Jar file that is to be scanned for managed classes. 
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="class" type="xsd:string" 
+                           minOccurs="0" maxOccurs="unbounded">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Managed class to be included in the persistence unit and
+                    to scan for annotations.  It should be annotated 
+                    with either @Entity, @Embeddable or @MappedSuperclass.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="exclude-unlisted-classes" type="xsd:boolean" 
+                           default="true" minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    When set to true then only listed classes and jars will 
+                    be scanned for persistent classes, otherwise the 
+                    enclosing jar or directory will also be scanned. 
+                    Not applicable to Java SE persistence units.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="shared-cache-mode" 
+                           type="persistence:persistence-unit-caching-type" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    Defines whether caching is enabled for the 
+                    persistence unit if caching is supported by the
+                    persistence provider. When set to ALL, all entities 
+                    will be cached. When set to NONE, no entities will
+                    be cached. When set to ENABLE_SELECTIVE, only entities
+                    specified as cacheable will be cached. When set to
+                    DISABLE_SELECTIVE, entities specified as not cacheable
+                    will not be cached. When not specified or when set to
+                    UNSPECIFIED, provider defaults may apply.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="validation-mode" 
+                           type="persistence:persistence-unit-validation-mode-type" 
+                           minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    The validation mode to be used for the persistence unit.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+              </xsd:element>
+
+
+              <!-- **************************************************** -->
+
+              <xsd:element name="properties" minOccurs="0">
+                <xsd:annotation>
+                  <xsd:documentation>
+
+                    A list of standard and vendor-specific properties 
+                    and hints.
+
+                  </xsd:documentation>
+                </xsd:annotation>
+                <xsd:complexType>
+                  <xsd:sequence>
+                    <xsd:element name="property" 
+                                 minOccurs="0" maxOccurs="unbounded">
+                      <xsd:annotation>
+                        <xsd:documentation>
+                          A name-value pair.
+                        </xsd:documentation>
+                      </xsd:annotation>
+                      <xsd:complexType>
+                        <xsd:attribute name="name" type="xsd:string" 
+                                       use="required"/>
+                        <xsd:attribute name="value" type="xsd:string" 
+                                       use="required"/>
+                      </xsd:complexType>
+                    </xsd:element>
+                  </xsd:sequence>
+                </xsd:complexType>
+              </xsd:element>
+
+            </xsd:sequence>
+
+            <!-- **************************************************** -->
+
+            <xsd:attribute name="name" type="xsd:string" use="required">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Name used in code to reference this persistence unit.
+
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:attribute>
+
+            <!-- **************************************************** -->
+
+            <xsd:attribute name="transaction-type" 
+                           type="persistence:persistence-unit-transaction-type">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Type of transactions used by EntityManagers from this 
+                  persistence unit.
+
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:attribute>
+
+          </xsd:complexType>
+        </xsd:element>
+      </xsd:sequence>
+      <xsd:attribute name="version" type="persistence:versionType" 
+                     fixed="3.0" use="required"/>
+    </xsd:complexType>
+  </xsd:element>
+
+  <!-- **************************************************** -->
+
+  <xsd:simpleType name="persistence-unit-transaction-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum PersistenceUnitTransactionType {JTA, RESOURCE_LOCAL};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="JTA"/>
+      <xsd:enumeration value="RESOURCE_LOCAL"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="persistence-unit-caching-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum SharedCacheMode { ALL, NONE, ENABLE_SELECTIVE, DISABLE_SELECTIVE, UNSPECIFIED};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="ALL"/>
+      <xsd:enumeration value="NONE"/>
+      <xsd:enumeration value="ENABLE_SELECTIVE"/>
+      <xsd:enumeration value="DISABLE_SELECTIVE"/>
+      <xsd:enumeration value="UNSPECIFIED"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="persistence-unit-validation-mode-type">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        public enum ValidationMode { AUTO, CALLBACK, NONE};
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="AUTO"/>
+      <xsd:enumeration value="CALLBACK"/>
+      <xsd:enumeration value="NONE"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/shared-session-config_1_0.xsd b/wildfly/docs/schema/shared-session-config_1_0.xsd
new file mode 100644
index 0000000..2d71071
--- /dev/null
+++ b/wildfly/docs/schema/shared-session-config_1_0.xsd
@@ -0,0 +1,290 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:shared-session-config:1.0"
+            xmlns="urn:jboss:shared-session-config:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root element -->
+    <xsd:element name="shared-session-config" type="sharedSessionType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for the shared session config. If this is present in the root of
+                an ear then all war's deployed in the ear will share a single session manager.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="sharedSessionType">
+        <xsd:sequence>
+            <xsd:element name="max-active-sessions" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="session-config" type="session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="replication-config" type="replication-configType" minOccurs="0" maxOccurs="1"/>
+
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="session-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The session-configType defines the session parameters
+                for this web application.
+
+                Used in: web-app
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="session-timeout"
+                         type="xsd:integer"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The session-timeout element defines the default
+                        session timeout interval for all sessions created
+                        in this web application. The specified timeout
+                        must be expressed in a whole number of minutes.
+                        If the timeout is 0 or less, the container ensures
+                        the default behaviour of sessions is never to time
+                        out. If this element is not specified, the container
+                        must set its default timeout period.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="cookie-config"
+                         type="cookie-configType"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The cookie-config element defines the configuration of the
+                        session tracking cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="tracking-mode"
+                         type="tracking-modeType"
+                         minOccurs="0"
+                         maxOccurs="3">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The tracking-mode element defines the tracking modes
+                        for sessions created by this web application
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="tracking-modeType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The tracking modes for sessions created by this web
+                application
+
+                Used in: session-config
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="COOKIE"/>
+            <xsd:enumeration value="URL"/>
+            <xsd:enumeration value="SSL"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="cookie-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The cookie-configType defines the configuration for the
+                session tracking cookies of this web application.
+
+                Used in: session-config
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="name"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The name that will be assigned to any session tracking
+                        cookies created by this web application.
+                        The default is JSESSIONID
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="domain"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The domain name that will be assigned to any session tracking
+                        cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="path"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The path that will be assigned to any session tracking
+                        cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="comment"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The comment that will be assigned to any session tracking
+                        cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="http-only"
+                         type="xsd:boolean"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        Specifies whether any session tracking cookies created
+                        by this web application will be marked as HttpOnly
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="secure"
+                         type="xsd:boolean"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        Specifies whether any session tracking cookies created
+                        by this web application will be marked as secure
+                        even if the request that initiated the corresponding session
+                        is using plain HTTP instead of HTTPS
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="max-age"
+                         type="xsd:integer"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The lifetime (in seconds) that will be assigned to any
+                        session tracking cookies created by this web application.
+                        Default is -1
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="replication-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-granularity" type="replication-granularityType" minOccurs="0"
+                         default="SESSION">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scrope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated reglardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="replication-granularityType">
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/shared-session-config_2_0.xsd b/wildfly/docs/schema/shared-session-config_2_0.xsd
new file mode 100644
index 0000000..f963bf4
--- /dev/null
+++ b/wildfly/docs/schema/shared-session-config_2_0.xsd
@@ -0,0 +1,293 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:shared-session-config:2.0"
+            xmlns="urn:jboss:shared-session-config:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- Root element -->
+    <xsd:element name="shared-session-config" type="sharedSessionType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Root element for the shared session config. If this is present in the root of
+                an ear then all war's deployed in the ear will share a single session manager.
+            </xsd:documentation>
+        </xsd:annotation>
+    </xsd:element>
+
+    <xsd:complexType name="sharedSessionType">
+        <xsd:sequence>
+            <xsd:element name="distributable" type="empty" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-active-sessions" type="xsd:string" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="session-config" type="session-configType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="replication-config" type="replication-configType" minOccurs="0" maxOccurs="1"/>
+
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="session-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The session-configType defines the session parameters
+                for this web application.
+
+                Used in: web-app
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="session-timeout"
+                         type="xsd:integer"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The session-timeout element defines the default
+                        session timeout interval for all sessions created
+                        in this web application. The specified timeout
+                        must be expressed in a whole number of minutes.
+                        If the timeout is 0 or less, the container ensures
+                        the default behaviour of sessions is never to time
+                        out. If this element is not specified, the container
+                        must set its default timeout period.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="cookie-config"
+                         type="cookie-configType"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The cookie-config element defines the configuration of the
+                        session tracking cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="tracking-mode"
+                         type="tracking-modeType"
+                         minOccurs="0"
+                         maxOccurs="3">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The tracking-mode element defines the tracking modes
+                        for sessions created by this web application
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+    </xsd:complexType>
+
+    <xsd:simpleType name="tracking-modeType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The tracking modes for sessions created by this web
+                application
+
+                Used in: session-config
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="COOKIE"/>
+            <xsd:enumeration value="URL"/>
+            <xsd:enumeration value="SSL"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="cookie-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The cookie-configType defines the configuration for the
+                session tracking cookies of this web application.
+
+                Used in: session-config
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="name"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The name that will be assigned to any session tracking
+                        cookies created by this web application.
+                        The default is JSESSIONID
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="domain"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The domain name that will be assigned to any session tracking
+                        cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="path"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The path that will be assigned to any session tracking
+                        cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="comment"
+                         type="xsd:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The comment that will be assigned to any session tracking
+                        cookies created by this web application.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="http-only"
+                         type="xsd:boolean"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        Specifies whether any session tracking cookies created
+                        by this web application will be marked as HttpOnly
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="secure"
+                         type="xsd:boolean"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        Specifies whether any session tracking cookies created
+                        by this web application will be marked as secure
+                        even if the request that initiated the corresponding session
+                        is using plain HTTP instead of HTTPS
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="max-age"
+                         type="xsd:integer"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The lifetime (in seconds) that will be assigned to any
+                        session tracking cookies created by this web application.
+                        Default is -1
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <xsd:complexType name="replication-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+                <![CDATA[
+
+            HTTP Session clustering configuration (optional tags)
+
+            ]]>
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="cache-name" type="xsd:string" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Specifies the name of the Infinispan container and cache in which to store session data.
+
+                    Default value, if not explicitly set, is determined by the application server.
+
+                    To use a specific cache within a cache container, use the form "container.cache".
+                    If unqualified, the default cache of the specified container is used.
+
+                    e.g. <cache-name>web</cache-name>
+                         <cache-name>web.dist</cache-name>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="replication-granularity" type="replication-granularityType" minOccurs="0"
+                         default="SESSION">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        <![CDATA[
+
+                    Clustering only: Determines the session replication granularity level.
+                    Possible values are:
+                            1 - "SESSION" (default)
+                            2 - "ATTRIBUTE"
+
+                    Using SESSION granularity, all session attributes are replicated if any were modified within
+                    the scrope of a request. This policy is required if an object reference is shared by multiple
+                    session attributes. However, this can be inefficient if session attributes are sufficiently
+                    large and/org are modified infrequently, since all attributes must be replicated reglardless
+                    of  whether they were modified or not.
+
+                    Using ATTRIBUTE granularity, only those attributes that were modified within the scope of a
+                    request are replicated. This policy is not appropriate if an object reference is shared by
+                    multiple session attributes. This can be more efficient than SESSION granularity if the
+                    session attributes are sufficiently large and/or modified infrequently.
+
+                    Examples:
+                          <replication-granularity>SESSION</replication-granularity>
+                       or
+                          <replication-granularity>ATTRIBUTE</replication-granularity>
+
+                    ]]>
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:simpleType name="replication-granularityType">
+        <xsd:restriction base="xsd:string">
+            <xsd:enumeration value="SESSION"/>
+            <xsd:enumeration value="ATTRIBUTE"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <xsd:complexType name="empty"/>
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/singleton-deployment_1_0.xsd b/wildfly/docs/schema/singleton-deployment_1_0.xsd
new file mode 100644
index 0000000..1b89295
--- /dev/null
+++ b/wildfly/docs/schema/singleton-deployment_1_0.xsd
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema targetNamespace="urn:jboss:singleton-deployment:1.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:singleton-deployment:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="singleton-deployment" type="tns:singleton-deployment"></xs:element>
+
+    <xs:complexType name="singleton-deployment">
+        <xs:attribute name="policy" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Identifies the policy used to deploy the application.
+                    If undefined, the default singleton deployment policy of the server will be used,
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/trans-timeout-1_0.xsd b/wildfly/docs/schema/trans-timeout-1_0.xsd
new file mode 100644
index 0000000..bbe3489
--- /dev/null
+++ b/wildfly/docs/schema/trans-timeout-1_0.xsd
@@ -0,0 +1,46 @@
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright (c) 2011, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:trans-timeout"
+           xmlns="urn:trans-timeout"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="http://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_0.xsd"/>
+
+   <xs:element name="trans-timeout" type="trans-timeoutType" substitutionGroup="javaee:container-transaction-entry"/>
+
+   <xs:complexType name="trans-timeoutType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-container-transaction-entryType">
+            <xs:sequence>
+               <xs:element name="timeout"
+                           type="javaee:xsdIntegerType"/>
+               <xs:element name="unit"
+                           type="javaee:time-unit-typeType"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/trans-timeout-1_1.xsd b/wildfly/docs/schema/trans-timeout-1_1.xsd
new file mode 100644
index 0000000..aab7798
--- /dev/null
+++ b/wildfly/docs/schema/trans-timeout-1_1.xsd
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2019, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:trans-timeout"
+           xmlns="urn:trans-timeout"
+           xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="http://java.sun.com/xml/ns/javaee https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_1.xsd">
+   <xs:import namespace="http://java.sun.com/xml/ns/javaee" schemaLocation="https://www.jboss.org/j2ee/schema/jboss-ejb3-spec-2_1.xsd"/>
+
+   <xs:element name="trans-timeout" type="trans-timeoutType" substitutionGroup="javaee:container-transaction-entry"/>
+
+   <xs:complexType name="trans-timeoutType">
+      <xs:complexContent>
+         <xs:extension base="javaee:jboss-container-transaction-entryType">
+            <xs:sequence>
+               <xs:element name="timeout"
+                           type="javaee:xsdIntegerType"/>
+               <xs:element name="unit"
+                           type="javaee:time-unit-typeType"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/trans-timeout-2_0.xsd b/wildfly/docs/schema/trans-timeout-2_0.xsd
new file mode 100644
index 0000000..0d5aced
--- /dev/null
+++ b/wildfly/docs/schema/trans-timeout-2_0.xsd
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+~ JBoss, Home of Professional Open Source
+~ Copyright 2022, Red Hat, Inc., and individual contributors as indicated
+~ by the @authors tag.
+~
+~ Licensed under the Apache License, Version 2.0 (the "License");
+~ you may not use this file except in compliance with the License.
+~ You may obtain a copy of the License at
+~
+~ http://www.apache.org/licenses/LICENSE-2.0
+~
+~ Unless required by applicable law or agreed to in writing, software
+~ distributed under the License is distributed on an "AS IS" BASIS,
+~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+~ See the License for the specific language governing permissions and
+~ limitations under the License.
+-->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:trans-timeout"
+           xmlns="urn:trans-timeout"
+           xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd">
+   <xs:import namespace="https://jakarta.ee/xml/ns/jakartaee" schemaLocation="https://www.jboss.org/schema/jbossas/jboss-ejb3-spec-4_0.xsd"/>
+
+   <xs:element name="trans-timeout" type="trans-timeoutType" substitutionGroup="jakartaee:container-transaction-entry"/>
+
+   <xs:complexType name="trans-timeoutType">
+      <xs:complexContent>
+         <xs:extension base="jakartaee:jboss-container-transaction-entryType">
+            <xs:sequence>
+               <xs:element name="timeout"
+                           type="jakartaee:xsdIntegerType"/>
+               <xs:element name="unit"
+                           type="jakartaee:time-unit-typeType"/>
+            </xs:sequence>
+         </xs:extension>
+      </xs:complexContent>
+   </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/user-roles_1_0.xsd b/wildfly/docs/schema/user-roles_1_0.xsd
new file mode 100644
index 0000000..d5673e6
--- /dev/null
+++ b/wildfly/docs/schema/user-roles_1_0.xsd
@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- $Id: user-roles_1_0.xsd 36257 2005-09-22 23:41:22Z starksm $ -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+   elementFormDefault="qualified"
+   targetNamespace="urn:jboss:user-roles:1.0"
+   xmlns:jbxb="https://www.jboss.org/xml/ns/jbxb"
+   xmlns:ur="urn:jboss:user-roles:1.0">
+
+   <xsd:element name="users">
+      <xsd:annotation>
+         <xsd:documentation>
+            This is the jbossxb annotated schema for the embedded users content
+            for the org.jboss.security.auth.spi.XMLLoginModule
+         </xsd:documentation>
+         <xsd:appinfo>
+            <jbxb:class impl="org.jboss.security.auth.spi.Users"/>
+         </xsd:appinfo>
+      </xsd:annotation>
+      <xsd:complexType>
+         <xsd:sequence>
+            <xsd:element minOccurs="1" maxOccurs="unbounded" ref="ur:user"/>
+         </xsd:sequence>
+      </xsd:complexType>
+   </xsd:element>
+   <xsd:element name="user">
+      <xsd:annotation>
+         <xsd:appinfo>
+            <jbxb:class impl="org.jboss.security.auth.spi.Users$User"/>
+            <jbxb:addMethod name="addUser" valueType="child"/>
+         </xsd:appinfo>
+      </xsd:annotation>
+      <xsd:complexType>
+         <xsd:sequence>
+            <xsd:element minOccurs="0" maxOccurs="unbounded" ref="ur:role"/>
+         </xsd:sequence>
+         <xsd:attribute name="name" use="required" type="xsd:NCName"/>
+         <xsd:attribute name="password" use="required" type="xsd:NCName"/>
+      </xsd:complexType>
+   </xsd:element>
+   <xsd:element name="role">
+      <xsd:annotation>
+         <xsd:appinfo>
+            <jbxb:mapEntry/>
+            <jbxb:putMethod name="addRole"
+               keyType="java.lang.String" valueType="java.lang.String" />
+         </xsd:appinfo>
+      </xsd:annotation>
+
+      <xsd:complexType>
+         <xsd:attribute name="group" use="optional" type="xsd:NCName" default="Roles">
+            <xsd:annotation>
+               <xsd:appinfo>
+                  <jbxb:mapEntryValue/>
+               </xsd:appinfo>
+            </xsd:annotation>
+         </xsd:attribute>
+         <xsd:attribute name="name" use="required" type="xsd:NCName">
+            <xsd:annotation>
+               <xsd:appinfo>
+                  <jbxb:mapEntryKey/>
+               </xsd:appinfo>
+            </xsd:annotation>
+         </xsd:attribute> 
+      </xsd:complexType>
+   </xsd:element>
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-app_2_4.xsd b/wildfly/docs/schema/web-app_2_4.xsd
new file mode 100644
index 0000000..79a2513
--- /dev/null
+++ b/wildfly/docs/schema/web-app_2_4.xsd
@@ -0,0 +1,1234 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="2.4">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)web-app_2_4.xsds	1.60 03/08/26
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2004 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the Servlet 2.4 deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/web.xml" in the
+	web application's war file.  All Servlet deployment descriptors
+	must indicate the web application schema by using the J2EE
+	namespace:
+
+	http://java.sun.com/xml/ns/j2ee
+
+	and by indicating the version of the schema by
+	using the version element as shown below:
+
+	    <web-app xmlns="http://java.sun.com/xml/ns/j2ee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="..."
+	      version="2.4">
+	      ...
+	    </web-app>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for J2EE
+	namespace with the following location:
+
+	http://java.sun.com/xml/ns/j2ee/web-app_2_4.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all J2EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+  <xsd:include schemaLocation="jsp_2_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+
+  <xsd:element name="web-app" type="j2ee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The web-app element is the root of the deployment
+	descriptor for a web application.  Note that the sub-elements
+	of this element can be in the arbitrary order. Because of
+	that, the multiplicity of the elements of distributable,
+	session-config, welcome-file-list, jsp-config, login-config,
+	and locale-encoding-mapping-list was changed from "?" to "*"
+	in this schema.  However, the deployment descriptor instance
+	file must not contain multiple elements of session-config,
+	jsp-config, and login-config. When there are multiple elements of
+	welcome-file-list or locale-encoding-mapping-list, the container
+	must concatinate the element contents.  The multiple occurance
+	of the element distributable is redundant and the container
+	treats that case exactly in the same way when there is only
+	one distributable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:unique name="web-app-servlet-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The servlet element contains the name of a servlet.
+	  The name must be unique within the web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:servlet"/>
+      <xsd:field    xpath="j2ee:servlet-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-filter-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The filter element contains the name of a filter.
+	  The name must be unique within the web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:filter"/>
+      <xsd:field    xpath="j2ee:filter-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The ejb-local-ref-name element contains the name of an EJB
+	  reference. The EJB reference is an entry in the web
+	  application's environment and is relative to the
+	  java:comp/env context.  The name must be unique within
+	  the web application.
+
+	  It is recommended that name is prefixed with "ejb/".
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:ejb-local-ref"/>
+      <xsd:field    xpath="j2ee:ejb-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The ejb-ref-name element contains the name of an EJB
+	  reference. The EJB reference is an entry in the web
+	  application's environment and is relative to the
+	  java:comp/env context.  The name must be unique within
+	  the web application.
+
+	  It is recommended that name is prefixed with "ejb/".
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:ejb-ref"/>
+      <xsd:field    xpath="j2ee:ejb-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-resource-env-ref-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The resource-env-ref-name element specifies the name of
+	  a resource environment reference; its value is the
+	  environment entry name used in the web application code.
+	  The name is a JNDI name relative to the java:comp/env
+	  context and must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:resource-env-ref"/>
+      <xsd:field    xpath="j2ee:resource-env-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-message-destination-ref-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The message-destination-ref-name element specifies the name of
+	  a message destination reference; its value is the
+	  environment entry name used in the web application code.
+	  The name is a JNDI name relative to the java:comp/env
+	  context and must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:message-destination-ref"/>
+      <xsd:field    xpath="j2ee:message-destination-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-res-ref-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The res-ref-name element specifies the name of a
+	  resource manager connection factory reference.  The name
+	  is a JNDI name relative to the java:comp/env context.
+	  The name must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:resource-ref"/>
+      <xsd:field    xpath="j2ee:res-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-env-entry-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The env-entry-name element contains the name of a web
+	  application's environment entry.  The name is a JNDI
+	  name relative to the java:comp/env context.  The name
+	  must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:selector xpath="j2ee:env-entry"/>
+      <xsd:field    xpath="j2ee:env-entry-name"/>
+    </xsd:unique>
+
+    <xsd:key name="web-app-role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  A role-name-key is specified to allow the references
+	  from the security-role-refs.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:security-role"/>
+      <xsd:field    xpath="j2ee:role-name"/>
+    </xsd:key>
+
+    <xsd:keyref name="web-app-role-name-references"
+		refer="j2ee:web-app-role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The keyref indicates the references from
+	  security-role-ref to a specified role-name.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:servlet/j2ee:security-role-ref"/>
+      <xsd:field    xpath="j2ee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The auth-constraintType indicates the user roles that
+	should be permitted access to this resource
+	collection. The role-name used here must either correspond
+	to the role-name of one of the security-role elements
+	defined for this web application, or be the specially
+	reserved role-name "*" that is a compact syntax for
+	indicating all roles in the web application. If both "*"
+	and rolenames appear, the container interprets this as all
+	roles.  If no roles are defined, no user is allowed access
+	to the portion of the web application described by the
+	containing security-constraint.  The container matches
+	role names case sensitively when determining access.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="j2ee:role-nameType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The auth-methodType is used to configure the authentication
+	mechanism for the web application. As a prerequisite to
+	gaining access to any web resources which are protected by
+	an authorization constraint, a user must have authenticated
+	using the configured mechanism. Legal values are "BASIC",
+	"DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+	authentication scheme.
+
+	Used in: login-config
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The dispatcher has four legal values: FORWARD, REQUEST, INCLUDE,
+	and ERROR. A value of FORWARD means the Filter will be applied
+	under RequestDispatcher.forward() calls.  A value of REQUEST
+	means the Filter will be applied under ordinary client calls to
+	the path or servlet. A value of INCLUDE means the Filter will be
+	applied under RequestDispatcher.include() calls.  A value of
+	ERROR means the Filter will be applied under the error page
+	mechanism.  The absence of any dispatcher elements in a
+	filter-mapping indicates a default of applying filters only under
+	ordinary client calls to the path or servlet.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="FORWARD"/>
+	<xsd:enumeration value="INCLUDE"/>
+	<xsd:enumeration value="REQUEST"/>
+	<xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The encodingType defines IANA character sets.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The error-code contains an HTTP error code, ex: 404
+
+	Used in: error-page
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:xsdPositiveIntegerType">
+	<xsd:pattern value="\d{3}"/>
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The error-pageType contains a mapping between an error code
+	or exception type to the path of a resource in the web
+	application.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:choice>
+	<xsd:element name="error-code"
+		     type="j2ee:error-codeType"/>
+
+	<xsd:element name="exception-type"
+		     type="j2ee:fully-qualified-classType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The exception-type contains a fully qualified class
+	      name of a Java exception type.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+
+      <xsd:element name="location"
+		   type="j2ee:war-pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The location element contains the location of the
+	    resource in the web application relative to the root of
+	    the web application. The value of the location must have
+	    a leading `/'.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Declaration of the filter mappings in this web
+	application is done by using filter-mappingType.
+	The container uses the filter-mapping
+	declarations to decide which filters to apply to a request,
+	and in what order. The container matches the request URI to
+	a Servlet in the normal way. To determine which filters to
+	apply it matches filter-mapping declarations either on
+	servlet-name, or on url-pattern for each filter-mapping
+	element, depending on which style is used. The order in
+	which filters are invoked is the order in which
+	filter-mapping declarations that match a request URI for a
+	servlet appear in the list of filter-mapping elements.The
+	filter-name value must be the value of the filter-name
+	sub-elements of one of the filter declarations in the
+	deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+		   type="j2ee:filter-nameType"/>
+      <xsd:choice>
+	<xsd:element name="url-pattern"
+		     type="j2ee:url-patternType"/>
+	<xsd:element name="servlet-name"
+		     type="j2ee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+		   type="j2ee:dispatcherType"
+		   minOccurs="0" maxOccurs="4"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The logical name of the filter is declare
+	by using filter-nameType. This name is used to map the
+	filter.  Each filter name is unique within the web
+	application.
+
+	Used in: filter, filter-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:extension base="j2ee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The filterType is used to declare a filter in the web
+	application. The filter is mapped to either a servlet or a
+	URL pattern in the filter-mapping element, using the
+	filter-name value to reference. Filters can access the
+	initialization parameters declared in the deployment
+	descriptor at runtime via the FilterConfig interface.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+		   type="j2ee:filter-nameType"/>
+      <xsd:element name="filter-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The fully qualified classname of the filter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="init-param"
+		   type="j2ee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The init-param element contains a name/value pair as
+	    an initialization param of a servlet filter
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The form-login-configType specifies the login and error
+	pages that should be used in form based login. If form based
+	authentication is not used, these elements are ignored.
+
+	Used in: login-config
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+
+      <xsd:element name="form-login-page"
+		   type="j2ee:war-pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The form-login-page element defines the location in the web
+	    app where the page that can be used for login can be
+	    found.  The path begins with a leading / and is interpreted
+	    relative to the root of the WAR.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="form-error-page"
+		   type="j2ee:war-pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The form-error-page element defines the location in
+	    the web app where the error page that is displayed
+	    when login is not successful can be found.
+	    The path begins with a leading / and is interpreted
+	    relative to the root of the WAR.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="http-methodType">
+    <xsd:annotation>
+
+      <xsd:documentation>
+
+	The http-method contains an HTTP method recognized by the
+	web-app, for example GET, POST, ...
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="GET"/>
+	<xsd:enumeration value="POST"/>
+	<xsd:enumeration value="PUT"/>
+	<xsd:enumeration value="DELETE"/>
+	<xsd:enumeration value="HEAD"/>
+	<xsd:enumeration value="OPTIONS"/>
+	<xsd:enumeration value="TRACE"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The locale-encoding-mapping-list contains one or more
+	locale-encoding-mapping(s).
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+		   type="j2ee:locale-encoding-mappingType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The locale-encoding-mapping contains locale name and
+	encoding name. The locale name must be either "Language-code",
+	such as "ja", defined by ISO-639 or "Language-code_Country-code",
+	such as "ja_JP".  "Country code" is defined by ISO-3166.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="locale"
+		   type="j2ee:localeType"/>
+      <xsd:element name="encoding"
+		   type="j2ee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The localeType defines valid locale defined by ISO-639-1
+	and ISO-3166.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The login-configType is used to configure the authentication
+	method that should be used, the realm name that should be
+	used for this application, and the attributes that are
+	needed by the form login mechanism.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+		   type="j2ee:auth-methodType"
+		   minOccurs="0"/>
+      <xsd:element name="realm-name"
+		   type="j2ee:string" minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The realm name element specifies the realm name to
+	    use in HTTP Basic authorization.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+		   type="j2ee:form-login-configType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The mime-mappingType defines a mapping between an extension
+	and a mime type.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The extension element contains a string describing an
+	  extension. example: "txt"
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:element name="extension"
+		   type="j2ee:string"/>
+      <xsd:element name="mime-type"
+		   type="j2ee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The mime-typeType is used to indicate a defined mime type.
+
+	Example:
+	"text/plain"
+
+	Used in: mime-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+        <xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+	This type defines a string which contains at least one
+	character.
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The security-constraintType is used to associate
+	security constraints with one or more web resource
+	collections
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="display-name"
+		   type="j2ee:display-nameType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+		   type="j2ee:web-resource-collectionType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+		   type="j2ee:auth-constraintType"
+		   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+		   type="j2ee:user-data-constraintType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The servlet-mappingType defines a mapping between a
+	servlet and a url pattern.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+		   type="j2ee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+		   type="j2ee:url-patternType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The servlet-name element contains the canonical name of the
+	servlet. Each servlet name is unique within the web
+	application.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:extension base="j2ee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The servletType is used to declare a servlet.
+	It contains the declarative data of a
+	servlet. If a jsp-file is specified and the load-on-startup
+	element is present, then the JSP should be precompiled and
+	loaded.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+		   type="j2ee:servlet-nameType"/>
+      <xsd:choice>
+	<xsd:element name="servlet-class"
+		     type="j2ee:fully-qualified-classType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The servlet-class element contains the fully
+	      qualified class name of the servlet.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+
+	<xsd:element name="jsp-file"
+		     type="j2ee:jsp-fileType"/>
+
+      </xsd:choice>
+
+      <xsd:element name="init-param"
+		   type="j2ee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+		   type="j2ee:xsdIntegerType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The load-on-startup element indicates that this
+	    servlet should be loaded (instantiated and have
+	    its init() called) on the startup of the web
+	    application. The optional contents of these
+	    element must be an integer indicating the order in
+	    which the servlet should be loaded. If the value
+	    is a negative integer, or the element is not
+	    present, the container is free to load the servlet
+	    whenever it chooses. If the value is a positive
+	    integer or 0, the container must load and
+	    initialize the servlet as the application is
+	    deployed. The container must guarantee that
+	    servlets marked with lower integers are loaded
+	    before servlets marked with higher integers. The
+	    container may choose the order of loading of
+	    servlets with the same load-on-start-up value.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="run-as"
+		   type="j2ee:run-asType"
+		   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+		   type="j2ee:security-role-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The session-configType defines the session parameters
+	for this web application.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+		   type="j2ee:xsdIntegerType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The session-timeout element defines the default
+	    session timeout interval for all sessions created
+	    in this web application. The specified timeout
+	    must be expressed in a whole number of minutes.
+	    If the timeout is 0 or less, the container ensures
+	    the default behaviour of sessions is never to time
+	    out. If this element is not specified, the container
+	    must set its default timeout period.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The transport-guaranteeType specifies that the communication
+	between client and server should be NONE, INTEGRAL, or
+	CONFIDENTIAL. NONE means that the application does not
+	require any transport guarantees. A value of INTEGRAL means
+	that the application requires that the data sent between the
+	client and server be sent in such a way that it can't be
+	changed in transit. CONFIDENTIAL means that the application
+	requires that the data be transmitted in a fashion that
+	prevents other entities from observing the contents of the
+	transmission. In most cases, the presence of the INTEGRAL or
+	CONFIDENTIAL flag will indicate that the use of SSL is
+	required.
+
+	Used in: user-data-constraint
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="NONE"/>
+	<xsd:enumeration value="INTEGRAL"/>
+	<xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The user-data-constraintType is used to indicate how
+	data communicated between the client and container should be
+	protected.
+
+	Used in: security-constraint
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+		   type="j2ee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The elements that use this type designate a path starting
+	with a "/" and interpreted relative to the root of a WAR
+	file.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type contains the recognized versions of
+	web-application supported. It is used to designate the
+	version of the web application.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="2.4"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+
+    <xsd:choice minOccurs="0" maxOccurs="unbounded">
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="distributable"
+		   type="j2ee:emptyType"/>
+      <xsd:element name="context-param"
+		   type="j2ee:param-valueType">
+
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The context-param element contains the declaration
+	    of a web application's servlet context
+	    initialization parameters.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="filter"
+		   type="j2ee:filterType"/>
+      <xsd:element name="filter-mapping"
+		   type="j2ee:filter-mappingType"/>
+      <xsd:element name="listener"
+		   type="j2ee:listenerType"/>
+      <xsd:element name="servlet"
+		   type="j2ee:servletType"/>
+      <xsd:element name="servlet-mapping"
+		   type="j2ee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+		   type="j2ee:session-configType"/>
+      <xsd:element name="mime-mapping"
+		   type="j2ee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+		   type="j2ee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+		   type="j2ee:error-pageType"/>
+      <xsd:element name="jsp-config"
+		   type="j2ee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+		   type="j2ee:security-constraintType"/>
+      <xsd:element name="login-config"
+		   type="j2ee:login-configType"/>
+      <xsd:element name="security-role"
+		   type="j2ee:security-roleType"/>
+      <xsd:group ref="j2ee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+		   type="j2ee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+		   type="j2ee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+
+    <xsd:attribute name="version"
+		   type="j2ee:web-app-versionType"
+		   use="required"/>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The web-resource-collectionType is used to identify a subset
+	of the resources and HTTP methods on those resources within
+	a web application to which a security constraint applies. If
+	no HTTP methods are specified, then the security constraint
+	applies to all HTTP methods.
+
+	Used in: security-constraint
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The web-resource-name contains the name of this web
+	    resource collection.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+		   type="j2ee:url-patternType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="http-method"
+		   type="j2ee:http-methodType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The welcome-file-list contains an ordered list of welcome
+	files elements.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+		   type="xsd:string"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The welcome-file element contains file name to use
+	    as a default welcome file, such as index.html
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-app_2_5.xsd b/wildfly/docs/schema/web-app_2_5.xsd
new file mode 100644
index 0000000..8c0902e
--- /dev/null
+++ b/wildfly/docs/schema/web-app_2_5.xsd
@@ -0,0 +1,1271 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+	    targetNamespace="http://java.sun.com/xml/ns/javaee"
+	    xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+	    xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+	    elementFormDefault="qualified"
+	    attributeFormDefault="unqualified"
+	    version="2.5">
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)web-app_2_5.xsds	1.62 05/08/06
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2005 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the Servlet 2.5 deployment descriptor.
+	The deployment descriptor must be named "WEB-INF/web.xml" in the
+	web application's war file.  All Servlet deployment descriptors
+	must indicate the web application schema by using the Java EE
+	namespace:
+
+	http://java.sun.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version element as shown below:
+
+	    <web-app xmlns="http://java.sun.com/xml/ns/javaee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="..."
+	      version="2.5">
+	      ...
+	    </web-app>
+
+	The instance documents may indicate the published version of
+	the schema using the xsi:schemaLocation attribute for Java EE
+	namespace with the following location:
+
+	http://java.sun.com/xml/ns/javaee/web-app_2_5.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+
+      - In elements that specify a pathname to a file within the
+	same JAR file, relative filenames (i.e., those not
+	starting with "/") are considered relative to the root of
+	the JAR file's namespace.  Absolute filenames (i.e., those
+	starting with "/") also specify names in the root of the
+	JAR file's namespace.  In general, relative names are
+	preferred.  The exception is .war files where absolute
+	names are preferred for consistency with the Servlet API.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_5.xsd"/>
+  <xsd:include schemaLocation="jsp_2_1.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-app" type="javaee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The web-app element is the root of the deployment
+	descriptor for a web application.  Note that the sub-elements
+	of this element can be in the arbitrary order. Because of
+	that, the multiplicity of the elements of distributable,
+	session-config, welcome-file-list, jsp-config, login-config,
+	and locale-encoding-mapping-list was changed from "?" to "*"
+	in this schema.  However, the deployment descriptor instance
+	file must not contain multiple elements of session-config,
+	jsp-config, and login-config. When there are multiple elements of
+	welcome-file-list or locale-encoding-mapping-list, the container
+	must concatenate the element contents.  The multiple occurence
+	of the element distributable is redundant and the container
+	treats that case exactly in the same way when there is only
+	one distributable.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:unique name="web-app-servlet-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The servlet element contains the name of a servlet.
+	  The name must be unique within the web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field    xpath="javaee:servlet-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-filter-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The filter element contains the name of a filter.
+	  The name must be unique within the web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field    xpath="javaee:filter-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The ejb-local-ref-name element contains the name of an EJB
+	  reference. The EJB reference is an entry in the web
+	  application's environment and is relative to the
+	  java:comp/env context.  The name must be unique within
+	  the web application.
+
+	  It is recommended that name is prefixed with "ejb/".
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field    xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The ejb-ref-name element contains the name of an EJB
+	  reference. The EJB reference is an entry in the web
+	  application's environment and is relative to the
+	  java:comp/env context.  The name must be unique within
+	  the web application.
+
+	  It is recommended that name is prefixed with "ejb/".
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field    xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-resource-env-ref-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The resource-env-ref-name element specifies the name of
+	  a resource environment reference; its value is the
+	  environment entry name used in the web application code.
+	  The name is a JNDI name relative to the java:comp/env
+	  context and must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field    xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-message-destination-ref-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The message-destination-ref-name element specifies the name of
+	  a message destination reference; its value is the
+	  environment entry name used in the web application code.
+	  The name is a JNDI name relative to the java:comp/env
+	  context and must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field    xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-res-ref-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The res-ref-name element specifies the name of a
+	  resource manager connection factory reference.  The name
+	  is a JNDI name relative to the java:comp/env context.
+	  The name must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field    xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+
+    <xsd:unique name="web-app-env-entry-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The env-entry-name element contains the name of a web
+	  application's environment entry.  The name is a JNDI
+	  name relative to the java:comp/env context.  The name
+	  must be unique within a web application.
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field    xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+
+    <xsd:key name="web-app-role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  A role-name-key is specified to allow the references
+	  from the security-role-refs.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field    xpath="javaee:role-name"/>
+    </xsd:key>
+
+    <xsd:keyref name="web-app-role-name-references"
+		refer="javaee:web-app-role-name-key">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The keyref indicates the references from
+	  security-role-ref to a specified role-name.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field    xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The auth-constraintType indicates the user roles that
+	should be permitted access to this resource
+	collection. The role-name used here must either correspond
+	to the role-name of one of the security-role elements
+	defined for this web application, or be the specially
+	reserved role-name "*" that is a compact syntax for
+	indicating all roles in the web application. If both "*"
+	and rolenames appear, the container interprets this as all
+	roles.  If no roles are defined, no user is allowed access
+	to the portion of the web application described by the
+	containing security-constraint.  The container matches
+	role names case sensitively when determining access.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+		   type="javaee:role-nameType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The auth-methodType is used to configure the authentication
+	mechanism for the web application. As a prerequisite to
+	gaining access to any web resources which are protected by
+	an authorization constraint, a user must have authenticated
+	using the configured mechanism. Legal values are "BASIC",
+	"DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+	authentication scheme.
+
+	Used in: login-config
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The dispatcher has four legal values: FORWARD, REQUEST, INCLUDE,
+	and ERROR. A value of FORWARD means the Filter will be applied
+	under RequestDispatcher.forward() calls.  A value of REQUEST
+	means the Filter will be applied under ordinary client calls to
+	the path or servlet. A value of INCLUDE means the Filter will be
+	applied under RequestDispatcher.include() calls.  A value of
+	ERROR means the Filter will be applied under the error page
+	mechanism.  The absence of any dispatcher elements in a
+	filter-mapping indicates a default of applying filters only under
+	ordinary client calls to the path or servlet.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="FORWARD"/>
+	<xsd:enumeration value="INCLUDE"/>
+	<xsd:enumeration value="REQUEST"/>
+	<xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The encodingType defines IANA character sets.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The error-code contains an HTTP error code, ex: 404
+
+	Used in: error-page
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdPositiveIntegerType">
+	<xsd:pattern value="\d{3}"/>
+	<xsd:attribute name="id" type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The error-pageType contains a mapping between an error code
+	or exception type to the path of a resource in the web
+	application.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:choice>
+	<xsd:element name="error-code"
+		     type="javaee:error-codeType"/>
+
+	<xsd:element name="exception-type"
+		     type="javaee:fully-qualified-classType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The exception-type contains a fully qualified class
+	      name of a Java exception type.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+
+      <xsd:element name="location"
+		   type="javaee:war-pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The location element contains the location of the
+	    resource in the web application relative to the root of
+	    the web application. The value of the location must have
+	    a leading `/'.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Declaration of the filter mappings in this web
+	application is done by using filter-mappingType.
+	The container uses the filter-mapping
+	declarations to decide which filters to apply to a request,
+	and in what order. The container matches the request URI to
+	a Servlet in the normal way. To determine which filters to
+	apply it matches filter-mapping declarations either on
+	servlet-name, or on url-pattern for each filter-mapping
+	element, depending on which style is used. The order in
+	which filters are invoked is the order in which
+	filter-mapping declarations that match a request URI for a
+	servlet appear in the list of filter-mapping elements.The
+	filter-name value must be the value of the filter-name
+	sub-elements of one of the filter declarations in the
+	deployment descriptor.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+		   type="javaee:filter-nameType"/>
+      <xsd:choice minOccurs="1" maxOccurs="unbounded">
+	<xsd:element name="url-pattern"
+		     type="javaee:url-patternType"/>
+	<xsd:element name="servlet-name"
+		     type="javaee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+		   type="javaee:dispatcherType"
+		   minOccurs="0" maxOccurs="4"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The logical name of the filter is declare
+	by using filter-nameType. This name is used to map the
+	filter.  Each filter name is unique within the web
+	application.
+
+	Used in: filter, filter-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The filterType is used to declare a filter in the web
+	application. The filter is mapped to either a servlet or a
+	URL pattern in the filter-mapping element, using the
+	filter-name value to reference. Filters can access the
+	initialization parameters declared in the deployment
+	descriptor at runtime via the FilterConfig interface.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+		   type="javaee:filter-nameType"/>
+      <xsd:element name="filter-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The fully qualified classname of the filter.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="init-param"
+		   type="javaee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The init-param element contains a name/value pair as
+	    an initialization param of a servlet filter
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The form-login-configType specifies the login and error
+	pages that should be used in form based login. If form based
+	authentication is not used, these elements are ignored.
+
+	Used in: login-config
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+
+      <xsd:element name="form-login-page"
+		   type="javaee:war-pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The form-login-page element defines the location in the web
+	    app where the page that can be used for login can be
+	    found.  The path begins with a leading / and is interpreted
+	    relative to the root of the WAR.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="form-error-page"
+		   type="javaee:war-pathType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The form-error-page element defines the location in
+	    the web app where the error page that is displayed
+	    when login is not successful can be found.
+	    The path begins with a leading / and is interpreted
+	    relative to the root of the WAR.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="http-methodType">
+    <xsd:annotation>
+
+      <xsd:documentation>
+
+	A HTTP method type as defined in HTTP 1.1 section 2.2.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+     <xsd:restriction base="xsd:token">
+         <xsd:pattern value="[&#33;-&#126;-[\(\)&#60;&#62;@,;:&#34;/\[\]?=\{\}\\\p{Z}]]+"/>
+     </xsd:restriction>
+
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="load-on-startupType">
+    <xsd:union memberTypes="javaee:null-charType xsd:integer"/>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The locale-encoding-mapping-list contains one or more
+	locale-encoding-mapping(s).
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+		   type="javaee:locale-encoding-mappingType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The locale-encoding-mapping contains locale name and
+	encoding name. The locale name must be either "Language-code",
+	such as "ja", defined by ISO-639 or "Language-code_Country-code",
+	such as "ja_JP".  "Country code" is defined by ISO-3166.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="locale"
+		   type="javaee:localeType"/>
+      <xsd:element name="encoding"
+		   type="javaee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The localeType defines valid locale defined by ISO-639-1
+	and ISO-3166.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The login-configType is used to configure the authentication
+	method that should be used, the realm name that should be
+	used for this application, and the attributes that are
+	needed by the form login mechanism.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+		   type="javaee:auth-methodType"
+		   minOccurs="0"/>
+      <xsd:element name="realm-name"
+		   type="javaee:string" minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The realm name element specifies the realm name to
+	    use in HTTP Basic authorization.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+		   type="javaee:form-login-configType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The mime-mappingType defines a mapping between an extension
+	and a mime type.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The extension element contains a string describing an
+	  extension. example: "txt"
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+      <xsd:element name="extension"
+		   type="javaee:string"/>
+      <xsd:element name="mime-type"
+		   type="javaee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The mime-typeType is used to indicate a defined mime type.
+
+	Example:
+	"text/plain"
+
+	Used in: mime-mapping
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+	This type defines a string which contains at least one
+	character.
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="null-charType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value=""/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The security-constraintType is used to associate
+	security constraints with one or more web resource
+	collections
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="display-name"
+		   type="javaee:display-nameType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+		   type="javaee:web-resource-collectionType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+		   type="javaee:auth-constraintType"
+		   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+		   type="javaee:user-data-constraintType"
+		   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The servlet-mappingType defines a mapping between a
+	servlet and a url pattern.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+		   type="javaee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+		   type="javaee:url-patternType"
+           minOccurs="1" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The servlet-name element contains the canonical name of the
+	servlet. Each servlet name is unique within the web
+	application.
+        The special servlet name of "*" may be used to reference all
+        servlets.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The servletType is used to declare a servlet.
+	It contains the declarative data of a
+	servlet. If a jsp-file is specified and the load-on-startup
+	element is present, then the JSP should be precompiled and
+	loaded.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+		   type="javaee:servlet-nameType"/>
+      <xsd:choice>
+	<xsd:element name="servlet-class"
+		     type="javaee:fully-qualified-classType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The servlet-class element contains the fully
+	      qualified class name of the servlet.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+
+	<xsd:element name="jsp-file"
+		     type="javaee:jsp-fileType"/>
+
+      </xsd:choice>
+
+      <xsd:element name="init-param"
+		   type="javaee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+		   type="javaee:load-on-startupType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The load-on-startup element indicates that this
+	    servlet should be loaded (instantiated and have
+	    its init() called) on the startup of the web
+	    application. The optional contents of these
+	    element must be an integer indicating the order in
+	    which the servlet should be loaded. If the value
+	    is a negative integer, or the element is not
+	    present, the container is free to load the servlet
+	    whenever it chooses. If the value is a positive
+	    integer or 0, the container must load and
+	    initialize the servlet as the application is
+	    deployed. The container must guarantee that
+	    servlets marked with lower integers are loaded
+	    before servlets marked with higher integers. The
+	    container may choose the order of loading of
+	    servlets with the same load-on-start-up value.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="run-as"
+		   type="javaee:run-asType"
+		   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+		   type="javaee:security-role-refType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The session-configType defines the session parameters
+	for this web application.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+		   type="javaee:xsdIntegerType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The session-timeout element defines the default
+	    session timeout interval for all sessions created
+	    in this web application. The specified timeout
+	    must be expressed in a whole number of minutes.
+	    If the timeout is 0 or less, the container ensures
+	    the default behaviour of sessions is never to time
+	    out. If this element is not specified, the container
+	    must set its default timeout period.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The transport-guaranteeType specifies that the communication
+	between client and server should be NONE, INTEGRAL, or
+	CONFIDENTIAL. NONE means that the application does not
+	require any transport guarantees. A value of INTEGRAL means
+	that the application requires that the data sent between the
+	client and server be sent in such a way that it can't be
+	changed in transit. CONFIDENTIAL means that the application
+	requires that the data be transmitted in a fashion that
+	prevents other entities from observing the contents of the
+	transmission. In most cases, the presence of the INTEGRAL or
+	CONFIDENTIAL flag will indicate that the use of SSL is
+	required.
+
+	Used in: user-data-constraint
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="NONE"/>
+	<xsd:enumeration value="INTEGRAL"/>
+	<xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The user-data-constraintType is used to indicate how
+	data communicated between the client and container should be
+	protected.
+
+	Used in: security-constraint
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+		   type="javaee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The elements that use this type designate a path starting
+	with a "/" and interpreted relative to the root of a WAR
+	file.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type contains the recognized versions of
+	web-application supported. It is used to designate the
+	version of the web application.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="2.5"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+
+    <xsd:choice minOccurs="0" maxOccurs="unbounded">
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="distributable"
+		   type="javaee:emptyType"/>
+      <xsd:element name="context-param"
+		   type="javaee:param-valueType">
+
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The context-param element contains the declaration
+	    of a web application's servlet context
+	    initialization parameters.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="filter"
+		   type="javaee:filterType"/>
+      <xsd:element name="filter-mapping"
+		   type="javaee:filter-mappingType"/>
+      <xsd:element name="listener"
+		   type="javaee:listenerType"/>
+      <xsd:element name="servlet"
+		   type="javaee:servletType"/>
+      <xsd:element name="servlet-mapping"
+		   type="javaee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+		   type="javaee:session-configType"/>
+      <xsd:element name="mime-mapping"
+		   type="javaee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+		   type="javaee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+		   type="javaee:error-pageType"/>
+      <xsd:element name="jsp-config"
+		   type="javaee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+		   type="javaee:security-constraintType"/>
+      <xsd:element name="login-config"
+		   type="javaee:login-configType"/>
+      <xsd:element name="security-role"
+		   type="javaee:security-roleType"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+		   type="javaee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+		   type="javaee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+
+    <xsd:attribute name="version"
+		   type="javaee:web-app-versionType"
+		   use="required"/>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+    <xsd:attribute name="metadata-complete" type="xsd:boolean">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The metadata-complete attribute defines whether this
+	  deployment descriptor and other related deployment
+	  descriptors for this module (e.g., web service
+	  descriptors) are complete, or whether the class
+	  files available to this module and packaged with
+	  this application should be examined for annotations
+	  that specify deployment information.
+
+	  If metadata-complete is set to "true", the deployment
+	  tool must ignore any annotations that specify deployment
+	  information, which might be present in the class files
+	  of the application.
+
+	  If metadata-complete is not specified or is set to
+	  "false", the deployment tool must examine the class
+	  files of the application for annotations, as
+	  specified by the specifications.
+
+	</xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The web-resource-collectionType is used to identify a subset
+	of the resources and HTTP methods on those resources within
+	a web application to which a security constraint applies. If
+	no HTTP methods are specified, then the security constraint
+	applies to all HTTP methods.
+
+	Used in: security-constraint
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The web-resource-name contains the name of this web
+	    resource collection.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+		   type="javaee:url-patternType"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="http-method"
+		   type="javaee:http-methodType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The welcome-file-list contains an ordered list of welcome
+	files elements.
+
+	Used in: web-app
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+		   type="xsd:string"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The welcome-file element contains file name to use
+	    as a default welcome file, such as index.html
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-app_3_0.xsd b/wildfly/docs/schema/web-app_3_0.xsd
new file mode 100644
index 0000000..563faf1
--- /dev/null
+++ b/wildfly/docs/schema/web-app_3_0.xsd
@@ -0,0 +1,281 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the Servlet 3.0 deployment descriptor.
+      The deployment descriptor must be named "WEB-INF/web.xml" in the
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Java EE
+      namespace:
+      
+      http://java.sun.com/xml/ns/javaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <web-app xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.0"> 
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://java.sun.com/xml/ns/javaee/web-app_3_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_3_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-app"
+               type="javaee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-app element is the root of the deployment
+        descriptor for a web application.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field xpath="javaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field xpath="javaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="javaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-app_3_1.xsd b/wildfly/docs/schema/web-app_3_1.xsd
new file mode 100644
index 0000000..898f1b3
--- /dev/null
+++ b/wildfly/docs/schema/web-app_3_1.xsd
@@ -0,0 +1,326 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.1">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the Servlet 3.1 deployment descriptor.
+      The deployment descriptor must be named "WEB-INF/web.xml" in the
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Java EE
+      namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.1"> 
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/web-app_3_1.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_3_1.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-app"
+               type="javaee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-app element is the root of the deployment
+        descriptor for a web application.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field xpath="javaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field xpath="javaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="javaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:web-commonType"/>
+      <xsd:element name="deny-uncovered-http-methods"
+                   type="javaee:emptyType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element causes uncovered http methods
+            to be denied. For every url-pattern that is the target of a 
+            security-constrant, this element causes all HTTP methods that
+            are NOT covered (by a security constraint) at the url-pattern
+            to be denied.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="absolute-ordering"
+                   type="javaee:absoluteOrderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="javaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-app_4_0.xsd b/wildfly/docs/schema/web-app_4_0.xsd
new file mode 100644
index 0000000..8619ef6
--- /dev/null
+++ b/wildfly/docs/schema/web-app_4_0.xsd
@@ -0,0 +1,365 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2017 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Servlet 4.0 deployment descriptor.
+      The deployment descriptor must be named "WEB-INF/web.xml" in the
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Java EE
+      namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="4.0">
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_4_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-app"
+               type="javaee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-app element is the root of the deployment
+        descriptor for a web application.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field xpath="javaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field xpath="javaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="javaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:web-commonType"/>
+      <xsd:element name="default-context-path"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default context path
+            of the web application. An empty value for this element must cause
+            the web application to be deployed at the root for the container.
+            Otherwise, the default context path must start with
+            a “/“ character but not end with a “/“ character.
+            Servlet containers may provide vendor specific configuration
+            options that allows specifying a value that overrides the value
+            specified here.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="request-character-encoding"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default request
+            character encoding of the web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="response-character-encoding"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default response
+            character encoding of the web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deny-uncovered-http-methods"
+                   type="javaee:emptyType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element causes uncovered http methods
+            to be denied. For every url-pattern that is the target of a
+            security-constrant, this element causes all HTTP methods that
+            are NOT covered (by a security constraint) at the url-pattern
+            to be denied.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="absolute-ordering"
+                   type="javaee:absoluteOrderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="javaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-app_5_0.xsd b/wildfly/docs/schema/web-app_5_0.xsd
new file mode 100644
index 0000000..55d11db
--- /dev/null
+++ b/wildfly/docs/schema/web-app_5_0.xsd
@@ -0,0 +1,342 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="5.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Servlet 5.0 deployment descriptor.
+      The deployment descriptor must be named "WEB-INF/web.xml" in the
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Jakarta EE
+      namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-app xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="5.0">
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-app_5_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_5_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-app"
+               type="jakartaee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-app element is the root of the deployment
+        descriptor for a web application.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet"/>
+      <xsd:field xpath="jakartaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:filter"/>
+      <xsd:field xpath="jakartaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an 
+          enterprise bean reference. The enterprise 
+          bean reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an 
+          enterprise bean reference. The enterprise bean 
+          reference is an entry in the web application's environment 
+          and is relative to the java:comp/env context.  
+          The name must be unique within the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-env-ref"/>
+      <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:message-destination-ref"/>
+      <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-ref"/>
+      <xsd:field xpath="jakartaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:env-entry"/>
+      <xsd:field xpath="jakartaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="jakartaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet/jakartaee:security-role-ref"/>
+      <xsd:field xpath="jakartaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="module-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:web-commonType"/>
+      <xsd:element name="default-context-path"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default context path
+            of the web application. An empty value for this element must cause
+            the web application to be deployed at the root for the container.
+            Otherwise, the default context path must start with
+            a "/" character but not end with a "/" character.
+            Servlet containers may provide vendor specific configuration
+            options that allows specifying a value that overrides the value
+            specified here.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="request-character-encoding"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default request
+            character encoding of the web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="response-character-encoding"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default response
+            character encoding of the web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deny-uncovered-http-methods"
+                   type="jakartaee:emptyType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element causes uncovered http methods
+            to be denied. For every url-pattern that is the target of a
+            security-constrant, this element causes all HTTP methods that
+            are NOT covered (by a security constraint) at the url-pattern
+            to be denied.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="absolute-ordering"
+                   type="jakartaee:absoluteOrderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="jakartaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-app_6_0.xsd b/wildfly/docs/schema/web-app_6_0.xsd
new file mode 100644
index 0000000..a268373
--- /dev/null
+++ b/wildfly/docs/schema/web-app_6_0.xsd
@@ -0,0 +1,342 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Servlet 6.0 deployment descriptor.
+      The deployment descriptor must be named "WEB-INF/web.xml" in the
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Jakarta EE
+      namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-app xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="6.0">
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-app_6_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_6_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-app"
+               type="jakartaee:web-appType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-app element is the root of the deployment
+        descriptor for a web application.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet"/>
+      <xsd:field xpath="jakartaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:filter"/>
+      <xsd:field xpath="jakartaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an 
+          enterprise bean reference. The enterprise 
+          bean reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an 
+          enterprise bean reference. The enterprise bean 
+          reference is an entry in the web application's environment 
+          and is relative to the java:comp/env context.  
+          The name must be unique within the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-env-ref"/>
+      <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:message-destination-ref"/>
+      <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-ref"/>
+      <xsd:field xpath="jakartaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:env-entry"/>
+      <xsd:field xpath="jakartaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="jakartaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet/jakartaee:security-role-ref"/>
+      <xsd:field xpath="jakartaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="module-name"
+                   type="jakartaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="jakartaee:web-commonType"/>
+      <xsd:element name="default-context-path"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default context path
+            of the web application. An empty value for this element must cause
+            the web application to be deployed at the root for the container.
+            Otherwise, the default context path must start with
+            a "/" character but not end with a "/" character.
+            Servlet containers may provide vendor specific configuration
+            options that allows specifying a value that overrides the value
+            specified here.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="request-character-encoding"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default request
+            character encoding of the web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="response-character-encoding"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element provides a default response
+            character encoding of the web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="deny-uncovered-http-methods"
+                   type="jakartaee:emptyType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            When specified, this element causes uncovered http methods
+            to be denied. For every url-pattern that is the target of a
+            security-constrant, this element causes all HTTP methods that
+            are NOT covered (by a security constraint) at the url-pattern
+            to be denied.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="absolute-ordering"
+                   type="jakartaee:absoluteOrderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="jakartaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-common_3_0.xsd b/wildfly/docs/schema/web-common_3_0.xsd
new file mode 100644
index 0000000..02aa63e
--- /dev/null
+++ b/wildfly/docs/schema/web-common_3_0.xsd
@@ -0,0 +1,1584 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the common XML Schema for the Servlet 3.0 deployment descriptor.
+      This file is in turn used by web.xml and web-fragment.xml
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web common schema by using the Java EE
+      namespace:
+      
+      http://java.sun.com/xml/ns/javaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <web-app xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.0"> 
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://java.sun.com/xml/ns/javaee/web-common_3_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_6.xsd"/>
+
+  <xsd:include schemaLocation="jsp_2_2.xsd"/>
+
+  <xsd:group name="web-commonType">
+    <xsd:choice>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"/>
+      <xsd:element name="distributable"
+                   type="javaee:emptyType"/>
+      <xsd:element name="context-param"
+                   type="javaee:param-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-param element contains the declaration
+            of a web application's servlet context
+            initialization parameters.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="filter"
+                   type="javaee:filterType"/>
+      <xsd:element name="filter-mapping"
+                   type="javaee:filter-mappingType"/>
+      <xsd:element name="listener"
+                   type="javaee:listenerType"/>
+      <xsd:element name="servlet"
+                   type="javaee:servletType"/>
+      <xsd:element name="servlet-mapping"
+                   type="javaee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+                   type="javaee:session-configType"/>
+      <xsd:element name="mime-mapping"
+                   type="javaee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+                   type="javaee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+                   type="javaee:error-pageType"/>
+      <xsd:element name="jsp-config"
+                   type="javaee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+                   type="javaee:security-constraintType"/>
+      <xsd:element name="login-config"
+                   type="javaee:login-configType"/>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+                   type="javaee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+  </xsd:group>
+
+  <xsd:attributeGroup name="web-common-attributes">
+    <xsd:attribute name="version"
+                   type="javaee:web-app-versionType"
+                   use="required"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:attributeGroup>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-appType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="module-name"
+                   type="javaee:string"
+                   minOccurs="0"/>
+      <xsd:group ref="javaee:web-commonType"/>
+      <xsd:element name="absolute-ordering"
+                   type="javaee:absoluteOrderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="javaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-fragmentType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:group ref="javaee:web-commonType"/>
+      <xsd:element name="ordering"
+                   type="javaee:orderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="javaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-constraintType indicates the user roles that
+        should be permitted access to this resource
+        collection. The role-name used here must either correspond
+        to the role-name of one of the security-role elements
+        defined for this web application, or be the specially
+        reserved role-name "*" that is a compact syntax for
+        indicating all roles in the web application. If both "*"
+        and rolenames appear, the container interprets this as all
+        roles.  If no roles are defined, no user is allowed access
+        to the portion of the web application described by the
+        containing security-constraint.  The container matches
+        role names case sensitively when determining access.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-methodType is used to configure the authentication
+        mechanism for the web application. As a prerequisite to
+        gaining access to any web resources which are protected by
+        an authorization constraint, a user must have authenticated
+        using the configured mechanism. Legal values are "BASIC",
+        "DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+        authentication scheme.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The dispatcher has five legal values: FORWARD, REQUEST,
+        INCLUDE, ASYNC, and ERROR.
+        
+        A value of FORWARD means the Filter will be applied under
+        RequestDispatcher.forward() calls.
+        A value of REQUEST means the Filter will be applied under
+        ordinary client calls to the path or servlet.
+        A value of INCLUDE means the Filter will be applied under
+        RequestDispatcher.include() calls.
+        A value of ASYNC means the Filter will be applied under
+        calls dispatched from an AsyncContext.
+        A value of ERROR means the Filter will be applied under the
+        error page mechanism.
+        
+        The absence of any dispatcher elements in a filter-mapping
+        indicates a default of applying filters only under ordinary
+        client calls to the path or servlet.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="FORWARD"/>
+        <xsd:enumeration value="INCLUDE"/>
+        <xsd:enumeration value="REQUEST"/>
+        <xsd:enumeration value="ASYNC"/>
+        <xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-code contains an HTTP error code, ex: 404
+        
+        Used in: error-page
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdPositiveIntegerType">
+        <xsd:pattern value="\d{3}"/>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-pageType contains a mapping between an error code
+        or exception type to the path of a resource in the web
+        application.
+        
+        Error-page declarations using the exception-type element in
+        the deployment descriptor must be unique up to the class name of
+        the exception-type. Similarly, error-page declarations using the
+        status-code element must be unique in the deployment descriptor
+        up to the status code.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="error-code"
+                     type="javaee:error-codeType"/>
+        <xsd:element name="exception-type"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The exception-type contains a fully qualified class
+              name of a Java exception type.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="location"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The location element contains the location of the
+            resource in the web application relative to the root of
+            the web application. The value of the location must have
+            a leading `/'.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The filterType is used to declare a filter in the web
+        application. The filter is mapped to either a servlet or a
+        URL pattern in the filter-mapping element, using the
+        filter-name value to reference. Filters can access the
+        initialization parameters declared in the deployment
+        descriptor at runtime via the FilterConfig interface.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+                   type="javaee:filter-nameType"/>
+      <xsd:element name="filter-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified classname of the filter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-supported"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as
+            an initialization param of a servlet filter
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declaration of the filter mappings in this web
+        application is done by using filter-mappingType. 
+        The container uses the filter-mapping
+        declarations to decide which filters to apply to a request,
+        and in what order. The container matches the request URI to
+        a Servlet in the normal way. To determine which filters to
+        apply it matches filter-mapping declarations either on
+        servlet-name, or on url-pattern for each filter-mapping
+        element, depending on which style is used. The order in
+        which filters are invoked is the order in which
+        filter-mapping declarations that match a request URI for a
+        servlet appear in the list of filter-mapping elements.The
+        filter-name value must be the value of the filter-name
+        sub-elements of one of the filter declarations in the
+        deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+                   type="javaee:filter-nameType"/>
+      <xsd:choice minOccurs="1"
+                  maxOccurs="unbounded">
+        <xsd:element name="url-pattern"
+                     type="javaee:url-patternType"/>
+        <xsd:element name="servlet-name"
+                     type="javaee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+                   type="javaee:dispatcherType"
+                   minOccurs="0"
+                   maxOccurs="5"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a string which contains at least one
+        character.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The logical name of the filter is declare
+        by using filter-nameType. This name is used to map the
+        filter.  Each filter name is unique within the web
+        application.
+        
+        Used in: filter, filter-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The form-login-configType specifies the login and error
+        pages that should be used in form based login. If form based
+        authentication is not used, these elements are ignored.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="form-login-page"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-login-page element defines the location in the web
+            app where the page that can be used for login can be
+            found.  The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-error-page"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-error-page element defines the location in
+            the web app where the error page that is displayed
+            when login is not successful can be found. 
+            The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="http-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A HTTP method type as defined in HTTP 1.1 section 2.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[!-~-[\(\)&#60;&#62;@,;:&#34;/\[\]?=\{\}\\\p{Z}]]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="load-on-startupType">
+    <xsd:union memberTypes="javaee:null-charType xsd:integer"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="null-charType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value=""/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The login-configType is used to configure the authentication
+        method that should be used, the realm name that should be
+        used for this application, and the attributes that are
+        needed by the form login mechanism.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+                   type="javaee:auth-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="realm-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The realm name element specifies the realm name to
+            use in HTTP Basic authorization.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+                   type="javaee:form-login-configType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-mappingType defines a mapping between an extension
+        and a mime type.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The extension element contains a string describing an
+          extension. example: "txt"
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="extension"
+                   type="javaee:string"/>
+      <xsd:element name="mime-type"
+                   type="javaee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-typeType is used to indicate a defined mime type.
+        
+        Example:
+        "text/plain"
+        
+        Used in: mime-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-constraintType is used to associate
+        security constraints with one or more web resource
+        collections
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+                   type="javaee:web-resource-collectionType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+                   type="javaee:auth-constraintType"
+                   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+                   type="javaee:user-data-constraintType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servletType is used to declare a servlet.
+        It contains the declarative data of a
+        servlet. If a jsp-file is specified and the load-on-startup
+        element is present, then the JSP should be precompiled and
+        loaded.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+                   type="javaee:servlet-nameType"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="servlet-class"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The servlet-class element contains the fully
+              qualified class name of the servlet.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="jsp-file"
+                     type="javaee:jsp-fileType"/>
+      </xsd:choice>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+                   type="javaee:load-on-startupType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The load-on-startup element indicates that this
+            servlet should be loaded (instantiated and have
+            its init() called) on the startup of the web
+            application. The optional contents of these
+            element must be an integer indicating the order in
+            which the servlet should be loaded. If the value
+            is a negative integer, or the element is not
+            present, the container is free to load the servlet
+            whenever it chooses. If the value is a positive
+            integer or 0, the container must load and
+            initialize the servlet as the application is
+            deployed. The container must guarantee that
+            servlets marked with lower integers are loaded
+            before servlets marked with higher integers. The
+            container may choose the order of loading of
+            servlets with the same load-on-start-up value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="async-supported"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="run-as"
+                   type="javaee:run-asType"
+                   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="multipart-config"
+                   type="javaee:multipart-configType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-mappingType defines a mapping between a
+        servlet and a url pattern. 
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+                   type="javaee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-name element contains the canonical name of the
+        servlet. Each servlet name is unique within the web
+        application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-configType defines the session parameters
+        for this web application.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The session-timeout element defines the default
+            session timeout interval for all sessions created
+            in this web application. The specified timeout
+            must be expressed in a whole number of minutes.
+            If the timeout is 0 or less, the container ensures
+            the default behaviour of sessions is never to time
+            out. If this element is not specified, the container
+            must set its default timeout period.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cookie-config"
+                   type="javaee:cookie-configType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cookie-config element defines the configuration of the
+            session tracking cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tracking-mode"
+                   type="javaee:tracking-modeType"
+                   minOccurs="0"
+                   maxOccurs="3">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The tracking-mode element defines the tracking modes
+            for sessions created by this web application
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cookie-configType defines the configuration for the
+        session tracking cookies of this web application.
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:cookie-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name that will be assigned to any session tracking
+            cookies created by this web application.
+            The default is JSESSIONID
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="domain"
+                   type="javaee:cookie-domainType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The domain name that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="path"
+                   type="javaee:cookie-pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The path that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="comment"
+                   type="javaee:cookie-commentType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The comment that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="http-only"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created 
+            by this web application will be marked as HttpOnly
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="secure"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created 
+            by this web application will be marked as secure
+            even if the request that initiated the corresponding session
+            is using plain HTTP instead of HTTPS
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-age"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The lifetime (in seconds) that will be assigned to any
+            session tracking cookies created by this web application.
+            Default is -1
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The name that will be assigned to any session tracking
+        cookies created by this web application.
+        The default is JSESSIONID
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-domainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The domain name that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The path that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-commentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The comment that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tracking-modeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tracking modes for sessions created by this web
+        application
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="COOKIE"/>
+        <xsd:enumeration value="URL"/>
+        <xsd:enumeration value="SSL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transport-guaranteeType specifies that the communication
+        between client and server should be NONE, INTEGRAL, or
+        CONFIDENTIAL. NONE means that the application does not
+        require any transport guarantees. A value of INTEGRAL means
+        that the application requires that the data sent between the
+        client and server be sent in such a way that it can't be
+        changed in transit. CONFIDENTIAL means that the application
+        requires that the data be transmitted in a fashion that
+        prevents other entities from observing the contents of the
+        transmission. In most cases, the presence of the INTEGRAL or
+        CONFIDENTIAL flag will indicate that the use of SSL is
+        required.
+        
+        Used in: user-data-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NONE"/>
+        <xsd:enumeration value="INTEGRAL"/>
+        <xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The user-data-constraintType is used to indicate how
+        data communicated between the client and container should be
+        protected.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+                   type="javaee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate a path starting
+        with a "/" and interpreted relative to the root of a WAR
+        file.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type contains the recognized versions of
+        web-application supported. It is used to designate the
+        version of the web application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="3.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-resource-collectionType is used to identify the
+        resources and HTTP methods on those resources to which a
+        security constraint applies. If no HTTP methods are specified,
+        then the security constraint applies to all HTTP methods.
+        If HTTP methods are specified by http-method-omission
+        elements, the security constraint applies to all methods
+        except those identified in the collection.
+        http-method-omission and http-method elements are never
+        mixed in the same collection. 
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-resource-name contains the name of this web
+            resource collection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="http-method"
+                     type="javaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method names an HTTP method to which the
+              constraint applies.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="http-method-omission"
+                     type="javaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method-omission names an HTTP method to
+              which the constraint does not apply.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The welcome-file-list contains an ordered list of welcome
+        files elements.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+                   type="xsd:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The welcome-file element contains file name to use
+            as a default welcome file, such as index.html
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The encodingType defines IANA character sets.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping-list contains one or more
+        locale-encoding-mapping(s).
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+                   type="javaee:locale-encoding-mappingType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping contains locale name and
+        encoding name. The locale name must be either "Language-code",
+        such as "ja", defined by ISO-639 or "Language-code_Country-code",
+        such as "ja_JP".  "Country code" is defined by ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale"
+                   type="javaee:localeType"/>
+      <xsd:element name="encoding"
+                   type="javaee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other application
+        configuration resources.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="javaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="before"
+                   type="javaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains a sequence of "name" elements, each of
+        which
+        refers to an application configuration resource by the "name"
+        declared on its web.xml fragment.  This element can also contain
+        a single "others" element which specifies that this document
+        comes
+        before or after other documents within the application.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element specifies configuration information related to the
+        handling of multipart/form-data requests.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="location"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The directory location where uploaded files will be stored
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-file-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of uploaded files
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-request-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of multipart/form-data requests
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="file-size-threshold"
+                   type="xsd:integer"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The size threshold after which an uploaded file will be
+            written to disk
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-common_3_1.xsd b/wildfly/docs/schema/web-common_3_1.xsd
new file mode 100644
index 0000000..01b3948
--- /dev/null
+++ b/wildfly/docs/schema/web-common_3_1.xsd
@@ -0,0 +1,1474 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.1">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the common XML Schema for the Servlet 3.1 deployment descriptor.
+      This file is in turn used by web.xml and web-fragment.xml
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web common schema by using the Java EE
+      namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.1"> 
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/web-common_3_1.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+  <xsd:include schemaLocation="jsp_2_3.xsd"/>
+
+  <xsd:group name="web-commonType">
+    <xsd:choice>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="distributable"
+                   type="javaee:emptyType"/>
+      <xsd:element name="context-param"
+                   type="javaee:param-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-param element contains the declaration
+            of a web application's servlet context
+            initialization parameters.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="filter"
+                   type="javaee:filterType"/>
+      <xsd:element name="filter-mapping"
+                   type="javaee:filter-mappingType"/>
+      <xsd:element name="listener"
+                   type="javaee:listenerType"/>
+      <xsd:element name="servlet"
+                   type="javaee:servletType"/>
+      <xsd:element name="servlet-mapping"
+                   type="javaee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+                   type="javaee:session-configType"/>
+      <xsd:element name="mime-mapping"
+                   type="javaee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+                   type="javaee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+                   type="javaee:error-pageType"/>
+      <xsd:element name="jsp-config"
+                   type="javaee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+                   type="javaee:security-constraintType"/>
+      <xsd:element name="login-config"
+                   type="javaee:login-configType"/>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+                   type="javaee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+  </xsd:group>
+
+  <xsd:attributeGroup name="web-common-attributes">
+    <xsd:attribute name="version"
+                   type="javaee:web-app-versionType"
+                   use="required"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:attributeGroup>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-constraintType indicates the user roles that
+        should be permitted access to this resource
+        collection. The role-name used here must either correspond
+        to the role-name of one of the security-role elements
+        defined for this web application, or be the specially
+        reserved role-name "*" that is a compact syntax for
+        indicating all roles in the web application. If both "*"
+        and rolenames appear, the container interprets this as all
+        roles.  If no roles are defined, no user is allowed access
+        to the portion of the web application described by the
+        containing security-constraint.  The container matches
+        role names case sensitively when determining access.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-methodType is used to configure the authentication
+        mechanism for the web application. As a prerequisite to
+        gaining access to any web resources which are protected by
+        an authorization constraint, a user must have authenticated
+        using the configured mechanism. Legal values are "BASIC",
+        "DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+        authentication scheme.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The dispatcher has five legal values: FORWARD, REQUEST,
+        INCLUDE, ASYNC, and ERROR.
+        
+        A value of FORWARD means the Filter will be applied under
+        RequestDispatcher.forward() calls.
+        A value of REQUEST means the Filter will be applied under
+        ordinary client calls to the path or servlet.
+        A value of INCLUDE means the Filter will be applied under
+        RequestDispatcher.include() calls.
+        A value of ASYNC means the Filter will be applied under
+        calls dispatched from an AsyncContext.
+        A value of ERROR means the Filter will be applied under the
+        error page mechanism.
+        
+        The absence of any dispatcher elements in a filter-mapping
+        indicates a default of applying filters only under ordinary
+        client calls to the path or servlet.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="FORWARD"/>
+        <xsd:enumeration value="INCLUDE"/>
+        <xsd:enumeration value="REQUEST"/>
+        <xsd:enumeration value="ASYNC"/>
+        <xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-code contains an HTTP error code, ex: 404
+        
+        Used in: error-page
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdPositiveIntegerType">
+        <xsd:pattern value="\d{3}"/>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-pageType contains a mapping between an error code
+        or exception type to the path of a resource in the web
+        application.
+        
+        Error-page declarations using the exception-type element in
+        the deployment descriptor must be unique up to the class name of
+        the exception-type. Similarly, error-page declarations using the
+        error-code element must be unique in the deployment descriptor
+        up to the status code.
+        
+        If an error-page element in the deployment descriptor does not
+        contain an exception-type or an error-code element, the error
+        page is a default error page. 
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="error-code"
+                     type="javaee:error-codeType"/>
+        <xsd:element name="exception-type"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The exception-type contains a fully qualified class
+              name of a Java exception type.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="location"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The location element contains the location of the
+            resource in the web application relative to the root of
+            the web application. The value of the location must have
+            a leading `/'.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The filterType is used to declare a filter in the web
+        application. The filter is mapped to either a servlet or a
+        URL pattern in the filter-mapping element, using the
+        filter-name value to reference. Filters can access the
+        initialization parameters declared in the deployment
+        descriptor at runtime via the FilterConfig interface.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+                   type="javaee:filter-nameType"/>
+      <xsd:element name="filter-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified classname of the filter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-supported"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as
+            an initialization param of a servlet filter
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declaration of the filter mappings in this web
+        application is done by using filter-mappingType. 
+        The container uses the filter-mapping
+        declarations to decide which filters to apply to a request,
+        and in what order. The container matches the request URI to
+        a Servlet in the normal way. To determine which filters to
+        apply it matches filter-mapping declarations either on
+        servlet-name, or on url-pattern for each filter-mapping
+        element, depending on which style is used. The order in
+        which filters are invoked is the order in which
+        filter-mapping declarations that match a request URI for a
+        servlet appear in the list of filter-mapping elements.The
+        filter-name value must be the value of the filter-name
+        sub-elements of one of the filter declarations in the
+        deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+                   type="javaee:filter-nameType"/>
+      <xsd:choice minOccurs="1"
+                  maxOccurs="unbounded">
+        <xsd:element name="url-pattern"
+                     type="javaee:url-patternType"/>
+        <xsd:element name="servlet-name"
+                     type="javaee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+                   type="javaee:dispatcherType"
+                   minOccurs="0"
+                   maxOccurs="5"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a string which contains at least one
+        character.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The logical name of the filter is declare
+        by using filter-nameType. This name is used to map the
+        filter.  Each filter name is unique within the web
+        application.
+        
+        Used in: filter, filter-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The form-login-configType specifies the login and error
+        pages that should be used in form based login. If form based
+        authentication is not used, these elements are ignored.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="form-login-page"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-login-page element defines the location in the web
+            app where the page that can be used for login can be
+            found.  The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-error-page"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-error-page element defines the location in
+            the web app where the error page that is displayed
+            when login is not successful can be found. 
+            The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="http-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A HTTP method type as defined in HTTP 1.1 section 2.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[!-~-[\(\)&#60;&#62;@,;:&#34;/\[\]?=\{\}\\\p{Z}]]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="load-on-startupType">
+    <xsd:union memberTypes="javaee:null-charType xsd:integer"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="null-charType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value=""/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The login-configType is used to configure the authentication
+        method that should be used, the realm name that should be
+        used for this application, and the attributes that are
+        needed by the form login mechanism.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+                   type="javaee:auth-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="realm-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The realm name element specifies the realm name to
+            use in HTTP Basic authorization.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+                   type="javaee:form-login-configType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-mappingType defines a mapping between an extension
+        and a mime type.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The extension element contains a string describing an
+          extension. example: "txt"
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="extension"
+                   type="javaee:string"/>
+      <xsd:element name="mime-type"
+                   type="javaee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-typeType is used to indicate a defined mime type.
+        
+        Example:
+        "text/plain"
+        
+        Used in: mime-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-constraintType is used to associate
+        security constraints with one or more web resource
+        collections
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+                   type="javaee:web-resource-collectionType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+                   type="javaee:auth-constraintType"
+                   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+                   type="javaee:user-data-constraintType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servletType is used to declare a servlet.
+        It contains the declarative data of a
+        servlet. If a jsp-file is specified and the load-on-startup
+        element is present, then the JSP should be precompiled and
+        loaded.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+                   type="javaee:servlet-nameType"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="servlet-class"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The servlet-class element contains the fully
+              qualified class name of the servlet.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="jsp-file"
+                     type="javaee:jsp-fileType"/>
+      </xsd:choice>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+                   type="javaee:load-on-startupType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The load-on-startup element indicates that this
+            servlet should be loaded (instantiated and have
+            its init() called) on the startup of the web
+            application. The optional contents of these
+            element must be an integer indicating the order in
+            which the servlet should be loaded. If the value
+            is a negative integer, or the element is not
+            present, the container is free to load the servlet
+            whenever it chooses. If the value is a positive
+            integer or 0, the container must load and
+            initialize the servlet as the application is
+            deployed. The container must guarantee that
+            servlets marked with lower integers are loaded
+            before servlets marked with higher integers. The
+            container may choose the order of loading of
+            servlets with the same load-on-start-up value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="async-supported"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="run-as"
+                   type="javaee:run-asType"
+                   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="multipart-config"
+                   type="javaee:multipart-configType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-mappingType defines a mapping between a
+        servlet and a url pattern. 
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+                   type="javaee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-name element contains the canonical name of the
+        servlet. Each servlet name is unique within the web
+        application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-configType defines the session parameters
+        for this web application.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The session-timeout element defines the default
+            session timeout interval for all sessions created
+            in this web application. The specified timeout
+            must be expressed in a whole number of minutes.
+            If the timeout is 0 or less, the container ensures
+            the default behaviour of sessions is never to time
+            out. If this element is not specified, the container
+            must set its default timeout period.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cookie-config"
+                   type="javaee:cookie-configType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cookie-config element defines the configuration of the
+            session tracking cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tracking-mode"
+                   type="javaee:tracking-modeType"
+                   minOccurs="0"
+                   maxOccurs="3">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The tracking-mode element defines the tracking modes
+            for sessions created by this web application
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cookie-configType defines the configuration for the
+        session tracking cookies of this web application.
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:cookie-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name that will be assigned to any session tracking
+            cookies created by this web application.
+            The default is JSESSIONID
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="domain"
+                   type="javaee:cookie-domainType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The domain name that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="path"
+                   type="javaee:cookie-pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The path that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="comment"
+                   type="javaee:cookie-commentType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The comment that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="http-only"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created 
+            by this web application will be marked as HttpOnly
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="secure"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created 
+            by this web application will be marked as secure.
+            When true, all session tracking cookies must be marked
+            as secure independent of the nature of the request that
+            initiated the corresponding session.
+            When false, the session cookie should only be marked secure
+            if the request that initiated the session was secure.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-age"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The lifetime (in seconds) that will be assigned to any
+            session tracking cookies created by this web application.
+            Default is -1
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The name that will be assigned to any session tracking
+        cookies created by this web application.
+        The default is JSESSIONID
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-domainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The domain name that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The path that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-commentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The comment that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tracking-modeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tracking modes for sessions created by this web
+        application
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="COOKIE"/>
+        <xsd:enumeration value="URL"/>
+        <xsd:enumeration value="SSL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transport-guaranteeType specifies that the communication
+        between client and server should be NONE, INTEGRAL, or
+        CONFIDENTIAL. NONE means that the application does not
+        require any transport guarantees. A value of INTEGRAL means
+        that the application requires that the data sent between the
+        client and server be sent in such a way that it can't be
+        changed in transit. CONFIDENTIAL means that the application
+        requires that the data be transmitted in a fashion that
+        prevents other entities from observing the contents of the
+        transmission. In most cases, the presence of the INTEGRAL or
+        CONFIDENTIAL flag will indicate that the use of SSL is
+        required.
+        
+        Used in: user-data-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NONE"/>
+        <xsd:enumeration value="INTEGRAL"/>
+        <xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The user-data-constraintType is used to indicate how
+        data communicated between the client and container should be
+        protected.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+                   type="javaee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate a path starting
+        with a "/" and interpreted relative to the root of a WAR
+        file.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type contains the recognized versions of
+        web-application supported. It is used to designate the
+        version of the web application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="3.1"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-resource-collectionType is used to identify the
+        resources and HTTP methods on those resources to which a
+        security constraint applies. If no HTTP methods are specified,
+        then the security constraint applies to all HTTP methods.
+        If HTTP methods are specified by http-method-omission
+        elements, the security constraint applies to all methods
+        except those identified in the collection.
+        http-method-omission and http-method elements are never
+        mixed in the same collection. 
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-resource-name contains the name of this web
+            resource collection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="http-method"
+                     type="javaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method names an HTTP method to which the
+              constraint applies.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="http-method-omission"
+                     type="javaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method-omission names an HTTP method to
+              which the constraint does not apply.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The welcome-file-list contains an ordered list of welcome
+        files elements.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+                   type="xsd:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The welcome-file element contains file name to use
+            as a default welcome file, such as index.html
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The encodingType defines IANA character sets.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping-list contains one or more
+        locale-encoding-mapping(s).
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+                   type="javaee:locale-encoding-mappingType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping contains locale name and
+        encoding name. The locale name must be either "Language-code",
+        such as "ja", defined by ISO-639 or "Language-code_Country-code",
+        such as "ja_JP".  "Country code" is defined by ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale"
+                   type="javaee:localeType"/>
+      <xsd:element name="encoding"
+                   type="javaee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other application
+        configuration resources.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element specifies configuration information related to the
+        handling of multipart/form-data requests.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="location"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The directory location where uploaded files will be stored
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-file-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of uploaded files
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-request-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of multipart/form-data requests
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="file-size-threshold"
+                   type="xsd:integer"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The size threshold after which an uploaded file will be
+            written to disk
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-common_4_0.xsd b/wildfly/docs/schema/web-common_4_0.xsd
new file mode 100644
index 0000000..eefc239
--- /dev/null
+++ b/wildfly/docs/schema/web-common_4_0.xsd
@@ -0,0 +1,1474 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2017 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the common XML Schema for the Servlet 4.0 deployment descriptor.
+      This file is in turn used by web.xml and web-fragment.xml
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web common schema by using the Java EE
+      namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="4.0">
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/web-common_4_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+  <xsd:include schemaLocation="jsp_2_3.xsd"/>
+
+  <xsd:group name="web-commonType">
+    <xsd:choice>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="distributable"
+                   type="javaee:emptyType"/>
+      <xsd:element name="context-param"
+                   type="javaee:param-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-param element contains the declaration
+            of a web application's servlet context
+            initialization parameters.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="filter"
+                   type="javaee:filterType"/>
+      <xsd:element name="filter-mapping"
+                   type="javaee:filter-mappingType"/>
+      <xsd:element name="listener"
+                   type="javaee:listenerType"/>
+      <xsd:element name="servlet"
+                   type="javaee:servletType"/>
+      <xsd:element name="servlet-mapping"
+                   type="javaee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+                   type="javaee:session-configType"/>
+      <xsd:element name="mime-mapping"
+                   type="javaee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+                   type="javaee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+                   type="javaee:error-pageType"/>
+      <xsd:element name="jsp-config"
+                   type="javaee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+                   type="javaee:security-constraintType"/>
+      <xsd:element name="login-config"
+                   type="javaee:login-configType"/>
+      <xsd:element name="security-role"
+                   type="javaee:security-roleType"/>
+      <xsd:group ref="javaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+                   type="javaee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+                   type="javaee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+  </xsd:group>
+
+  <xsd:attributeGroup name="web-common-attributes">
+    <xsd:attribute name="version"
+                   type="javaee:web-app-versionType"
+                   use="required"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:attributeGroup>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-constraintType indicates the user roles that
+        should be permitted access to this resource
+        collection. The role-name used here must either correspond
+        to the role-name of one of the security-role elements
+        defined for this web application, or be the specially
+        reserved role-name "*" that is a compact syntax for
+        indicating all roles in the web application. If both "*"
+        and rolenames appear, the container interprets this as all
+        roles.  If no roles are defined, no user is allowed access
+        to the portion of the web application described by the
+        containing security-constraint.  The container matches
+        role names case sensitively when determining access.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="javaee:role-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-methodType is used to configure the authentication
+        mechanism for the web application. As a prerequisite to
+        gaining access to any web resources which are protected by
+        an authorization constraint, a user must have authenticated
+        using the configured mechanism. Legal values are "BASIC",
+        "DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+        authentication scheme.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The dispatcher has five legal values: FORWARD, REQUEST,
+        INCLUDE, ASYNC, and ERROR.
+        
+        A value of FORWARD means the Filter will be applied under
+        RequestDispatcher.forward() calls.
+        A value of REQUEST means the Filter will be applied under
+        ordinary client calls to the path or servlet.
+        A value of INCLUDE means the Filter will be applied under
+        RequestDispatcher.include() calls.
+        A value of ASYNC means the Filter will be applied under
+        calls dispatched from an AsyncContext.
+        A value of ERROR means the Filter will be applied under the
+        error page mechanism.
+        
+        The absence of any dispatcher elements in a filter-mapping
+        indicates a default of applying filters only under ordinary
+        client calls to the path or servlet.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="FORWARD"/>
+        <xsd:enumeration value="INCLUDE"/>
+        <xsd:enumeration value="REQUEST"/>
+        <xsd:enumeration value="ASYNC"/>
+        <xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-code contains an HTTP error code, ex: 404
+        
+        Used in: error-page
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdPositiveIntegerType">
+        <xsd:pattern value="\d{3}"/>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-pageType contains a mapping between an error code
+        or exception type to the path of a resource in the web
+        application.
+        
+        Error-page declarations using the exception-type element in
+        the deployment descriptor must be unique up to the class name of
+        the exception-type. Similarly, error-page declarations using the
+        error-code element must be unique in the deployment descriptor
+        up to the status code.
+        
+        If an error-page element in the deployment descriptor does not
+        contain an exception-type or an error-code element, the error
+        page is a default error page.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="error-code"
+                     type="javaee:error-codeType"/>
+        <xsd:element name="exception-type"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The exception-type contains a fully qualified class
+              name of a Java exception type.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="location"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The location element contains the location of the
+            resource in the web application relative to the root of
+            the web application. The value of the location must have
+            a leading `/'.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The filterType is used to declare a filter in the web
+        application. The filter is mapped to either a servlet or a
+        URL pattern in the filter-mapping element, using the
+        filter-name value to reference. Filters can access the
+        initialization parameters declared in the deployment
+        descriptor at runtime via the FilterConfig interface.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+                   type="javaee:filter-nameType"/>
+      <xsd:element name="filter-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified classname of the filter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-supported"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as
+            an initialization param of a servlet filter
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declaration of the filter mappings in this web
+        application is done by using filter-mappingType.
+        The container uses the filter-mapping
+        declarations to decide which filters to apply to a request,
+        and in what order. The container matches the request URI to
+        a Servlet in the normal way. To determine which filters to
+        apply it matches filter-mapping declarations either on
+        servlet-name, or on url-pattern for each filter-mapping
+        element, depending on which style is used. The order in
+        which filters are invoked is the order in which
+        filter-mapping declarations that match a request URI for a
+        servlet appear in the list of filter-mapping elements.The
+        filter-name value must be the value of the filter-name
+        sub-elements of one of the filter declarations in the
+        deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+                   type="javaee:filter-nameType"/>
+      <xsd:choice minOccurs="1"
+                  maxOccurs="unbounded">
+        <xsd:element name="url-pattern"
+                     type="javaee:url-patternType"/>
+        <xsd:element name="servlet-name"
+                     type="javaee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+                   type="javaee:dispatcherType"
+                   minOccurs="0"
+                   maxOccurs="5"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a string which contains at least one
+        character.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The logical name of the filter is declare
+        by using filter-nameType. This name is used to map the
+        filter.  Each filter name is unique within the web
+        application.
+        
+        Used in: filter, filter-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The form-login-configType specifies the login and error
+        pages that should be used in form based login. If form based
+        authentication is not used, these elements are ignored.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="form-login-page"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-login-page element defines the location in the web
+            app where the page that can be used for login can be
+            found.  The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-error-page"
+                   type="javaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-error-page element defines the location in
+            the web app where the error page that is displayed
+            when login is not successful can be found.
+            The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="http-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A HTTP method type as defined in HTTP 1.1 section 2.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[!-~-[\(\)&#60;&#62;@,;:&#34;/\[\]?=\{\}\\\p{Z}]]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="load-on-startupType">
+    <xsd:union memberTypes="javaee:null-charType xsd:integer"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="null-charType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value=""/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The login-configType is used to configure the authentication
+        method that should be used, the realm name that should be
+        used for this application, and the attributes that are
+        needed by the form login mechanism.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+                   type="javaee:auth-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="realm-name"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The realm name element specifies the realm name to
+            use in HTTP Basic authorization.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+                   type="javaee:form-login-configType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-mappingType defines a mapping between an extension
+        and a mime type.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The extension element contains a string describing an
+          extension. example: "txt"
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="extension"
+                   type="javaee:string"/>
+      <xsd:element name="mime-type"
+                   type="javaee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-typeType is used to indicate a defined mime type.
+        
+        Example:
+        "text/plain"
+        
+        Used in: mime-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-constraintType is used to associate
+        security constraints with one or more web resource
+        collections
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="display-name"
+                   type="javaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+                   type="javaee:web-resource-collectionType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+                   type="javaee:auth-constraintType"
+                   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+                   type="javaee:user-data-constraintType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servletType is used to declare a servlet.
+        It contains the declarative data of a
+        servlet. If a jsp-file is specified and the load-on-startup
+        element is present, then the JSP should be precompiled and
+        loaded.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+                   type="javaee:servlet-nameType"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="servlet-class"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The servlet-class element contains the fully
+              qualified class name of the servlet.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="jsp-file"
+                     type="javaee:jsp-fileType"/>
+      </xsd:choice>
+      <xsd:element name="init-param"
+                   type="javaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+                   type="javaee:load-on-startupType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The load-on-startup element indicates that this
+            servlet should be loaded (instantiated and have
+            its init() called) on the startup of the web
+            application. The optional contents of these
+            element must be an integer indicating the order in
+            which the servlet should be loaded. If the value
+            is a negative integer, or the element is not
+            present, the container is free to load the servlet
+            whenever it chooses. If the value is a positive
+            integer or 0, the container must load and
+            initialize the servlet as the application is
+            deployed. The container must guarantee that
+            servlets marked with lower integers are loaded
+            before servlets marked with higher integers. The
+            container may choose the order of loading of
+            servlets with the same load-on-start-up value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enabled"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="async-supported"
+                   type="javaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="run-as"
+                   type="javaee:run-asType"
+                   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+                   type="javaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="multipart-config"
+                   type="javaee:multipart-configType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-mappingType defines a mapping between a
+        servlet and a url pattern.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+                   type="javaee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-name element contains the canonical name of the
+        servlet. Each servlet name is unique within the web
+        application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-configType defines the session parameters
+        for this web application.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The session-timeout element defines the default
+            session timeout interval for all sessions created
+            in this web application. The specified timeout
+            must be expressed in a whole number of minutes.
+            If the timeout is 0 or less, the container ensures
+            the default behaviour of sessions is never to time
+            out. If this element is not specified, the container
+            must set its default timeout period.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cookie-config"
+                   type="javaee:cookie-configType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cookie-config element defines the configuration of the
+            session tracking cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tracking-mode"
+                   type="javaee:tracking-modeType"
+                   minOccurs="0"
+                   maxOccurs="3">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The tracking-mode element defines the tracking modes
+            for sessions created by this web application
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cookie-configType defines the configuration for the
+        session tracking cookies of this web application.
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:cookie-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name that will be assigned to any session tracking
+            cookies created by this web application.
+            The default is JSESSIONID
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="domain"
+                   type="javaee:cookie-domainType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The domain name that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="path"
+                   type="javaee:cookie-pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The path that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="comment"
+                   type="javaee:cookie-commentType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The comment that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="http-only"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created
+            by this web application will be marked as HttpOnly
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="secure"
+                   type="javaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created
+            by this web application will be marked as secure.
+            When true, all session tracking cookies must be marked
+            as secure independent of the nature of the request that
+            initiated the corresponding session.
+            When false, the session cookie should only be marked secure
+            if the request that initiated the session was secure.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-age"
+                   type="javaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The lifetime (in seconds) that will be assigned to any
+            session tracking cookies created by this web application.
+            Default is -1
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The name that will be assigned to any session tracking
+        cookies created by this web application.
+        The default is JSESSIONID
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-domainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The domain name that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The path that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-commentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The comment that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tracking-modeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tracking modes for sessions created by this web
+        application
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="COOKIE"/>
+        <xsd:enumeration value="URL"/>
+        <xsd:enumeration value="SSL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transport-guaranteeType specifies that the communication
+        between client and server should be NONE, INTEGRAL, or
+        CONFIDENTIAL. NONE means that the application does not
+        require any transport guarantees. A value of INTEGRAL means
+        that the application requires that the data sent between the
+        client and server be sent in such a way that it can't be
+        changed in transit. CONFIDENTIAL means that the application
+        requires that the data be transmitted in a fashion that
+        prevents other entities from observing the contents of the
+        transmission. In most cases, the presence of the INTEGRAL or
+        CONFIDENTIAL flag will indicate that the use of SSL is
+        required.
+        
+        Used in: user-data-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:enumeration value="NONE"/>
+        <xsd:enumeration value="INTEGRAL"/>
+        <xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The user-data-constraintType is used to indicate how
+        data communicated between the client and container should be
+        protected.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+                   type="javaee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate a path starting
+        with a "/" and interpreted relative to the root of a WAR
+        file.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type contains the recognized versions of
+        web-application supported. It is used to designate the
+        version of the web application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="4.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-resource-collectionType is used to identify the
+        resources and HTTP methods on those resources to which a
+        security constraint applies. If no HTTP methods are specified,
+        then the security constraint applies to all HTTP methods.
+        If HTTP methods are specified by http-method-omission
+        elements, the security constraint applies to all methods
+        except those identified in the collection.
+        http-method-omission and http-method elements are never
+        mixed in the same collection.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-resource-name contains the name of this web
+            resource collection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+                   type="javaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="http-method"
+                     type="javaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method names an HTTP method to which the
+              constraint applies.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="http-method-omission"
+                     type="javaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method-omission names an HTTP method to
+              which the constraint does not apply.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The welcome-file-list contains an ordered list of welcome
+        files elements.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+                   type="xsd:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The welcome-file element contains file name to use
+            as a default welcome file, such as index.html
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The encodingType defines IANA character sets.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping-list contains one or more
+        locale-encoding-mapping(s).
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+                   type="javaee:locale-encoding-mappingType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping contains locale name and
+        encoding name. The locale name must be either "Language-code",
+        such as "ja", defined by ISO-639 or "Language-code_Country-code",
+        such as "ja_JP".  "Country code" is defined by ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale"
+                   type="javaee:localeType"/>
+      <xsd:element name="encoding"
+                   type="javaee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other application
+        configuration resources.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element specifies configuration information related to the
+        handling of multipart/form-data requests.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="location"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The directory location where uploaded files will be stored
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-file-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of uploaded files
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-request-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of multipart/form-data requests
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="file-size-threshold"
+                   type="xsd:integer"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The size threshold after which an uploaded file will be
+            written to disk
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-common_5_0.xsd b/wildfly/docs/schema/web-common_5_0.xsd
new file mode 100644
index 0000000..ee12bea
--- /dev/null
+++ b/wildfly/docs/schema/web-common_5_0.xsd
@@ -0,0 +1,1450 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="5.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the common XML Schema for the Servlet 5.0 deployment descriptor.
+      This file is in turn used by web.xml and web-fragment.xml
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web common schema by using the Jakarta EE
+      namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-app xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="5.0">
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-common_5_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+  <xsd:include schemaLocation="jsp_3_0.xsd"/>
+
+  <xsd:group name="web-commonType">
+    <xsd:choice>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="distributable"
+                   type="jakartaee:emptyType"/>
+      <xsd:element name="context-param"
+                   type="jakartaee:param-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-param element contains the declaration
+            of a web application's servlet context
+            initialization parameters.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="filter"
+                   type="jakartaee:filterType"/>
+      <xsd:element name="filter-mapping"
+                   type="jakartaee:filter-mappingType"/>
+      <xsd:element name="listener"
+                   type="jakartaee:listenerType"/>
+      <xsd:element name="servlet"
+                   type="jakartaee:servletType"/>
+      <xsd:element name="servlet-mapping"
+                   type="jakartaee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+                   type="jakartaee:session-configType"/>
+      <xsd:element name="mime-mapping"
+                   type="jakartaee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+                   type="jakartaee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+                   type="jakartaee:error-pageType"/>
+      <xsd:element name="jsp-config"
+                   type="jakartaee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+                   type="jakartaee:security-constraintType"/>
+      <xsd:element name="login-config"
+                   type="jakartaee:login-configType"/>
+      <xsd:element name="security-role"
+                   type="jakartaee:security-roleType"/>
+      <xsd:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+                   type="jakartaee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+  </xsd:group>
+
+  <xsd:attributeGroup name="web-common-attributes">
+    <xsd:attribute name="version"
+                   type="jakartaee:web-app-versionType"
+                   use="required"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:attributeGroup>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-constraintType indicates the user roles that
+        should be permitted access to this resource
+        collection. The role-name used here must either correspond
+        to the role-name of one of the security-role elements
+        defined for this web application, or be the specially
+        reserved role-name "*" that is a compact syntax for
+        indicating all roles in the web application. If both "*"
+        and rolenames appear, the container interprets this as all
+        roles.  If no roles are defined, no user is allowed access
+        to the portion of the web application described by the
+        containing security-constraint.  The container matches
+        role names case sensitively when determining access.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-methodType is used to configure the authentication
+        mechanism for the web application. As a prerequisite to
+        gaining access to any web resources which are protected by
+        an authorization constraint, a user must have authenticated
+        using the configured mechanism. Legal values are "BASIC",
+        "DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+        authentication scheme.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The dispatcher has five legal values: FORWARD, REQUEST,
+        INCLUDE, ASYNC, and ERROR.
+        
+        A value of FORWARD means the Filter will be applied under
+        RequestDispatcher.forward() calls.
+        A value of REQUEST means the Filter will be applied under
+        ordinary client calls to the path or servlet.
+        A value of INCLUDE means the Filter will be applied under
+        RequestDispatcher.include() calls.
+        A value of ASYNC means the Filter will be applied under
+        calls dispatched from an AsyncContext.
+        A value of ERROR means the Filter will be applied under the
+        error page mechanism.
+        
+        The absence of any dispatcher elements in a filter-mapping
+        indicates a default of applying filters only under ordinary
+        client calls to the path or servlet.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="FORWARD"/>
+        <xsd:enumeration value="INCLUDE"/>
+        <xsd:enumeration value="REQUEST"/>
+        <xsd:enumeration value="ASYNC"/>
+        <xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-code contains an HTTP error code, ex: 404
+        
+        Used in: error-page
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdPositiveIntegerType">
+        <xsd:pattern value="\d{3}"/>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-pageType contains a mapping between an error code
+        or exception type to the path of a resource in the web
+        application.
+        
+        Error-page declarations using the exception-type element in
+        the deployment descriptor must be unique up to the class name of
+        the exception-type. Similarly, error-page declarations using the
+        error-code element must be unique in the deployment descriptor
+        up to the status code.
+        
+        If an error-page element in the deployment descriptor does not
+        contain an exception-type or an error-code element, the error
+        page is a default error page.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="error-code"
+                     type="jakartaee:error-codeType"/>
+        <xsd:element name="exception-type"
+                     type="jakartaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The exception-type contains a fully qualified class
+              name of a Java exception type.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="location"
+                   type="jakartaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The location element contains the location of the
+            resource in the web application relative to the root of
+            the web application. The value of the location must have
+            a leading `/'.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The filterType is used to declare a filter in the web
+        application. The filter is mapped to either a servlet or a
+        URL pattern in the filter-mapping element, using the
+        filter-name value to reference. Filters can access the
+        initialization parameters declared in the deployment
+        descriptor at runtime via the FilterConfig interface.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+                   type="jakartaee:filter-nameType"/>
+      <xsd:element name="filter-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified classname of the filter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-supported"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as
+            an initialization param of a servlet filter
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declaration of the filter mappings in this web
+        application is done by using filter-mappingType.
+        The container uses the filter-mapping
+        declarations to decide which filters to apply to a request,
+        and in what order. The container matches the request URI to
+        a Servlet in the normal way. To determine which filters to
+        apply it matches filter-mapping declarations either on
+        servlet-name, or on url-pattern for each filter-mapping
+        element, depending on which style is used. The order in
+        which filters are invoked is the order in which
+        filter-mapping declarations that match a request URI for a
+        servlet appear in the list of filter-mapping elements.The
+        filter-name value must be the value of the filter-name
+        sub-elements of one of the filter declarations in the
+        deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+                   type="jakartaee:filter-nameType"/>
+      <xsd:choice minOccurs="1"
+                  maxOccurs="unbounded">
+        <xsd:element name="url-pattern"
+                     type="jakartaee:url-patternType"/>
+        <xsd:element name="servlet-name"
+                     type="jakartaee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+                   type="jakartaee:dispatcherType"
+                   minOccurs="0"
+                   maxOccurs="5"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a string which contains at least one
+        character.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The logical name of the filter is declare
+        by using filter-nameType. This name is used to map the
+        filter.  Each filter name is unique within the web
+        application.
+        
+        Used in: filter, filter-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The form-login-configType specifies the login and error
+        pages that should be used in form based login. If form based
+        authentication is not used, these elements are ignored.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="form-login-page"
+                   type="jakartaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-login-page element defines the location in the web
+            app where the page that can be used for login can be
+            found.  The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-error-page"
+                   type="jakartaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-error-page element defines the location in
+            the web app where the error page that is displayed
+            when login is not successful can be found.
+            The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="http-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A HTTP method type as defined in HTTP 1.1 section 2.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[!-~-[\(\)&#60;&#62;@,;:&#34;/\[\]?=\{\}\\\p{Z}]]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="load-on-startupType">
+    <xsd:union memberTypes="jakartaee:null-charType xsd:integer"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="null-charType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value=""/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The login-configType is used to configure the authentication
+        method that should be used, the realm name that should be
+        used for this application, and the attributes that are
+        needed by the form login mechanism.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+                   type="jakartaee:auth-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="realm-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The realm name element specifies the realm name to
+            use in HTTP Basic authorization.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+                   type="jakartaee:form-login-configType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-mappingType defines a mapping between an extension
+        and a mime type.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The extension element contains a string describing an
+          extension. example: "txt"
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="extension"
+                   type="jakartaee:string"/>
+      <xsd:element name="mime-type"
+                   type="jakartaee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-typeType is used to indicate a defined mime type.
+        
+        Example:
+        "text/plain"
+        
+        Used in: mime-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-constraintType is used to associate
+        security constraints with one or more web resource
+        collections
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="display-name"
+                   type="jakartaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+                   type="jakartaee:web-resource-collectionType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+                   type="jakartaee:auth-constraintType"
+                   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+                   type="jakartaee:user-data-constraintType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servletType is used to declare a servlet.
+        It contains the declarative data of a
+        servlet. If a jsp-file is specified and the load-on-startup
+        element is present, then the JSP should be precompiled and
+        loaded.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+                   type="jakartaee:servlet-nameType"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="servlet-class"
+                     type="jakartaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The servlet-class element contains the fully
+              qualified class name of the servlet.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="jsp-file"
+                     type="jakartaee:jsp-fileType"/>
+      </xsd:choice>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+                   type="jakartaee:load-on-startupType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The load-on-startup element indicates that this
+            servlet should be loaded (instantiated and have
+            its init() called) on the startup of the web
+            application. The optional contents of these
+            element must be an integer indicating the order in
+            which the servlet should be loaded. If the value
+            is a negative integer, or the element is not
+            present, the container is free to load the servlet
+            whenever it chooses. If the value is a positive
+            integer or 0, the container must load and
+            initialize the servlet as the application is
+            deployed. The container must guarantee that
+            servlets marked with lower integers are loaded
+            before servlets marked with higher integers. The
+            container may choose the order of loading of
+            servlets with the same load-on-start-up value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enabled"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="async-supported"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="run-as"
+                   type="jakartaee:run-asType"
+                   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+                   type="jakartaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="multipart-config"
+                   type="jakartaee:multipart-configType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-mappingType defines a mapping between a
+        servlet and a url pattern.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+                   type="jakartaee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-name element contains the canonical name of the
+        servlet. Each servlet name is unique within the web
+        application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-configType defines the session parameters
+        for this web application.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The session-timeout element defines the default
+            session timeout interval for all sessions created
+            in this web application. The specified timeout
+            must be expressed in a whole number of minutes.
+            If the timeout is 0 or less, the container ensures
+            the default behaviour of sessions is never to time
+            out. If this element is not specified, the container
+            must set its default timeout period.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cookie-config"
+                   type="jakartaee:cookie-configType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cookie-config element defines the configuration of the
+            session tracking cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tracking-mode"
+                   type="jakartaee:tracking-modeType"
+                   minOccurs="0"
+                   maxOccurs="3">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The tracking-mode element defines the tracking modes
+            for sessions created by this web application
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cookie-configType defines the configuration for the
+        session tracking cookies of this web application.
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:cookie-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name that will be assigned to any session tracking
+            cookies created by this web application.
+            The default is JSESSIONID
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="domain"
+                   type="jakartaee:cookie-domainType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The domain name that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="path"
+                   type="jakartaee:cookie-pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The path that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="comment"
+                   type="jakartaee:cookie-commentType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The comment that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="http-only"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created
+            by this web application will be marked as HttpOnly
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="secure"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created
+            by this web application will be marked as secure.
+            When true, all session tracking cookies must be marked
+            as secure independent of the nature of the request that
+            initiated the corresponding session.
+            When false, the session cookie should only be marked secure
+            if the request that initiated the session was secure.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-age"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The lifetime (in seconds) that will be assigned to any
+            session tracking cookies created by this web application.
+            Default is -1
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The name that will be assigned to any session tracking
+        cookies created by this web application.
+        The default is JSESSIONID
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-domainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The domain name that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The path that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-commentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The comment that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tracking-modeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tracking modes for sessions created by this web
+        application
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="COOKIE"/>
+        <xsd:enumeration value="URL"/>
+        <xsd:enumeration value="SSL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transport-guaranteeType specifies that the communication
+        between client and server should be NONE, INTEGRAL, or
+        CONFIDENTIAL. NONE means that the application does not
+        require any transport guarantees. A value of INTEGRAL means
+        that the application requires that the data sent between the
+        client and server be sent in such a way that it can't be
+        changed in transit. CONFIDENTIAL means that the application
+        requires that the data be transmitted in a fashion that
+        prevents other entities from observing the contents of the
+        transmission. In most cases, the presence of the INTEGRAL or
+        CONFIDENTIAL flag will indicate that the use of SSL is
+        required.
+        
+        Used in: user-data-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NONE"/>
+        <xsd:enumeration value="INTEGRAL"/>
+        <xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The user-data-constraintType is used to indicate how
+        data communicated between the client and container should be
+        protected.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+                   type="jakartaee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate a path starting
+        with a "/" and interpreted relative to the root of a WAR
+        file.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type contains the recognized versions of
+        web-application supported. It is used to designate the
+        version of the web application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="5.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-resource-collectionType is used to identify the
+        resources and HTTP methods on those resources to which a
+        security constraint applies. If no HTTP methods are specified,
+        then the security constraint applies to all HTTP methods.
+        If HTTP methods are specified by http-method-omission
+        elements, the security constraint applies to all methods
+        except those identified in the collection.
+        http-method-omission and http-method elements are never
+        mixed in the same collection.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-resource-name contains the name of this web
+            resource collection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="http-method"
+                     type="jakartaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method names an HTTP method to which the
+              constraint applies.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="http-method-omission"
+                     type="jakartaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method-omission names an HTTP method to
+              which the constraint does not apply.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The welcome-file-list contains an ordered list of welcome
+        files elements.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+                   type="xsd:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The welcome-file element contains file name to use
+            as a default welcome file, such as index.html
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The encodingType defines IANA character sets.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping-list contains one or more
+        locale-encoding-mapping(s).
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+                   type="jakartaee:locale-encoding-mappingType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping contains locale name and
+        encoding name. The locale name must be either "Language-code",
+        such as "ja", defined by ISO-639 or "Language-code_Country-code",
+        such as "ja_JP".  "Country code" is defined by ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale"
+                   type="jakartaee:localeType"/>
+      <xsd:element name="encoding"
+                   type="jakartaee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other application
+        configuration resources.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element specifies configuration information related to the
+        handling of multipart/form-data requests.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="location"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The directory location where uploaded files will be stored
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-file-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of uploaded files
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-request-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of multipart/form-data requests
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="file-size-threshold"
+                   type="xsd:integer"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The size threshold after which an uploaded file will be
+            written to disk
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-common_6_0.xsd b/wildfly/docs/schema/web-common_6_0.xsd
new file mode 100644
index 0000000..20b3132
--- /dev/null
+++ b/wildfly/docs/schema/web-common_6_0.xsd
@@ -0,0 +1,1507 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the common XML Schema for the Servlet 6.0 deployment descriptor.
+      This file is in turn used by web.xml and web-fragment.xml
+      web application's war file.  All Servlet deployment descriptors
+      must indicate the web common schema by using the Jakarta EE
+      namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-app xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="6.0">
+      ...
+      </web-app>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-common_6_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+  <xsd:include schemaLocation="jsp_3_1.xsd"/>
+
+  <xsd:group name="web-commonType">
+    <xsd:choice>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="distributable"
+                   type="jakartaee:emptyType"/>
+      <xsd:element name="context-param"
+                   type="jakartaee:param-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The context-param element contains the declaration
+            of a web application's servlet context
+            initialization parameters.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="filter"
+                   type="jakartaee:filterType"/>
+      <xsd:element name="filter-mapping"
+                   type="jakartaee:filter-mappingType"/>
+      <xsd:element name="listener"
+                   type="jakartaee:listenerType"/>
+      <xsd:element name="servlet"
+                   type="jakartaee:servletType"/>
+      <xsd:element name="servlet-mapping"
+                   type="jakartaee:servlet-mappingType"/>
+      <xsd:element name="session-config"
+                   type="jakartaee:session-configType"/>
+      <xsd:element name="mime-mapping"
+                   type="jakartaee:mime-mappingType"/>
+      <xsd:element name="welcome-file-list"
+                   type="jakartaee:welcome-file-listType"/>
+      <xsd:element name="error-page"
+                   type="jakartaee:error-pageType"/>
+      <xsd:element name="jsp-config"
+                   type="jakartaee:jsp-configType"/>
+      <xsd:element name="security-constraint"
+                   type="jakartaee:security-constraintType"/>
+      <xsd:element name="login-config"
+                   type="jakartaee:login-configType"/>
+      <xsd:element name="security-role"
+                   type="jakartaee:security-roleType"/>
+      <xsd:group ref="jakartaee:jndiEnvironmentRefsGroup"/>
+      <xsd:element name="message-destination"
+                   type="jakartaee:message-destinationType"/>
+      <xsd:element name="locale-encoding-mapping-list"
+                   type="jakartaee:locale-encoding-mapping-listType"/>
+    </xsd:choice>
+  </xsd:group>
+
+  <xsd:attributeGroup name="web-common-attributes">
+    <xsd:attribute name="version"
+                   type="jakartaee:web-app-versionType"
+                   use="required"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          deployment descriptor and other related deployment
+          descriptors for this module (e.g., web service
+          descriptors) are complete, or whether the class
+          files available to this module and packaged with
+          this application should be examined for annotations
+          that specify deployment information.
+          
+          If metadata-complete is set to "true", the deployment
+          tool must ignore any annotations that specify deployment
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the deployment tool must examine the class
+          files of the application for annotations, as
+          specified by the specifications.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:attributeGroup>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="attribute-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type is a general type that can be used to declare
+        attribute/value lists.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The attribute-name element contains the name of an
+            attribute.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute-value"
+                   type="jakartaee:xsdStringType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The attribute-value element contains the value of a
+            attribute.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-constraintType indicates the user roles that
+        should be permitted access to this resource
+        collection. The role-name used here must either correspond
+        to the role-name of one of the security-role elements
+        defined for this web application, or be the specially
+        reserved role-name "*" that is a compact syntax for
+        indicating all roles in the web application. If both "*"
+        and rolenames appear, the container interprets this as all
+        roles.  If no roles are defined, no user is allowed access
+        to the portion of the web application described by the
+        containing security-constraint.  The container matches
+        role names case sensitively when determining access.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="role-name"
+                   type="jakartaee:role-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="auth-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The auth-methodType is used to configure the authentication
+        mechanism for the web application. As a prerequisite to
+        gaining access to any web resources which are protected by
+        an authorization constraint, a user must have authenticated
+        using the configured mechanism. Legal values are "BASIC",
+        "DIGEST", "FORM", "CLIENT-CERT", or a vendor-specific
+        authentication scheme.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="dispatcherType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The dispatcher has five legal values: FORWARD, REQUEST,
+        INCLUDE, ASYNC, and ERROR.
+        
+        A value of FORWARD means the Filter will be applied under
+        RequestDispatcher.forward() calls.
+        A value of REQUEST means the Filter will be applied under
+        ordinary client calls to the path or servlet.
+        A value of INCLUDE means the Filter will be applied under
+        RequestDispatcher.include() calls.
+        A value of ASYNC means the Filter will be applied under
+        calls dispatched from an AsyncContext.
+        A value of ERROR means the Filter will be applied under the
+        error page mechanism.
+        
+        The absence of any dispatcher elements in a filter-mapping
+        indicates a default of applying filters only under ordinary
+        client calls to the path or servlet.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="FORWARD"/>
+        <xsd:enumeration value="INCLUDE"/>
+        <xsd:enumeration value="REQUEST"/>
+        <xsd:enumeration value="ASYNC"/>
+        <xsd:enumeration value="ERROR"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-codeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-code contains an HTTP error code, ex: 404
+        
+        Used in: error-page
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdPositiveIntegerType">
+        <xsd:pattern value="\d{3}"/>
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="error-pageType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The error-pageType contains a mapping between an error code
+        or exception type to the path of a resource in the web
+        application.
+        
+        Error-page declarations using the exception-type element in
+        the deployment descriptor must be unique up to the class name of
+        the exception-type. Similarly, error-page declarations using the
+        error-code element must be unique in the deployment descriptor
+        up to the status code.
+        
+        If an error-page element in the deployment descriptor does not
+        contain an exception-type or an error-code element, the error
+        page is a default error page.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="error-code"
+                     type="jakartaee:error-codeType"/>
+        <xsd:element name="exception-type"
+                     type="jakartaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The exception-type contains a fully qualified class
+              name of a Java exception type.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="location"
+                   type="jakartaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The location element contains the location of the
+            resource in the web application relative to the root of
+            the web application. The value of the location must have
+            a leading `/'.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The filterType is used to declare a filter in the web
+        application. The filter is mapped to either a servlet or a
+        URL pattern in the filter-mapping element, using the
+        filter-name value to reference. Filters can access the
+        initialization parameters declared in the deployment
+        descriptor at runtime via the FilterConfig interface.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="filter-name"
+                   type="jakartaee:filter-nameType"/>
+      <xsd:element name="filter-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully qualified classname of the filter.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="async-supported"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as
+            an initialization param of a servlet filter
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Declaration of the filter mappings in this web
+        application is done by using filter-mappingType.
+        The container uses the filter-mapping
+        declarations to decide which filters to apply to a request,
+        and in what order. The container matches the request URI to
+        a Servlet in the normal way. To determine which filters to
+        apply it matches filter-mapping declarations either on
+        servlet-name, or on url-pattern for each filter-mapping
+        element, depending on which style is used. The order in
+        which filters are invoked is the order in which
+        filter-mapping declarations that match a request URI for a
+        servlet appear in the list of filter-mapping elements.The
+        filter-name value must be the value of the filter-name
+        sub-elements of one of the filter declarations in the
+        deployment descriptor.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="filter-name"
+                   type="jakartaee:filter-nameType"/>
+      <xsd:choice minOccurs="1"
+                  maxOccurs="unbounded">
+        <xsd:element name="url-pattern"
+                     type="jakartaee:url-patternType"/>
+        <xsd:element name="servlet-name"
+                     type="jakartaee:servlet-nameType"/>
+      </xsd:choice>
+      <xsd:element name="dispatcher"
+                   type="jakartaee:dispatcherType"
+                   minOccurs="0"
+                   maxOccurs="5"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="nonEmptyStringType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines a string which contains at least one
+        character.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:minLength value="1"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="filter-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The logical name of the filter is declare
+        by using filter-nameType. This name is used to map the
+        filter.  Each filter name is unique within the web
+        application.
+        
+        Used in: filter, filter-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="form-login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The form-login-configType specifies the login and error
+        pages that should be used in form based login. If form based
+        authentication is not used, these elements are ignored.
+        
+        Used in: login-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="form-login-page"
+                   type="jakartaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-login-page element defines the location in the web
+            app where the page that can be used for login can be
+            found.  The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-error-page"
+                   type="jakartaee:war-pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The form-error-page element defines the location in
+            the web app where the error page that is displayed
+            when login is not successful can be found.
+            The path begins with a leading / and is interpreted
+            relative to the root of the WAR.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="http-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A HTTP method type as defined in HTTP 1.1 section 2.2.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:pattern value="[!-~-[\(\)&#60;&#62;@,;:&#34;/\[\]?=\{\}\\\p{Z}]]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="load-on-startupType">
+    <xsd:union memberTypes="jakartaee:null-charType xsd:integer"/>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="null-charType">
+    <xsd:restriction base="xsd:string">
+      <xsd:enumeration value=""/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="login-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The login-configType is used to configure the authentication
+        method that should be used, the realm name that should be
+        used for this application, and the attributes that are
+        needed by the form login mechanism.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="auth-method"
+                   type="jakartaee:auth-methodType"
+                   minOccurs="0"/>
+      <xsd:element name="realm-name"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The realm name element specifies the realm name to
+            use in HTTP Basic authorization.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="form-login-config"
+                   type="jakartaee:form-login-configType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-mappingType defines a mapping between an extension
+        and a mime type.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The extension element contains a string describing an
+          extension. example: "txt"
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:element name="extension"
+                   type="jakartaee:string"/>
+      <xsd:element name="mime-type"
+                   type="jakartaee:mime-typeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="mime-typeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The mime-typeType is used to indicate a defined mime type.
+        
+        Example:
+        "text/plain"
+        
+        Used in: mime-mapping
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="[^\p{Cc}^\s]+/[^\p{Cc}^\s]+"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="security-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The security-constraintType is used to associate
+        security constraints with one or more web resource
+        collections
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="display-name"
+                   type="jakartaee:display-nameType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="web-resource-collection"
+                   type="jakartaee:web-resource-collectionType"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="auth-constraint"
+                   type="jakartaee:auth-constraintType"
+                   minOccurs="0"/>
+      <xsd:element name="user-data-constraint"
+                   type="jakartaee:user-data-constraintType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servletType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servletType is used to declare a servlet.
+        It contains the declarative data of a
+        servlet. If a jsp-file is specified and the load-on-startup
+        element is present, then the JSP should be precompiled and
+        loaded.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="servlet-name"
+                   type="jakartaee:servlet-nameType"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="servlet-class"
+                     type="jakartaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The servlet-class element contains the fully
+              qualified class name of the servlet.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="jsp-file"
+                     type="jakartaee:jsp-fileType"/>
+      </xsd:choice>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="load-on-startup"
+                   type="jakartaee:load-on-startupType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The load-on-startup element indicates that this
+            servlet should be loaded (instantiated and have
+            its init() called) on the startup of the web
+            application. The optional contents of these
+            element must be an integer indicating the order in
+            which the servlet should be loaded. If the value
+            is a negative integer, or the element is not
+            present, the container is free to load the servlet
+            whenever it chooses. If the value is a positive
+            integer or 0, the container must load and
+            initialize the servlet as the application is
+            deployed. The container must guarantee that
+            servlets marked with lower integers are loaded
+            before servlets marked with higher integers. The
+            container may choose the order of loading of
+            servlets with the same load-on-start-up value.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="enabled"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="async-supported"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0"/>
+      <xsd:element name="run-as"
+                   type="jakartaee:run-asType"
+                   minOccurs="0"/>
+      <xsd:element name="security-role-ref"
+                   type="jakartaee:security-role-refType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="multipart-config"
+                   type="jakartaee:multipart-configType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-mappingType defines a mapping between a
+        servlet and a url pattern.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="servlet-name"
+                   type="jakartaee:servlet-nameType"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   minOccurs="1"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="servlet-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The servlet-name element contains the canonical name of the
+        servlet. Each servlet name is unique within the web
+        application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="session-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The session-configType defines the session parameters
+        for this web application.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="session-timeout"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The session-timeout element defines the default
+            session timeout interval for all sessions created
+            in this web application. The specified timeout
+            must be expressed in a whole number of minutes.
+            If the timeout is 0 or less, the container ensures
+            the default behaviour of sessions is never to time
+            out. If this element is not specified, the container
+            must set its default timeout period.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="cookie-config"
+                   type="jakartaee:cookie-configType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The cookie-config element defines the configuration of the
+            session tracking cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tracking-mode"
+                   type="jakartaee:tracking-modeType"
+                   minOccurs="0"
+                   maxOccurs="3">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The tracking-mode element defines the tracking modes
+            for sessions created by this web application
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The cookie-configType defines the configuration for the
+        session tracking cookies of this web application.
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:cookie-nameType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The name that will be assigned to any session tracking
+            cookies created by this web application.
+            The default is JSESSIONID
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="domain"
+                   type="jakartaee:cookie-domainType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The domain name that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="path"
+                   type="jakartaee:cookie-pathType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The path that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="comment"
+                   type="jakartaee:cookie-commentType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The comment that will be assigned to any session tracking
+            cookies created by this web application.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="http-only"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created
+            by this web application will be marked as HttpOnly
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="secure"
+                   type="jakartaee:true-falseType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies whether any session tracking cookies created
+            by this web application will be marked as secure.
+            When true, all session tracking cookies must be marked
+            as secure independent of the nature of the request that
+            initiated the corresponding session.
+            When false, the session cookie should only be marked secure
+            if the request that initiated the session was secure.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-age"
+                   type="jakartaee:xsdIntegerType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The lifetime (in seconds) that will be assigned to any
+            session tracking cookies created by this web application.
+            Default is -1
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:attribute-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The attribute-param element contains a name/value pair to
+            be added as an attribute to every session cookie.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The name that will be assigned to any session tracking
+        cookies created by this web application.
+        The default is JSESSIONID
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-domainType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The domain name that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The path that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="cookie-commentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The comment that will be assigned to any session tracking
+        cookies created by this web application.
+        
+        Used in: cookie-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:nonEmptyStringType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tracking-modeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tracking modes for sessions created by this web
+        application
+        
+        Used in: session-config
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="COOKIE"/>
+        <xsd:enumeration value="URL"/>
+        <xsd:enumeration value="SSL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="transport-guaranteeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The transport-guaranteeType specifies that the communication
+        between client and server should be NONE, INTEGRAL, or
+        CONFIDENTIAL. NONE means that the application does not
+        require any transport guarantees. A value of INTEGRAL means
+        that the application requires that the data sent between the
+        client and server be sent in such a way that it can't be
+        changed in transit. CONFIDENTIAL means that the application
+        requires that the data be transmitted in a fashion that
+        prevents other entities from observing the contents of the
+        transmission. In most cases, the presence of the INTEGRAL or
+        CONFIDENTIAL flag will indicate that the use of SSL is
+        required.
+        
+        Used in: user-data-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NONE"/>
+        <xsd:enumeration value="INTEGRAL"/>
+        <xsd:enumeration value="CONFIDENTIAL"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="user-data-constraintType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The user-data-constraintType is used to indicate how
+        data communicated between the client and container should be
+        protected.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="transport-guarantee"
+                   type="jakartaee:transport-guaranteeType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="war-pathType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The elements that use this type designate a path starting
+        with a "/" and interpreted relative to the root of a WAR
+        file.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="/.*"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="web-app-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type contains the recognized versions of
+        web-application supported. It is used to designate the
+        version of the web application.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="6.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-resource-collectionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-resource-collectionType is used to identify the
+        resources and HTTP methods on those resources to which a
+        security constraint applies. If no HTTP methods are specified,
+        then the security constraint applies to all HTTP methods.
+        If HTTP methods are specified by http-method-omission
+        elements, the security constraint applies to all methods
+        except those identified in the collection.
+        http-method-omission and http-method elements are never
+        mixed in the same collection.
+        
+        Used in: security-constraint
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="web-resource-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The web-resource-name contains the name of this web
+            resource collection.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="1">
+        <xsd:element name="http-method"
+                     type="jakartaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method names an HTTP method to which the
+              constraint applies.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="http-method-omission"
+                     type="jakartaee:http-methodType"
+                     minOccurs="1"
+                     maxOccurs="unbounded">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              Each http-method-omission names an HTTP method to
+              which the constraint does not apply.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="welcome-file-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The welcome-file-list contains an ordered list of welcome
+        files elements.
+        
+        Used in: web-app
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="welcome-file"
+                   type="xsd:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The welcome-file element contains file name to use
+            as a default welcome file, such as index.html
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[a-z]{2}(_|-)?([\p{L}\-\p{Nd}]{2})?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+  <xsd:simpleType name="encodingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The encodingType defines IANA character sets.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="[^\s]+"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mapping-listType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping-list contains one or more
+        locale-encoding-mapping(s).
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale-encoding-mapping"
+                   type="jakartaee:locale-encoding-mappingType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="locale-encoding-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The locale-encoding-mapping contains locale name and
+        encoding name. The locale name must be either "Language-code",
+        such as "ja", defined by ISO-639 or "Language-code_Country-code",
+        such as "ja_JP".  "Country code" is defined by ISO-3166.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="locale"
+                   type="jakartaee:localeType"/>
+      <xsd:element name="encoding"
+                   type="jakartaee:encodingType"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other application
+        configuration resources.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="multipart-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element specifies configuration information related to the
+        handling of multipart/form-data requests.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="location"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The directory location where uploaded files will be stored
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-file-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of uploaded files
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="max-request-size"
+                   type="xsd:long"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The maximum size limit of multipart/form-data requests
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="file-size-threshold"
+                   type="xsd:integer"
+                   minOccurs="0"
+                   maxOccurs="1">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The size threshold after which an uploaded file will be
+            written to disk
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facelettaglibrary_2_2.xsd b/wildfly/docs/schema/web-facelettaglibrary_2_2.xsd
new file mode 100644
index 0000000..779e014
--- /dev/null
+++ b/wildfly/docs/schema/web-facelettaglibrary_2_2.xsd
@@ -0,0 +1,684 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:xml="http://www.w3.org/XML/1998/namespace"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.2">
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2011-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      <p>The XML Schema for the Tag Libraries in the JavaServer Faces
+      Standard Facelets View Declaration Language (Facelets VDL)
+      (Version 2.2).</p>
+      
+      <p>JSF 2.2 Facelet Tag Libraries that wish to conform to this
+      schema must declare it in the following manner.</p>
+      
+      &lt;facelet-taglib xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-facelettaglibary_2_2.xsd"
+      version="2.2"&gt;
+      
+      ...
+      
+      &lt;/facelet-taglib&gt;</pre>
+      
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for javaee namespace with the following location:</p>
+      
+      <p>http://xmlns.jcp.org/xml/ns/javaee/web-facelettaglibary_2_2.xsd</p>
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="facelet-taglib"
+               type="javaee:facelet-taglibType">
+    <xsd:unique name="facelet-taglib-tagname-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[<p>
+
+          tag-names must be unique within a document.
+          
+        </p>]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:tag"/>
+      <xsd:field xpath="javaee:tag-name"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[<p>
+
+          Behavior IDs must be unique within a document.
+          
+        </p>]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:behavior"/>
+      <xsd:field xpath="javaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[<p>
+
+          Converter IDs must be unique within a document.
+          
+        </p>]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:converter"/>
+      <xsd:field xpath="javaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[<p>
+
+          Validator IDs must be unique within a document.
+          
+        </p>]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:validator"/>
+      <xsd:field xpath="javaee:validator-id"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglibType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        The top level XML element in a facelet tag library XML file.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="library-class"
+                     type="javaee:fully-qualified-classType"/>
+        <xsd:sequence>
+          <xsd:element name="namespace"
+                       type="javaee:string"/>
+          <xsd:element minOccurs="0" maxOccurs="1" name="short-name"
+                       type="javaee:string">
+            <xsd:annotation>
+              <xsd:documentation><![CDATA[<p>
+              
+              An advisory short name for usages of tags from this tag library.
+              
+              </p>]]></xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="composite-library-name"
+                       type="javaee:string"/>
+          <xsd:choice minOccurs="0"
+                      maxOccurs="unbounded">
+            <xsd:element name="tag"
+                         type="javaee:facelet-taglib-tagType"/>
+            <xsd:element name="function"
+                         type="javaee:facelet-taglib-functionType"/>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="taglib-extension"
+                   type="javaee:facelet-taglib-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="javaee:facelet-taglib-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Extension element for facelet-taglib. It may contain
+        implementation specific content.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tagType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+        <p>If the tag library XML
+        file contains individual tag declarations rather than pointing
+        to a library-class or a declaring a composite-library name, the
+        individual tags are enclosed in tag elements.</p>
+
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="tag-name"
+                   type="javaee:facelet-taglib-canonical-nameType"/>
+      <xsd:choice>
+        <xsd:element name="handler-class"
+                     type="javaee:fully-qualified-classType"/>
+        <xsd:element name="behavior"
+                     type="javaee:facelet-taglib-tag-behaviorType"/>
+        <xsd:element name="component"
+                     type="javaee:facelet-taglib-tag-componentType"/>
+        <xsd:element name="converter"
+                     type="javaee:facelet-taglib-tag-converterType"/>
+        <xsd:element name="validator"
+                     type="javaee:facelet-taglib-tag-validatorType"/>
+        <xsd:element name="source"
+                     type="javaee:string"/>
+      </xsd:choice>
+      <xsd:element name="attribute"
+                   type="javaee:facelet-taglib-tag-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="tag-extension"
+                   type="javaee:facelet-taglib-tag-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-attributeType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        <p>The attribute element defines an attribute for the nesting
+        tag. The attribute element may have several subelements
+        defining:</p>
+        
+        <dl>
+
+          <dt>description</dt><dd><p> a description of the attribute
+	  </p></dd>
+
+	  <dt>name</dt><dd><p> the name of the attribute
+	  </p></dd>
+        
+	  <dt>required</dt><dd><p> whether the attribute is required or
+        optional
+	  </p></dd>
+
+          <dt>type</dt><dd><p> the type of the attribute
+	  </p></dd>
+
+        </dl>
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="javaee:xsdNMTOKENType"/>
+      <xsd:element name="required"
+                   type="javaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+            <p>Defines if the nesting attribute is required or
+            optional.</p>
+            
+            <p>If not present then the default is "false", i.e
+            the attribute is optional.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="type"
+                     type="javaee:fully-qualified-classType"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation><![CDATA[<p>
+
+              Defines the Java type of the attributes
+              value. If this element is omitted, the
+              expected type is assumed to be
+              "java.lang.Object".</p>
+              
+            ]]></xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="method-signature"
+                     type="javaee:string"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation><![CDATA[<p>
+
+              Defines the method signature for a MethodExpression-
+              enabled attribute.  The syntax of the method-signature
+              element is as follows (taken from the function-signature
+              EBNF in web-jsptaglibrary_2_1.xsd):</p>
+
+<code>
+
+<p>MethodSignature ::= ReturnType S MethodName S? '(' S? Parameters? S? ')'</p>
+
+<p>ReturnType        ::= Type</p>
+
+<p>MethodName        ::= Identifier</p>
+
+<p>Parameters        ::= Parameter | ( Parameter S? ',' S? Parameters )</p>
+
+<p>Parameter         ::= Type</p>
+
+</code>
+
+<p>Where:</p>
+
+<ul>
+
+	  <li><p><code>Type</code> is a basic type or a fully qualified
+	  Java class name (including package name), as per the 'Type'
+	  production in the Java Language Specification, Second Edition,
+	  Chapter 18.</p></li>
+
+	  <li><p><code>Identifier</code> is a Java identifier, as per the
+	  'Identifier' production in the Java Language Specification,
+	  Second Edition, Chapter 18.</p></li>
+
+</ul>
+
+<p>Example:</p>
+
+<p><code>java.lang.String nickName( java.lang.String, int )</code></p>
+
+]]></xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Extension element for tag It may contain
+        implementation specific content.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-functionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        If the tag library XML file contains individual function
+        declarations rather than pointing to a library-class or a
+        declaring a composite-library name, the individual functions are
+        enclosed in function elements.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="function-name"
+                   type="javaee:string"/>
+      <xsd:element name="function-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="function-signature"
+                   type="javaee:string"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Within a tag element, the behavior element encapsulates
+        information specific to a JSF Behavior.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="behavior-id"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="behavior-extension"
+                   type="javaee:facelet-taglib-tag-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Extension element for behavior. It may contain
+        implementation specific content.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-componentType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+      <p><span class="changed_modified_2_2">Within</span> a tag element,
+      the component element encapsulates information specific to a JSF
+      UIComponent.</p>
+
+<div class="changed_added_2_2">
+
+<p>This element must have exactly one of
+<code>&lt;component-type&gt;</code>, <code>&lt;resource-id&gt;</code>,
+or <code>&lt;handler-class&gt;</code> among its child elements.</p>
+
+</div>
+       
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="unbounded">
+          <xsd:element name="component-type"
+                       type="javaee:string"/>
+          <xsd:element name="resource-id"
+                       type="javaee:string">
+            <xsd:annotation>
+              <xsd:documentation><![CDATA[
+
+              <p class="changed_added_2_2">A valid resource identifier
+              as specified in the spec prose document section
+              2.6.1.3.  For example:</p>
+
+          <p><code>&lt;resource-id&gt;myCC/ccName.xhtml&lt;/resource-id&gt;</code></p>
+
+              ]]></xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+          <xsd:element name="handler-class"
+                       type="javaee:fully-qualified-classType"/>
+      </xsd:choice>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="renderer-type"
+                   type="javaee:string"/>
+      <xsd:element name="component-extension"
+                   type="javaee:facelet-taglib-tag-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Extension element for component It may contain
+        implementation specific content.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converterType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Within a tag element, the converter element encapsulates
+        information specific to a JSF Converter.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="converter-id"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="converter-extension"
+                   type="javaee:facelet-taglib-tag-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Extension element for converter It may contain
+        implementation specific content.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validatorType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Within a tag element, the validator element encapsulates
+        information specific to a JSF Validator.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="validator-id"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="validator-extension"
+                   type="javaee:facelet-taglib-tag-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        Extension element for validator It may contain
+        implementation specific content.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="facelet-taglib-versionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        This type contains the recognized versions of
+        facelet-taglib supported.
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="2.2"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-canonical-nameType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[<p>
+
+        <p>Defines the canonical name of a tag or attribute being
+        defined.</p>
+        
+        <p>The name must conform to the lexical rules for an NCName</p>
+        
+      </p>]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NCName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facelettaglibrary_2_3.xsd b/wildfly/docs/schema/web-facelettaglibrary_2_3.xsd
new file mode 100644
index 0000000..4fa8554
--- /dev/null
+++ b/wildfly/docs/schema/web-facelettaglibrary_2_3.xsd
@@ -0,0 +1,776 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:xml="http://www.w3.org/XML/1998/namespace"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.3">
+  <xsd:include schemaLocation="javaee_8.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+      Copyright (c) 2011-2015 Oracle and/or its affiliates. All rights reserved.
+
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      [
+      <p>The XML Schema for the Tag Libraries in the JavaServer Faces
+      Standard Facelets View Declaration Language (Facelets VDL)
+      (Version 2.3).</p>
+
+      <p>JSF 2.3 Facelet Tag Libraries that wish to conform to this
+      schema must declare it in the following manner.</p>
+
+      &lt;facelet-taglib xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee http://xmlns.jcp.org/xml/ns/javaee/web-facelettaglibary_2_3.xsd"
+      version="2.3"&gt;
+
+      ...
+
+      &lt;/facelet-taglib&gt;</pre>
+
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for javaee namespace with the following location:</p>
+
+      <p>http://xmlns.jcp.org/xml/ns/javaee/web-facelettaglibary_2_3.xsd</p>
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="facelet-taglib"
+               type="javaee:facelet-taglibType">
+    <xsd:unique name="facelet-taglib-tagname-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          tag-names must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:tag"/>
+      <xsd:field xpath="javaee:tag-name"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          Behavior IDs must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:behavior"/>
+      <xsd:field xpath="javaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          Converter IDs must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:converter"/>
+      <xsd:field xpath="javaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          Validator IDs must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:validator"/>
+      <xsd:field xpath="javaee:validator-id"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        The top level XML element in a facelet tag library XML file.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="library-class"
+                     type="javaee:fully-qualified-classType"/>
+        <xsd:sequence>
+          <xsd:element name="namespace"
+                       type="javaee:string"/>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="short-name"
+                       type="javaee:string">
+            <xsd:annotation>
+              <xsd:documentation>
+                <![CDATA[
+                <p>
+
+                An advisory short name for usages of tags from this tag library.
+
+                </p>
+                ]]>
+              </xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="composite-library-name"
+                       type="javaee:string"/>
+          <xsd:choice minOccurs="0"
+                      maxOccurs="unbounded">
+            <xsd:element name="tag"
+                         type="javaee:facelet-taglib-tagType"/>
+            <xsd:element name="function"
+                         type="javaee:facelet-taglib-functionType"/>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="taglib-extension"
+                   type="javaee:facelet-taglib-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="javaee:facelet-taglib-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for facelet-taglib. It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>If the tag library XML
+        file contains individual tag declarations rather than pointing
+        to a library-class or a declaring a composite-library name, the
+        individual tags are enclosed in tag elements.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="tag-name"
+                   type="javaee:facelet-taglib-canonical-nameType"/>
+      <xsd:choice>
+        <xsd:element name="handler-class"
+                     type="javaee:fully-qualified-classType"/>
+        <xsd:element name="behavior"
+                     type="javaee:facelet-taglib-tag-behaviorType"/>
+        <xsd:element name="component"
+                     type="javaee:facelet-taglib-tag-componentType"/>
+        <xsd:element name="converter"
+                     type="javaee:facelet-taglib-tag-converterType"/>
+        <xsd:element name="validator"
+                     type="javaee:facelet-taglib-tag-validatorType"/>
+        <xsd:element name="source"
+                     type="javaee:string"/>
+      </xsd:choice>
+      <xsd:element name="attribute"
+                   type="javaee:facelet-taglib-tag-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="tag-extension"
+                   type="javaee:facelet-taglib-tag-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        <p>The attribute element defines an attribute for the nesting
+        tag. The attribute element may have several subelements
+        defining:</p>
+
+        <dl>
+
+        <dt>description</dt><dd><p> a description of the attribute
+        </p></dd>
+
+        <dt>name</dt><dd><p> the name of the attribute
+        </p></dd>
+
+        <dt>required</dt><dd><p> whether the attribute is required or
+        optional
+        </p></dd>
+
+        <dt>type</dt><dd><p> the type of the attribute
+        </p></dd>
+
+        </dl>
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="javaee:xsdNMTOKENType"/>
+      <xsd:element name="required"
+                   type="javaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>Defines if the nesting attribute is required or
+            optional.</p>
+
+            <p>If not present then the default is "false", i.e
+            the attribute is optional.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="type"
+                     type="javaee:fully-qualified-classType"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p>
+
+              Defines the Java type of the attributes
+              value. If this element is omitted, the
+              expected type is assumed to be
+              "java.lang.Object".</p>
+
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="method-signature"
+                     type="javaee:string"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p>
+
+              Defines the method signature for a MethodExpression-
+              enabled attribute.  The syntax of the method-signature
+              element is as follows (taken from the function-signature
+              EBNF in web-jsptaglibrary_2_1.xsd):</p>
+
+              <code>
+
+              <p>MethodSignature ::= ReturnType S MethodName S? '(' S? Parameters? S? ')'</p>
+
+              <p>ReturnType        ::= Type</p>
+
+              <p>MethodName        ::= Identifier</p>
+
+              <p>Parameters        ::= Parameter | ( Parameter S? ',' S? Parameters )</p>
+
+              <p>Parameter         ::= Type</p>
+
+              </code>
+
+              <p>Where:</p>
+
+              <ul>
+
+              <li><p><code>Type</code> is a basic type or a fully qualified
+              Java class name (including package name), as per the 'Type'
+              production in the Java Language Specification, Second Edition,
+              Chapter 18.</p></li>
+
+              <li><p><code>Identifier</code> is a Java identifier, as per the
+              'Identifier' production in the Java Language Specification,
+              Second Edition, Chapter 18.</p></li>
+
+              </ul>
+
+              <p>Example:</p>
+
+              <p><code>java.lang.String nickName( java.lang.String, int )</code></p>
+
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for tag It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        If the tag library XML file contains individual function
+        declarations rather than pointing to a library-class or a
+        declaring a composite-library name, the individual functions are
+        enclosed in function elements.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="function-name"
+                   type="javaee:string"/>
+      <xsd:element name="function-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="function-signature"
+                   type="javaee:string"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Within a tag element, the behavior element encapsulates
+        information specific to a JSF Behavior.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="behavior-id"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="behavior-extension"
+                   type="javaee:facelet-taglib-tag-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for behavior. It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p><span class="changed_modified_2_2
+        changed_modified_2_3">Within</span> a tag element, the component
+        element encapsulates information specific to a JSF
+        UIComponent.</p>
+
+        <div class="changed_added_2_2 changed_deleted_2_3">
+
+        <p>As of 2.3 of the specification, this requirement is no longer
+        present: This element must have exactly one of
+        <code>&lt;component-type&gt;</code>, <code>&lt;resource-id&gt;</code>,
+        or <code>&lt;handler-class&gt;</code> among its child elements.</p>
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="component-type"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="renderer-type"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="resource-id"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A valid resource identifier
+            as specified in the spec prose document section
+            2.6.1.3.  For example:</p>
+
+            <p><code>&lt;resource-id&gt;myCC/ccName.xhtml&lt;/resource-id&gt;</code></p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="component-extension"
+                   type="javaee:facelet-taglib-tag-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for component It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Within a tag element, the converter element encapsulates
+        information specific to a JSF Converter.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="converter-id"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="converter-extension"
+                   type="javaee:facelet-taglib-tag-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for converter It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Within a tag element, the validator element encapsulates
+        information specific to a JSF Validator.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="validator-id"
+                   type="javaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="javaee:fully-qualified-classType"/>
+      <xsd:element name="validator-extension"
+                   type="javaee:facelet-taglib-tag-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for validator It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="facelet-taglib-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        This type contains the recognized versions of
+        facelet-taglib supported.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="2.3"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-canonical-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        <p>Defines the canonical name of a tag or attribute being
+        defined.</p>
+
+        <p>The name must conform to the lexical rules for an NCName</p>
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NCName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facelettaglibrary_3_0.xsd b/wildfly/docs/schema/web-facelettaglibrary_3_0.xsd
new file mode 100644
index 0000000..8231deb
--- /dev/null
+++ b/wildfly/docs/schema/web-facelettaglibrary_3_0.xsd
@@ -0,0 +1,751 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:xml="http://www.w3.org/XML/1998/namespace"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      [
+      <p>The XML Schema for the Tag Libraries in the Jakarta Server Faces
+      Standard Facelets View Declaration Language (Facelets VDL)
+      (Version 3.0).</p>
+      
+      <p>Jakarta Server Faces 3.0 Facelet Tag Libraries that wish to conform to 
+      this schema must declare it in the following manner.</p>
+      
+      &lt;facelet-taglib xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://jakarta.ee/xml/ns/jakartaee/web-facelettaglibary_3_0.xsd"
+      version="3.0"&gt;
+      
+      ...
+      
+      &lt;/facelet-taglib&gt;</pre>
+      
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for jakartaee namespace with the following location:</p>
+      
+      <p>https://jakarta.ee/xml/ns/jakartaee/web-facelettaglibary_3_0.xsd</p>
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="facelet-taglib"
+               type="jakartaee:facelet-taglibType">
+    <xsd:unique name="facelet-taglib-tagname-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+          
+          tag-names must be unique within a document.
+          
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:tag"/>
+      <xsd:field xpath="jakartaee:tag-name"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+          
+          Behavior IDs must be unique within a document.
+          
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:behavior"/>
+      <xsd:field xpath="jakartaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+          
+          Converter IDs must be unique within a document.
+          
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:converter"/>
+      <xsd:field xpath="jakartaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+          
+          Validator IDs must be unique within a document.
+          
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:validator"/>
+      <xsd:field xpath="jakartaee:validator-id"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        The top level XML element in a facelet tag library XML file.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="library-class"
+                     type="jakartaee:fully-qualified-classType"/>
+        <xsd:sequence>
+          <xsd:element name="namespace"
+                       type="jakartaee:string"/>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="short-name"
+                       type="jakartaee:string">
+            <xsd:annotation>
+              <xsd:documentation>
+                <![CDATA[
+                <p>
+                
+                An advisory short name for usages of tags from this tag library.
+                
+                </p>
+                ]]>
+              </xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="composite-library-name"
+                       type="jakartaee:string"/>
+          <xsd:choice minOccurs="0"
+                      maxOccurs="unbounded">
+            <xsd:element name="tag"
+                         type="jakartaee:facelet-taglib-tagType"/>
+            <xsd:element name="function"
+                         type="jakartaee:facelet-taglib-functionType"/>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="taglib-extension"
+                   type="jakartaee:facelet-taglib-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="jakartaee:facelet-taglib-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Extension element for facelet-taglib. It may contain
+        implementation specific content.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>If the tag library XML
+        file contains individual tag declarations rather than pointing
+        to a library-class or a declaring a composite-library name, the
+        individual tags are enclosed in tag elements.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="tag-name"
+                   type="jakartaee:facelet-taglib-canonical-nameType"/>
+      <xsd:choice>
+        <xsd:element name="handler-class"
+                     type="jakartaee:fully-qualified-classType"/>
+        <xsd:element name="behavior"
+                     type="jakartaee:facelet-taglib-tag-behaviorType"/>
+        <xsd:element name="component"
+                     type="jakartaee:facelet-taglib-tag-componentType"/>
+        <xsd:element name="converter"
+                     type="jakartaee:facelet-taglib-tag-converterType"/>
+        <xsd:element name="validator"
+                     type="jakartaee:facelet-taglib-tag-validatorType"/>
+        <xsd:element name="source"
+                     type="jakartaee:string"/>
+      </xsd:choice>
+      <xsd:element name="attribute"
+                   type="jakartaee:facelet-taglib-tag-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="tag-extension"
+                   type="jakartaee:facelet-taglib-tag-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        <p>The attribute element defines an attribute for the nesting
+        tag. The attribute element may have several subelements
+        defining:</p>
+        
+        <dl>
+        
+        <dt>description</dt><dd><p> a description of the attribute
+        </p></dd>
+        
+        <dt>name</dt><dd><p> the name of the attribute
+        </p></dd>
+        
+        <dt>required</dt><dd><p> whether the attribute is required or
+        optional
+        </p></dd>
+        
+        <dt>type</dt><dd><p> the type of the attribute
+        </p></dd>
+        
+        </dl>
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:xsdNMTOKENType"/>
+      <xsd:element name="required"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>Defines if the nesting attribute is required or
+            optional.</p>
+            
+            <p>If not present then the default is "false", i.e
+            the attribute is optional.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="type"
+                     type="jakartaee:fully-qualified-classType"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p>
+              
+              Defines the Java type of the attributes
+              value. If this element is omitted, the
+              expected type is assumed to be
+              "java.lang.Object".</p>
+              
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="method-signature"
+                     type="jakartaee:string"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p>
+              
+              Defines the method signature for a MethodExpression-
+              enabled attribute.  The syntax of the method-signature
+              element is as follows (taken from the function-signature
+              EBNF in web-jsptaglibrary_2_1.xsd):</p>
+              
+              <code>
+              
+              <p>MethodSignature ::= ReturnType S MethodName S? '(' S? Parameters? S? ')'</p>
+              
+              <p>ReturnType        ::= Type</p>
+              
+              <p>MethodName        ::= Identifier</p>
+              
+              <p>Parameters        ::= Parameter | ( Parameter S? ',' S? Parameters )</p>
+              
+              <p>Parameter         ::= Type</p>
+              
+              </code>
+              
+              <p>Where:</p>
+              
+              <ul>
+              
+              <li><p><code>Type</code> is a basic type or a fully qualified
+              Java class name (including package name), as per the 'Type'
+              production in the Java Language Specification, Second Edition,
+              Chapter 18.</p></li>
+              
+              <li><p><code>Identifier</code> is a Java identifier, as per the
+              'Identifier' production in the Java Language Specification,
+              Second Edition, Chapter 18.</p></li>
+              
+              </ul>
+              
+              <p>Example:</p>
+              
+              <p><code>java.lang.String nickName( java.lang.String, int )</code></p>
+              
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Extension element for tag It may contain
+        implementation specific content.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        If the tag library XML file contains individual function
+        declarations rather than pointing to a library-class or a
+        declaring a composite-library name, the individual functions are
+        enclosed in function elements.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="function-name"
+                   type="jakartaee:string"/>
+      <xsd:element name="function-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="function-signature"
+                   type="jakartaee:string"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Within a tag element, the behavior element encapsulates
+        information specific to a Faces Behavior.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="behavior-id"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="behavior-extension"
+                   type="jakartaee:facelet-taglib-tag-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Extension element for behavior. It may contain
+        implementation specific content.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p><span class="changed_modified_2_2
+        changed_modified_2_3">Within</span> a tag element, the component
+        element encapsulates information specific to a Faces UIComponent.</p>
+        
+        <div class="changed_added_2_2 changed_deleted_2_3">
+        
+        <p>As of 3.0 of the specification, this requirement is no longer
+        present: This element must have exactly one of
+        <code>&lt;component-type&gt;</code>, <code>&lt;resource-id&gt;</code>,
+        or <code>&lt;handler-class&gt;</code> among its child elements.</p>
+        
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="component-type"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="renderer-type"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="resource-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A valid resource identifier
+            as specified in the spec prose document section
+            2.6.1.3.  For example:</p>
+            
+            <p><code>&lt;resource-id&gt;myCC/ccName.xhtml&lt;/resource-id&gt;</code></p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="component-extension"
+                   type="jakartaee:facelet-taglib-tag-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Extension element for component It may contain
+        implementation specific content.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Within a tag element, the converter element encapsulates
+        information specific to a Faces Converter.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="converter-id"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="converter-extension"
+                   type="jakartaee:facelet-taglib-tag-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Extension element for converter It may contain
+        implementation specific content.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Within a tag element, the validator element encapsulates
+        information specific to a Faces Validator.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="validator-id"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="validator-extension"
+                   type="jakartaee:facelet-taglib-tag-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        Extension element for validator It may contain
+        implementation specific content.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="facelet-taglib-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        This type contains the recognized versions of
+        facelet-taglib supported.
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="3.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-canonical-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+        
+        <p>Defines the canonical name of a tag or attribute being
+        defined.</p>
+        
+        <p>The name must conform to the lexical rules for an NCName</p>
+        
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NCName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facelettaglibrary_4_0.xsd b/wildfly/docs/schema/web-facelettaglibrary_4_0.xsd
new file mode 100644
index 0000000..bc1d4ef
--- /dev/null
+++ b/wildfly/docs/schema/web-facelettaglibrary_4_0.xsd
@@ -0,0 +1,751 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            xmlns:xml="http://www.w3.org/XML/1998/namespace"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      [
+      <p>The XML Schema for the Tag Libraries in the Jakarta Faces
+      Standard Facelets View Declaration Language (Facelets VDL)
+      (Version 4.0).</p>
+
+      <p>Jakarta Faces 4.0 Facelet Tag Libraries that wish to conform to
+      this schema must declare it in the following manner.</p>
+
+      &lt;facelet-taglib xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee https://jakarta.ee/xml/ns/jakartaee/web-facelettaglibrary_4_0.xsd"
+      version="4.0"&gt;
+
+      ...
+
+      &lt;/facelet-taglib&gt;</pre>
+
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for jakartaee namespace with the following location:</p>
+
+      <p>https://jakarta.ee/xml/ns/jakartaee/web-facelettaglibrary_4_0.xsd</p>
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="facelet-taglib"
+               type="jakartaee:facelet-taglibType">
+    <xsd:unique name="facelet-taglib-tagname-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          tag-names must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:tag"/>
+      <xsd:field xpath="jakartaee:tag-name"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          Behavior IDs must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:behavior"/>
+      <xsd:field xpath="jakartaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          Converter IDs must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:converter"/>
+      <xsd:field xpath="jakartaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>
+
+          Validator IDs must be unique within a document.
+
+          </p>
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:validator"/>
+      <xsd:field xpath="jakartaee:validator-id"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        The top level XML element in a facelet tag library XML file.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="library-class"
+                     type="jakartaee:fully-qualified-classType"/>
+        <xsd:sequence>
+          <xsd:element name="namespace"
+                       type="jakartaee:string"/>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="short-name"
+                       type="jakartaee:string">
+            <xsd:annotation>
+              <xsd:documentation>
+                <![CDATA[
+                <p>
+
+                An advisory short name for usages of tags from this tag library.
+
+                </p>
+                ]]>
+              </xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+          <xsd:element minOccurs="0"
+                       maxOccurs="1"
+                       name="composite-library-name"
+                       type="jakartaee:string"/>
+          <xsd:choice minOccurs="0"
+                      maxOccurs="unbounded">
+            <xsd:element name="tag"
+                         type="jakartaee:facelet-taglib-tagType"/>
+            <xsd:element name="function"
+                         type="jakartaee:facelet-taglib-functionType"/>
+          </xsd:choice>
+        </xsd:sequence>
+      </xsd:choice>
+      <xsd:element name="taglib-extension"
+                   type="jakartaee:facelet-taglib-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="jakartaee:facelet-taglib-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for facelet-taglib. It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>If the tag library XML
+        file contains individual tag declarations rather than pointing
+        to a library-class or a declaring a composite-library name, the
+        individual tags are enclosed in tag elements.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="tag-name"
+                   type="jakartaee:facelet-taglib-canonical-nameType"/>
+      <xsd:choice>
+        <xsd:element name="handler-class"
+                     type="jakartaee:fully-qualified-classType"/>
+        <xsd:element name="behavior"
+                     type="jakartaee:facelet-taglib-tag-behaviorType"/>
+        <xsd:element name="component"
+                     type="jakartaee:facelet-taglib-tag-componentType"/>
+        <xsd:element name="converter"
+                     type="jakartaee:facelet-taglib-tag-converterType"/>
+        <xsd:element name="validator"
+                     type="jakartaee:facelet-taglib-tag-validatorType"/>
+        <xsd:element name="source"
+                     type="jakartaee:string"/>
+      </xsd:choice>
+      <xsd:element name="attribute"
+                   type="jakartaee:facelet-taglib-tag-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="tag-extension"
+                   type="jakartaee:facelet-taglib-tag-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        <p>The attribute element defines an attribute for the nesting
+        tag. The attribute element may have several subelements
+        defining:</p>
+
+        <dl>
+
+        <dt>description</dt><dd><p> a description of the attribute
+        </p></dd>
+
+        <dt>name</dt><dd><p> the name of the attribute
+        </p></dd>
+
+        <dt>required</dt><dd><p> whether the attribute is required or
+        optional
+        </p></dd>
+
+        <dt>type</dt><dd><p> the type of the attribute
+        </p></dd>
+
+        </dl>
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:xsdNMTOKENType"/>
+      <xsd:element name="required"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>Defines if the nesting attribute is required or
+            optional.</p>
+
+            <p>If not present then the default is "false", i.e
+            the attribute is optional.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="type"
+                     type="jakartaee:fully-qualified-classType"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p>
+
+              Defines the Java type of the attributes
+              value. If this element is omitted, the
+              expected type is assumed to be
+              "java.lang.Object".</p>
+
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="method-signature"
+                     type="jakartaee:string"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p>
+
+              Defines the method signature for a MethodExpression-
+              enabled attribute.  The syntax of the method-signature
+              element is as follows (taken from the function-signature
+              EBNF in web-jsptaglibrary_2_1.xsd):</p>
+
+              <code>
+
+              <p>MethodSignature ::= ReturnType S MethodName S? '(' S? Parameters? S? ')'</p>
+
+              <p>ReturnType        ::= Type</p>
+
+              <p>MethodName        ::= Identifier</p>
+
+              <p>Parameters        ::= Parameter | ( Parameter S? ',' S? Parameters )</p>
+
+              <p>Parameter         ::= Type</p>
+
+              </code>
+
+              <p>Where:</p>
+
+              <ul>
+
+              <li><p><code>Type</code> is a basic type or a fully qualified
+              Java class name (including package name), as per the 'Type'
+              production in the Java Language Specification, Second Edition,
+              Chapter 18.</p></li>
+
+              <li><p><code>Identifier</code> is a Java identifier, as per the
+              'Identifier' production in the Java Language Specification,
+              Second Edition, Chapter 18.</p></li>
+
+              </ul>
+
+              <p>Example:</p>
+
+              <p><code>java.lang.String nickName( java.lang.String, int )</code></p>
+
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for tag It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        If the tag library XML file contains individual function
+        declarations rather than pointing to a library-class or a
+        declaring a composite-library name, the individual functions are
+        enclosed in function elements.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="function-name"
+                   type="jakartaee:string"/>
+      <xsd:element name="function-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="function-signature"
+                   type="jakartaee:string"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Within a tag element, the behavior element encapsulates
+        information specific to a Faces Behavior.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="behavior-id"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="behavior-extension"
+                   type="jakartaee:facelet-taglib-tag-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for behavior. It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p><span class="changed_modified_2_2
+        changed_modified_2_3">Within</span> a tag element, the component
+        element encapsulates information specific to a Faces UIComponent.</p>
+
+        <div class="changed_added_2_2 changed_deleted_2_3">
+
+        <p>As of 3.0 of the specification, this requirement is no longer
+        present: This element must have exactly one of
+        <code>&lt;component-type&gt;</code>, <code>&lt;resource-id&gt;</code>,
+        or <code>&lt;handler-class&gt;</code> among its child elements.</p>
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="component-type"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="renderer-type"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="resource-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A valid resource identifier
+            as specified in the Jakarta Faces Specification Document section 2.6.1.3 "Resource Identifiers".
+            For example:</p>
+
+            <p><code>&lt;resource-id&gt;myCC/ccName.xhtml&lt;/resource-id&gt;</code></p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="component-extension"
+                   type="jakartaee:facelet-taglib-tag-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for component It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Within a tag element, the converter element encapsulates
+        information specific to a Faces Converter.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="converter-id"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="converter-extension"
+                   type="jakartaee:facelet-taglib-tag-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for converter It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Within a tag element, the validator element encapsulates
+        information specific to a Faces Validator.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element minOccurs="1"
+                   maxOccurs="1"
+                   name="validator-id"
+                   type="jakartaee:string"/>
+      <xsd:element minOccurs="0"
+                   maxOccurs="1"
+                   name="handler-class"
+                   type="jakartaee:fully-qualified-classType"/>
+      <xsd:element name="validator-extension"
+                   type="jakartaee:facelet-taglib-tag-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-tag-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        Extension element for validator It may contain
+        implementation specific content.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="facelet-taglib-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        This type contains the recognized versions of
+        facelet-taglib supported.
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="4.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="facelet-taglib-canonical-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>
+
+        <p>Defines the canonical name of a tag or attribute being
+        defined.</p>
+
+        <p>The name must conform to the lexical rules for an NCName</p>
+
+        </p>
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="xsd:NCName">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facesconfig_1_2.xsd b/wildfly/docs/schema/web-facesconfig_1_2.xsd
new file mode 100644
index 0000000..960400b
--- /dev/null
+++ b/wildfly/docs/schema/web-facesconfig_1_2.xsd
@@ -0,0 +1,2107 @@
+<?xml version = "1.0" encoding = "UTF-8"?>
+
+<!--
+ DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+ Copyright 1997-2007 Sun Microsystems, Inc. All rights reserved.
+
+ The contents of this file are subject to the terms of either the GNU
+ General Public License Version 2 only ("GPL") or the Common Development
+ and Distribution License("CDDL") (collectively, the "License").  You
+ may not use this file except in compliance with the License. You can obtain
+ a copy of the License at https://glassfish.dev.java.net/public/CDDL+GPL.html
+ or glassfish/bootstrap/legal/LICENSE.txt.  See the License for the specific
+ language governing permissions and limitations under the License.
+
+ When distributing the software, include this License Header Notice in each
+ file and include the License file at glassfish/bootstrap/legal/LICENSE.txt.
+ Sun designates this particular file as subject to the "Classpath" exception
+ as provided by Sun in the GPL Version 2 section of the License file that
+ accompanied this code.  If applicable, add the following below the License
+ Header, with the fields enclosed by brackets [] replaced by your own
+ identifying information: "Portions Copyrighted [year]
+ [name of copyright owner]"
+
+ Contributor(s):
+
+ If you wish your version of this file to be governed by only the CDDL or
+ only the GPL Version 2, indicate your decision by adding "[Contributor]
+ elects to include this software in this distribution under the [CDDL or GPL
+ Version 2] license."  If you don't indicate a single choice of license, a
+ recipient has the option to distribute your version of this file under
+ either the CDDL, the GPL Version 2 or to extend the choice of license to
+ its licensees as provided above.  However, if you add GPL Version 2 code
+ and therefore, elected the GPL Version 2 license, then the option applies
+ only if the new code is made subject to such option by the copyright
+ holder.
+-->
+
+
+<xsd:schema
+        targetNamespace="http://java.sun.com/xml/ns/javaee"
+        xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+        xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+        elementFormDefault="qualified"
+        attributeFormDefault="unqualified"
+        version="1.2">
+
+    <xsd:annotation>
+        <xsd:documentation>
+            $Id: web-facesconfig_1_2.xsd,v 1.15 2008/03/26 17:46:42 rlubke Exp $
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+
+            Copyright 2005 Sun Microsystems, Inc.,
+            901 San Antonio Road,
+            Palo Alto, California 94303, U.S.A.
+            All rights reserved.
+
+            Sun Microsystems, Inc. has intellectual property
+            rights relating to technology described in this document. In
+            particular, and without limitation, these intellectual
+            property rights may include one or more of the U.S. patents
+            listed at http://www.sun.com/patents and one or more
+            additional patents or pending patent applications in the
+            U.S. and other countries.
+
+            This document and the technology which it describes are
+            distributed under licenses restricting their use, copying,
+            distribution, and decompilation. No part of this document
+            may be reproduced in any form by any means without prior
+            written authorization of Sun and its licensors, if any.
+
+            Third-party software, including font technology, is
+            copyrighted and licensed from Sun suppliers.
+
+            Sun, Sun Microsystems, the Sun logo, Solaris, Java, Java EE,
+            JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+            Cup logo are trademarks or registered trademarks of Sun
+            Microsystems, Inc. in the U.S. and other countries.
+
+            Federal Acquisitions: Commercial Software - Government Users
+            Subject to Standard License Terms and Conditions.
+
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:annotation>
+        <xsd:documentation>
+
+            <![CDATA[
+
+            The XML Schema for the JavaServer Faces Application
+            Configuration File (Version 1.2).
+
+            All JavaServer Faces configuration files must indicate
+            the JavaServer Faces schema by indicating the JavaServer
+            Faces namespace:
+
+            http://java.sun.com/xml/ns/javaee
+
+            and by indicating the version of the schema by
+            using the version element as shown below:
+
+            <faces-config xmlns="http://java.sun.com/xml/ns/javaee"
+                    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+                    xsi:schemaLocation="..."
+                    version="1.2">
+                ...
+            </faces-config>
+
+            The instance documents may indicate the published
+            version of the schema using xsi:schemaLocation attribute
+            for javaee namespace with the following location:
+
+            http://java.sun.com/xml/ns/javaee/web-facesconfig_1_2.xsd
+
+            ]]>
+
+        </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:include schemaLocation="javaee_5.xsd"/>
+
+    <!-- **************************************************** -->
+
+    <xsd:element name = "faces-config" type="javaee:faces-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "faces-config" element is the root of the configuration
+                information hierarchy, and contains nested elements for all
+                of the other configuration settings.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:unique name="faces-config-converter-ID-uniqueness">
+            <xsd:annotation>
+                <xsd:documentation>
+
+                    Converter IDs must be unique within a document.
+
+                </xsd:documentation>
+            </xsd:annotation>
+
+            <xsd:selector xpath="javaee:converter"/>
+            <xsd:field    xpath="javaee:converter-id"/>
+        </xsd:unique>
+
+        <xsd:unique name="faces-config-converter-for-class-uniqueness">
+            <xsd:annotation>
+                <xsd:documentation>
+
+                    'converter-for-class' element values must be unique
+                    within a document.
+
+                </xsd:documentation>
+            </xsd:annotation>
+
+            <xsd:selector xpath="javaee:converter"/>
+            <xsd:field    xpath="javaee:converter-for-class"/>
+        </xsd:unique>
+
+        <xsd:unique name="faces-config-validator-ID-uniqueness">
+            <xsd:annotation>
+                <xsd:documentation>
+
+                    Validator IDs must be unique within a document.
+
+                </xsd:documentation>
+            </xsd:annotation>
+
+            <xsd:selector xpath="javaee:validator"/>
+            <xsd:field    xpath="javaee:validator-id"/>
+        </xsd:unique>
+
+        <xsd:unique name="faces-config-managed-bean-name-uniqueness">
+            <xsd:annotation>
+                <xsd:documentation>
+
+                    Managed bean names must be unique within a document.
+
+                </xsd:documentation>
+            </xsd:annotation>
+
+            <xsd:selector xpath="javaee:managed-bean"/>
+            <xsd:field    xpath="javaee:managed-bean-name"/>
+        </xsd:unique>
+    </xsd:element>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "faces-config" element is the root of the configuration
+                information hierarchy, and contains nested elements for all
+                of the other configuration settings.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="application"
+                         type="javaee:faces-config-applicationType"/>
+            <xsd:element name="factory"
+                         type="javaee:faces-config-factoryType"/>
+            <xsd:element name="component"
+                         type="javaee:faces-config-componentType"/>
+            <xsd:element name="converter"
+                         type="javaee:faces-config-converterType"/>
+            <xsd:element name="managed-bean"
+                         type="javaee:faces-config-managed-beanType"/>
+            <xsd:element name="navigation-rule"
+                         type="javaee:faces-config-navigation-ruleType"/>
+            <xsd:element name="referenced-bean"
+                         type="javaee:faces-config-referenced-beanType"/>
+            <xsd:element name="render-kit"
+                         type="javaee:faces-config-render-kitType"/>
+            <xsd:element name="lifecycle"
+                         type="javaee:faces-config-lifecycleType"/>
+            <xsd:element name="validator"
+                         type="javaee:faces-config-validatorType"/>
+            <xsd:element name="faces-config-extension"
+                         type="javaee:faces-config-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:choice>
+            <xsd:attribute name = "id" type = "xsd:ID"/>
+            <xsd:attribute name="version"
+                type="javaee:faces-config-versionType"
+                use="required"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for faces-config.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-applicationType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "application" element provides a mechanism to define the
+                various per-application-singleton implementation artifacts for
+                a particular web application that is utilizing
+                JavaServer Faces.  For nested elements that are not specified,
+                the JSF implementation must provide a suitable default.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="action-listener"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "action-listener" element contains the fully
+                            qualified class name of the concrete
+                            ActionListener implementation class that will be
+                            called during the Invoke Application phase of the
+                            request processing lifecycle.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="default-render-kit-id"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "default-render-kit-id" element allows the
+                            application to define a renderkit to be used other
+                            than the standard one.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="message-bundle"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The base name of a resource bundle representing
+                            the message resources for this application.  See
+                            the JavaDocs for the "java.util.ResourceBundle"
+                            class for more information on the syntax of
+                            resource bundle names.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="navigation-handler"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "navigation-handler" element contains the
+                            fully qualified class name of the concrete
+                            NavigationHandler implementation class that will
+                            be called during the Invoke Application phase
+                            of the request processing lifecycle, if the
+                            default ActionListener (provided by the JSF
+                            implementation) is used.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="view-handler"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "view-handler" element contains the fully
+                            qualified class name of the concrete ViewHandler
+                            implementation class that will be called during
+                            the Restore View and Render Response phases of the
+                            request processing lifecycle.  The faces
+                            implementation must provide a default
+                            implementation of this class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="state-manager"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "state-manager" element contains the fully
+                            qualified class name of the concrete StateManager
+                            implementation class that will be called during
+                            the Restore View and Render Response phases of the
+                            request processing lifecycle.  The faces
+                            implementation must provide a default
+                            implementation of this class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="el-resolver"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "el-resolver" element contains the fully
+                            qualified class name of the concrete
+                            javax.el.ELResolver implementation class
+                            that will be used during the processing of
+                            EL expressions.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="property-resolver"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "property-resolver" element contains the fully
+                            qualified class name of the concrete
+                            PropertyResolver implementation class that will
+                            be used during the processing of value binding
+                            expressions.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="variable-resolver"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                            The "variable-resolver" element contains the fully
+                            qualified class name of the concrete
+                            VariableResolver implementation class that will
+                            be used during the processing of value binding
+                            expressions.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element
+                name="locale-config"
+                type="javaee:faces-config-locale-configType"/>
+            <xsd:element
+                name="resource-bundle"
+                type="javaee:faces-config-application-resource-bundleType"/>
+            <xsd:element name="application-extension"
+                         type="javaee:faces-config-application-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            </xsd:choice>
+        <xsd:attribute name = "id" type = "xsd:ID"/>
+    </xsd:complexType>
+
+    <xsd:complexType name="faces-config-application-resource-bundleType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+              The resource-bundle element inside the application element
+              references a java.util.ResourceBundle instance by name
+              using the var element.  ResourceBundles referenced in this
+              manner may be returned by a call to
+              Application.getResourceBundle() passing the current
+              FacesContext for this request and the value of the var
+              element below.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="base-name"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The fully qualified class name of the
+                        java.util.ResourceBundle instance.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="var"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The name by which this ResourceBundle instance
+                        is retrieved by a call to
+                        Application.getResourceBundle().
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-application-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for application.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-factoryType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "factory" element provides a mechanism to define the
+                various Factories that comprise parts of the implementation
+                of JavaServer Faces.  For nested elements that are not
+                specified, the JSF implementation must provide a suitable
+                default.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="application-factory"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "application-factory" element contains the
+                        fully qualified class name of the concrete
+                        ApplicationFactory implementation class that will
+                        be called when
+                        FactoryFinder.getFactory(APPLICATION_FACTORY) is
+                        called.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="faces-context-factory"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "faces-context-factory" element contains the
+                        fully qualified class name of the concrete
+                        FacesContextFactory implementation class that will
+                        be called when
+                        FactoryFinder.getFactory(FACES_CONTEXT_FACTORY)
+                        is called.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="lifecycle-factory"
+                        type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "lifecycle-factory" element contains the fully
+                        qualified class name of the concrete LifecycleFactory
+                        implementation class that will be called when
+                        FactoryFinder.getFactory(LIFECYCLE_FACTORY) is called.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="render-kit-factory"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "render-kit-factory" element contains the fully
+                        qualified class name of the concrete RenderKitFactory
+                        implementation class that will be called when
+                        FactoryFinder.getFactory(RENDER_KIT_FACTORY) is
+                        called.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="factory-extension"
+                         type="javaee:faces-config-factory-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:choice>
+        <xsd:attribute name = "id" type = "xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-factory-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for factory.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-attributeType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "attribute" element represents a named, typed, value
+                associated with the parent UIComponent via the generic
+                attributes mechanism.
+
+                Attribute names must be unique within the scope of the parent
+                (or related) component.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="attribute-name"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "attribute-name" element represents the name under
+                        which the corresponding value will be stored, in the
+                        generic attributes of the UIComponent we are related
+                        to.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="attribute-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "attribute-class" element represents the Java type
+                        of the value associated with this attribute name.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="default-value"
+                         type="javaee:faces-config-default-valueType"
+                         minOccurs="0"/>
+            <xsd:element name="suggested-value"
+                         type="javaee:faces-config-suggested-valueType"
+                         minOccurs="0"/>
+            <xsd:element name="attribute-extension"
+                         type="javaee:faces-config-attribute-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name = "id" type = "xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-attribute-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for attribute.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-componentType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "component" element represents a concrete UIComponent
+                implementation class that should be registered under the
+                specified type identifier, along with its associated
+                properties and attributes.  Component types must be unique
+                within the entire web application.
+
+                Nested "attribute" elements identify generic attributes that
+                are recognized by the implementation logic of this component.
+                Nested "property" elements identify JavaBeans properties of
+                the component class that may be exposed for manipulation
+                via tools.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="component-type"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "component-type" element represents the name under
+                        which the corresponding UIComponent class should be
+                        registered.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="component-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "component-class" element represents the fully
+                        qualified class name of a concrete UIComponent
+                        implementation class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="facet"
+                         type="javaee:faces-config-facetType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element name="attribute"
+                         type="javaee:faces-config-attributeType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element name="property"
+                         type="javaee:faces-config-propertyType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element name="component-extension"
+                         type="javaee:faces-config-component-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-component-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+                Extension element for component.  It may contain
+                implementation specific content.
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-default-localeType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "default-locale" element declares the default locale
+                for this application instance.
+
+                It must be specified as :language:[_:country:[_:variant:]]
+                without the colons, for example "ja_JP_SJIS".  The
+                separators between the segments may be '-' or '_'.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:faces-config-localeType">
+                <xsd:attribute name="id" type="xsd:ID"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+
+    <xsd:complexType name="faces-config-default-valueType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "default-value" contains the value for the property or
+                attribute in which this element resides.  This value differs
+                from the "suggested-value" in that the property or attribute
+                must take the value, whereas in "suggested-value" taking the
+                value is optional.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:simpleType name="faces-config-el-expressionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                EL expressions present within a faces config file
+                must start with the character sequence of '#{' and
+                end with '}'.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="#\{.*\}"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-facetType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Define the name and other design-time information for a facet
+                that is associated with a renderer or a component.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="facet-name"
+                         type="javaee:java-identifierType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "facet-name" element represents the facet name
+                        under which a UIComponent will be added to its parent.
+                        It must be of type "Identifier".
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="facet-extension"
+                         type="javaee:faces-config-facet-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-facet-extensionType">
+         <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for facet.  It may contain implementation
+                specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-from-view-idType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The value of from-view-id must contain one of the following
+                values:
+
+                  - The exact match for a view identifier that is recognized
+                    by the the ViewHandler implementation being used (such as
+                    "/index.jsp" if you are using the default ViewHandler).
+
+                  - A proper prefix of a view identifier, plus a trailing
+                    "*" character.  This pattern indicates that all view
+                    identifiers that match the portion of the pattern up to
+                    the asterisk will match the surrounding rule.  When more
+                    than one match exists, the match with the longest pattern
+                    is selected.
+
+                  - An "*" character, which means that this pattern applies
+                    to all view identifiers.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-from-actionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "from-action" element contains an action reference
+                expression that must have been executed (by the default
+                ActionListener for handling application level events)
+                in order to select the navigation rule.  If not specified,
+                this rule will be relevant no matter which action reference
+                was executed (or if no action reference was executed).
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:faces-config-el-expressionType">
+                <xsd:attribute name="id" type="xsd:ID"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-converterType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "converter" element represents a concrete Converter
+                implementation class that should be registered under the
+                specified converter identifier.  Converter identifiers must
+                be unique within the entire web application.
+
+                Nested "attribute" elements identify generic attributes that
+                may be configured on the corresponding UIComponent in order
+                to affect the operation of the Converter.  Nested "property"
+                elements identify JavaBeans properties of the Converter
+                implementation class that may be configured to affect the
+                operation of the Converter.  "attribute" and "property"
+                elements are intended to allow component developers to
+                more completely describe their components to tools and users.
+                These elements have no required runtime semantics.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:choice>
+                <xsd:element name="converter-id"
+                             type="javaee:string">
+                    <xsd:annotation>
+                        <xsd:documentation>
+
+                            The "converter-id" element represents the
+                            identifier under which the corresponding
+                            Converter class should be registered.
+
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+
+                <xsd:element name="converter-for-class"
+                             type="javaee:fully-qualified-classType">
+                    <xsd:annotation>
+                        <xsd:documentation>
+
+                            The "converter-for-class" element represents the
+                            fully qualified class name for which a Converter
+                            class will be registered.
+
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:element>
+            </xsd:choice>
+
+            <xsd:element name="converter-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "converter-class" element represents the fully
+                        qualified class name of a concrete Converter
+                        implementation class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="attribute"
+                         type="javaee:faces-config-attributeType"
+                         minOccurs="0"
+                         maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                       Nested "attribute" elements identify generic
+                       attributes that may be configured on the
+                       corresponding UIComponent in order to affect the
+                       operation of the Converter.  This attribute is
+                       primarily for design-time tools and is not
+                       specified to have any meaning at runtime.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="property"
+                         type="javaee:faces-config-propertyType"
+                         minOccurs="0"
+                         maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                       Nested "property" elements identify JavaBeans
+                       properties of the Converter implementation class
+                       that may be configured to affect the operation of
+                       the Converter.  This attribute is primarily for
+                       design-time tools and is not specified to have
+                       any meaning at runtime.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="converter-extension"
+                         type="javaee:faces-config-converter-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-converter-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for converter.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-lifecycleType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "lifecycle" element provides a mechanism to specify
+                modifications to the behaviour of the default Lifecycle
+                implementation for this web application.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="phase-listener"
+                         type="javaee:fully-qualified-classType"
+                         minOccurs="0"
+                         maxOccurs="unbounded">
+
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "phase-listener" element contains the fully
+                        qualified class name of the concrete PhaseListener
+                        implementation class that will be registered on
+                        the Lifecycle.
+
+                    </xsd:documentation>
+            </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="lifecycle-extension"
+                         type="javaee:faces-config-lifecycle-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-lifecycle-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for lifecycle.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:simpleType name="faces-config-localeType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The localeType defines valid locale defined by ISO-639-1
+                and ISO-3166.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:restriction base="xsd:string">
+            <xsd:pattern value="([a-z]{2})[_|\-]?([\p{L}]{2})?[_|\-]?(\w+)?"/>
+        </xsd:restriction>
+  </xsd:simpleType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-locale-configType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "locale-config" element allows the app developer to
+                declare the supported locales for this application.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="default-locale"
+                         type="javaee:faces-config-default-localeType"
+                         minOccurs="0">
+            </xsd:element>
+            <xsd:element name="supported-locale"
+                         type="javaee:faces-config-supported-localeType"
+                         minOccurs="0"
+                         maxOccurs="unbounded">
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-managed-beanType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "managed-bean" element represents a JavaBean, of a
+                particular class, that will be dynamically instantiated
+                at runtime (by the default VariableResolver implementation)
+                if it is referenced as the first element of a value binding
+                expression, and no corresponding bean can be identified in
+                any scope.  In addition to the creation of the managed bean,
+                and the optional storing of it into the specified scope,
+                the nested managed-property elements can be used to
+                initialize the contents of settable JavaBeans properties of
+                the created instance.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="managed-bean-name"
+                         type="javaee:java-identifierType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "managed-bean-name" element represents the
+                        attribute name under which a managed bean will
+                        be searched for, as well as stored (unless the
+                        "managed-bean-scope" value is "none").
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="managed-bean-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "managed-bean-class" element represents the fully
+                        qualified class name of the Java class that will be
+                        used`to instantiate a new instance if creation of the
+                        specified`managed bean is requested.
+
+                        The specified class must conform to standard JavaBeans
+                        conventions.  In particular, it must have a public
+                        zero-arguments constructor, and zero or more public
+                        property setters.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element
+                name="managed-bean-scope"
+                type="javaee:faces-config-managed-bean-scopeOrNoneType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "managed-bean-scope" element represents the scope
+                        into which a newly created instance of the specified
+                        managed bean will be stored (unless the value is
+                        "none").
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:choice>
+                <xsd:element name="managed-property"
+                             type="javaee:faces-config-managed-propertyType"
+                             minOccurs="0"
+                             maxOccurs="unbounded"/>
+                <xsd:element name="map-entries"
+                             type="javaee:faces-config-map-entriesType"/>
+                <xsd:element name="list-entries"
+                             type="javaee:faces-config-list-entriesType"/>
+            </xsd:choice>
+            <xsd:element name="managed-bean-extension"
+                         type="javaee:faces-config-managed-bean-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-managed-bean-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for managed-bean.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-managed-bean-scopeOrNoneType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                <![CDATA[
+                Defines the legal values for the <managed-bean-scope>
+                element's body content, which includes all of the scopes
+                normally used in a web application, plus the "none" value
+                indicating that a created bean should not be stored into
+                any scope.
+                ]]>
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string">
+                <xsd:enumeration value="request"/>
+                <xsd:enumeration value="session"/>
+                <xsd:enumeration value="application"/>
+                <xsd:enumeration value="none"/>
+            </xsd:restriction>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-managed-propertyType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "managed-property" element represents an individual
+                property of a managed bean that will be configured to the
+                specified value (or value set) if the corresponding
+                managed bean is automatically created.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="property-name"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "property-name" element represents the JavaBeans
+                        property name under which the corresponding value may
+                        be stored.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="property-class"
+                         type="javaee:java-typeType"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "property-class" element represents the Java type
+                        of the value associated with this property name.
+                        If not specified, it can be inferred from existing
+                        classes; however, this element should be specified
+                        if the configuration file is going to be the source
+                        for generating the corresponding classes.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:choice>
+                <xsd:element name="map-entries"
+                             type="javaee:faces-config-map-entriesType"/>
+                <xsd:element name="null-value"
+                             type="javaee:faces-config-null-valueType">
+                </xsd:element>
+                <xsd:element name="value"
+                             type="javaee:faces-config-valueType"/>
+                <xsd:element name="list-entries"
+                             type="javaee:faces-config-list-entriesType"/>
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-map-entryType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "map-entry" element reprsents a single key-entry pair
+                that will be added to the computed value of a managed
+                property of type java.util.Map.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="key"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "key" element is the String representation of a
+                        map key that will be stored in a managed property of
+                        type java.util.Map.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:choice>
+                <xsd:element name="null-value"
+                             type="javaee:faces-config-null-valueType"/>
+                <xsd:element name="value"
+                             type="javaee:faces-config-valueType"/>
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-map-entriesType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "map-entries' element represents a set of key-entry pairs
+                that will be added to the computed value of a managed property
+                of type java.util.Map.  In addition, the Java class types
+                of the key and entry values may be optionally declared.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:element name="key-class"
+                         type="javaee:fully-qualified-classType"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "key-class" element defines the Java type to which
+                        each "key" element in a set of "map-entry" elements
+                        will be converted to.  If omitted, "java.lang.String"
+                        is assumed.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="value-class"
+                         type="javaee:faces-config-value-classType"
+                         minOccurs="0"/>
+            <xsd:element name="map-entry"
+                         type="javaee:faces-config-map-entryType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-navigation-caseType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "navigation-case" element describes a particular
+                combination of conditions that must match for this case to
+                be executed, and the view id of the component tree that
+                should be selected next.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="from-action"
+                         type="javaee:faces-config-from-actionType"
+                         minOccurs="0">
+            </xsd:element>
+            <xsd:element name="from-outcome"
+                         type="javaee:string" minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "from-outcome" element contains a logical outcome
+                        string returned by the execution of an application
+                        action method selected via an "actionRef" property
+                        (or a literal value specified by an "action" property)
+                        of a UICommand component.  If specified, this rule
+                        will be relevant only if the outcome value matches
+                        this element's value.  If not specified, this rule
+                        will be relevant no matter what the outcome value was.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="to-view-id"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "to-view-id" element contains the view identifier
+                        of the next view that should be displayed if this
+                        navigation rule is matched.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element
+                name="redirect"
+                type="javaee:faces-config-redirectType" minOccurs="0"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-navigation-ruleType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "navigation-rule" element represents an individual
+                decision rule that will be utilized by the default
+                NavigationHandler implementation to make decisions on
+                what view should be displayed next, based on the
+                view id being processed.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="from-view-id"
+                         type="javaee:faces-config-from-view-idType"
+                         minOccurs="0"/>
+            <xsd:element name="navigation-case"
+                         type="javaee:faces-config-navigation-caseType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element
+                name="navigation-rule-extension"
+                type="javaee:faces-config-navigation-rule-extensionType"
+                minOccurs="0"
+                maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-navigation-rule-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for navigation-rule.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-null-valueType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "null-value" element indicates that the managed
+                property in which we are nested will be explicitly
+                set to null if our managed bean is automatically
+                created.  This is different from omitting the managed
+                property element entirely, which will cause no
+                property setter to be called for this property.
+
+                The "null-value" element can only be used when the
+                associated "property-class" identifies a Java class,
+                not a Java primitive.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-propertyType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "property" element represents a JavaBean property of the
+                Java class represented by our parent element.
+
+                Property names must be unique within the scope of the Java
+                class that is represented by the parent element, and must
+                correspond to property names that will be recognized when
+                performing introspection against that class via
+                java.beans.Introspector.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="property-name"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "property-name" element represents the JavaBeans
+                        property name under which the corresponding value
+                        may be stored.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="property-class"
+                         type="javaee:java-typeType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "property-class" element represents the Java type
+                        of the value associated with this property name.
+                        If not specified, it can be inferred from existing
+                        classes; however, this element should be specified if
+                        the configuration file is going to be the source for
+                        generating the corresponding classes.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="default-value"
+                         type="javaee:faces-config-default-valueType"
+                         minOccurs="0"/>
+            <xsd:element name="suggested-value"
+                         type="javaee:faces-config-suggested-valueType"
+                         minOccurs="0"/>
+            <xsd:element name="property-extension"
+                         type="javaee:faces-config-property-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-property-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for property.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-redirectType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                    The "redirect" element indicates that navigation to the
+                    specified "to-view-id" should be accomplished by
+                    performing an HTTP redirect rather than the usual
+                    ViewHandler mechanisms.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-referenced-beanType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "referenced-bean" element represents at design time the
+                promise that a Java object of the specified type will exist at
+                runtime in some scope, under the specified key.  This can be
+                used by design time tools to construct user interface dialogs
+                based on the properties of the specified class.  The presence
+                or absence of a referenced bean element has no impact on the
+                JavaServer Faces runtime environment inside a web application.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="referenced-bean-name"
+                         type="javaee:java-identifierType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "referenced-bean-name" element represents the
+                        attribute name under which the corresponding
+                        referenced bean may be assumed to be stored, in one
+                        of 'request', 'session', or 'application' scopes.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="referenced-bean-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "referenced-bean-class" element represents the
+                        fully qualified class name of the Java class
+                        (either abstract or concrete) or Java interface
+                        implemented by the corresponding referenced bean.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-render-kitType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "render-kit" element represents a concrete RenderKit
+                implementation that should be registered under the specified
+                render-kit-id.  If no render-kit-id is specified, the
+                identifier of the default RenderKit
+                (RenderKitFactory.DEFAULT_RENDER_KIT) is assumed.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="render-kit-id"
+                         type="javaee:string"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "render-kit-id" element represents an identifier
+                        for the RenderKit represented by the parent
+                        "render-kit" element.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="render-kit-class"
+                         type="javaee:fully-qualified-classType"
+                         minOccurs="0">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "render-kit-class" element represents the fully
+                        qualified class name of a concrete RenderKit
+                        implementation class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="renderer"
+                         type="javaee:faces-config-rendererType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element name="render-kit-extension"
+                         type="javaee:faces-config-render-kit-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-rendererType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "renderer" element represents a concrete Renderer
+                implementation class that should be registered under the
+                specified component family and renderer type identifiers,
+                in the RenderKit associated with the parent "render-kit"
+                element.  Combinations of component family and
+                renderer type must be unique within the RenderKit
+                associated with the parent "render-kit" element.
+
+                Nested "attribute" elements identify generic component
+                attributes that are recognized by this renderer.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="component-family"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "component-family" element represents the
+                        component family for which the Renderer represented
+                        by the parent "renderer" element will be used.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="renderer-type"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "renderer-type" element represents a renderer type
+                        identifier for the Renderer represented by the parent
+                        "renderer" element.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="renderer-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "renderer-class" element represents the fully
+                        qualified class name of a concrete Renderer
+                        implementation class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="facet"
+                         type="javaee:faces-config-facetType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element name="attribute"
+                         type="javaee:faces-config-attributeType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+            <xsd:element name="renderer-extension"
+                         type="javaee:faces-config-renderer-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-renderer-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for renderer.  It may contain implementation
+                specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-render-kit-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for render-kit.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-suggested-valueType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "suggested-value" contains the value for the property or
+                attribute in which this element resides.  This value is
+                advisory only and is intended for tools to use when
+                populating pallettes.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:string"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-supported-localeType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "supported-locale" element allows authors to declare
+                which locales are supported in this application instance.
+
+                It must be specified as :language:[_:country:[_:variant:]]
+                without the colons, for example "ja_JP_SJIS".  The
+                separators between the segments may be '-' or '_'.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:extension base="javaee:faces-config-localeType">
+                <xsd:attribute name="id" type="xsd:ID"/>
+            </xsd:extension>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-validatorType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "validator" element represents a concrete Validator
+                implementation class that should be registered under the
+                specified validator identifier.  Validator identifiers must
+                be unique within the entire web application.
+
+                Nested "attribute" elements identify generic attributes that
+                may be configured on the corresponding UIComponent in order
+                to affect the operation of the Validator.  Nested "property"
+                elements identify JavaBeans properties of the Validator
+                implementation class that may be configured to affect the
+                operation of the Validator.  "attribute" and "property"
+                elements are intended to allow component developers to
+                more completely describe their components to tools and users.
+                These elements have no required runtime semantics.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:group ref="javaee:descriptionGroup"/>
+            <xsd:element name="validator-id"
+                         type="javaee:string">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "validator-id" element represents the identifier
+                        under which the corresponding Validator class should
+                        be registered.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="validator-class"
+                         type="javaee:fully-qualified-classType">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                        The "validator-class" element represents the fully
+                        qualified class name of a concrete Validator
+                        implementation class.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="attribute"
+                         type="javaee:faces-config-attributeType"
+                         minOccurs="0"
+                         maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                       Nested "attribute" elements identify generic
+                       attributes that may be configured on the
+                       corresponding UIComponent in order to affect the
+                       operation of the Validator.  This attribute is
+                       primarily for design-time tools and is not
+                       specified to have any meaning at runtime.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+
+            </xsd:element>
+            <xsd:element name="property"
+                         type="javaee:faces-config-propertyType"
+                         minOccurs="0"
+                         maxOccurs="unbounded">
+                <xsd:annotation>
+                    <xsd:documentation>
+
+                       Nested "property" elements identify JavaBeans
+                       properties of the Validator implementation class
+                       that may be configured to affect the operation of
+                       the Validator.  This attribute is primarily for
+                       design-time tools and is not specified to have
+                       any meaning at runtime.
+
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="validator-extension"
+                         type="javaee:faces-config-validator-extensionType"
+                         minOccurs="0"
+                         maxOccurs="unbounded"/>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name = "faces-config-validator-extensionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                Extension element for validator.  It may contain
+                implementation specific content.
+
+            </xsd:documentation>
+        </xsd:annotation>
+
+        <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded" />
+         </xsd:sequence>
+         <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:simpleType name="faces-config-valueType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "value" element is the String representation of
+                a literal value to which a scalar managed property
+                will be set, or a value binding expression ("#{...}")
+                that will be used to calculate the required value.
+                It will be converted as specified for the actual
+                property type.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:union
+            memberTypes="javaee:faces-config-el-expressionType xsd:string"/>
+    </xsd:simpleType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-value-classType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "value-class" element defines the Java type to which each
+                "value" element's value will be converted to, prior to adding
+                it to the "list-entries" list for a managed property that is
+                a java.util.List, or a "map-entries" map for a managed
+                property that is a java.util.Map.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:simpleContent>
+            <xsd:restriction base="javaee:fully-qualified-classType"/>
+        </xsd:simpleContent>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:complexType name="faces-config-list-entriesType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                The "list-entries" element represents a set of initialization
+                elements for a managed property that is a java.util.List or an
+                array.  In the former case, the "value-class" element can
+                optionally be used to declare the Java type to which each
+                value should be converted before adding it to the Collection.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="value-class"
+                         type="javaee:faces-config-value-classType"
+                         minOccurs="0"/>
+            <xsd:choice minOccurs="0" maxOccurs="unbounded">
+                <xsd:element name="null-value"
+                             type="javaee:faces-config-null-valueType"/>
+                <xsd:element name="value"
+                             type="javaee:faces-config-valueType"/>
+            </xsd:choice>
+        </xsd:sequence>
+        <xsd:attribute name="id" type="xsd:ID"/>
+    </xsd:complexType>
+
+    <!-- **************************************************** -->
+
+    <xsd:simpleType name="faces-config-versionType">
+        <xsd:annotation>
+            <xsd:documentation>
+
+                This type contains the recognized versions of
+                faces-config supported.
+
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:restriction base="xsd:token">
+            <xsd:enumeration value="1.2"/>
+        </xsd:restriction>
+    </xsd:simpleType>
+
+    <!-- **************************************************** -->
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facesconfig_2_2.xsd b/wildfly/docs/schema/web-facesconfig_2_2.xsd
new file mode 100644
index 0000000..8127220
--- /dev/null
+++ b/wildfly/docs/schema/web-facesconfig_2_2.xsd
@@ -0,0 +1,3703 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<xsd:schema xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee" attributeFormDefault="unqualified" elementFormDefault="qualified" targetNamespace="http://xmlns.jcp.org/xml/ns/javaee" version="2.2" xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+    <xsd:include schemaLocation="javaee_7.xsd" />
+    <xsd:annotation>
+        <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2011 - 2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+    </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+      <p>The XML Schema for the JavaServer Faces Application
+      Configuration File (Version 2.2).</p>
+      
+      <p>All JavaServer Faces configuration files must indicate
+      the JavaServer Faces schema by indicating the JavaServer
+      Faces namespace:</p>
+      
+      <p>http://xmlns.jcp.org/xml/ns/javaee</p>
+      
+      <p>and by indicating the version of the schema by
+      using the version element as shown below:</p>
+      
+      <pre>&lt;faces-config xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="2.2"&gt;
+      ...
+      &lt;/faces-config&gt;</pre>
+      
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for javaee namespace with the following location:</p>
+      
+      <p>http://xmlns.jcp.org/xml/ns/javaee/web-facesconfig_2_2.xsd</p>
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="faces-config"
+               type="javaee:faces-configType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+        <p>The "faces-config" element is the root of the configuration
+        information hierarchy, and contains nested elements for all
+        of the other configuration settings.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+          <p>Behavior IDs must be unique within a document.</p>
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:behavior"/>
+      <xsd:field xpath="javaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+          <p>Converter IDs must be unique within a document.</p>
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:converter"/>
+      <xsd:field xpath="javaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-for-class-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+          <p>'converter-for-class' element values must be unique
+          within a document.</p>
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:converter"/>
+      <xsd:field xpath="javaee:converter-for-class"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+         <p> Validator IDs must be unique within a document.</p>
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:validator"/>
+      <xsd:field xpath="javaee:validator-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-managed-bean-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+         <p> Managed bean names must be unique within a document.</p>
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:managed-bean"/>
+      <xsd:field xpath="javaee:managed-bean-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-configType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "faces-config" element is the root of the configuration
+        information hierarchy, and contains nested elements for all
+        of the other configuration settings.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="application"
+                   type="javaee:faces-config-applicationType"/>
+      <xsd:element name="ordering"
+                   type="javaee:faces-config-orderingType"/>
+      <xsd:element name="absolute-ordering"
+                   type="javaee:faces-config-absoluteOrderingType"
+                   minOccurs="0"
+                   />
+      <xsd:element name="factory"
+                   type="javaee:faces-config-factoryType"/>
+      <xsd:element name="component"
+                   type="javaee:faces-config-componentType"/>
+      <xsd:element name="converter"
+                   type="javaee:faces-config-converterType"/>
+      <xsd:element name="managed-bean"
+                   type="javaee:faces-config-managed-beanType"/>
+      <xsd:element name="flow-definition"
+                   type="javaee:faces-config-flow-definitionType"/>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> <span class="changed_modified_2_2">The</span> "name" element 
+           within the top level "faces-config"
+            element declares the name of this application
+            configuration resource.  Such names are used
+            in the document ordering scheme specified in section
+            JSF.11.4.6.</p>
+            
+            <p class="changed_added_2_2">This value is taken to be the 
+            defining document id of any &lt;flow-definition&gt; elements 
+            defined in this Application Configuration Resource file.  If this
+            element is not specified, the runtime must take the empty string 
+            as its value.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="navigation-rule"
+                   type="javaee:faces-config-navigation-ruleType"/>
+      <xsd:element name="protected-views"
+                   type="javaee:faces-config-protected-viewsType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="referenced-bean"
+                   type="javaee:faces-config-referenced-beanType"/>
+      <xsd:element name="render-kit"
+                   type="javaee:faces-config-render-kitType"/>
+      <xsd:element name="lifecycle"
+                   type="javaee:faces-config-lifecycleType"/>
+      <xsd:element name="validator"
+                   type="javaee:faces-config-validatorType"/>
+      <xsd:element name="behavior"
+                   type="javaee:faces-config-behaviorType"/>
+      <xsd:element name="faces-config-extension"
+                   type="javaee:faces-config-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:choice>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean"
+                   use="optional">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+          The metadata-complete attribute defines whether this
+          JavaServer Faces application is complete, or whether
+          the class files available to this module and packaged with
+          this application should be examined for annotations
+          that specify configuration information.
+          
+          This attribute is only inspected on the application 
+          configuration resource file located at "WEB-INF/faces-config.xml".
+          The presence of this attribute on any application configuration
+          resource other than the one located at "WEB-INF/faces-config.xml",
+          including any files named using the javax.faces.CONFIG_FILES
+          attribute, must be ignored.
+          
+          If metadata-complete is set to "true", the JavaServer Faces
+          runtime must ignore any annotations that specify configuration
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the JavaServer Faces runtime must examine the class
+          files of the application for annotations, as specified by
+          the specification.
+          
+          If "WEB-INF/faces-config.xml" is not present, the JavaServer
+          Faces runtime will assume metadata-complete to be "false".
+          
+          The value of this attribute will have no impact on
+          runtime annotations such as @ResourceDependency or
+          @ListenerFor.
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="javaee:faces-config-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for faces-config.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-orderingType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Please see section JSF.11.4.6 for the specification of this element.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="javaee:faces-config-ordering-orderingType"
+                   minOccurs="0"
+                   />
+      <xsd:element name="before"
+                   type="javaee:faces-config-ordering-orderingType"
+                   minOccurs="0"
+                   />
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> This element contains a sequence of "id" elements, each of which
+        refers to an application configuration resource by the "id"
+        declared on its faces-config element.  This element can also contain
+        a single "others" element which specifies that this document comes
+        before or after other documents within the application.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:faces-config-ordering-othersType"
+                   minOccurs="0"
+                   />
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other
+        application configuration resources.  See section JSF.11.4.6
+        for the complete specification.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Only relevant if this is placed within the /WEB-INF/faces-config.xml.
+        Please see section JSF.11.4.6 for the specification for details.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:faces-config-ordering-othersType"
+                   minOccurs="0"
+                   />
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-applicationType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "application" element provides a mechanism to define the
+        various per-application-singleton implementation artifacts for
+        a particular web application that is utilizing
+        JavaServer Faces.  For nested elements that are not specified,
+        the JSF implementation must provide a suitable default.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="action-listener"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "action-listener" element contains the fully
+            qualified class name of the concrete
+            ActionListener implementation class that will be
+            called during the Invoke Application phase of the
+            request processing lifecycle.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-render-kit-id"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "default-render-kit-id" element allows the
+            application to define a renderkit to be used other
+            than the standard one.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-bundle"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The base name of a resource bundle representing
+            the message resources for this application.  See
+            the JavaDocs for the "java.util.ResourceBundle"
+            class for more information on the syntax of
+            resource bundle names.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="navigation-handler"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "navigation-handler" element contains the
+            fully qualified class name of the concrete
+            NavigationHandler implementation class that will
+            be called during the Invoke Application phase
+            of the request processing lifecycle, if the
+            default ActionListener (provided by the JSF
+            implementation) is used.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view-handler"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "view-handler" element contains the fully
+            qualified class name of the concrete ViewHandler
+            implementation class that will be called during
+            the Restore View and Render Response phases of the
+            request processing lifecycle.  The faces
+            implementation must provide a default
+            implementation of this class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="state-manager"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "state-manager" element contains the fully
+            qualified class name of the concrete StateManager
+            implementation class that will be called during
+            the Restore View and Render Response phases of the
+            request processing lifecycle.  The faces
+            implementation must provide a default
+            implementation of this class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="el-resolver"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "el-resolver" element contains the fully
+            qualified class name of the concrete
+            javax.el.ELResolver implementation class
+            that will be used during the processing of
+            EL expressions.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-resolver"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "property-resolver" element contains the fully
+            qualified class name of the concrete
+            PropertyResolver implementation class that will
+            be used during the processing of value binding
+            expressions.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="variable-resolver"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "variable-resolver" element contains the fully
+            qualified class name of the concrete
+            VariableResolver implementation class that will
+            be used during the processing of value binding
+            expressions.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-handler"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "resource-handler" element contains the
+            fully qualified class name of the concrete
+            ResourceHandler implementation class that
+            will be used during rendering and decoding
+            of resource requests The standard
+            constructor based decorator pattern used for
+            other application singletons will be
+            honored.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-library-contracts"
+                   type="javaee:faces-config-application-resource-library-contractsType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2">The "resource-library-contracts" element
+           specifies the mappings between views in the application and resource
+           library contracts that, if present in the application, must be made
+           available for use as templates of the specified views.
+           </p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="system-event-listener"
+                   type="javaee:faces-config-system-event-listenerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="locale-config"
+                   type="javaee:faces-config-locale-configType"/>
+      <xsd:element name="resource-bundle"
+                   type="javaee:faces-config-application-resource-bundleType"/>
+      <xsd:element name="application-extension"
+                   type="javaee:faces-config-application-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="default-validators"
+                   type="javaee:faces-config-default-validatorsType"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-bundleType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The resource-bundle element inside the application element
+        references a java.util.ResourceBundle instance by name
+        using the var element.  ResourceBundles referenced in this
+        manner may be returned by a call to
+        Application.getResourceBundle() passing the current
+        FacesContext for this request and the value of the var
+        element below.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="base-name"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The fully qualified class name of the
+            java.util.ResourceBundle instance.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="var"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The name by which this ResourceBundle instance
+            is retrieved by a call to
+            Application.getResourceBundle().</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-application-resource-library-contractsType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2">The "resource-library-contracts" element
+           specifies the mappings between views in the application and resource
+           library contracts that, if present in the application, must be made
+           available for use as templates of the specified views.
+           </p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="contract-mapping"
+                   type="javaee:faces-config-application-resource-library-contracts-contract-mappingType"
+                   
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p classes="changed_added_2_2">Declare a mapping between a collection
+           of views in the application and the list of contracts (if present in the application)
+           that may be used as a source for templates and resources for those views.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-application-resource-library-contracts-contract-mappingType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2">The "contract-mapping" element
+           specifies the mappings between a collection of views in the application and resource
+           library contracts that, if present in the application, must be made
+           available for use as templates of the specified views.
+           </p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2">The "url-pattern" element
+           specifies the collection of views in this application that 
+           are allowed to use the corresponding contracts.
+           </p>
+        
+           ]]></xsd:documentation>
+         </xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="contracts"
+                   type="javaee:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2">The "contracts" element
+           is a comma separated list of resource library contracts that,
+           if available to the application, may be used by the views
+           matched by the corresponding "url-pattern"
+           </p>
+        
+           ]]></xsd:documentation>
+         </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for application.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-factoryType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "factory" element provides a mechanism to define the
+        various Factories that comprise parts of the implementation
+        of JavaServer Faces.  For nested elements that are not
+        specified, the JSF implementation must provide a suitable
+        default.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="application-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "application-factory" element contains the
+            fully qualified class name of the concrete
+            ApplicationFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(APPLICATION_FACTORY) is
+            called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="exception-handler-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "exception-handler-factory" element contains the
+            fully qualified class name of the concrete
+            ExceptionHandlerFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(EXCEPTION_HANDLER_FACTORY)
+            is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="external-context-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "external-context-factory" element contains the
+            fully qualified class name of the concrete
+            ExternalContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(EXTERNAL_CONTEXT_FACTORY)
+            is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="faces-context-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "faces-context-factory" element contains the
+            fully qualified class name of the concrete
+            FacesContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FACES_CONTEXT_FACTORY)
+            is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facelet-cache-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "facelet-cache-factory" element contains the
+            fully qualified class name of the concrete
+            FaceletCacheFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FACELET_CACHE_FACTORY)
+            is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="partial-view-context-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "partial-view-context-factory" element contains the
+            fully qualified class name of the concrete
+            PartialViewContextFactory implementation class that will
+            be called when FactoryFinder.getFactory
+            (FactoryFinder.PARTIAL_VIEW_CONTEXT_FACTORY) is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lifecycle-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "lifecycle-factory" element contains the fully
+            qualified class name of the concrete LifecycleFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(LIFECYCLE_FACTORY) is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view-declaration-language-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "view-declaration-language-factory" element contains
+            the fully qualified class name of the concrete
+            ViewDeclarationLanguageFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(VIEW_DECLARATION_FACTORY) is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-handler-delegate-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "tag-handler-delegate-factory" element contains
+            the fully qualified class name of the concrete
+            ViewDeclarationLanguageFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(TAG_HANDLER_DELEGATE_FACTORY) is called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="render-kit-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "render-kit-factory" element contains the fully
+            qualified class name of the concrete RenderKitFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(RENDER_KIT_FACTORY) is
+            called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="visit-context-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "visit-context-factory" element contains the fully
+            qualified class name of the concrete VisitContextFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(VISIT_CONTEXT_FACTORY) is
+            called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flash-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The "flash-factory" element contains the
+            fully qualified class name of the concrete
+            FaceletFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FLASH_FACTORY) is
+            called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flow-handler-factory"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "flow-handler-factory" element contains the
+            fully qualified class name of the concrete
+            FlowHandlerFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FLOW_HANDLER_FACTORY) is
+            called.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="factory-extension"
+                   type="javaee:faces-config-factory-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-factory-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for factory.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-attributeType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "attribute" element represents a named, typed, value
+        associated with the parent UIComponent via the generic
+        attributes mechanism.</p>
+        
+        <p>Attribute names must be unique within the scope of the parent
+        (or related) component.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="attribute-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "attribute-name" element represents the name under
+            which the corresponding value will be stored, in the
+            generic attributes of the UIComponent we are related
+            to.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "attribute-class" element represents the Java type
+            of the value associated with this attribute name.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-value"
+                   type="javaee:faces-config-default-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="suggested-value"
+                   type="javaee:faces-config-suggested-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="attribute-extension"
+                   type="javaee:faces-config-attribute-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-attribute-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for attribute.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-componentType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "component" element represents a concrete UIComponent
+        implementation class that should be registered under the
+        specified type identifier, along with its associated
+        properties and attributes.  Component types must be unique
+        within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        are recognized by the implementation logic of this component.
+        Nested "property" elements identify JavaBeans properties of
+        the component class that may be exposed for manipulation
+        via tools.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="component-type"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "component-type" element represents the name under
+            which the corresponding UIComponent class should be
+            registered.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="component-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "component-class" element represents the fully
+            qualified class name of a concrete UIComponent
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet"
+                   type="javaee:faces-config-facetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="javaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="property"
+                   type="javaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="component-extension"
+                   type="javaee:faces-config-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for component.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-localeType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "default-locale" element declares the default locale
+        for this application instance.</p>
+        
+        <p>It must be specified as :language:[_:country:[_:variant:]]
+        without the colons, for example "ja_JP_SJIS".  The
+        separators between the segments may be '-' or '_'.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-localeType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-valueType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "default-value" contains the value for the property or
+        attribute in which this element resides.  This value differs
+        from the "suggested-value" in that the property or attribute
+        must take the value, whereas in "suggested-value" taking the
+        value is optional.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-el-expressionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> EL expressions present within a faces config file
+        must start with the character sequence of '#{' and
+        end with '}'.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="#\{.*\}"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-facetType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Define the name and other design-time information for a facet
+        that is associated with a renderer or a component.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="facet-name"
+                   type="javaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "facet-name" element represents the facet name
+            under which a UIComponent will be added to its parent.
+            It must be of type "Identifier".</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet-extension"
+                   type="javaee:faces-config-facet-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-facet-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for facet.  It may contain implementation
+        specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-from-view-idType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p><span class="changed_modified_2_2">The</span>
+       value of from-view-id must contain one of the following
+        values:</p>
+        
+        <ul>
+
+        <li><p>The exact match for a view identifier that is recognized
+        by the the ViewHandler implementation being used (such as
+        "/index.jsp" if you are using the default ViewHandler).</p></li>
+        
+        <li><p class="changed_added_2_2">The exact match of a flow node id
+        in the current flow, or a flow id of another flow.</p></li>
+        
+         <li><p> A proper prefix of a view identifier, plus a trailing
+         "*" character.  This pattern indicates that all view
+         identifiers that match the portion of the pattern up to the
+         asterisk will match the surrounding rule.  When more than one
+         match exists, the match with the longest pattern is selected.
+         </p></li>
+        
+        <li><p>An "*" character, which means that this pattern applies
+        to all view identifiers.  </p></li>
+
+       </ul>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-from-actionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "from-action" element contains an action reference
+        expression that must have been executed (by the default
+        ActionListener for handling application level events)
+        in order to select the navigation rule.  If not specified,
+        this rule will be relevant no matter which action reference
+        was executed (or if no action reference was executed).</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ifType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+        <p>The "if" element defines a condition that must resolve
+        to true in order for the navigation case on which it is
+        defined to be matched, with the existing match criteria
+        (action method and outcome) as a prerequiste, if present.
+        The condition is defined declaratively using a value
+        expression in the body of this element. The expression is
+        evaluated at the time the navigation case is being matched.
+        If the "from-outcome" is omitted and this element is
+        present, the navigation handler will match a null outcome
+        and use the condition return value to determine if the
+        case should be considered a match.</p>
+
+<div class="changed_added_2_2">
+
+<p>When used in a <code>&lt;switch&gt;</code> within a flow, if the
+expresion returns <code>true</code>, the
+<code>&lt;from-outcome&gt;</code> sibling element's outcome is used as
+the id of the node in the flow graph to which control must be
+passed.</p>
+
+</div>
+        
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-parameter-valueType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+        <p class="changed_added_2_2"></p>
+
+<div class="changed_added_2_2">
+
+
+
+</div>
+        
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-converterType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "converter" element represents a concrete Converter
+        implementation class that should be registered under the
+        specified converter identifier.  Converter identifiers must
+        be unique within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Converter.  Nested "property"
+        elements identify JavaBeans properties of the Converter
+        implementation class that may be configured to affect the
+        operation of the Converter.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="converter-id"
+                     type="javaee:string">
+          <xsd:annotation>
+            <xsd:documentation><![CDATA[
+
+             <p> The "converter-id" element represents the
+              identifier under which the corresponding
+              Converter class should be registered.</p>
+              
+            ]]></xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="converter-for-class"
+                     type="javaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation><![CDATA[
+
+             <p> The "converter-for-class" element represents the
+              fully qualified class name for which a Converter
+              class will be registered.</p>
+              
+            ]]></xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="converter-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "converter-class" element represents the fully
+            qualified class name of a concrete Converter
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="javaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Converter.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Nested "property" elements identify JavaBeans
+            properties of the Converter implementation class
+            that may be configured to affect the operation of
+            the Converter.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="converter-extension"
+                   type="javaee:faces-config-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for converter.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-lifecycleType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "lifecycle" element provides a mechanism to specify
+        modifications to the behaviour of the default Lifecycle
+        implementation for this web application.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="phase-listener"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "phase-listener" element contains the fully
+            qualified class name of the concrete PhaseListener
+            implementation class that will be registered on
+            the Lifecycle.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lifecycle-extension"
+                   type="javaee:faces-config-lifecycle-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-lifecycle-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for lifecycle.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-localeType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="([a-z]{2})[_|\-]?([\p{L}]{2})?[_|\-]?(\w+)?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-locale-configType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "locale-config" element allows the app developer to
+        declare the supported locales for this application.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="default-locale"
+                   type="javaee:faces-config-default-localeType"
+                   minOccurs="0"/>
+      <xsd:element name="supported-locale"
+                   type="javaee:faces-config-supported-localeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-validatorsType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "default-validators" element allows the app developer to
+        register a set of validators, referenced by identifier, that
+        are automatically assigned to any EditableValueHolder component
+        in the application, unless overridden or disabled locally.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="validator-id"
+                   type="javaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "validator-id" element represents the identifier
+            of a registered validator.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-beanType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "managed-bean" element represents a JavaBean, of a
+        particular class, that will be dynamically instantiated
+        at runtime (by the default VariableResolver implementation)
+        if it is referenced as the first element of a value binding
+        expression, and no corresponding bean can be identified in
+        any scope.  In addition to the creation of the managed bean,
+        and the optional storing of it into the specified scope,
+        the nested managed-property elements can be used to
+        initialize the contents of settable JavaBeans properties of
+        the created instance.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="managed-bean-name"
+                   type="javaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "managed-bean-name" element represents the
+            attribute name under which a managed bean will
+            be searched for, as well as stored (unless the
+            "managed-bean-scope" value is "none").</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="managed-bean-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "managed-bean-class" element represents the fully
+            qualified class name of the Java class that will be
+            used`to instantiate a new instance if creation of the
+            specified`managed bean is requested.</p>
+            
+            <p>The specified class must conform to standard JavaBeans
+            conventions.  In particular, it must have a public
+            zero-arguments constructor, and zero or more public
+            property setters.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="managed-bean-scope"
+                   type="javaee:faces-config-managed-bean-scopeOrNoneType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "managed-bean-scope" element represents the scope
+            into which a newly created instance of the specified
+            managed bean will be stored (unless the value is
+            "none").</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="managed-property"
+                     type="javaee:faces-config-managed-propertyType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="map-entries"
+                     type="javaee:faces-config-map-entriesType"/>
+        <xsd:element name="list-entries"
+                     type="javaee:faces-config-list-entriesType"/>
+      </xsd:choice>
+      <xsd:element name="managed-bean-extension"
+                   type="javaee:faces-config-managed-bean-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="eager"
+                   type="xsd:boolean"
+                   use="optional">
+      <xsd:annotation>
+        <xsd:documentation><![CDATA[
+
+         <p> This attribute is only considered when associated with
+          an application-scoped managed bean. If the value of the eager
+          attribute is true the runtime must instantiate this class
+          and store the instance within the application scope when the
+          application starts.</p>
+          
+          <p>If eager is unspecified or is false, the default "lazy"
+          instantiation and scoped storage of the managed bean
+          will occur.</p>
+          
+        ]]></xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definitionType">
+    <xsd:annotation>
+      <xsd:documentation>
+<![CDATA[
+
+        <p class="changed_added_2_2">Top level element for a flow
+        definition.</p>
+
+<div class="changed_added_2_2">
+
+<p>If there is no <code>&lt;start-node&gt;</code> element declared, it
+is assumed to be <code>&lt;flowName&gt;.xhtml</code>.</p>
+
+</div>
+
+]]>
+</xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="start-node"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   >
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+<p class="changed_added_2_2">Declare the id of the starting node in the
+flow graph.  The start node may be any of the node types mentioned in
+the class javadocs for <code><a target="_"
+href="javax/faces/flow/FlowHandler.html">FlowHandler</a></code>.</p>
+
+]]>
+
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view"
+                   type="javaee:faces-config-flow-definition-viewType"
+                   minOccurs="0"
+                   maxOccurs="unbounded" />
+      <xsd:element name="switch"
+                   type="javaee:faces-config-flow-definition-switchType"
+                   minOccurs="0"
+                   maxOccurs="unbounded" />
+      <xsd:element name="flow-return"
+                   type="javaee:faces-config-flow-definition-flow-returnType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="navigation-rule"
+                   type="javaee:faces-config-navigation-ruleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="flow-call"
+                   type="javaee:faces-config-flow-definition-flow-callType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method-call"
+                   type="javaee:faces-config-flow-definition-faces-method-callType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="initializer"
+                   type="javaee:faces-config-flow-definition-initializerType"
+                   minOccurs="0"
+                   />
+      <xsd:element name="finalizer"
+                   type="javaee:faces-config-flow-definition-finalizerType"
+                   minOccurs="0"
+                   />
+      <xsd:element name="inbound-parameter"
+                   type="javaee:faces-config-flow-definition-inbound-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID" use="required">
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">The id of this flow.  The id
+         must be unique within the Application configuration Resource
+         file in which this flow is defined.  The value of this attribute, 
+         combined with the value of the &lt;faces-config&gt;&lt;name&gt; element
+         must globally identify the flow within the application.<p> ]]>
+
+
+          </xsd:documentation>
+        </xsd:annotation>
+
+    </xsd:attribute>
+  </xsd:complexType>
+  
+  <xsd:complexType name="faces-config-flow-definition-faces-method-callType">
+      <xsd:annotation>
+        <xsd:documentation>
+        <![CDATA[
+
+         <p class="changed_added_2_2">Invoke a method, passing parameters if necessary.
+         The return from the method is used as the outcome for where to go next in the
+         flow.  If the method is a void method, the default outcome is used.<p> ]]>
+
+
+        </xsd:documentation>
+      </xsd:annotation>
+      
+      <xsd:sequence>
+          <xsd:element name="method"
+                       type="javaee:faces-config-flow-definition-faces-method-call-methodType"
+                       
+                       />
+          <xsd:element name="default-outcome"
+                       type="javaee:string"
+                       
+                       />
+          <xsd:element name="parameter"
+                       type="javaee:faces-config-flow-definition-flow-call-parameterType"
+                       minOccurs="0" maxOccurs="unbounded">
+            <xsd:annotation>
+              <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A parameter to pass when calling the method
+         identified in the "method" element that is a sibling of this element.<p>
+
+         ]]>
+
+              </xsd:documentation>
+            </xsd:annotation>
+          </xsd:element>
+      </xsd:sequence>
+  </xsd:complexType>
+  
+  <xsd:complexType name="faces-config-flow-definition-faces-method-call-methodType">
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+      
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A parameter to pass when calling the method
+         identified in the "method" element that is a sibling of this element.<p>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="javaee:string"
+                   minOccurs="0"
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The optional "class" element within a "parameter" element 
+            will be interpreted as the fully qualified class name for the type
+            of the "value" element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="javaee:faces-config-flow-definition-parameter-valueType"
+                   
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The "value" element within an "parameter"
+            must be a literal string or an EL Expression whose "get" will be called when the "method"
+            associated with this element is invoked.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+                       
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <xsd:complexType name="faces-config-flow-definition-viewType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+<p class="changed_added_2_2">Define a view node in a flow graph.</p>
+
+<p>This element must contain exactly one
+<code>&lt;vdl-document&gt;</code> element.</p>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="vdl-document"
+                   type="javaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">Define the vdl-document for the enclosing view.<p>
+
+]]>
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[
+         
+         <p class="changed_added_2_2">The id of this view.  It must be
+         unique within the flow.</p>
+
+         ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-switchType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+<p class="changed_added_2_2">Define a switch node in a flow graph.</p>
+
+<div class="changed_added_2_2">
+
+<p>This element must contain one or more
+<code>&lt;case&gt;</code> elements.  When control passes to the
+<code>&lt;switch&gt;</code> node, each of the cases must be considered
+in order and control must past to the <code>&lt;from-outcome&gt;</code>
+of the first one whose <code>&lt;if&gt;</code> expression evaluates to 
+<code>true</code>.</p>
+
+</div>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="case"
+                   type="javaee:faces-config-flow-definition-switch-caseType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">Defines a case that must be
+         considered in the list of cases in the
+         <code>&lt;switch&gt;</code>.</p>
+
+]]>
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-outcome"
+                   type="javaee:string"
+                   minOccurs="0"
+                   >
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">Defines the default case that will
+         be taken if none of the other cases in the
+         <code>&lt;switch&gt;</code> are taken.</p>
+
+]]>
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[
+         
+         <p class="changed_added_2_2">The id of this switch.  It must be
+         unique within the flow.</p>
+
+         ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+  
+  <xsd:complexType name="faces-config-flow-definition-switch-caseType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+         <p class="changed_added_2_2">Defines a case that will
+         be considered in the <code>&lt;switch&gt;</code>.</p>
+
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="if"
+                   type="javaee:faces-config-ifType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2">If this EL expression evaluates to
+           <code>true</code>, the corresponding <code>from-outcome</code> will 
+           be the outcome taken by the enclosing <code>&lt;switch&gt;</code></p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from-outcome"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+            <p>The "from-outcome" element contains a logical outcome
+            string returned by the execution of an application
+            action method selected via an "actionRef" property
+            (or a literal value specified by an "action" property)
+            of a UICommand component.  If specified, this rule
+            will be relevant only if the outcome value matches
+            this element's value.  If not specified, this rule
+            will be relevant if the outcome value is non-null
+            or, if the "if" element is present, will be relevant
+            for any outcome value, with the assumption that the
+            condition specified in the "if" element ultimately
+            determines if this rule is a match.</p>
+
+<p class="changed_added_2_2">If used in a faces flow, this element
+represents the node id to which control will be passed.</p>
+
+
+]]>
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID">
+    </xsd:attribute>
+  </xsd:complexType>
+  
+  <xsd:complexType name="faces-config-flow-definition-flow-returnType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+<p class="changed_added_2_2">Define a return node in a flow graph.</p>
+
+<div class="changed_added_2_2">
+
+<p>This element must contain exactly one <code>&lt;from-outcome&gt;</code> element.</p>
+</div>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="from-outcome"
+                   type="javaee:string"
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+<p class="changed_added_2_2">This element
+represents the node id to which control will be passed.</p>
+
+
+]]>
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[
+         
+         <p class="changed_added_2_2">The id of this flow-return.</p>
+
+         ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+    </xsd:attribute>
+
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-flow-callType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+<p class="changed_added_2_2">Define a call node in a flow graph.</p>
+
+<div class="changed_added_2_2">
+
+<p>This element must contain exactly one <code>&lt;flow-reference&gt;</code> element, 
+which must contain exactly one <code>&lt;flow-id&gt;</code> element.</p>
+</div>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="flow-reference"
+                   type="javaee:faces-config-flow-definition-flow-call-flow-referenceType"
+                    >
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">The flow id of the called flow.<p>
+
+]]>
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="outbound-parameter"
+                   type="javaee:faces-config-flow-definition-flow-call-outbound-parameterType"
+                   minOccurs="0" maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A parameter to pass when calling the flow
+         identified in the "flow-reference" element that is a sibling of this element.<p>
+
+]]>
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+        <xsd:annotation>
+          <xsd:documentation>
+<![CDATA[
+         
+         <p class="changed_added_2_2">The id of this flow-return.</p>
+
+         ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+    </xsd:attribute>
+
+  </xsd:complexType>
+  
+  <xsd:complexType name="faces-config-flow-definition-flow-call-flow-referenceType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+<p class="changed_added_2_2">Identifiy the called flow.</p>
+
+<div class="changed_added_2_2">
+
+</div>
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="flow-document-id"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p>The document id of the called flow.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+
+      <xsd:element name="flow-id"
+                   type="javaee:java-identifierType"
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p>The id of the called flow.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+        
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-initializerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A <code>MethodExpression</code> that will be invoked when the flow is entered.<p>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-finalizerType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A <code>MethodExpression</code> that will be invoked when the flow is exited.<p>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-inbound-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A named parameter whose value will be populated
+         with a correspondingly named parameter within an "outbound-parameter" element.<p>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The "name" element within an "inbound-parameter"
+            element declares the name of this parameter
+            to be passed into a flow.  There must be 
+            a sibling "value" element in the same parent as this element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="javaee:faces-config-flow-definition-parameter-valueType"
+                   
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The "value" element within an "inbound-parameter"
+            must be an EL Expression whose value will be set with the correspondingly
+            named "outbound-parameter" when this flow is entered, if such a 
+            parameter exists.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+                       
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-outbound-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        <![CDATA[
+
+         <p class="changed_added_2_2">A named parameter whose value will be 
+         passed to a correspondingly named parameter within an "inbound-parameter" element
+         on the target flow.<p>
+
+]]>
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The "name" element within an "outbound-parameter" element 
+            declares the name of this parameter to be passed out of a flow.  There must be 
+            a sibling "value" element in the same parent as this element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="javaee:faces-config-flow-definition-parameter-valueType"
+                   
+                   >
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p class="changed_added_2_2"> The "value" element within an "outbound-parameter"
+            must be a literal string or an EL Expression whose "get" will be called when the "flow-call"
+            containing this element is traversed to go to a new flow.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+                       
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-bean-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for managed-bean.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-bean-scopeOrNoneType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+
+       <p> Defines the legal values for the <managed-bean-scope>
+        element's body content, which includes all of the scopes
+        normally used in a web application, plus the "none" value
+        indicating that a created bean should not be stored into
+        any scope.  Alternatively, an EL expression may be used
+        as the value of this element.  The result of evaluating this
+        expression must by of type java.util.Map.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+        <xsd:pattern value="view|request|session|application|none|#\{.*\}"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-propertyType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "managed-property" element represents an individual
+        property of a managed bean that will be configured to the
+        specified value (or value set) if the corresponding
+        managed bean is automatically created.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="property-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "property-name" element represents the JavaBeans
+            property name under which the corresponding value may
+            be stored.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-class"
+                   type="javaee:java-typeType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "property-class" element represents the Java type
+            of the value associated with this property name.
+            If not specified, it can be inferred from existing
+            classes; however, this element should be specified
+            if the configuration file is going to be the source
+            for generating the corresponding classes.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="map-entries"
+                     type="javaee:faces-config-map-entriesType"/>
+        <xsd:element name="null-value"
+                     type="javaee:faces-config-null-valueType"/>
+        <xsd:element name="value"
+                     type="javaee:faces-config-valueType"/>
+        <xsd:element name="list-entries"
+                     type="javaee:faces-config-list-entriesType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-map-entryType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "map-entry" element reprsents a single key-entry pair
+        that will be added to the computed value of a managed
+        property of type java.util.Map.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="key"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "key" element is the String representation of a
+            map key that will be stored in a managed property of
+            type java.util.Map.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="null-value"
+                     type="javaee:faces-config-null-valueType"/>
+        <xsd:element name="value"
+                     type="javaee:faces-config-valueType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-map-entriesType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "map-entries' element represents a set of key-entry pairs
+        that will be added to the computed value of a managed property
+        of type java.util.Map.  In addition, the Java class types
+        of the key and entry values may be optionally declared.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="key-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "key-class" element defines the Java type to which
+            each "key" element in a set of "map-entry" elements
+            will be converted to.  If omitted, "java.lang.String"
+            is assumed.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value-class"
+                   type="javaee:faces-config-value-classType"
+                   minOccurs="0"/>
+      <xsd:element name="map-entry"
+                   type="javaee:faces-config-map-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-caseType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> <span class="changed_modified_2_2">The</span>
+       "navigation-case" element describes a particular
+        combination of conditions that must match for this case to
+        be executed, and the view id of the component tree that
+        should be selected next.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="from-action"
+                   type="javaee:faces-config-from-actionType"
+                   minOccurs="0"/>
+      <xsd:element name="from-outcome"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+            <p>The "from-outcome" element contains a logical outcome
+            string returned by the execution of an application
+            action method selected via an "actionRef" property
+            (or a literal value specified by an "action" property)
+            of a UICommand component.  If specified, this rule
+            will be relevant only if the outcome value matches
+            this element's value.  If not specified, this rule
+            will be relevant if the outcome value is non-null
+            or, if the "if" element is present, will be relevant
+            for any outcome value, with the assumption that the
+            condition specified in the "if" element ultimately
+            determines if this rule is a match.</p>
+
+]]>
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="if"
+                   type="javaee:faces-config-ifType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Please see section JSF.7.4.2 for the specification of this element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="to-view-id"
+                   type="javaee:faces-config-valueType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p><span class="changed_modified_2_2">The "to-view-id" element 
+            contains the view identifier (<span class="changed_added_2_2">or 
+            flow node id, or flow id</span>)
+            of the next view (<span class="changed_added_2_2">or flow node or 
+            flow</span>) that should be displayed if this
+            navigation rule is matched. If the contents is a
+            value expression, it should be resolved by the
+            navigation handler to obtain the view (
+            <span class="changed_added_2_2">or flow node or flow</span>) 
+            identifier.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="to-flow-document-id"
+                     type="javaee:java-identifierType"
+                     minOccurs="0"
+                     >
+          <xsd:annotation>
+            <xsd:documentation><![CDATA[
+
+             <p class="changed_added_2_2">The document id of the called flow.
+             If this element appears in a &lt;navigation-case&gt; nested within 
+             a &lt;flow-definition&gt;, it must be ignored because navigation
+             cases within flows may only navigate among the view nodes of that 
+             flow.</p>
+            
+            ]]></xsd:documentation>
+          </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="redirect"
+                   type="javaee:faces-config-redirectType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-ruleType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "navigation-rule" element represents an individual
+        decision rule that will be utilized by the default
+        NavigationHandler implementation to make decisions on
+        what view should be displayed next, based on the
+        view id being processed.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="from-view-id"
+                   type="javaee:faces-config-from-view-idType"
+                   />
+      <xsd:element name="navigation-case"
+                   type="javaee:faces-config-navigation-caseType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="navigation-rule-extension"
+                   type="javaee:faces-config-navigation-rule-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-rule-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for navigation-rule.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-null-valueType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "null-value" element indicates that the managed
+        property in which we are nested will be explicitly
+        set to null if our managed bean is automatically
+        created.  This is different from omitting the managed
+        property element entirely, which will cause no
+        property setter to be called for this property.</p>
+        
+        <p>The "null-value" element can only be used when the
+        associated "property-class" identifies a Java class,
+        not a Java primitive.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "property" element represents a JavaBean property of the
+        Java class represented by our parent element.</p>
+        
+        <p>Property names must be unique within the scope of the Java
+        class that is represented by the parent element, and must
+        correspond to property names that will be recognized when
+        performing introspection against that class via
+        java.beans.Introspector.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="property-name"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "property-name" element represents the JavaBeans
+            property name under which the corresponding value
+            may be stored.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-class"
+                   type="javaee:java-typeType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "property-class" element represents the Java type
+            of the value associated with this property name.
+            If not specified, it can be inferred from existing
+            classes; however, this element should be specified if
+            the configuration file is going to be the source for
+            generating the corresponding classes.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-value"
+                   type="javaee:faces-config-default-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="suggested-value"
+                   type="javaee:faces-config-suggested-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="property-extension"
+                   type="javaee:faces-config-property-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-protected-viewsType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p class="changed_added_2_2">Any view that matches any of the
+       url-patterns in this element may only be reached from another JSF
+       view in the same web application. Because the runtime is aware of
+       which views are protected, any navigation from an unprotected
+       view to a protected view is automatically subject to
+       protection.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="url-pattern"
+                   type="javaee:url-patternType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-property-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for property.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirectType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "redirect" element indicates that navigation to the
+        specified "to-view-id" should be accomplished by
+        performing an HTTP redirect rather than the usual
+        ViewHandler mechanisms.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="redirect-param"
+                   type="javaee:faces-config-redirect-redirectParamType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="include-view-params"
+                   type="xsd:boolean"
+                   use="optional"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirect-viewParamType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> This element was introduced due to a specification
+        error, and is now deprecated.  The correct name for
+        this element is "redirect-param" and its meaning is
+        documented therein.  The "view-param" element is
+        maintained to preserve backwards compatibility.
+        Implementations must treat this element the same as
+        "redirect-param".</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:string"
+                   
+                   />
+      <xsd:element name="value"
+                   type="javaee:string"
+                   
+                   />
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirect-redirectParamType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "redirect-param" element, only valid within
+        a "redirect" element, contains child "name"
+        and "value" elements that must be included in the
+        redirect url when the redirect is performed.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:string"
+                   
+                   />
+      <xsd:element name="value"
+                   type="javaee:string"
+                   
+                   />
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-referenced-beanType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "referenced-bean" element represents at design time the
+        promise that a Java object of the specified type will exist at
+        runtime in some scope, under the specified key.  This can be
+        used by design time tools to construct user interface dialogs
+        based on the properties of the specified class.  The presence
+        or absence of a referenced bean element has no impact on the
+        JavaServer Faces runtime environment inside a web application.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="referenced-bean-name"
+                   type="javaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "referenced-bean-name" element represents the
+            attribute name under which the corresponding
+            referenced bean may be assumed to be stored, in one
+            of 'request', 'session', 'view', 'application'
+            or a custom scope.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="referenced-bean-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "referenced-bean-class" element represents the
+            fully qualified class name of the Java class
+            (either abstract or concrete) or Java interface
+            implemented by the corresponding referenced bean.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-render-kitType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "render-kit" element represents a concrete RenderKit
+        implementation that should be registered under the specified
+        render-kit-id.  If no render-kit-id is specified, the
+        identifier of the default RenderKit
+        (RenderKitFactory.DEFAULT_RENDER_KIT) is assumed.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="render-kit-id"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "render-kit-id" element represents an identifier
+            for the RenderKit represented by the parent
+            "render-kit" element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="render-kit-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "render-kit-class" element represents the fully
+            qualified class name of a concrete RenderKit
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer"
+                   type="javaee:faces-config-rendererType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="client-behavior-renderer"
+                   type="javaee:faces-config-client-behavior-rendererType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="render-kit-extension"
+                   type="javaee:faces-config-render-kit-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-client-behavior-rendererType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "client-behavior-renderer" element represents a concrete
+        ClientBehaviorRenderer implementation class that should be
+        registered under the specified behavior renderer type identifier,
+        in the RenderKit associated with the parent "render-kit"
+        element.  Client Behavior renderer type must be unique within the RenderKit
+        associated with the parent "render-kit" element.</p>
+        
+        <p>Nested "attribute" elements identify generic component
+        attributes that are recognized by this renderer.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="client-behavior-renderer-type"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "client-behavior-renderer-type" element represents a renderer type
+            identifier for the Client Behavior Renderer represented by the parent
+            "client-behavior-renderer" element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-behavior-renderer-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "client-behavior-renderer-class" element represents the fully
+            qualified class name of a concrete Client Behavior Renderer
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-rendererType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "renderer" element represents a concrete Renderer
+        implementation class that should be registered under the
+        specified component family and renderer type identifiers,
+        in the RenderKit associated with the parent "render-kit"
+        element.  Combinations of component family and
+        renderer type must be unique within the RenderKit
+        associated with the parent "render-kit" element.</p>
+        
+        <p>Nested "attribute" elements identify generic component
+        attributes that are recognized by this renderer.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="component-family"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "component-family" element represents the
+            component family for which the Renderer represented
+            by the parent "renderer" element will be used.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer-type"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "renderer-type" element represents a renderer type
+            identifier for the Renderer represented by the parent
+            "renderer" element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "renderer-class" element represents the fully
+            qualified class name of a concrete Renderer
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet"
+                   type="javaee:faces-config-facetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="javaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="renderer-extension"
+                   type="javaee:faces-config-renderer-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-renderer-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for renderer.  It may contain implementation
+        specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-render-kit-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for render-kit.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-suggested-valueType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "suggested-value" contains the value for the property or
+        attribute in which this element resides.  This value is
+        advisory only and is intended for tools to use when
+        populating pallettes.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-supported-localeType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "supported-locale" element allows authors to declare
+        which locales are supported in this application instance.</p>
+        
+        <p>It must be specified as :language:[_:country:[_:variant:]]
+        without the colons, for example "ja_JP_SJIS".  The
+        separators between the segments may be '-' or '_'.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="javaee:faces-config-localeType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "behavior" element represents a concrete Behavior
+        implementation class that should be registered under the
+        specified behavior identifier.  Behavior identifiers must
+        be unique within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Behavior.  Nested "property"
+        elements identify JavaBeans properties of the Behavior
+        implementation class that may be configured to affect the
+        operation of the Behavior.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="behavior-id"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "behavior-id" element represents the identifier
+            under which the corresponding Behavior class should
+            be registered.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="behavior-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "behavior-class" element represents the fully
+            qualified class name of a concrete Behavior
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="javaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Behavior.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Nested "property" elements identify JavaBeans
+            properties of the Behavior implementation class
+            that may be configured to affect the operation of
+            the Behavior.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="behavior-extension"
+                   type="javaee:faces-config-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for behavior.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-validatorType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "validator" element represents a concrete Validator
+        implementation class that should be registered under the
+        specified validator identifier.  Validator identifiers must
+        be unique within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Validator.  Nested "property"
+        elements identify JavaBeans properties of the Validator
+        implementation class that may be configured to affect the
+        operation of the Validator.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="validator-id"
+                   type="javaee:string">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "validator-id" element represents the identifier
+            under which the corresponding Validator class should
+            be registered.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "validator-class" element represents the fully
+            qualified class name of a concrete Validator
+            implementation class.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="javaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Validator.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="javaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> Nested "property" elements identify JavaBeans
+            properties of the Validator implementation class
+            that may be configured to affect the operation of
+            the Validator.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator-extension"
+                   type="javaee:faces-config-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> Extension element for validator.  It may contain
+        implementation specific content.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-valueType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "value" element is the String representation of
+        a literal value to which a scalar managed property
+        will be set, or a value binding expression ("#{...}")
+        that will be used to calculate the required value.
+        It will be converted as specified for the actual
+        property type.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:union memberTypes="javaee:faces-config-el-expressionType xsd:string"/>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-value-classType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "value-class" element defines the Java type to which each
+        "value" element's value will be converted to, prior to adding
+        it to the "list-entries" list for a managed property that is
+        a java.util.List, or a "map-entries" map for a managed
+        property that is a java.util.Map.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:fully-qualified-classType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-list-entriesType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The "list-entries" element represents a set of initialization
+        elements for a managed property that is a java.util.List or an
+        array.  In the former case, the "value-class" element can
+        optionally be used to declare the Java type to which each
+        value should be converted before adding it to the Collection.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="value-class"
+                   type="javaee:faces-config-value-classType"
+                   minOccurs="0"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="unbounded">
+        <xsd:element name="null-value"
+                     type="javaee:faces-config-null-valueType"/>
+        <xsd:element name="value"
+                     type="javaee:faces-config-valueType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-system-event-listenerType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> The presence of this element within the "application" element in
+        an application configuration resource file indicates the
+        developer wants to add an SystemEventListener to this
+        application instance.  Elements nested within this element allow
+        selecting the kinds of events that will be delivered to the
+        listener instance, and allow selecting the kinds of classes that
+        can be the source of events that are delivered to the listener
+        instance.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="system-event-listener-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "system-event-listener-class" element contains
+            the fully qualified class name of the concrete
+            SystemEventListener implementation class that will be
+            called when events of the type specified by the
+            "system-event-class" are sent by the runtime.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="system-event-class"
+                   type="javaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "system-event-class" element contains the fully
+            qualified class name of the SystemEvent subclass for
+            which events will be delivered to the class whose fully
+            qualified class name is given by the
+            "system-event-listener-class" element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="source-class"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation><![CDATA[
+
+           <p> The "source-class" element, if present, contains the
+            fully qualified class name of the class that will be the
+            source for the event to be delivered to the class whose
+            fully qualified class name is given by the
+            "system-event-listener-class" element.</p>
+            
+          ]]></xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-versionType">
+    <xsd:annotation>
+      <xsd:documentation><![CDATA[
+
+       <p> This type contains the recognized versions of
+        faces-config supported.</p>
+        
+      ]]></xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="2.2"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facesconfig_3_0.xsd b/wildfly/docs/schema/web-facesconfig_3_0.xsd
new file mode 100644
index 0000000..9ea679c
--- /dev/null
+++ b/wildfly/docs/schema/web-facesconfig_3_0.xsd
@@ -0,0 +1,3842 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            attributeFormDefault="unqualified"
+            elementFormDefault="qualified"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            version="3.0"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      <p>The XML Schema for the Jakarta Server Faces Application
+      Configuration File (Version 3.0).</p>
+      
+      <p>All JavaServer Faces configuration files must indicate
+      the JavaServer Faces schema by indicating the JavaServer
+      Faces namespace:</p>
+      
+      <p>https://jakarta.ee/xml/ns/jakartaee</p>
+      
+      <p>and by indicating the version of the schema by
+      using the version element as shown below:</p>
+      
+      <pre>&lt;faces-config xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.0"&gt;
+      ...
+      &lt;/faces-config&gt;</pre>
+      
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for jakartaee namespace with the following location:</p>
+      
+      <p>https://jakarta.ee/xml/ns/jakartaee/web-facesconfig_3_0.xsd</p>
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="faces-config"
+               type="jakartaee:faces-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>The "faces-config" element is the root of the configuration
+        information hierarchy, and contains nested elements for all
+        of the other configuration settings.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>Behavior IDs must be unique within a document.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:behavior"/>
+      <xsd:field xpath="jakartaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>Converter IDs must be unique within a document.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:converter"/>
+      <xsd:field xpath="jakartaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-for-class-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>'converter-for-class' element values must be unique
+          within a document.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:converter"/>
+      <xsd:field xpath="jakartaee:converter-for-class"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p> Validator IDs must be unique within a document.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:validator"/>
+      <xsd:field xpath="jakartaee:validator-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-managed-bean-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p> Managed bean names must be unique within a document.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:managed-bean"/>
+      <xsd:field xpath="jakartaee:managed-bean-name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "faces-config" element is the root of the configuration
+        information hierarchy, and contains nested elements for all
+        of the other configuration settings.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="application"
+                   type="jakartaee:faces-config-applicationType"/>
+      <xsd:element name="ordering"
+                   type="jakartaee:faces-config-orderingType"/>
+      <xsd:element name="absolute-ordering"
+                   type="jakartaee:faces-config-absoluteOrderingType"
+                   minOccurs="0"/>
+      <xsd:element name="factory"
+                   type="jakartaee:faces-config-factoryType"/>
+      <xsd:element name="component"
+                   type="jakartaee:faces-config-componentType"/>
+      <xsd:element name="converter"
+                   type="jakartaee:faces-config-converterType"/>
+      <xsd:element name="managed-bean"
+                   type="jakartaee:faces-config-managed-beanType"/>
+      <xsd:element name="flow-definition"
+                   type="jakartaee:faces-config-flow-definitionType"/>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> <span class="changed_modified_2_2">The</span> "name" element 
+            within the top level "faces-config"
+            element declares the name of this application
+            configuration resource.  Such names are used
+            in the document ordering scheme specified in section
+            JSF.11.4.6.</p>
+            
+            <p class="changed_added_2_2">This value is taken to be the 
+            defining document id of any &lt;flow-definition&gt; elements 
+            defined in this Application Configuration Resource file.  If this
+            element is not specified, the runtime must take the empty string 
+            as its value.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="navigation-rule"
+                   type="jakartaee:faces-config-navigation-ruleType"/>
+      <xsd:element name="protected-views"
+                   type="jakartaee:faces-config-protected-viewsType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="referenced-bean"
+                   type="jakartaee:faces-config-referenced-beanType"/>
+      <xsd:element name="render-kit"
+                   type="jakartaee:faces-config-render-kitType"/>
+      <xsd:element name="lifecycle"
+                   type="jakartaee:faces-config-lifecycleType"/>
+      <xsd:element name="validator"
+                   type="jakartaee:faces-config-validatorType"/>
+      <xsd:element name="behavior"
+                   type="jakartaee:faces-config-behaviorType"/>
+      <xsd:element name="faces-config-extension"
+                   type="jakartaee:faces-config-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:choice>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean"
+                   use="optional">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          JavaServer Faces application is complete, or whether
+          the class files available to this module and packaged with
+          this application should be examined for annotations
+          that specify configuration information.
+          
+          This attribute is only inspected on the application 
+          configuration resource file located at "WEB-INF/faces-config.xml".
+          The presence of this attribute on any application configuration
+          resource other than the one located at "WEB-INF/faces-config.xml",
+          including any files named using the jakarta.faces.CONFIG_FILES
+          attribute, must be ignored.
+          
+          If metadata-complete is set to "true", the JavaServer Faces
+          runtime must ignore any annotations that specify configuration
+          information, which might be present in the class files
+          of the application.
+          
+          If metadata-complete is not specified or is set to
+          "false", the JavaServer Faces runtime must examine the class
+          files of the application for annotations, as specified by
+          the specification.
+          
+          If "WEB-INF/faces-config.xml" is not present, the JavaServer
+          Faces runtime will assume metadata-complete to be "false".
+          
+          The value of this attribute will have no impact on
+          runtime annotations such as @ResourceDependency or
+          @ListenerFor.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="jakartaee:faces-config-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for faces-config.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Please see section JSF.11.4.6 for the specification of this element.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="jakartaee:faces-config-ordering-orderingType"
+                   minOccurs="0"/>
+      <xsd:element name="before"
+                   type="jakartaee:faces-config-ordering-orderingType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This element contains a sequence of "id" elements, each of which
+        refers to an application configuration resource by the "id"
+        declared on its faces-config element.  This element can also contain
+        a single "others" element which specifies that this document comes
+        before or after other documents within the application.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:faces-config-ordering-othersType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other
+        application configuration resources.  See section JSF.11.4.6
+        for the complete specification.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Only relevant if this is placed within the /WEB-INF/faces-config.xml.
+        Please see section JSF.11.4.6 for the specification for details.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:faces-config-ordering-othersType"
+                   minOccurs="0"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "application" element provides a mechanism to define the
+        various per-application-singleton implementation artifacts for
+        a particular web application that is utilizing
+        JavaServer Faces.  For nested elements that are not specified,
+        the Jakarta Server Faces implementation must provide a suitable 
+        default.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="action-listener"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "action-listener" element contains the fully
+            qualified class name of the concrete
+            ActionListener implementation class that will be
+            called during the Invoke Application phase of the
+            request processing lifecycle.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-render-kit-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "default-render-kit-id" element allows the
+            application to define a renderkit to be used other
+            than the standard one.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-bundle"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The base name of a resource bundle representing
+            the message resources for this application.  See
+            the JavaDocs for the "java.util.ResourceBundle"
+            class for more information on the syntax of
+            resource bundle names.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="navigation-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "navigation-handler" element contains the
+            fully qualified class name of the concrete
+            NavigationHandler implementation class that will
+            be called during the Invoke Application phase
+            of the request processing lifecycle, if the
+            default ActionListener (provided by the Jakarta Server 
+            Faces implementation) is used.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "view-handler" element contains the fully
+            qualified class name of the concrete ViewHandler
+            implementation class that will be called during
+            the Restore View and Render Response phases of the
+            request processing lifecycle.  The faces
+            implementation must provide a default
+            implementation of this class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="state-manager"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "state-manager" element contains the fully
+            qualified class name of the concrete StateManager
+            implementation class that will be called during
+            the Restore View and Render Response phases of the
+            request processing lifecycle.  The faces
+            implementation must provide a default
+            implementation of this class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="el-resolver"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "el-resolver" element contains the fully
+            qualified class name of the concrete
+            jakarta.el.ELResolver implementation class
+            that will be used during the processing of
+            EL expressions.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-resolver"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-resolver" element contains the fully
+            qualified class name of the concrete
+            PropertyResolver implementation class that will
+            be used during the processing of value binding
+            expressions.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="variable-resolver"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "variable-resolver" element contains the fully
+            qualified class name of the concrete
+            VariableResolver implementation class that will
+            be used during the processing of value binding
+            expressions.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "resource-handler" element contains the
+            fully qualified class name of the concrete
+            ResourceHandler implementation class that
+            will be used during rendering and decoding
+            of resource requests The standard
+            constructor based decorator pattern used for
+            other application singletons will be
+            honored.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-library-contracts"
+                   type="jakartaee:faces-config-application-resource-library-contractsType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The "resource-library-contracts" element
+            specifies the mappings between views in the application and resource
+            library contracts that, if present in the application, must be made
+            available for use as templates of the specified views.
+            </p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="search-expression-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3">The "search-expression-handler"
+            element contains the fully qualified class name of the
+            concrete jakarta.faces.component.search.SearchExpressionHandler
+            implementation class that will be used for processing of a
+            search expression.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="search-keyword-resolver"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3"> The "search-keyword-resolver"
+            element contains the fully qualified class name of the
+            concrete jakarta.faces.component.search.SearchKeywordResolver
+            implementation class that will be used during the processing
+            of a search expression keyword.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="system-event-listener"
+                   type="jakartaee:faces-config-system-event-listenerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="locale-config"
+                   type="jakartaee:faces-config-locale-configType"/>
+      <xsd:element name="resource-bundle"
+                   type="jakartaee:faces-config-application-resource-bundleType"/>
+      <xsd:element name="application-extension"
+                   type="jakartaee:faces-config-application-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="default-validators"
+                   type="jakartaee:faces-config-default-validatorsType"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-bundleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The resource-bundle element inside the application element
+        references a java.util.ResourceBundle instance by name
+        using the var element.  ResourceBundles referenced in this
+        manner may be returned by a call to
+        Application.getResourceBundle() passing the current
+        FacesContext for this request and the value of the var
+        element below.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="base-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The fully qualified class name of the
+            java.util.ResourceBundle instance.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="var"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The name by which this ResourceBundle instance
+            is retrieved by a call to
+            Application.getResourceBundle().</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-library-contractsType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">The "resource-library-contracts" element
+        specifies the mappings between views in the application and resource
+        library contracts that, if present in the application, must be made
+        available for use as templates of the specified views.
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="contract-mapping"
+                   type="jakartaee:faces-config-application-resource-library-contracts-contract-mappingType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p classes="changed_added_2_2">Declare a mapping between a collection
+            of views in the application and the list of contracts (if present in the application)
+            that may be used as a source for templates and resources for those views.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-library-contracts-contract-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">The "contract-mapping" element
+        specifies the mappings between a collection of views in the application and resource
+        library contracts that, if present in the application, must be made
+        available for use as templates of the specified views.
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The "url-pattern" element
+            specifies the collection of views in this application that 
+            are allowed to use the corresponding contracts.
+            </p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="contracts"
+                   type="jakartaee:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The "contracts" element
+            is a comma separated list of resource library contracts that,
+            if available to the application, may be used by the views
+            matched by the corresponding "url-pattern"
+            </p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for application.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "factory" element provides a mechanism to define the
+        various Factories that comprise parts of the implementation
+        of JavaServer Faces.  For nested elements that are not
+        specified, the Jakarta Server Faces implementation must provide a 
+        suitable default.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="application-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "application-factory" element contains the
+            fully qualified class name of the concrete
+            ApplicationFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(APPLICATION_FACTORY) is
+            called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="exception-handler-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "exception-handler-factory" element contains the
+            fully qualified class name of the concrete
+            ExceptionHandlerFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(EXCEPTION_HANDLER_FACTORY)
+            is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="external-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "external-context-factory" element contains the
+            fully qualified class name of the concrete
+            ExternalContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(EXTERNAL_CONTEXT_FACTORY)
+            is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="faces-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "faces-context-factory" element contains the
+            fully qualified class name of the concrete
+            FacesContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FACES_CONTEXT_FACTORY)
+            is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facelet-cache-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "facelet-cache-factory" element contains the
+            fully qualified class name of the concrete
+            FaceletCacheFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FACELET_CACHE_FACTORY)
+            is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="partial-view-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "partial-view-context-factory" element contains the
+            fully qualified class name of the concrete
+            PartialViewContextFactory implementation class that will
+            be called when FactoryFinder.getFactory
+            (FactoryFinder.PARTIAL_VIEW_CONTEXT_FACTORY) is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lifecycle-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "lifecycle-factory" element contains the fully
+            qualified class name of the concrete LifecycleFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(LIFECYCLE_FACTORY) is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view-declaration-language-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "view-declaration-language-factory" element contains
+            the fully qualified class name of the concrete
+            ViewDeclarationLanguageFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(VIEW_DECLARATION_FACTORY) is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-handler-delegate-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "tag-handler-delegate-factory" element contains
+            the fully qualified class name of the concrete
+            ViewDeclarationLanguageFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(TAG_HANDLER_DELEGATE_FACTORY) is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="render-kit-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "render-kit-factory" element contains the fully
+            qualified class name of the concrete RenderKitFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(RENDER_KIT_FACTORY) is
+            called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="visit-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "visit-context-factory" element contains the fully
+            qualified class name of the concrete VisitContextFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(VISIT_CONTEXT_FACTORY) is
+            called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flash-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "flash-factory" element contains the
+            fully qualified class name of the concrete
+            FaceletFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FLASH_FACTORY) is
+            called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flow-handler-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "flow-handler-factory" element contains the
+            fully qualified class name of the concrete
+            FlowHandlerFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FLOW_HANDLER_FACTORY) is
+            called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-window-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3"> The "client-window-factory" element contains the fully 
+            qualified class name of the concrete ClientWindowFactory implementation class that 
+            will be called when FactoryFinder.getFactory(CLIENT_WINDOW_FACTORY) is called.</p>  
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="search-expression-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3"> The
+            "search-expression-context-factory" element contains the
+            fully qualified class name of the concrete
+            SearchExpressionContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(SEARCH_EXPRESSION_CONTEXT_FACTORY)
+            is called.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="factory-extension"
+                   type="jakartaee:faces-config-factory-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-factory-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for factory.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "attribute" element represents a named, typed, value
+        associated with the parent UIComponent via the generic
+        attributes mechanism.</p>
+        
+        <p>Attribute names must be unique within the scope of the parent
+        (or related) component.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="attribute-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "attribute-name" element represents the name under
+            which the corresponding value will be stored, in the
+            generic attributes of the UIComponent we are related
+            to.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "attribute-class" element represents the Java type
+            of the value associated with this attribute name.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-value"
+                   type="jakartaee:faces-config-default-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="suggested-value"
+                   type="jakartaee:faces-config-suggested-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="attribute-extension"
+                   type="jakartaee:faces-config-attribute-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-attribute-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for attribute.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "component" element represents a concrete UIComponent
+        implementation class that should be registered under the
+        specified type identifier, along with its associated
+        properties and attributes.  Component types must be unique
+        within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        are recognized by the implementation logic of this component.
+        Nested "property" elements identify JavaBeans properties of
+        the component class that may be exposed for manipulation
+        via tools.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="component-type"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "component-type" element represents the name under
+            which the corresponding UIComponent class should be
+            registered.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="component-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "component-class" element represents the fully
+            qualified class name of a concrete UIComponent
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet"
+                   type="jakartaee:faces-config-facetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="component-extension"
+                   type="jakartaee:faces-config-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for component.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "default-locale" element declares the default locale
+        for this application instance.</p>
+        
+        <p class="modified_added_2_3">
+        To facilitate BCP 47 this element first needs to be parsed by the
+        Locale.forLanguageTag method. If it does not return a Locale with
+        a language the old specification below needs to take effect.
+        </p>
+        
+        <p>It must be specified as :language:[_:country:[_:variant:]]
+        without the colons, for example "ja_JP_SJIS".  The
+        separators between the segments may be '-' or '_'.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-localeType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "default-value" contains the value for the property or
+        attribute in which this element resides.  This value differs
+        from the "suggested-value" in that the property or attribute
+        must take the value, whereas in "suggested-value" taking the
+        value is optional.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-el-expressionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> EL expressions present within a faces config file
+        must start with the character sequence of '#{' and
+        end with '}'.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="#\{.*\}"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-facetType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Define the name and other design-time information for a facet
+        that is associated with a renderer or a component.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="facet-name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "facet-name" element represents the facet name
+            under which a UIComponent will be added to its parent.
+            It must be of type "Identifier".</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet-extension"
+                   type="jakartaee:faces-config-facet-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-facet-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for facet.  It may contain implementation
+        specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-from-view-idType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p><span class="changed_modified_2_2">The</span>
+        value of from-view-id must contain one of the following
+        values:</p>
+        
+        <ul>
+        
+        <li><p>The exact match for a view identifier that is recognized
+        by the the ViewHandler implementation being used (such as
+        "/index.jsp" if you are using the default ViewHandler).</p></li>
+        
+        <li><p class="changed_added_2_2">The exact match of a flow node id
+        in the current flow, or a flow id of another flow.</p></li>
+        
+        <li><p> A proper prefix of a view identifier, plus a trailing
+        "*" character.  This pattern indicates that all view
+        identifiers that match the portion of the pattern up to the
+        asterisk will match the surrounding rule.  When more than one
+        match exists, the match with the longest pattern is selected.
+        </p></li>
+        
+        <li><p>An "*" character, which means that this pattern applies
+        to all view identifiers.  </p></li>
+        
+        </ul>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-from-actionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "from-action" element contains an action reference
+        expression that must have been executed (by the default
+        ActionListener for handling application level events)
+        in order to select the navigation rule.  If not specified,
+        this rule will be relevant no matter which action reference
+        was executed (or if no action reference was executed).</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ifType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>The "if" element defines a condition that must resolve
+        to true in order for the navigation case on which it is
+        defined to be matched, with the existing match criteria
+        (action method and outcome) as a prerequiste, if present.
+        The condition is defined declaratively using a value
+        expression in the body of this element. The expression is
+        evaluated at the time the navigation case is being matched.
+        If the "from-outcome" is omitted and this element is
+        present, the navigation handler will match a null outcome
+        and use the condition return value to determine if the
+        case should be considered a match.</p>
+        
+        <div class="changed_added_2_2">
+        
+        <p>When used in a <code>&lt;switch&gt;</code> within a flow, if the
+        expresion returns <code>true</code>, the
+        <code>&lt;from-outcome&gt;</code> sibling element's outcome is used as
+        the id of the node in the flow graph to which control must be
+        passed.</p>
+        
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-parameter-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2"></p>
+        
+        <div class="changed_added_2_2">
+        
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-converterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "converter" element represents a concrete Converter
+        implementation class that should be registered under the
+        specified converter identifier.  Converter identifiers must
+        be unique within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Converter.  Nested "property"
+        elements identify JavaBeans properties of the Converter
+        implementation class that may be configured to affect the
+        operation of the Converter.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="converter-id"
+                     type="jakartaee:string">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p> The "converter-id" element represents the
+              identifier under which the corresponding
+              Converter class should be registered.</p>
+              
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="converter-for-class"
+                     type="jakartaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p> The "converter-for-class" element represents the
+              fully qualified class name for which a Converter
+              class will be registered.</p>
+              
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="converter-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "converter-class" element represents the fully
+            qualified class name of a concrete Converter
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Converter.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "property" elements identify JavaBeans
+            properties of the Converter implementation class
+            that may be configured to affect the operation of
+            the Converter.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="converter-extension"
+                   type="jakartaee:faces-config-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for converter.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-lifecycleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "lifecycle" element provides a mechanism to specify
+        modifications to the behaviour of the default Lifecycle
+        implementation for this web application.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="phase-listener"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "phase-listener" element contains the fully
+            qualified class name of the concrete PhaseListener
+            implementation class that will be registered on
+            the Lifecycle.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lifecycle-extension"
+                   type="jakartaee:faces-config-lifecycle-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-lifecycle-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for lifecycle.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="([a-z]{2})[_|\-]?([\p{L}]{2})?[_|\-]?(\w+)?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-locale-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "locale-config" element allows the app developer to
+        declare the supported locales for this application.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="default-locale"
+                   type="jakartaee:faces-config-default-localeType"
+                   minOccurs="0"/>
+      <xsd:element name="supported-locale"
+                   type="jakartaee:faces-config-supported-localeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-validatorsType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "default-validators" element allows the app developer to
+        register a set of validators, referenced by identifier, that
+        are automatically assigned to any EditableValueHolder component
+        in the application, unless overridden or disabled locally.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="validator-id"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "validator-id" element represents the identifier
+            of a registered validator.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "managed-bean" element represents a JavaBean, of a
+        particular class, that will be dynamically instantiated
+        at runtime (by the default VariableResolver implementation)
+        if it is referenced as the first element of a value binding
+        expression, and no corresponding bean can be identified in
+        any scope.  In addition to the creation of the managed bean,
+        and the optional storing of it into the specified scope,
+        the nested managed-property elements can be used to
+        initialize the contents of settable JavaBeans properties of
+        the created instance.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="managed-bean-name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "managed-bean-name" element represents the
+            attribute name under which a managed bean will
+            be searched for, as well as stored (unless the
+            "managed-bean-scope" value is "none").</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="managed-bean-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "managed-bean-class" element represents the fully
+            qualified class name of the Java class that will be
+            used`to instantiate a new instance if creation of the
+            specified`managed bean is requested.</p>
+            
+            <p>The specified class must conform to standard JavaBeans
+            conventions.  In particular, it must have a public
+            zero-arguments constructor, and zero or more public
+            property setters.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="managed-bean-scope"
+                   type="jakartaee:faces-config-managed-bean-scopeOrNoneType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "managed-bean-scope" element represents the scope
+            into which a newly created instance of the specified
+            managed bean will be stored (unless the value is
+            "none").</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="managed-property"
+                     type="jakartaee:faces-config-managed-propertyType"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+        <xsd:element name="map-entries"
+                     type="jakartaee:faces-config-map-entriesType"/>
+        <xsd:element name="list-entries"
+                     type="jakartaee:faces-config-list-entriesType"/>
+      </xsd:choice>
+      <xsd:element name="managed-bean-extension"
+                   type="jakartaee:faces-config-managed-bean-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="eager"
+                   type="xsd:boolean"
+                   use="optional">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p> This attribute is only considered when associated with
+          an application-scoped managed bean. If the value of the eager
+          attribute is true the runtime must instantiate this class
+          and store the instance within the application scope when the
+          application starts.</p>
+          
+          <p>If eager is unspecified or is false, the default "lazy"
+          instantiation and scoped storage of the managed bean
+          will occur.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definitionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Top level element for a flow
+        definition.</p>
+        
+        <div class="changed_added_2_2">
+        
+        <p>If there is no <code>&lt;start-node&gt;</code> element declared, it
+        is assumed to be <code>&lt;flowName&gt;.xhtml</code>.</p>
+        
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="start-node"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">Declare the id of the starting node in the
+            flow graph.  The start node may be any of the node types mentioned in
+            the class javadocs for <code><a target="_"
+            href="jakarta/faces/flow/FlowHandler.html">FlowHandler</a></code>.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view"
+                   type="jakartaee:faces-config-flow-definition-viewType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="switch"
+                   type="jakartaee:faces-config-flow-definition-switchType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="flow-return"
+                   type="jakartaee:faces-config-flow-definition-flow-returnType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="navigation-rule"
+                   type="jakartaee:faces-config-navigation-ruleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="flow-call"
+                   type="jakartaee:faces-config-flow-definition-flow-callType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method-call"
+                   type="jakartaee:faces-config-flow-definition-faces-method-callType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="initializer"
+                   type="jakartaee:faces-config-flow-definition-initializerType"
+                   minOccurs="0"/>
+      <xsd:element name="finalizer"
+                   type="jakartaee:faces-config-flow-definition-finalizerType"
+                   minOccurs="0"/>
+      <xsd:element name="inbound-parameter"
+                   type="jakartaee:faces-config-flow-definition-inbound-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this flow.  The id
+          must be unique within the Application configuration Resource
+          file in which this flow is defined.  The value of this attribute, 
+          combined with the value of the &lt;faces-config&gt;&lt;name&gt; element
+          must globally identify the flow within the application.<p> 
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-faces-method-callType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Invoke a method, passing parameters if necessary.
+        The return from the method is used as the outcome for where to go next in the
+        flow.  If the method is a void method, the default outcome is used.<p> 
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method"
+                   type="jakartaee:faces-config-flow-definition-faces-method-call-methodType"/>
+      <xsd:element name="default-outcome"
+                   type="jakartaee:string"/>
+      <xsd:element name="parameter"
+                   type="jakartaee:faces-config-flow-definition-flow-call-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A parameter to pass when calling the method
+            identified in the "method" element that is a sibling of this element.<p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-faces-method-call-methodType">
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A parameter to pass when calling the method
+        identified in the "method" element that is a sibling of this element.<p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The optional "class" element within a "parameter" element 
+            will be interpreted as the fully qualified class name for the type
+            of the "value" element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:faces-config-flow-definition-parameter-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "value" element within an "parameter"
+            must be a literal string or an EL Expression whose "get" will be called when the "method"
+            associated with this element is invoked.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-viewType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a view node in a flow graph.</p>
+        
+        <p>This element must contain exactly one
+        <code>&lt;vdl-document&gt;</code> element.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="vdl-document"
+                   type="jakartaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2 changed_modified_2_3">
+            Define the path to the vdl-document for the enclosing view.
+            <p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this view.  It must be
+          unique within the flow.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-switchType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a switch node in a flow graph.</p>
+        
+        <div class="changed_added_2_2">
+        
+        <p>This element must contain one or more
+        <code>&lt;case&gt;</code> elements.  When control passes to the
+        <code>&lt;switch&gt;</code> node, each of the cases must be considered
+        in order and control must past to the <code>&lt;from-outcome&gt;</code>
+        of the first one whose <code>&lt;if&gt;</code> expression evaluates to 
+        <code>true</code>.</p>
+        
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="case"
+                   type="jakartaee:faces-config-flow-definition-switch-caseType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">Defines a case that must be
+            considered in the list of cases in the
+            <code>&lt;switch&gt;</code>.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-outcome"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">Defines the default case that will
+            be taken if none of the other cases in the
+            <code>&lt;switch&gt;</code> are taken.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this switch.  It must be
+          unique within the flow.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-switch-caseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Defines a case that will
+        be considered in the <code>&lt;switch&gt;</code>.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="if"
+                   type="jakartaee:faces-config-ifType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">If this EL expression evaluates to
+            <code>true</code>, the corresponding <code>from-outcome</code> will 
+            be the outcome taken by the enclosing <code>&lt;switch&gt;</code></p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from-outcome"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The "from-outcome" element contains a logical outcome
+            string returned by the execution of an application
+            action method selected via an "actionRef" property
+            (or a literal value specified by an "action" property)
+            of a UICommand component.  If specified, this rule
+            will be relevant only if the outcome value matches
+            this element's value.  If not specified, this rule
+            will be relevant if the outcome value is non-null
+            or, if the "if" element is present, will be relevant
+            for any outcome value, with the assumption that the
+            condition specified in the "if" element ultimately
+            determines if this rule is a match.</p>
+            
+            <p class="changed_added_2_2">If used in a faces flow, this element
+            represents the node id to which control will be passed.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID">
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-returnType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a return node in a flow graph.</p>
+        
+        <div class="changed_added_2_2">
+        
+        <p>This element must contain exactly one <code>&lt;from-outcome&gt;</code> element.</p>
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="from-outcome"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">This element
+            represents the node id to which control will be passed.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this flow-return.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-callType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a call node in a flow graph.</p>
+        
+        <div class="changed_added_2_2">
+        
+        <p>This element must contain exactly one <code>&lt;flow-reference&gt;</code> element, 
+        which must contain exactly one <code>&lt;flow-id&gt;</code> element.</p>
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="flow-reference"
+                   type="jakartaee:faces-config-flow-definition-flow-call-flow-referenceType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The flow id of the called flow.<p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="outbound-parameter"
+                   type="jakartaee:faces-config-flow-definition-flow-call-outbound-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A parameter to pass when calling the flow
+            identified in the "flow-reference" element that is a sibling of this element.<p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this flow-return.</p>
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-flow-referenceType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Identifiy the called flow.</p>
+        
+        <div class="changed_added_2_2">
+        
+        </div>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="flow-document-id"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The document id of the called flow.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flow-id"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The id of the called flow.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-initializerType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A <code>MethodExpression</code> that will be invoked when the flow is entered.<p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-finalizerType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A <code>MethodExpression</code> that will be invoked when the flow is exited.<p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-inbound-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A named parameter whose value will be populated
+        with a correspondingly named parameter within an "outbound-parameter" element.<p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "name" element within an "inbound-parameter"
+            element declares the name of this parameter
+            to be passed into a flow.  There must be 
+            a sibling "value" element in the same parent as this element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:faces-config-flow-definition-parameter-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "value" element within an "inbound-parameter"
+            must be an EL Expression whose value will be set with the correspondingly
+            named "outbound-parameter" when this flow is entered, if such a 
+            parameter exists.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-outbound-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A named parameter whose value will be 
+        passed to a correspondingly named parameter within an "inbound-parameter" element
+        on the target flow.<p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "name" element within an "outbound-parameter" element 
+            declares the name of this parameter to be passed out of a flow.  There must be 
+            a sibling "value" element in the same parent as this element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:faces-config-flow-definition-parameter-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "value" element within an "outbound-parameter"
+            must be a literal string or an EL Expression whose "get" will be called when the "flow-call"
+            containing this element is traversed to go to a new flow.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-bean-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for managed-bean.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-bean-scopeOrNoneType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        
+        <p> Defines the legal values for the <managed-bean-scope>
+        element's body content, which includes all of the scopes
+        normally used in a web application, plus the "none" value
+        indicating that a created bean should not be stored into
+        any scope.  Alternatively, an EL expression may be used
+        as the value of this element.  The result of evaluating this
+        expression must by of type java.util.Map.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:pattern value="view|request|session|application|none|#\{.*\}"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-managed-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "managed-property" element represents an individual
+        property of a managed bean that will be configured to the
+        specified value (or value set) if the corresponding
+        managed bean is automatically created.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="property-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-name" element represents the JavaBeans
+            property name under which the corresponding value may
+            be stored.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-class"
+                   type="jakartaee:java-typeType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-class" element represents the Java type
+            of the value associated with this property name.
+            If not specified, it can be inferred from existing
+            classes; however, this element should be specified
+            if the configuration file is going to be the source
+            for generating the corresponding classes.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="map-entries"
+                     type="jakartaee:faces-config-map-entriesType"/>
+        <xsd:element name="null-value"
+                     type="jakartaee:faces-config-null-valueType"/>
+        <xsd:element name="value"
+                     type="jakartaee:faces-config-valueType"/>
+        <xsd:element name="list-entries"
+                     type="jakartaee:faces-config-list-entriesType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-map-entryType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "map-entry" element reprsents a single key-entry pair
+        that will be added to the computed value of a managed
+        property of type java.util.Map.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="key"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "key" element is the String representation of a
+            map key that will be stored in a managed property of
+            type java.util.Map.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:element name="null-value"
+                     type="jakartaee:faces-config-null-valueType"/>
+        <xsd:element name="value"
+                     type="jakartaee:faces-config-valueType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-map-entriesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "map-entries' element represents a set of key-entry pairs
+        that will be added to the computed value of a managed property
+        of type java.util.Map.  In addition, the Java class types
+        of the key and entry values may be optionally declared.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="key-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "key-class" element defines the Java type to which
+            each "key" element in a set of "map-entry" elements
+            will be converted to.  If omitted, "java.lang.String"
+            is assumed.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value-class"
+                   type="jakartaee:faces-config-value-classType"
+                   minOccurs="0"/>
+      <xsd:element name="map-entry"
+                   type="jakartaee:faces-config-map-entryType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-caseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> <span class="changed_modified_2_2">The</span>
+        "navigation-case" element describes a particular
+        combination of conditions that must match for this case to
+        be executed, and the view id of the component tree that
+        should be selected next.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="from-action"
+                   type="jakartaee:faces-config-from-actionType"
+                   minOccurs="0"/>
+      <xsd:element name="from-outcome"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The "from-outcome" element contains a logical outcome
+            string returned by the execution of an application
+            action method selected via an "actionRef" property
+            (or a literal value specified by an "action" property)
+            of a UICommand component.  If specified, this rule
+            will be relevant only if the outcome value matches
+            this element's value.  If not specified, this rule
+            will be relevant if the outcome value is non-null
+            or, if the "if" element is present, will be relevant
+            for any outcome value, with the assumption that the
+            condition specified in the "if" element ultimately
+            determines if this rule is a match.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="if"
+                   type="jakartaee:faces-config-ifType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Please see section JSF.7.4.2 for the specification of this element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="to-view-id"
+                   type="jakartaee:faces-config-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p><span class="changed_modified_2_2">The "to-view-id" element 
+            contains the view identifier (<span class="changed_added_2_2">or 
+            flow node id, or flow id</span>)
+            of the next view (<span class="changed_added_2_2">or flow node or 
+            flow</span>) that should be displayed if this
+            navigation rule is matched. If the contents is a
+            value expression, it should be resolved by the
+            navigation handler to obtain the view (
+            <span class="changed_added_2_2">or flow node or flow</span>) 
+            identifier.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="to-flow-document-id"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The document id of the called flow.
+            If this element appears in a &lt;navigation-case&gt; nested within 
+            a &lt;flow-definition&gt;, it must be ignored because navigation
+            cases within flows may only navigate among the view nodes of that 
+            flow.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="redirect"
+                   type="jakartaee:faces-config-redirectType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-ruleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "navigation-rule" element represents an individual
+        decision rule that will be utilized by the default
+        NavigationHandler implementation to make decisions on
+        what view should be displayed next, based on the
+        view id being processed.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="from-view-id"
+                   type="jakartaee:faces-config-from-view-idType"/>
+      <xsd:element name="navigation-case"
+                   type="jakartaee:faces-config-navigation-caseType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="navigation-rule-extension"
+                   type="jakartaee:faces-config-navigation-rule-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-rule-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for navigation-rule.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-null-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "null-value" element indicates that the managed
+        property in which we are nested will be explicitly
+        set to null if our managed bean is automatically
+        created.  This is different from omitting the managed
+        property element entirely, which will cause no
+        property setter to be called for this property.</p>
+        
+        <p>The "null-value" element can only be used when the
+        associated "property-class" identifies a Java class,
+        not a Java primitive.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "property" element represents a JavaBean property of the
+        Java class represented by our parent element.</p>
+        
+        <p>Property names must be unique within the scope of the Java
+        class that is represented by the parent element, and must
+        correspond to property names that will be recognized when
+        performing introspection against that class via
+        java.beans.Introspector.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="property-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-name" element represents the JavaBeans
+            property name under which the corresponding value
+            may be stored.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-class"
+                   type="jakartaee:java-typeType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-class" element represents the Java type
+            of the value associated with this property name.
+            If not specified, it can be inferred from existing
+            classes; however, this element should be specified if
+            the configuration file is going to be the source for
+            generating the corresponding classes.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-value"
+                   type="jakartaee:faces-config-default-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="suggested-value"
+                   type="jakartaee:faces-config-suggested-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="property-extension"
+                   type="jakartaee:faces-config-property-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-protected-viewsType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Any view that matches any of the
+        url-patterns in this element may only be reached from another Jakarta Server 
+        Faces view in the same web application. Because the runtime is aware of
+        which views are protected, any navigation from an unprotected
+        view to a protected view is automatically subject to
+        protection.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-property-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for property.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirectType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "redirect" element indicates that navigation to the
+        specified "to-view-id" should be accomplished by
+        performing an HTTP redirect rather than the usual
+        ViewHandler mechanisms.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="redirect-param"
+                   type="jakartaee:faces-config-redirect-redirectParamType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="include-view-params"
+                   type="xsd:boolean"
+                   use="optional"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirect-viewParamType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This element was introduced due to a specification
+        error, and is now deprecated.  The correct name for
+        this element is "redirect-param" and its meaning is
+        documented therein.  The "view-param" element is
+        maintained to preserve backwards compatibility.
+        Implementations must treat this element the same as
+        "redirect-param".</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:string"/>
+      <xsd:element name="value"
+                   type="jakartaee:string"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirect-redirectParamType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "redirect-param" element, only valid within
+        a "redirect" element, contains child "name"
+        and "value" elements that must be included in the
+        redirect url when the redirect is performed.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:string"/>
+      <xsd:element name="value"
+                   type="jakartaee:string"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-referenced-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "referenced-bean" element represents at design time the
+        promise that a Java object of the specified type will exist at
+        runtime in some scope, under the specified key.  This can be
+        used by design time tools to construct user interface dialogs
+        based on the properties of the specified class.  The presence
+        or absence of a referenced bean element has no impact on the
+        JavaServer Faces runtime environment inside a web application.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="referenced-bean-name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "referenced-bean-name" element represents the
+            attribute name under which the corresponding
+            referenced bean may be assumed to be stored, in one
+            of 'request', 'session', 'view', 'application'
+            or a custom scope.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="referenced-bean-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "referenced-bean-class" element represents the
+            fully qualified class name of the Java class
+            (either abstract or concrete) or Java interface
+            implemented by the corresponding referenced bean.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-render-kitType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "render-kit" element represents a concrete RenderKit
+        implementation that should be registered under the specified
+        render-kit-id.  If no render-kit-id is specified, the
+        identifier of the default RenderKit
+        (RenderKitFactory.DEFAULT_RENDER_KIT) is assumed.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="render-kit-id"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "render-kit-id" element represents an identifier
+            for the RenderKit represented by the parent
+            "render-kit" element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="render-kit-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "render-kit-class" element represents the fully
+            qualified class name of a concrete RenderKit
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer"
+                   type="jakartaee:faces-config-rendererType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="client-behavior-renderer"
+                   type="jakartaee:faces-config-client-behavior-rendererType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="render-kit-extension"
+                   type="jakartaee:faces-config-render-kit-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-client-behavior-rendererType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "client-behavior-renderer" element represents a concrete
+        ClientBehaviorRenderer implementation class that should be
+        registered under the specified behavior renderer type identifier,
+        in the RenderKit associated with the parent "render-kit"
+        element.  Client Behavior renderer type must be unique within the RenderKit
+        associated with the parent "render-kit" element.</p>
+        
+        <p>Nested "attribute" elements identify generic component
+        attributes that are recognized by this renderer.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="client-behavior-renderer-type"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "client-behavior-renderer-type" element represents a renderer type
+            identifier for the Client Behavior Renderer represented by the parent
+            "client-behavior-renderer" element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-behavior-renderer-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "client-behavior-renderer-class" element represents the fully
+            qualified class name of a concrete Client Behavior Renderer
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-rendererType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "renderer" element represents a concrete Renderer
+        implementation class that should be registered under the
+        specified component family and renderer type identifiers,
+        in the RenderKit associated with the parent "render-kit"
+        element.  Combinations of component family and
+        renderer type must be unique within the RenderKit
+        associated with the parent "render-kit" element.</p>
+        
+        <p>Nested "attribute" elements identify generic component
+        attributes that are recognized by this renderer.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="component-family"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "component-family" element represents the
+            component family for which the Renderer represented
+            by the parent "renderer" element will be used.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer-type"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "renderer-type" element represents a renderer type
+            identifier for the Renderer represented by the parent
+            "renderer" element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "renderer-class" element represents the fully
+            qualified class name of a concrete Renderer
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet"
+                   type="jakartaee:faces-config-facetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="renderer-extension"
+                   type="jakartaee:faces-config-renderer-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-renderer-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for renderer.  It may contain implementation
+        specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-render-kit-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for render-kit.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-suggested-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "suggested-value" contains the value for the property or
+        attribute in which this element resides.  This value is
+        advisory only and is intended for tools to use when
+        populating pallettes.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-supported-localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "supported-locale" element allows authors to declare
+        which locales are supported in this application instance.</p>
+        
+        <p class="modified_added_2_3">
+        To facilitate BCP 47 this element first needs to be parsed by the
+        Locale.forLanguageTag method. If it does not return a Locale with
+        a language the old specification below needs to take effect.
+        </p>
+        
+        <p>It must be specified as :language:[_:country:[_:variant:]]
+        without the colons, for example "ja_JP_SJIS".  The
+        separators between the segments may be '-' or '_'.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-localeType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "behavior" element represents a concrete Behavior
+        implementation class that should be registered under the
+        specified behavior identifier.  Behavior identifiers must
+        be unique within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Behavior.  Nested "property"
+        elements identify JavaBeans properties of the Behavior
+        implementation class that may be configured to affect the
+        operation of the Behavior.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="behavior-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "behavior-id" element represents the identifier
+            under which the corresponding Behavior class should
+            be registered.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="behavior-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "behavior-class" element represents the fully
+            qualified class name of a concrete Behavior
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Behavior.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "property" elements identify JavaBeans
+            properties of the Behavior implementation class
+            that may be configured to affect the operation of
+            the Behavior.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="behavior-extension"
+                   type="jakartaee:faces-config-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for behavior.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "validator" element represents a concrete Validator
+        implementation class that should be registered under the
+        specified validator identifier.  Validator identifiers must
+        be unique within the entire web application.</p>
+        
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Validator.  Nested "property"
+        elements identify JavaBeans properties of the Validator
+        implementation class that may be configured to affect the
+        operation of the Validator.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="validator-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "validator-id" element represents the identifier
+            under which the corresponding Validator class should
+            be registered.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "validator-class" element represents the fully
+            qualified class name of a concrete Validator
+            implementation class.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Validator.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "property" elements identify JavaBeans
+            properties of the Validator implementation class
+            that may be configured to affect the operation of
+            the Validator.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator-extension"
+                   type="jakartaee:faces-config-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for validator.  It may contain
+        implementation specific content.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "value" element is the String representation of
+        a literal value to which a scalar managed property
+        will be set, or a value binding expression ("#{...}")
+        that will be used to calculate the required value.
+        It will be converted as specified for the actual
+        property type.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:union memberTypes="jakartaee:faces-config-el-expressionType xsd:string"/>
+  </xsd:simpleType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-value-classType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "value-class" element defines the Java type to which each
+        "value" element's value will be converted to, prior to adding
+        it to the "list-entries" list for a managed property that is
+        a java.util.List, or a "map-entries" map for a managed
+        property that is a java.util.Map.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:fully-qualified-classType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-list-entriesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "list-entries" element represents a set of initialization
+        elements for a managed property that is a java.util.List or an
+        array.  In the former case, the "value-class" element can
+        optionally be used to declare the Java type to which each
+        value should be converted before adding it to the Collection.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="value-class"
+                   type="jakartaee:faces-config-value-classType"
+                   minOccurs="0"/>
+      <xsd:choice minOccurs="0"
+                  maxOccurs="unbounded">
+        <xsd:element name="null-value"
+                     type="jakartaee:faces-config-null-valueType"/>
+        <xsd:element name="value"
+                     type="jakartaee:faces-config-valueType"/>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-system-event-listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The presence of this element within the "application" element in
+        an application configuration resource file indicates the
+        developer wants to add an SystemEventListener to this
+        application instance.  Elements nested within this element allow
+        selecting the kinds of events that will be delivered to the
+        listener instance, and allow selecting the kinds of classes that
+        can be the source of events that are delivered to the listener
+        instance.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="system-event-listener-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "system-event-listener-class" element contains
+            the fully qualified class name of the concrete
+            SystemEventListener implementation class that will be
+            called when events of the type specified by the
+            "system-event-class" are sent by the runtime.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="system-event-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "system-event-class" element contains the fully
+            qualified class name of the SystemEvent subclass for
+            which events will be delivered to the class whose fully
+            qualified class name is given by the
+            "system-event-listener-class" element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="source-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "source-class" element, if present, contains the
+            fully qualified class name of the class that will be the
+            source for the event to be delivered to the class whose
+            fully qualified class name is given by the
+            "system-event-listener-class" element.</p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This type contains the recognized versions of
+        faces-config supported.</p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="3.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-facesconfig_4_0.xsd b/wildfly/docs/schema/web-facesconfig_4_0.xsd
new file mode 100644
index 0000000..56e633f
--- /dev/null
+++ b/wildfly/docs/schema/web-facesconfig_4_0.xsd
@@ -0,0 +1,3447 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            attributeFormDefault="unqualified"
+            elementFormDefault="qualified"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            version="4.0"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      <p>The XML Schema for the Jakarta Faces Application
+      Configuration File (Version 4.0).</p>
+
+      <p>All Jakarta Faces configuration files must indicate
+      the Jakarta Faces schema by indicating the
+      Jakarta Faces namespace:</p>
+
+      <p>https://jakarta.ee/xml/ns/jakartaee</p>
+
+      <p>and by indicating the version of the schema by
+      using the version element as shown below:</p>
+
+      <pre>&lt;faces-config xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="4.0"&gt;
+      ...
+      &lt;/faces-config&gt;</pre>
+
+      <p>The instance documents may indicate the published
+      version of the schema using xsi:schemaLocation attribute
+      for jakartaee namespace with the following location:</p>
+
+      <p>https://jakarta.ee/xml/ns/jakartaee/web-facesconfig_4_0.xsd</p>
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="faces-config"
+               type="jakartaee:faces-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>The "faces-config" element is the root of the configuration
+        information hierarchy, and contains nested elements for all
+        of the other configuration settings.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="faces-config-behavior-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>Behavior IDs must be unique within a document.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:behavior"/>
+      <xsd:field xpath="jakartaee:behavior-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>Converter IDs must be unique within a document.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:converter"/>
+      <xsd:field xpath="jakartaee:converter-id"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-converter-for-class-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p>'converter-for-class' element values must be unique
+          within a document.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:converter"/>
+      <xsd:field xpath="jakartaee:converter-for-class"/>
+    </xsd:unique>
+    <xsd:unique name="faces-config-validator-ID-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p> Validator IDs must be unique within a document.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:validator"/>
+      <xsd:field xpath="jakartaee:validator-id"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "faces-config" element is the root of the configuration
+        information hierarchy, and contains nested elements for all
+        of the other configuration settings.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="application"
+                   type="jakartaee:faces-config-applicationType"/>
+      <xsd:element name="ordering"
+                   type="jakartaee:faces-config-orderingType"/>
+      <xsd:element name="absolute-ordering"
+                   type="jakartaee:faces-config-absoluteOrderingType"
+                   minOccurs="0"/>
+      <xsd:element name="factory"
+                   type="jakartaee:faces-config-factoryType"/>
+      <xsd:element name="component"
+                   type="jakartaee:faces-config-componentType"/>
+      <xsd:element name="converter"
+                   type="jakartaee:faces-config-converterType"/>
+      <xsd:element name="flow-definition"
+                   type="jakartaee:faces-config-flow-definitionType"/>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> <span class="changed_modified_2_2">The</span> "name" element
+            within the top level "faces-config"
+            element declares the name of this application
+            configuration resource.  Such names are used
+            in the document ordering scheme specified in section
+            11.3.8 "Ordering of Artifacts" of the Jakarta Faces Specification Document.</p>
+
+            <p class="changed_added_2_2">This value is taken to be the
+            defining document id of any &lt;flow-definition&gt; elements
+            defined in this Application Configuration Resource file.  If this
+            element is not specified, the runtime must take the empty string
+            as its value.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="navigation-rule"
+                   type="jakartaee:faces-config-navigation-ruleType"/>
+      <xsd:element name="protected-views"
+                   type="jakartaee:faces-config-protected-viewsType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="referenced-bean"
+                   type="jakartaee:faces-config-referenced-beanType"/>
+      <xsd:element name="render-kit"
+                   type="jakartaee:faces-config-render-kitType"/>
+      <xsd:element name="lifecycle"
+                   type="jakartaee:faces-config-lifecycleType"/>
+      <xsd:element name="validator"
+                   type="jakartaee:faces-config-validatorType"/>
+      <xsd:element name="behavior"
+                   type="jakartaee:faces-config-behaviorType"/>
+      <xsd:element name="faces-config-extension"
+                   type="jakartaee:faces-config-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:choice>
+    <xsd:attribute name="metadata-complete"
+                   type="xsd:boolean"
+                   use="optional">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The metadata-complete attribute defines whether this
+          Faces application is complete, or whether
+          the class files available to this module and packaged with
+          this application should be examined for annotations
+          that specify configuration information.
+
+          This attribute is only inspected on the application
+          configuration resource file located at "WEB-INF/faces-config.xml".
+          The presence of this attribute on any application configuration
+          resource other than the one located at "WEB-INF/faces-config.xml",
+          including any files named using the jakarta.faces.CONFIG_FILES
+          attribute, must be ignored.
+
+          If metadata-complete is set to "true", the Faces
+          runtime must ignore any annotations that specify configuration
+          information, which might be present in the class files
+          of the application.
+
+          If metadata-complete is not specified or is set to
+          "false", the Faces runtime must examine the class
+          files of the application for annotations, as specified by
+          the specification.
+
+          If "WEB-INF/faces-config.xml" is not present, the
+          Faces runtime will assume metadata-complete to be "false".
+
+          The value of this attribute will have no impact on
+          runtime annotations such as @ResourceDependency or
+          @ListenerFor.
+
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="version"
+                   type="jakartaee:faces-config-versionType"
+                   use="required"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for faces-config.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Please see section
+        11.3.8 "Ordering of Artifacts" of the Jakarta Faces Specification Document
+        for the specification of this element.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="jakartaee:faces-config-ordering-orderingType"
+                   minOccurs="0"/>
+      <xsd:element name="before"
+                   type="jakartaee:faces-config-ordering-orderingType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This element contains a sequence of "id" elements, each of which
+        refers to an application configuration resource by the "id"
+        declared on its faces-config element.  This element can also contain
+        a single "others" element which specifies that this document comes
+        before or after other documents within the application.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:faces-config-ordering-othersType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ordering-othersType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This element indicates that the ordering sub-element in which
+        it was placed should take special action regarding the ordering
+        of this application resource relative to other
+        application configuration resources.
+        See section 11.3.8 "Ordering of Artifacts" of the Jakarta Faces Specification Document
+        for the complete specification.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-absoluteOrderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Only relevant if this is placed within the /WEB-INF/faces-config.xml.
+        Please see
+        section 11.3.8 "Ordering of Artifacts" of the Jakarta Faces Specification Document
+        for the specification for details.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:faces-config-ordering-othersType"
+                   minOccurs="0"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-applicationType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "application" element provides a mechanism to define the
+        various per-application-singleton implementation artifacts for
+        a particular web application that is utilizing
+        Jakarta Faces.  For nested elements that are not specified,
+        the Jakarta Faces implementation must provide a suitable
+        default.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="action-listener"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "action-listener" element contains the fully
+            qualified class name of the concrete
+            ActionListener implementation class that will be
+            called during the Invoke Application phase of the
+            request processing lifecycle.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-render-kit-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "default-render-kit-id" element allows the
+            application to define a renderkit to be used other
+            than the standard one.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="message-bundle"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The base name of a resource bundle representing
+            the message resources for this application.  See
+            the JavaDocs for the "java.util.ResourceBundle"
+            class for more information on the syntax of
+            resource bundle names.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="navigation-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "navigation-handler" element contains the
+            fully qualified class name of the concrete
+            NavigationHandler implementation class that will
+            be called during the Invoke Application phase
+            of the request processing lifecycle, if the
+            default ActionListener (provided by the Jakarta Faces
+            implementation) is used.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "view-handler" element contains the fully
+            qualified class name of the concrete ViewHandler
+            implementation class that will be called during
+            the Restore View and Render Response phases of the
+            request processing lifecycle.  The faces
+            implementation must provide a default
+            implementation of this class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="state-manager"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "state-manager" element contains the fully
+            qualified class name of the concrete StateManager
+            implementation class that will be called during
+            the Restore View and Render Response phases of the
+            request processing lifecycle.  The faces
+            implementation must provide a default
+            implementation of this class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="el-resolver"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "el-resolver" element contains the fully
+            qualified class name of the concrete
+            jakarta.el.ELResolver implementation class
+            that will be used during the processing of
+            EL expressions.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "resource-handler" element contains the
+            fully qualified class name of the concrete
+            ResourceHandler implementation class that
+            will be used during rendering and decoding
+            of resource requests The standard
+            constructor based decorator pattern used for
+            other application singletons will be
+            honored.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="resource-library-contracts"
+                   type="jakartaee:faces-config-application-resource-library-contractsType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The "resource-library-contracts" element
+            specifies the mappings between views in the application and resource
+            library contracts that, if present in the application, must be made
+            available for use as templates of the specified views.
+            </p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="search-expression-handler"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3">The "search-expression-handler"
+            element contains the fully qualified class name of the
+            concrete jakarta.faces.component.search.SearchExpressionHandler
+            implementation class that will be used for processing of a
+            search expression.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="search-keyword-resolver"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3"> The "search-keyword-resolver"
+            element contains the fully qualified class name of the
+            concrete jakarta.faces.component.search.SearchKeywordResolver
+            implementation class that will be used during the processing
+            of a search expression keyword.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="system-event-listener"
+                   type="jakartaee:faces-config-system-event-listenerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="locale-config"
+                   type="jakartaee:faces-config-locale-configType"/>
+      <xsd:element name="resource-bundle"
+                   type="jakartaee:faces-config-application-resource-bundleType"/>
+      <xsd:element name="application-extension"
+                   type="jakartaee:faces-config-application-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="default-validators"
+                   type="jakartaee:faces-config-default-validatorsType"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-bundleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The resource-bundle element inside the application element
+        references a java.util.ResourceBundle instance by name
+        using the var element.  ResourceBundles referenced in this
+        manner may be returned by a call to
+        Application.getResourceBundle() passing the current
+        FacesContext for this request and the value of the var
+        element below.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="base-name"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The fully qualified class name of the
+            java.util.ResourceBundle instance.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="var"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The name by which this ResourceBundle instance
+            is retrieved by a call to
+            Application.getResourceBundle().</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-library-contractsType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">The "resource-library-contracts" element
+        specifies the mappings between views in the application and resource
+        library contracts that, if present in the application, must be made
+        available for use as templates of the specified views.
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="contract-mapping"
+                   type="jakartaee:faces-config-application-resource-library-contracts-contract-mappingType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p classes="changed_added_2_2">Declare a mapping between a collection
+            of views in the application and the list of contracts (if present in the application)
+            that may be used as a source for templates and resources for those views.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-resource-library-contracts-contract-mappingType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">The "contract-mapping" element
+        specifies the mappings between a collection of views in the application and resource
+        library contracts that, if present in the application, must be made
+        available for use as templates of the specified views.
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The "url-pattern" element
+            specifies the collection of views in this application that
+            are allowed to use the corresponding contracts.
+            </p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="contracts"
+                   type="jakartaee:string"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The "contracts" element
+            is a comma separated list of resource library contracts that,
+            if available to the application, may be used by the views
+            matched by the corresponding "url-pattern"
+            </p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-application-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for application.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-factoryType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "factory" element provides a mechanism to define the
+        various Factories that comprise parts of the implementation
+        of Jakarta Faces.  For nested elements that are not
+        specified, the Jakarta Faces implementation must provide a
+        suitable default.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="application-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "application-factory" element contains the
+            fully qualified class name of the concrete
+            ApplicationFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(APPLICATION_FACTORY) is
+            called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="exception-handler-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "exception-handler-factory" element contains the
+            fully qualified class name of the concrete
+            ExceptionHandlerFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(EXCEPTION_HANDLER_FACTORY)
+            is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="external-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "external-context-factory" element contains the
+            fully qualified class name of the concrete
+            ExternalContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(EXTERNAL_CONTEXT_FACTORY)
+            is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="faces-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "faces-context-factory" element contains the
+            fully qualified class name of the concrete
+            FacesContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FACES_CONTEXT_FACTORY)
+            is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facelet-cache-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "facelet-cache-factory" element contains the
+            fully qualified class name of the concrete
+            FaceletCacheFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FACELET_CACHE_FACTORY)
+            is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="partial-view-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "partial-view-context-factory" element contains the
+            fully qualified class name of the concrete
+            PartialViewContextFactory implementation class that will
+            be called when FactoryFinder.getFactory
+            (FactoryFinder.PARTIAL_VIEW_CONTEXT_FACTORY) is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lifecycle-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "lifecycle-factory" element contains the fully
+            qualified class name of the concrete LifecycleFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(LIFECYCLE_FACTORY) is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view-declaration-language-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "view-declaration-language-factory" element contains
+            the fully qualified class name of the concrete
+            ViewDeclarationLanguageFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(VIEW_DECLARATION_FACTORY) is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-handler-delegate-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "tag-handler-delegate-factory" element contains
+            the fully qualified class name of the concrete
+            ViewDeclarationLanguageFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(TAG_HANDLER_DELEGATE_FACTORY) is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="render-kit-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "render-kit-factory" element contains the fully
+            qualified class name of the concrete RenderKitFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(RENDER_KIT_FACTORY) is
+            called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="visit-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "visit-context-factory" element contains the fully
+            qualified class name of the concrete VisitContextFactory
+            implementation class that will be called when
+            FactoryFinder.getFactory(VISIT_CONTEXT_FACTORY) is
+            called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flash-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "flash-factory" element contains the
+            fully qualified class name of the concrete
+            FaceletFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FLASH_FACTORY) is
+            called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flow-handler-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "flow-handler-factory" element contains the
+            fully qualified class name of the concrete
+            FlowHandlerFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(FLOW_HANDLER_FACTORY) is
+            called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-window-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3"> The "client-window-factory" element contains the fully
+            qualified class name of the concrete ClientWindowFactory implementation class that
+            will be called when FactoryFinder.getFactory(CLIENT_WINDOW_FACTORY) is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="search-expression-context-factory"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_3"> The
+            "search-expression-context-factory" element contains the
+            fully qualified class name of the concrete
+            SearchExpressionContextFactory implementation class that will
+            be called when
+            FactoryFinder.getFactory(SEARCH_EXPRESSION_CONTEXT_FACTORY)
+            is called.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="factory-extension"
+                   type="jakartaee:faces-config-factory-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-factory-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for factory.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "attribute" element represents a named, typed, value
+        associated with the parent UIComponent via the generic
+        attributes mechanism.</p>
+
+        <p>Attribute names must be unique within the scope of the parent
+        (or related) component.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="attribute-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "attribute-name" element represents the name under
+            which the corresponding value will be stored, in the
+            generic attributes of the UIComponent we are related
+            to.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "attribute-class" element represents the Java type
+            of the value associated with this attribute name.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-value"
+                   type="jakartaee:faces-config-default-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="suggested-value"
+                   type="jakartaee:faces-config-suggested-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="attribute-extension"
+                   type="jakartaee:faces-config-attribute-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-attribute-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for attribute.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-componentType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "component" element represents a concrete UIComponent
+        implementation class that should be registered under the
+        specified type identifier, along with its associated
+        properties and attributes.  Component types must be unique
+        within the entire web application.</p>
+
+        <p>Nested "attribute" elements identify generic attributes that
+        are recognized by the implementation logic of this component.
+        Nested "property" elements identify JavaBeans properties of
+        the component class that may be exposed for manipulation
+        via tools.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="component-type"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "component-type" element represents the name under
+            which the corresponding UIComponent class should be
+            registered.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="component-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "component-class" element represents the fully
+            qualified class name of a concrete UIComponent
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet"
+                   type="jakartaee:faces-config-facetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="component-extension"
+                   type="jakartaee:faces-config-component-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-component-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for component.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "default-locale" element declares the default locale
+        for this application instance.</p>
+
+        <p class="modified_added_2_3">
+        To facilitate BCP 47 this element first needs to be parsed by the
+        Locale.forLanguageTag method. If it does not return a Locale with
+        a language the old specification below needs to take effect.
+        </p>
+
+        <p>It must be specified as :language:[_:country:[_:variant:]]
+        without the colons, for example "ja_JP_SJIS".  The
+        separators between the segments may be '-' or '_'.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-localeType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "default-value" contains the value for the property or
+        attribute in which this element resides.  This value differs
+        from the "suggested-value" in that the property or attribute
+        must take the value, whereas in "suggested-value" taking the
+        value is optional.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-el-expressionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> EL expressions present within a faces config file
+        must start with the character sequence of '#{' and
+        end with '}'.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="#\{.*\}"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-facetType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Define the name and other design-time information for a facet
+        that is associated with a renderer or a component.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="facet-name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "facet-name" element represents the facet name
+            under which a UIComponent will be added to its parent.
+            It must be of type "Identifier".</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet-extension"
+                   type="jakartaee:faces-config-facet-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-facet-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for facet.  It may contain implementation
+        specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-from-view-idType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p><span class="changed_modified_2_2">The</span>
+        value of from-view-id must contain one of the following
+        values:</p>
+
+        <ul>
+
+        <li><p>The exact match for a view identifier that is recognized
+        by the the ViewHandler implementation being used (such as
+        "/index.jsp" if you are using the default ViewHandler).</p></li>
+
+        <li><p class="changed_added_2_2">The exact match of a flow node id
+        in the current flow, or a flow id of another flow.</p></li>
+
+        <li><p> A proper prefix of a view identifier, plus a trailing
+        "*" character.  This pattern indicates that all view
+        identifiers that match the portion of the pattern up to the
+        asterisk will match the surrounding rule.  When more than one
+        match exists, the match with the longest pattern is selected.
+        </p></li>
+
+        <li><p>An "*" character, which means that this pattern applies
+        to all view identifiers.  </p></li>
+
+        </ul>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-from-actionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "from-action" element contains an action reference
+        expression that must have been executed (by the default
+        ActionListener for handling application level events)
+        in order to select the navigation rule.  If not specified,
+        this rule will be relevant no matter which action reference
+        was executed (or if no action reference was executed).</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-ifType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p>The "if" element defines a condition that must resolve
+        to true in order for the navigation case on which it is
+        defined to be matched, with the existing match criteria
+        (action method and outcome) as a prerequiste, if present.
+        The condition is defined declaratively using a value
+        expression in the body of this element. The expression is
+        evaluated at the time the navigation case is being matched.
+        If the "from-outcome" is omitted and this element is
+        present, the navigation handler will match a null outcome
+        and use the condition return value to determine if the
+        case should be considered a match.</p>
+
+        <div class="changed_added_2_2">
+
+        <p>When used in a <code>&lt;switch&gt;</code> within a flow, if the
+        expresion returns <code>true</code>, the
+        <code>&lt;from-outcome&gt;</code> sibling element's outcome is used as
+        the id of the node in the flow graph to which control must be
+        passed.</p>
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-parameter-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2"></p>
+
+        <div class="changed_added_2_2">
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-converterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "converter" element represents a concrete Converter
+        implementation class that should be registered under the
+        specified converter identifier.  Converter identifiers must
+        be unique within the entire web application.</p>
+
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Converter.  Nested "property"
+        elements identify JavaBeans properties of the Converter
+        implementation class that may be configured to affect the
+        operation of the Converter.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:choice>
+        <xsd:element name="converter-id"
+                     type="jakartaee:string">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p> The "converter-id" element represents the
+              identifier under which the corresponding
+              Converter class should be registered.</p>
+
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="converter-for-class"
+                     type="jakartaee:fully-qualified-classType">
+          <xsd:annotation>
+            <xsd:documentation>
+              <![CDATA[
+              <p> The "converter-for-class" element represents the
+              fully qualified class name for which a Converter
+              class will be registered.</p>
+
+              ]]>
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="converter-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "converter-class" element represents the fully
+            qualified class name of a concrete Converter
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Converter.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "property" elements identify JavaBeans
+            properties of the Converter implementation class
+            that may be configured to affect the operation of
+            the Converter.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="converter-extension"
+                   type="jakartaee:faces-config-converter-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-converter-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for converter.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-lifecycleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "lifecycle" element provides a mechanism to specify
+        modifications to the behaviour of the default Lifecycle
+        implementation for this web application.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="phase-listener"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "phase-listener" element contains the fully
+            qualified class name of the concrete PhaseListener
+            implementation class that will be registered on
+            the Lifecycle.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="lifecycle-extension"
+                   type="jakartaee:faces-config-lifecycle-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-lifecycle-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for lifecycle.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The localeType defines valid locale defined by ISO-639-1
+        and ISO-3166.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:string">
+      <xsd:pattern value="([a-z]{2})[_|\-]?([\p{L}]{2})?[_|\-]?(\w+)?"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-locale-configType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "locale-config" element allows the app developer to
+        declare the supported locales for this application.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="default-locale"
+                   type="jakartaee:faces-config-default-localeType"
+                   minOccurs="0"/>
+      <xsd:element name="supported-locale"
+                   type="jakartaee:faces-config-supported-localeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-default-validatorsType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "default-validators" element allows the app developer to
+        register a set of validators, referenced by identifier, that
+        are automatically assigned to any EditableValueHolder component
+        in the application, unless overridden or disabled locally.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="validator-id"
+                   type="jakartaee:string"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "validator-id" element represents the identifier
+            of a registered validator.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definitionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Top level element for a flow
+        definition.</p>
+
+        <div class="changed_added_2_2">
+
+        <p>If there is no <code>&lt;start-node&gt;</code> element declared, it
+        is assumed to be <code>&lt;flowName&gt;.xhtml</code>.</p>
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="start-node"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">Declare the id of the starting node in the
+            flow graph.  The start node may be any of the node types mentioned in
+            the class javadocs for <code><a target="_"
+            href="jakarta/faces/flow/FlowHandler.html">FlowHandler</a></code>.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="view"
+                   type="jakartaee:faces-config-flow-definition-viewType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="switch"
+                   type="jakartaee:faces-config-flow-definition-switchType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="flow-return"
+                   type="jakartaee:faces-config-flow-definition-flow-returnType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="navigation-rule"
+                   type="jakartaee:faces-config-navigation-ruleType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="flow-call"
+                   type="jakartaee:faces-config-flow-definition-flow-callType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="method-call"
+                   type="jakartaee:faces-config-flow-definition-faces-method-callType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="initializer"
+                   type="jakartaee:faces-config-flow-definition-initializerType"
+                   minOccurs="0"/>
+      <xsd:element name="finalizer"
+                   type="jakartaee:faces-config-flow-definition-finalizerType"
+                   minOccurs="0"/>
+      <xsd:element name="inbound-parameter"
+                   type="jakartaee:faces-config-flow-definition-inbound-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this flow.  The id
+          must be unique within the Application configuration Resource
+          file in which this flow is defined.  The value of this attribute,
+          combined with the value of the &lt;faces-config&gt;&lt;name&gt; element
+          must globally identify the flow within the application.<p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-faces-method-callType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Invoke a method, passing parameters if necessary.
+        The return from the method is used as the outcome for where to go next in the
+        flow.  If the method is a void method, the default outcome is used.<p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method"
+                   type="jakartaee:faces-config-flow-definition-faces-method-call-methodType"/>
+      <xsd:element name="default-outcome"
+                   type="jakartaee:string"/>
+      <xsd:element name="parameter"
+                   type="jakartaee:faces-config-flow-definition-flow-call-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A parameter to pass when calling the method
+            identified in the "method" element that is a sibling of this element.<p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-faces-method-call-methodType">
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A parameter to pass when calling the method
+        identified in the "method" element that is a sibling of this element.<p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="class"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The optional "class" element within a "parameter" element
+            will be interpreted as the fully qualified class name for the type
+            of the "value" element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:faces-config-flow-definition-parameter-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "value" element within an "parameter"
+            must be a literal string or an EL Expression whose "get" will be called when the "method"
+            associated with this element is invoked.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-viewType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a view node in a flow graph.</p>
+
+        <p>This element must contain exactly one
+        <code>&lt;vdl-document&gt;</code> element.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="vdl-document"
+                   type="jakartaee:pathType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2 changed_modified_2_3">
+            Define the path to the vdl-document for the enclosing view.
+            <p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this view.  It must be
+          unique within the flow.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-switchType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a switch node in a flow graph.</p>
+
+        <div class="changed_added_2_2">
+
+        <p>This element must contain one or more
+        <code>&lt;case&gt;</code> elements.  When control passes to the
+        <code>&lt;switch&gt;</code> node, each of the cases must be considered
+        in order and control must past to the <code>&lt;from-outcome&gt;</code>
+        of the first one whose <code>&lt;if&gt;</code> expression evaluates to
+        <code>true</code>.</p>
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="case"
+                   type="jakartaee:faces-config-flow-definition-switch-caseType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">Defines a case that must be
+            considered in the list of cases in the
+            <code>&lt;switch&gt;</code>.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-outcome"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">Defines the default case that will
+            be taken if none of the other cases in the
+            <code>&lt;switch&gt;</code> are taken.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this switch.  It must be
+          unique within the flow.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-switch-caseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Defines a case that will
+        be considered in the <code>&lt;switch&gt;</code>.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="if"
+                   type="jakartaee:faces-config-ifType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">If this EL expression evaluates to
+            <code>true</code>, the corresponding <code>from-outcome</code> will
+            be the outcome taken by the enclosing <code>&lt;switch&gt;</code></p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="from-outcome"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The "from-outcome" element contains a logical outcome
+            string returned by the execution of an application
+            action method selected via an "actionRef" property
+            (or a literal value specified by an "action" property)
+            of a UICommand component.  If specified, this rule
+            will be relevant only if the outcome value matches
+            this element's value.  If not specified, this rule
+            will be relevant if the outcome value is non-null
+            or, if the "if" element is present, will be relevant
+            for any outcome value, with the assumption that the
+            condition specified in the "if" element ultimately
+            determines if this rule is a match.</p>
+
+            <p class="changed_added_2_2">If used in a faces flow, this element
+            represents the node id to which control will be passed.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID">
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-returnType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a return node in a flow graph.</p>
+
+        <div class="changed_added_2_2">
+
+        <p>This element must contain exactly one <code>&lt;from-outcome&gt;</code> element.</p>
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="from-outcome"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">This element
+            represents the node id to which control will be passed.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this flow-return.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-callType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Define a call node in a flow graph.</p>
+
+        <div class="changed_added_2_2">
+
+        <p>This element must contain exactly one <code>&lt;flow-reference&gt;</code> element,
+        which must contain exactly one <code>&lt;flow-id&gt;</code> element.</p>
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="flow-reference"
+                   type="jakartaee:faces-config-flow-definition-flow-call-flow-referenceType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The flow id of the called flow.<p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="outbound-parameter"
+                   type="jakartaee:faces-config-flow-definition-flow-call-outbound-parameterType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">A parameter to pass when calling the flow
+            identified in the "flow-reference" element that is a sibling of this element.<p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          <p class="changed_added_2_2">The id of this flow-return.</p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-flow-referenceType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Identifiy the called flow.</p>
+
+        <div class="changed_added_2_2">
+
+        </div>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="flow-document-id"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The document id of the called flow.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="flow-id"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The id of the called flow.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-initializerType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A <code>MethodExpression</code> that will be invoked when the flow is entered.<p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-finalizerType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A <code>MethodExpression</code> that will be invoked when the flow is exited.<p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-el-expressionType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-inbound-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A named parameter whose value will be populated
+        with a correspondingly named parameter within an "outbound-parameter" element.<p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "name" element within an "inbound-parameter"
+            element declares the name of this parameter
+            to be passed into a flow.  There must be
+            a sibling "value" element in the same parent as this element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:faces-config-flow-definition-parameter-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "value" element within an "inbound-parameter"
+            must be an EL Expression whose value will be set with the correspondingly
+            named "outbound-parameter" when this flow is entered, if such a
+            parameter exists.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-flow-definition-flow-call-outbound-parameterType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">A named parameter whose value will be
+        passed to a correspondingly named parameter within an "inbound-parameter" element
+        on the target flow.<p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "name" element within an "outbound-parameter" element
+            declares the name of this parameter to be passed out of a flow.  There must be
+            a sibling "value" element in the same parent as this element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="value"
+                   type="jakartaee:faces-config-flow-definition-parameter-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2"> The "value" element within an "outbound-parameter"
+            must be a literal string or an EL Expression whose "get" will be called when the "flow-call"
+            containing this element is traversed to go to a new flow.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-caseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> <span class="changed_modified_2_2">The</span>
+        "navigation-case" element describes a particular
+        combination of conditions that must match for this case to
+        be executed, and the view id of the component tree that
+        should be selected next.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="from-action"
+                   type="jakartaee:faces-config-from-actionType"
+                   minOccurs="0"/>
+      <xsd:element name="from-outcome"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p>The "from-outcome" element contains a logical outcome
+            string returned by the execution of an application
+            action method selected via an "actionRef" property
+            (or a literal value specified by an "action" property)
+            of a UICommand component.  If specified, this rule
+            will be relevant only if the outcome value matches
+            this element's value.  If not specified, this rule
+            will be relevant if the outcome value is non-null
+            or, if the "if" element is present, will be relevant
+            for any outcome value, with the assumption that the
+            condition specified in the "if" element ultimately
+            determines if this rule is a match.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="if"
+                   type="jakartaee:faces-config-ifType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Please see section 7.4.2 "Default NavigationHandler Algorithm" of the Jakarta Faces Specification Document
+            for the specification of this element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="to-view-id"
+                   type="jakartaee:faces-config-valueType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p><span class="changed_modified_2_2">The "to-view-id" element
+            contains the view identifier (<span class="changed_added_2_2">or
+            flow node id, or flow id</span>)
+            of the next view (<span class="changed_added_2_2">or flow node or
+            flow</span>) that should be displayed if this
+            navigation rule is matched. If the contents is a
+            value expression, it should be resolved by the
+            navigation handler to obtain the view (
+            <span class="changed_added_2_2">or flow node or flow</span>)
+            identifier.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="to-flow-document-id"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p class="changed_added_2_2">The document id of the called flow.
+            If this element appears in a &lt;navigation-case&gt; nested within
+            a &lt;flow-definition&gt;, it must be ignored because navigation
+            cases within flows may only navigate among the view nodes of that
+            flow.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="redirect"
+                   type="jakartaee:faces-config-redirectType"
+                   minOccurs="0"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-ruleType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "navigation-rule" element represents an individual
+        decision rule that will be utilized by the default
+        NavigationHandler implementation to make decisions on
+        what view should be displayed next, based on the
+        view id being processed.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="from-view-id"
+                   type="jakartaee:faces-config-from-view-idType"/>
+      <xsd:element name="navigation-case"
+                   type="jakartaee:faces-config-navigation-caseType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="navigation-rule-extension"
+                   type="jakartaee:faces-config-navigation-rule-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-navigation-rule-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for navigation-rule.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-null-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "null-value" element indicates that the managed
+        property in which we are nested will be explicitly
+        set to null if our managed bean is automatically
+        created.  This is different from omitting the managed
+        property element entirely, which will cause no
+        property setter to be called for this property.</p>
+
+        <p>The "null-value" element can only be used when the
+        associated "property-class" identifies a Java class,
+        not a Java primitive.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-propertyType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "property" element represents a JavaBean property of the
+        Java class represented by our parent element.</p>
+
+        <p>Property names must be unique within the scope of the Java
+        class that is represented by the parent element, and must
+        correspond to property names that will be recognized when
+        performing introspection against that class via
+        java.beans.Introspector.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="property-name"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-name" element represents the JavaBeans
+            property name under which the corresponding value
+            may be stored.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property-class"
+                   type="jakartaee:java-typeType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "property-class" element represents the Java type
+            of the value associated with this property name.
+            If not specified, it can be inferred from existing
+            classes; however, this element should be specified if
+            the configuration file is going to be the source for
+            generating the corresponding classes.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="default-value"
+                   type="jakartaee:faces-config-default-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="suggested-value"
+                   type="jakartaee:faces-config-suggested-valueType"
+                   minOccurs="0"/>
+      <xsd:element name="property-extension"
+                   type="jakartaee:faces-config-property-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-protected-viewsType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p class="changed_added_2_2">Any view that matches any of the
+        url-patterns in this element may only be reached from another Jakarta Faces
+        view in the same web application. Because the runtime is aware of
+        which views are protected, any navigation from an unprotected
+        view to a protected view is automatically subject to
+        protection.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="url-pattern"
+                   type="jakartaee:url-patternType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-property-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for property.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirectType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "redirect" element indicates that navigation to the
+        specified "to-view-id" should be accomplished by
+        performing an HTTP redirect rather than the usual
+        ViewHandler mechanisms.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="redirect-param"
+                   type="jakartaee:faces-config-redirect-redirectParamType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+    <xsd:attribute name="include-view-params"
+                   type="xsd:boolean"
+                   use="optional"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirect-viewParamType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This element was introduced due to a specification
+        error, and is now deprecated.  The correct name for
+        this element is "redirect-param" and its meaning is
+        documented therein.  The "view-param" element is
+        maintained to preserve backwards compatibility.
+        Implementations must treat this element the same as
+        "redirect-param".</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:string"/>
+      <xsd:element name="value"
+                   type="jakartaee:string"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-redirect-redirectParamType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "redirect-param" element, only valid within
+        a "redirect" element, contains child "name"
+        and "value" elements that must be included in the
+        redirect url when the redirect is performed.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:string"/>
+      <xsd:element name="value"
+                   type="jakartaee:string"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-referenced-beanType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "referenced-bean" element represents at design time the
+        promise that a Java object of the specified type will exist at
+        runtime in some scope, under the specified key.  This can be
+        used by design time tools to construct user interface dialogs
+        based on the properties of the specified class.  The presence
+        or absence of a referenced bean element has no impact on the
+        Jakarta Faces runtime environment inside a web application.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="referenced-bean-name"
+                   type="jakartaee:java-identifierType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "referenced-bean-name" element represents the
+            attribute name under which the corresponding
+            referenced bean may be assumed to be stored, in one
+            of 'request', 'session', 'view', 'application'
+            or a custom scope.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="referenced-bean-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "referenced-bean-class" element represents the
+            fully qualified class name of the Java class
+            (either abstract or concrete) or Java interface
+            implemented by the corresponding referenced bean.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-render-kitType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "render-kit" element represents a concrete RenderKit
+        implementation that should be registered under the specified
+        render-kit-id.  If no render-kit-id is specified, the
+        identifier of the default RenderKit
+        (RenderKitFactory.DEFAULT_RENDER_KIT) is assumed.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="render-kit-id"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "render-kit-id" element represents an identifier
+            for the RenderKit represented by the parent
+            "render-kit" element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="render-kit-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "render-kit-class" element represents the fully
+            qualified class name of a concrete RenderKit
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer"
+                   type="jakartaee:faces-config-rendererType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="client-behavior-renderer"
+                   type="jakartaee:faces-config-client-behavior-rendererType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="render-kit-extension"
+                   type="jakartaee:faces-config-render-kit-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-client-behavior-rendererType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "client-behavior-renderer" element represents a concrete
+        ClientBehaviorRenderer implementation class that should be
+        registered under the specified behavior renderer type identifier,
+        in the RenderKit associated with the parent "render-kit"
+        element.  Client Behavior renderer type must be unique within the RenderKit
+        associated with the parent "render-kit" element.</p>
+
+        <p>Nested "attribute" elements identify generic component
+        attributes that are recognized by this renderer.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="client-behavior-renderer-type"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "client-behavior-renderer-type" element represents a renderer type
+            identifier for the Client Behavior Renderer represented by the parent
+            "client-behavior-renderer" element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="client-behavior-renderer-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "client-behavior-renderer-class" element represents the fully
+            qualified class name of a concrete Client Behavior Renderer
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-rendererType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "renderer" element represents a concrete Renderer
+        implementation class that should be registered under the
+        specified component family and renderer type identifiers,
+        in the RenderKit associated with the parent "render-kit"
+        element.  Combinations of component family and
+        renderer type must be unique within the RenderKit
+        associated with the parent "render-kit" element.</p>
+
+        <p>Nested "attribute" elements identify generic component
+        attributes that are recognized by this renderer.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="component-family"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "component-family" element represents the
+            component family for which the Renderer represented
+            by the parent "renderer" element will be used.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer-type"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "renderer-type" element represents a renderer type
+            identifier for the Renderer represented by the parent
+            "renderer" element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="renderer-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "renderer-class" element represents the fully
+            qualified class name of a concrete Renderer
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="facet"
+                   type="jakartaee:faces-config-facetType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="renderer-extension"
+                   type="jakartaee:faces-config-renderer-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-renderer-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for renderer.  It may contain implementation
+        specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-render-kit-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for render-kit.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-suggested-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "suggested-value" contains the value for the property or
+        attribute in which this element resides.  This value is
+        advisory only and is intended for tools to use when
+        populating pallettes.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-supported-localeType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "supported-locale" element allows authors to declare
+        which locales are supported in this application instance.</p>
+
+        <p class="modified_added_2_3">
+        To facilitate BCP 47 this element first needs to be parsed by the
+        Locale.forLanguageTag method. If it does not return a Locale with
+        a language the old specification below needs to take effect.
+        </p>
+
+        <p>It must be specified as :language:[_:country:[_:variant:]]
+        without the colons, for example "ja_JP_SJIS".  The
+        separators between the segments may be '-' or '_'.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:extension base="jakartaee:faces-config-localeType">
+        <xsd:attribute name="id"
+                       type="xsd:ID"/>
+      </xsd:extension>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-behaviorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "behavior" element represents a concrete Behavior
+        implementation class that should be registered under the
+        specified behavior identifier.  Behavior identifiers must
+        be unique within the entire web application.</p>
+
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Behavior.  Nested "property"
+        elements identify JavaBeans properties of the Behavior
+        implementation class that may be configured to affect the
+        operation of the Behavior.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="behavior-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "behavior-id" element represents the identifier
+            under which the corresponding Behavior class should
+            be registered.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="behavior-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "behavior-class" element represents the fully
+            qualified class name of a concrete Behavior
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Behavior.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "property" elements identify JavaBeans
+            properties of the Behavior implementation class
+            that may be configured to affect the operation of
+            the Behavior.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="behavior-extension"
+                   type="jakartaee:faces-config-behavior-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-behavior-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for behavior.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "validator" element represents a concrete Validator
+        implementation class that should be registered under the
+        specified validator identifier.  Validator identifiers must
+        be unique within the entire web application.</p>
+
+        <p>Nested "attribute" elements identify generic attributes that
+        may be configured on the corresponding UIComponent in order
+        to affect the operation of the Validator.  Nested "property"
+        elements identify JavaBeans properties of the Validator
+        implementation class that may be configured to affect the
+        operation of the Validator.  "attribute" and "property"
+        elements are intended to allow component developers to
+        more completely describe their components to tools and users.
+        These elements have no required runtime semantics.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="validator-id"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "validator-id" element represents the identifier
+            under which the corresponding Validator class should
+            be registered.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "validator-class" element represents the fully
+            qualified class name of a concrete Validator
+            implementation class.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="attribute"
+                   type="jakartaee:faces-config-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "attribute" elements identify generic
+            attributes that may be configured on the
+            corresponding UIComponent in order to affect the
+            operation of the Validator.  This attribute is
+            primarily for design-time tools and is not
+            specified to have any meaning at runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="property"
+                   type="jakartaee:faces-config-propertyType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> Nested "property" elements identify JavaBeans
+            properties of the Validator implementation class
+            that may be configured to affect the operation of
+            the Validator.  This attribute is primarily for
+            design-time tools and is not specified to have
+            any meaning at runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator-extension"
+                   type="jakartaee:faces-config-validator-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-validator-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> Extension element for validator.  It may contain
+        implementation specific content.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any minOccurs="0"
+               maxOccurs="unbounded"
+               namespace="##any"
+               processContents="lax"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The "value" element is the String representation of
+        a literal value to which a scalar managed property
+        will be set, or a value binding expression ("#{...}")
+        that will be used to calculate the required value.
+        It will be converted as specified for the actual
+        property type.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:union memberTypes="jakartaee:faces-config-el-expressionType xsd:string"/>
+  </xsd:simpleType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="faces-config-system-event-listenerType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> The presence of this element within the "application" element in
+        an application configuration resource file indicates the
+        developer wants to add an SystemEventListener to this
+        application instance.  Elements nested within this element allow
+        selecting the kinds of events that will be delivered to the
+        listener instance, and allow selecting the kinds of classes that
+        can be the source of events that are delivered to the listener
+        instance.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="system-event-listener-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "system-event-listener-class" element contains
+            the fully qualified class name of the concrete
+            SystemEventListener implementation class that will be
+            called when events of the type specified by the
+            "system-event-class" are sent by the runtime.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="system-event-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "system-event-class" element contains the fully
+            qualified class name of the SystemEvent subclass for
+            which events will be delivered to the class whose fully
+            qualified class name is given by the
+            "system-event-listener-class" element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="source-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            <p> The "source-class" element, if present, contains the
+            fully qualified class name of the class that will be the
+            source for the event to be delivered to the class whose
+            fully qualified class name is given by the
+            "system-event-listener-class" element.</p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+  <xsd:simpleType name="faces-config-versionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        <p> This type contains the recognized versions of
+        faces-config supported.</p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:restriction base="xsd:token">
+      <xsd:enumeration value="4.0"/>
+    </xsd:restriction>
+  </xsd:simpleType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-fragment_3_0.xsd b/wildfly/docs/schema/web-fragment_3_0.xsd
new file mode 100644
index 0000000..76edcb5
--- /dev/null
+++ b/wildfly/docs/schema/web-fragment_3_0.xsd
@@ -0,0 +1,281 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://java.sun.com/xml/ns/javaee"
+            xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      $Id$
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright 2003-2009 Sun Microsystems, Inc. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the
+      GNU General Public License Version 2 only ("GPL") or the Common
+      Development and Distribution License("CDDL") (collectively, the
+      "License").  You may not use this file except in compliance with
+      the License. You can obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL.html or
+      glassfish/bootstrap/legal/LICENSE.txt.  See the License for the
+      specific language governing permissions and limitations under the
+      License.
+      
+      When distributing the software, include this License Header
+      Notice in each file and include the License file at
+      glassfish/bootstrap/legal/LICENSE.txt.  Sun designates this
+      particular file as subject to the "Classpath" exception as
+      provided by Sun in the GPL Version 2 section of the License file
+      that accompanied this code.  If applicable, add the following
+      below the License Header, with the fields enclosed by brackets []
+      replaced by your own identifying information:
+      "Portions Copyrighted [year] [name of copyright owner]"
+      
+      Contributor(s):
+      
+      If you wish your version of this file to be governed by only the
+      CDDL or only the GPL Version 2, indicate your decision by adding
+      "[Contributor] elects to include this software in this
+      distribution under the [CDDL or GPL Version 2] license."  If you
+      don't indicate a single choice of license, a recipient has the
+      option to distribute your version of this file under either the
+      CDDL, the GPL Version 2 or to extend the choice of license to its
+      licensees as provided above.  However, if you add GPL Version 2
+      code and therefore, elected the GPL Version 2 license, then the
+      option applies only if the new code is made subject to such
+      option by the copyright holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the Servlet 3.0 deployment descriptor.
+      The deployment descriptor must be named "META-INF/web-fragment.xml"
+      in the web fragment's jar file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Java EE
+      namespace:
+      
+      http://java.sun.com/xml/ns/javaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <web-fragment xmlns="http://java.sun.com/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.0"> 
+      ...
+      </web-fragment>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://java.sun.com/xml/ns/javaee/web-fragment_3_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_3_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-fragment"
+               type="javaee:web-fragmentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-fragment element is the root of the deployment
+        descriptor for a web fragment.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field xpath="javaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field xpath="javaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="javaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-fragment_3_1.xsd b/wildfly/docs/schema/web-fragment_3_1.xsd
new file mode 100644
index 0000000..435ba58
--- /dev/null
+++ b/wildfly/docs/schema/web-fragment_3_1.xsd
@@ -0,0 +1,340 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.1">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      This is the XML Schema for the Servlet 3.1 deployment descriptor.
+      The deployment descriptor must be named "META-INF/web-fragment.xml"
+      in the web fragment's jar file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Java EE
+      namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <web-fragment xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.1"> 
+      ...
+      </web-fragment>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/web-fragment_3_1.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_3_1.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-fragment"
+               type="javaee:web-fragmentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-fragment element is the root of the deployment
+        descriptor for a web fragment.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field xpath="javaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field xpath="javaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="javaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-fragmentType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"/>
+      <xsd:group ref="javaee:web-commonType"/>
+      <xsd:element name="ordering"
+                   type="javaee:orderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="javaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="javaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="before"
+                   type="javaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains a sequence of "name" elements, each of
+        which
+        refers to an application configuration resource by the "name"
+        declared on its web.xml fragment.  This element can also contain
+        a single "others" element which specifies that this document
+        comes
+        before or after other documents within the application.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-fragment_4_0.xsd b/wildfly/docs/schema/web-fragment_4_0.xsd
new file mode 100644
index 0000000..5c0774a
--- /dev/null
+++ b/wildfly/docs/schema/web-fragment_4_0.xsd
@@ -0,0 +1,340 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2009-2017 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.dev.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Servlet 4.0 deployment descriptor.
+      The deployment descriptor must be named "META-INF/web-fragment.xml"
+      in the web fragment's jar file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Java EE
+      namespace:
+      
+      http://xmlns.jcp.org/xml/ns/javaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-fragment xmlns="http://xmlns.jcp.org/xml/ns/javaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="4.0">
+      ...
+      </web-fragment>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Java EE
+      namespace with the following location:
+      
+      http://xmlns.jcp.org/xml/ns/javaee/web-fragment_4_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Java EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_4_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-fragment"
+               type="javaee:web-fragmentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-fragment element is the root of the deployment
+        descriptor for a web fragment.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet"/>
+      <xsd:field xpath="javaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:filter"/>
+      <xsd:field xpath="javaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-local-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an EJB
+          reference. The EJB reference is an entry in the web
+          application's environment and is relative to the
+          java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:ejb-ref"/>
+      <xsd:field xpath="javaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-env-ref"/>
+      <xsd:field xpath="javaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:message-destination-ref"/>
+      <xsd:field xpath="javaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:resource-ref"/>
+      <xsd:field xpath="javaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:env-entry"/>
+      <xsd:field xpath="javaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:security-role"/>
+      <xsd:field xpath="javaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="javaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:servlet/javaee:security-role-ref"/>
+      <xsd:field xpath="javaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-fragmentType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"/>
+      <xsd:group ref="javaee:web-commonType"/>
+      <xsd:element name="ordering"
+                   type="javaee:orderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="javaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="javaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="before"
+                   type="javaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains a sequence of "name" elements, each of
+        which
+        refers to an application configuration resource by the "name"
+        declared on its web.xml fragment.  This element can also contain
+        a single "others" element which specifies that this document
+        comes
+        before or after other documents within the application.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="javaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="javaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-fragment_5_0.xsd b/wildfly/docs/schema/web-fragment_5_0.xsd
new file mode 100644
index 0000000..a37db9f
--- /dev/null
+++ b/wildfly/docs/schema/web-fragment_5_0.xsd
@@ -0,0 +1,316 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="5.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Servlet 5.0 deployment descriptor.
+      The deployment descriptor must be named "META-INF/web-fragment.xml"
+      in the web fragment's jar file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Jakarta EE
+      namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-fragment xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="5.0">
+      ...
+      </web-fragment>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-fragment_5_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_5_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-fragment"
+               type="jakartaee:web-fragmentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-fragment element is the root of the deployment
+        descriptor for a web fragment.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet"/>
+      <xsd:field xpath="jakartaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:filter"/>
+      <xsd:field xpath="jakartaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an 
+          enterprise bean reference. The enterprise bean reference
+          is an entry in the web application's environment and is relative
+          to the java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an  
+          enterprise bean reference. The enterprise bean reference 
+          is an entry in the web application's environment and is relative 
+          to the java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-env-ref"/>
+      <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:message-destination-ref"/>
+      <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-ref"/>
+      <xsd:field xpath="jakartaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:env-entry"/>
+      <xsd:field xpath="jakartaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="jakartaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet/jakartaee:security-role-ref"/>
+      <xsd:field xpath="jakartaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-fragmentType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"/>
+      <xsd:group ref="jakartaee:web-commonType"/>
+      <xsd:element name="ordering"
+                   type="jakartaee:orderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="jakartaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="jakartaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="before"
+                   type="jakartaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains a sequence of "name" elements, each of
+        which
+        refers to an application configuration resource by the "name"
+        declared on its web.xml fragment.  This element can also contain
+        a single "others" element which specifies that this document
+        comes
+        before or after other documents within the application.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-fragment_6_0.xsd b/wildfly/docs/schema/web-fragment_6_0.xsd
new file mode 100644
index 0000000..08ae453
--- /dev/null
+++ b/wildfly/docs/schema/web-fragment_6_0.xsd
@@ -0,0 +1,316 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the Servlet 6.0 deployment descriptor.
+      The deployment descriptor must be named "META-INF/web-fragment.xml"
+      in the web fragment's jar file.  All Servlet deployment descriptors
+      must indicate the web application schema by using the Jakarta EE
+      namespace:
+      
+      https://jakarta.ee/xml/ns/jakartaee
+      
+      and by indicating the version of the schema by
+      using the version element as shown below:
+      
+      <web-fragment xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="6.0">
+      ...
+      </web-fragment>
+      
+      The instance documents may indicate the published version of
+      the schema using the xsi:schemaLocation attribute for Jakarta EE
+      namespace with the following location:
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-fragment_6_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      The following conventions apply to all Jakarta EE
+      deployment descriptor elements unless indicated otherwise.
+      
+      - In elements that specify a pathname to a file within the
+      same JAR file, relative filenames (i.e., those not
+      starting with "/") are considered relative to the root of
+      the JAR file's namespace.  Absolute filenames (i.e., those
+      starting with "/") also specify names in the root of the
+      JAR file's namespace.  In general, relative names are
+      preferred.  The exception is .war files where absolute
+      names are preferred for consistency with the Servlet API.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="web-common_6_0.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="web-fragment"
+               type="jakartaee:web-fragmentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The web-fragment element is the root of the deployment
+        descriptor for a web fragment.  Note that the sub-elements
+        of this element can be in the arbitrary order. Because of
+        that, the multiplicity of the elements of distributable,
+        session-config, welcome-file-list, jsp-config, login-config,
+        and locale-encoding-mapping-list was changed from "?" to "*"
+        in this schema.  However, the deployment descriptor instance
+        file must not contain multiple elements of session-config,
+        jsp-config, and login-config. When there are multiple elements of
+        welcome-file-list or locale-encoding-mapping-list, the container
+        must concatenate the element contents.  The multiple occurence
+        of the element distributable is redundant and the container
+        treats that case exactly in the same way when there is only
+        one distributable.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="web-common-servlet-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The servlet element contains the name of a servlet.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet"/>
+      <xsd:field xpath="jakartaee:servlet-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-filter-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The filter element contains the name of a filter.
+          The name must be unique within the web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:filter"/>
+      <xsd:field xpath="jakartaee:filter-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-local-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-local-ref-name element contains the name of an 
+          enterprise bean reference. The enterprise bean reference
+          is an entry in the web application's environment and is relative
+          to the java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-local-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-ejb-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The ejb-ref-name element contains the name of an  
+          enterprise bean reference. The enterprise bean reference 
+          is an entry in the web application's environment and is relative 
+          to the java:comp/env context.  The name must be unique within
+          the web application.
+          
+          It is recommended that name is prefixed with "ejb/".
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:ejb-ref"/>
+      <xsd:field xpath="jakartaee:ejb-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-resource-env-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The resource-env-ref-name element specifies the name of
+          a resource environment reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-env-ref"/>
+      <xsd:field xpath="jakartaee:resource-env-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-message-destination-ref-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The message-destination-ref-name element specifies the name of
+          a message destination reference; its value is the
+          environment entry name used in the web application code.
+          The name is a JNDI name relative to the java:comp/env
+          context and must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:message-destination-ref"/>
+      <xsd:field xpath="jakartaee:message-destination-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-res-ref-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The res-ref-name element specifies the name of a
+          resource manager connection factory reference.  The name
+          is a JNDI name relative to the java:comp/env context.
+          The name must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:resource-ref"/>
+      <xsd:field xpath="jakartaee:res-ref-name"/>
+    </xsd:unique>
+    <xsd:unique name="web-common-env-entry-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The env-entry-name element contains the name of a web
+          application's environment entry.  The name is a JNDI
+          name relative to the java:comp/env context.  The name
+          must be unique within a web application.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:env-entry"/>
+      <xsd:field xpath="jakartaee:env-entry-name"/>
+    </xsd:unique>
+    <xsd:key name="web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          A role-name-key is specified to allow the references
+          from the security-role-refs.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:security-role"/>
+      <xsd:field xpath="jakartaee:role-name"/>
+    </xsd:key>
+    <xsd:keyref name="web-common-role-name-references"
+                refer="jakartaee:web-common-role-name-key">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The keyref indicates the references from
+          security-role-ref to a specified role-name.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:servlet/jakartaee:security-role-ref"/>
+      <xsd:field xpath="jakartaee:role-link"/>
+    </xsd:keyref>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="web-fragmentType">
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"/>
+      <xsd:group ref="jakartaee:web-commonType"/>
+      <xsd:element name="ordering"
+                   type="jakartaee:orderingType"/>
+    </xsd:choice>
+    <xsd:attributeGroup ref="jakartaee:web-common-attributes"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Please see section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="after"
+                   type="jakartaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="before"
+                   type="jakartaee:ordering-orderingType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="ordering-orderingType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This element contains a sequence of "name" elements, each of
+        which
+        refers to an application configuration resource by the "name"
+        declared on its web.xml fragment.  This element can also contain
+        a single "others" element which specifies that this document
+        comes
+        before or after other documents within the application.
+        See section 8.2.2 of the specification for details.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="others"
+                   type="jakartaee:ordering-othersType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-jsptaglibrary_2_0.xsd b/wildfly/docs/schema/web-jsptaglibrary_2_0.xsd
new file mode 100644
index 0000000..f7abdb1
--- /dev/null
+++ b/wildfly/docs/schema/web-jsptaglibrary_2_0.xsd
@@ -0,0 +1,1009 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xsd:schema
+        targetNamespace="http://java.sun.com/xml/ns/j2ee"
+        xmlns:j2ee="http://java.sun.com/xml/ns/j2ee"
+        xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+        elementFormDefault="qualified"
+        attributeFormDefault="unqualified"
+        version="2.0">
+
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)web-jsptaglibrary_2_0.xsds	1.36 08/18/03
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003 Sun Microsystems, Inc., 901 San Antonio
+      Road, Palo Alto, California 94303, U.S.A. All rights
+      reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the JSP Taglibrary
+	descriptor.  All Taglibrary descriptors must
+	indicate the tag library schema by using the Taglibrary
+	namespace:
+
+	http://java.sun.com/xml/ns/j2ee
+
+	and by indicating the version of the schema by
+	using the version element as shown below:
+
+	    <taglib xmlns="http://java.sun.com/xml/ns/j2ee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="..."
+	      version="2.0">
+	      ...
+	    </taglib>
+
+	The instance documents may indicate the published
+	version of the schema using xsi:schemaLocation attribute
+	for J2EE namespace with the following location:
+
+	http://java.sun.com/xml/ns/j2ee/web-jsptaglibrary_2_0.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="j2ee_1_4.xsd"/>
+
+
+<!-- **************************************************** -->
+
+
+  <xsd:element name="taglib" type="j2ee:tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The taglib tag is the document root.
+	The definition of taglib is provided
+	by the tldTaglibType.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="tag-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The taglib element contains, among other things, tag and
+	  tag-file elements.
+	  The name subelements of these elements must each be unique.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:tag|j2ee:tag-file"/>
+      <xsd:field    xpath="j2ee:name"/>
+    </xsd:unique>
+
+    <xsd:unique name="function-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The taglib element contains function elements.
+	  The name subelements of these elements must each be unique.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="j2ee:function"/>
+      <xsd:field    xpath="j2ee:name"/>
+    </xsd:unique>
+
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="body-contentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies the type of body that is valid for a tag.
+	This value is used by the JSP container to validate
+	that a tag invocation has the correct body syntax and
+	by page composition tools to assist the page author
+	in providing a valid tag body.
+
+	There are currently four values specified:
+
+	tagdependent    The body of the tag is interpreted by the tag
+			implementation itself, and is most likely
+			in a different "language", e.g embedded SQL
+			statements.
+
+	JSP             The body of the tag contains nested JSP
+			syntax.
+
+	empty           The body must be empty
+
+	scriptless      The body accepts only template text, EL
+			Expressions, and JSP action elements.  No
+			scripting elements are allowed.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="tagdependent"/>
+	<xsd:enumeration value="JSP"/>
+	<xsd:enumeration value="empty"/>
+	<xsd:enumeration value="scriptless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="extensibleType" abstract="true">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The extensibleType is an abstract base type that is used to
+	define the type of extension-elements. Instance documents
+	must substitute a known type to define the extension by
+	using xsi:type attribute to define the actual type of
+	extension-elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The function element is used to provide information on each
+	function in the tag library that is to be exposed to the EL.
+
+	The function element may have several subelements defining:
+
+	description         Optional tag-specific information
+
+	display-name        A short name that is intended to be
+			    displayed by tools
+
+	icon                Optional icon element that can be used
+			    by tools
+
+	name                A unique name for this function
+
+	function-class      Provides the name of the Java class that
+			    implements the function
+
+	function-signature  Provides the signature, as in the Java
+			    Language Specification, of the Java
+			    method that is to be used to implement
+			    the function.
+
+	example             Optional informal description of an
+			    example of a use of this function
+
+	function-extension  Zero or more extensions that provide extra
+			    information about this function, for tool
+			    consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="name"
+		   type="j2ee:tld-canonical-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    A unique name for this function.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Provides the fully-qualified class name of the Java
+	    class containing the static method that implements
+	    the function.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="function-signature"
+		   type="j2ee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Provides the signature, of the static Java method that is
+	    to be used to implement the function.  The syntax of the
+	    function-signature element is as follows:
+
+		FunctionSignature ::= ReturnType S MethodName S?
+				      '(' S? Parameters? S? ')'
+
+                ReturnType        ::= Type
+
+		MethodName        ::= Identifier
+
+		Parameters        ::=   Parameter
+				      | ( Parameter S? ',' S? Parameters )
+
+                Parameter         ::= Type
+
+		Where:
+
+ 		    * Type is a basic type or a fully qualified Java class name
+		      (including package name), as per the 'Type' production
+		      in the Java Language Specification, Second Edition,
+		      Chapter 18.
+
+                    * Identifier is a Java identifier, as per the 'Identifier'
+		      production in the Java Language Specification, Second
+		      Edition, Chapter 18.
+
+	    Example:
+
+	    java.lang.String nickName( java.lang.String, int )
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="example"
+		   type="j2ee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The example element contains an informal description
+	    of an example of the use of this function.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="function-extension"
+		   type="j2ee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Function extensions are for tool use only and must not affect
+	    the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagFileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Defines an action in this tag library that is implemented
+	as a .tag file.
+
+	The tag-file element has two required subelements:
+
+	description       Optional tag-specific information
+
+	display-name      A short name that is intended to be
+			  displayed by tools
+
+	icon              Optional icon element that can be used
+			  by tools
+
+	name              The unique action name
+
+	path              Where to find the .tag file implementing this
+			  action, relative to the root of the web
+			  application or the root of the JAR file for a
+			  tag library packaged in a JAR.  This must
+			  begin with /WEB-INF/tags if the .tag file
+			  resides in the WAR, or /META-INF/tags if the
+			  .tag file resides in a JAR.
+
+	example           Optional informal description of an
+			  example of a use of this tag
+
+	tag-extension     Zero or more extensions that provide extra
+			  information about this tag, for tool
+			  consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="name"
+		   type="j2ee:tld-canonical-nameType"/>
+      <xsd:element name="path"
+		   type="j2ee:pathType"/>
+      <xsd:element name="example"
+		   type="j2ee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The example element contains an informal description
+	    of an example of the use of a tag.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="tag-extension"
+		   type="j2ee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Tag extensions are for tool use only and must not affect
+	    the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The tag defines a unique tag in this tag library.  It has one
+	attribute, id.
+
+	The tag element may have several subelements defining:
+
+	description       Optional tag-specific information
+
+	display-name      A short name that is intended to be
+			  displayed by tools
+
+	icon              Optional icon element that can be used
+			  by tools
+
+	name              The unique action name
+
+	tag-class         The tag handler class implementing
+			  javax.servlet.jsp.tagext.JspTag
+
+	tei-class         An optional subclass of
+			  javax.servlet.jsp.tagext.TagExtraInfo
+
+	body-content      The body content type
+
+	variable          Optional scripting variable information
+
+	attribute         All attributes of this action that are
+			  evaluated prior to invocation.
+
+	dynamic-attributes Whether this tag supports additional
+			   attributes with dynamic names.  If
+			   true, the tag-class must implement the
+			   javax.servlet.jsp.tagext.DynamicAttributes
+			   interface.  Defaults to false.
+
+	example           Optional informal description of an
+			  example of a use of this tag
+
+	tag-extension     Zero or more extensions that provide extra
+			  information about this tag, for tool
+			  consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="name"
+		   type="j2ee:tld-canonical-nameType"/>
+      <xsd:element name="tag-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the subclass of javax.serlvet.jsp.tagext.JspTag
+	    that implements the request time semantics for
+	    this tag. (required)
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="tei-class"
+		   type="j2ee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the subclass of javax.servlet.jsp.tagext.TagExtraInfo
+	    for this tag. (optional)
+
+	    If this is not given, the class is not consulted at
+	    translation time.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="body-content"
+		   type="j2ee:body-contentType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Specifies the format for the body of this tag.
+	    The default in JSP 1.2 was "JSP" but because this
+	    is an invalid setting for simple tag handlers, there
+	    is no longer a default in JSP 2.0.  A reasonable
+	    default for simple tag handlers is "scriptless" if
+	    the tag can have a body.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="variable"
+		   type="j2ee:variableType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+		   type="j2ee:tld-attributeType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="dynamic-attributes"
+		   type="j2ee:generic-booleanType"
+		   minOccurs="0"/>
+      <xsd:element name="example"
+		   type="j2ee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The example element contains an informal description
+	    of an example of the use of a tag.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="tag-extension"
+		   type="j2ee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Tag extensions are for tool use only and must not affect
+	    the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The attribute element defines an attribute for the nesting
+	tag.  The attributre element may have several subelements
+	defining:
+
+	description     a description of the attribute
+
+	name            the name of the attribute
+
+	required        whether the attribute is required or
+			optional
+
+	rtexprvalue     whether the attribute is a runtime attribute
+
+	type            the type of the attributes
+
+	fragment        whether this attribute is a fragment
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="name"
+		   type="j2ee:java-identifierType"/>
+      <xsd:element name="required"
+		   type="j2ee:generic-booleanType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines if the nesting attribute is required or
+	    optional.
+
+	    If not present then the default is "false", i.e
+	    the attribute is optional.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+
+      <xsd:choice>
+	<xsd:sequence>
+	  <xsd:element name="rtexprvalue"
+		       type="j2ee:generic-booleanType"
+		       minOccurs="0">
+	    <xsd:annotation>
+	      <xsd:documentation>
+
+		Defines if the nesting attribute can have scriptlet
+		expressions as a value, i.e the value of the
+		attribute may be dynamically calculated at request
+		time, as opposed to a static value determined at
+		translation time.
+
+		If not present then the default is "false", i.e the
+		attribute has a static value
+
+	      </xsd:documentation>
+	    </xsd:annotation>
+
+	  </xsd:element>
+	  <xsd:element name="type"
+		       type="j2ee:fully-qualified-classType"
+		       minOccurs="0">
+	    <xsd:annotation>
+	      <xsd:documentation>
+
+		Defines the Java type of the attributes value.  For
+		static values (those determined at translation time)
+		the type is always java.lang.String.
+
+	      </xsd:documentation>
+	    </xsd:annotation>
+	  </xsd:element>
+	</xsd:sequence>
+	<xsd:element name="fragment"
+		     type="j2ee:generic-booleanType"
+		     minOccurs="0">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      "true" if this attribute is of type
+	      javax.jsp.tagext.JspFragment, representing dynamic
+	      content that can be re-evaluated as many times
+	      as needed by the tag handler.  If omitted or "false",
+	      the default is still type="java.lang.String"
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-canonical-nameType">
+
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Defines the canonical name of a tag or attribute being
+	defined.
+
+	The name must conform to the lexical rules for an NMTOKEN.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The tld-extensionType is used to indicate
+	extensions to a specific TLD element.
+
+	It is used by elements to designate an extension block
+	that is targeted to a specific extension designated by
+	a set of extension elements that are declared by a
+	namespace. The namespace identifies the extension to
+	the tool that processes the extension.
+
+	The type of the extension-element is abstract. Therefore,
+	a concrete type must be specified by the TLD using
+	xsi:type attribute for each extension-element.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="extension-element"
+		   type="j2ee:extensibleType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+
+    <xsd:attribute name="namespace"
+		   use="required"
+		   type="xsd:anyURI"/>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The taglib tag is the document root, it defines:
+
+	description     a simple string describing the "use" of this taglib,
+			should be user discernable
+
+	display-name    the display-name element contains a
+			short name that is intended to be displayed
+			by tools
+
+	icon            optional icon that can be used by tools
+
+	tlib-version    the version of the tag library implementation
+
+	short-name      a simple default short name that could be
+			used by a JSP authoring tool to create
+			names with a mnemonic value; for example,
+			the it may be used as the prefered prefix
+			value in taglib directives
+
+	uri             a uri uniquely identifying this taglib
+
+	validator       optional TagLibraryValidator information
+
+	listener        optional event listener specification
+
+	tag             tags in this tag library
+
+	tag-file        tag files in this tag library
+
+	function        zero or more EL functions defined in this
+			tag library
+
+	taglib-extension zero or more extensions that provide extra
+			information about this taglib, for tool
+			consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="j2ee:descriptionGroup"/>
+      <xsd:element name="tlib-version"
+		   type="j2ee:dewey-versionType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Describes this version (number) of the taglibrary.
+	    It is described as a dewey decimal.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+
+      <xsd:element name="short-name"
+		   type="j2ee:tld-canonical-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a simple default name that could be used by
+	    a JSP authoring tool to create names with a
+	    mnemonicvalue; for example, it may be used as the
+	    preferred prefix value in taglib directives.  Do
+	    not use white space, and do not start with digits
+	    or underscore.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="uri"
+		   type="j2ee:xsdAnyURIType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a public URI that uniquely identifies this
+	    version of the taglibrary.  Leave it empty if it
+	    does not apply.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="validator"
+		   type="j2ee:validatorType"
+		   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="listener"
+		   type="j2ee:listenerType"
+		   minOccurs="0" maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="tag"
+		   type="j2ee:tagType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="tag-file"
+		   type="j2ee:tagFileType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="function"
+		   type="j2ee:functionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="taglib-extension"
+		   type="j2ee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Taglib extensions are for tool use only and must not affect
+	    the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+		   type="j2ee:dewey-versionType"
+		   fixed="2.0"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  Describes the JSP version (number) this taglibrary
+	  requires in order to function (dewey decimal)
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+    </xsd:attribute>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	A validator that can be used to validate
+	the conformance of a JSP page to using this tag library is
+	defined by a validatorType.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="validator-class"
+		   type="j2ee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the TagLibraryValidator class that can be used
+	    to validate the conformance of a JSP page to using this
+	    tag library.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+		   type="j2ee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The init-param element contains a name/value pair as an
+	    initialization param.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variable-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type defines scope of the scripting variable.  See
+	TagExtraInfo for details.  The allowed values are,
+	"NESTED", "AT_BEGIN" and "AT_END".
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="j2ee:string">
+	<xsd:enumeration value="NESTED"/>
+	<xsd:enumeration value="AT_BEGIN"/>
+	<xsd:enumeration value="AT_END"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variableType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The variableType provides information on the scripting
+	variables defined by using this tag.  It is a (translation
+	time) error for a tag that has one or more variable
+	subelements to have a TagExtraInfo class that returns a
+	non-null value from a call to getVariableInfo().
+
+	The subelements of variableType are of the form:
+
+	description              Optional description of this
+				 variable
+
+	name-given               The variable name as a constant
+
+	name-from-attribute      The name of an attribute whose
+				 (translation time) value will
+				 give the name of the
+				 variable.  One of name-given or
+				 name-from-attribute is required.
+
+	variable-class           Name of the class of the variable.
+				 java.lang.String is default.
+
+	declare                  Whether the variable is declared
+				 or not.  True is the default.
+
+	scope                    The scope of the scripting varaible
+				 defined.  NESTED is default.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="j2ee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:choice>
+	<xsd:element name="name-given"
+		     type="j2ee:java-identifierType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The name for the scripting variable.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+
+	<xsd:element name="name-from-attribute"
+		     type="j2ee:java-identifierType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The name of an attribute whose
+	      (translation-time) value will give the name of
+	      the variable.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+      <xsd:element name="variable-class"
+		   type="j2ee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The optional name of the class for the scripting
+	    variable.  The default is java.lang.String.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+
+      <xsd:element name="declare"
+		   type="j2ee:generic-booleanType"
+		   minOccurs="0">
+
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Whether the scripting variable is to be defined
+	    or not.  See TagExtraInfo for details.  This
+	    element is optional and "true" is the default.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scope"
+		   type="j2ee:variable-scopeType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The element is optional and "NESTED" is the default.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-jsptaglibrary_2_1.xsd b/wildfly/docs/schema/web-jsptaglibrary_2_1.xsd
new file mode 100644
index 0000000..bea8e9b
--- /dev/null
+++ b/wildfly/docs/schema/web-jsptaglibrary_2_1.xsd
@@ -0,0 +1,1144 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xsd:schema
+     targetNamespace="http://java.sun.com/xml/ns/javaee"
+     xmlns:javaee="http://java.sun.com/xml/ns/javaee"
+     xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+     elementFormDefault="qualified"
+     attributeFormDefault="unqualified"
+     version="2.1">
+
+  <xsd:annotation>
+    <xsd:documentation>
+      @(#)web-jsptaglibrary_2_1.xsds	1.1
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright 2003-2005 Sun Microsystems, Inc.
+      4150 Network Circle
+      Santa Clara, California 95054
+      U.S.A
+      All rights reserved.
+
+      Sun Microsystems, Inc. has intellectual property rights
+      relating to technology described in this document. In
+      particular, and without limitation, these intellectual
+      property rights may include one or more of the U.S. patents
+      listed at http://www.sun.com/patents and one or more
+      additional patents or pending patent applications in the
+      U.S. and other countries.
+
+      This document and the technology which it describes are
+      distributed under licenses restricting their use, copying,
+      distribution, and decompilation. No part of this document
+      may be reproduced in any form by any means without prior
+      written authorization of Sun and its licensors, if any.
+
+      Third-party software, including font technology, is
+      copyrighted and licensed from Sun suppliers.
+
+      Sun, Sun Microsystems, the Sun logo, Solaris, Java, J2EE,
+      JavaServer Pages, Enterprise JavaBeans and the Java Coffee
+      Cup logo are trademarks or registered trademarks of Sun
+      Microsystems, Inc. in the U.S. and other countries.
+
+      Federal Acquisitions: Commercial Software - Government Users
+      Subject to Standard License Terms and Conditions.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+
+	This is the XML Schema for the JSP Taglibrary
+	descriptor.  All Taglibrary descriptors must
+	indicate the tag library schema by using the Taglibrary
+	namespace:
+
+	http://java.sun.com/xml/ns/javaee
+
+	and by indicating the version of the schema by
+	using the version element as shown below:
+
+	    <taglib xmlns="http://java.sun.com/xml/ns/javaee"
+	      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+	      xsi:schemaLocation="..."
+	      version="2.1">
+	      ...
+	    </taglib>
+
+	The instance documents may indicate the published
+	version of the schema using xsi:schemaLocation attribute
+	for Java EE namespace with the following location:
+
+	http://java.sun.com/xml/ns/javaee/web-jsptaglibrary_2_1.xsd
+
+	]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="javaee_5.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="taglib" type="javaee:tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The taglib tag is the document root.
+	The definition of taglib is provided
+	by the tldTaglibType.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="tag-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The taglib element contains, among other things, tag and
+	  tag-file elements.
+	  The name subelements of these elements must each be unique.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:tag|javaee:tag-file"/>
+      <xsd:field    xpath="javaee:name"/>
+    </xsd:unique>
+
+    <xsd:unique name="function-name-uniqueness">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  The taglib element contains function elements.
+	  The name subelements of these elements must each be unique.
+
+	</xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="javaee:function"/>
+      <xsd:field    xpath="javaee:name"/>
+    </xsd:unique>
+
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="body-contentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies the type of body that is valid for a tag.
+	This value is used by the JSP container to validate
+	that a tag invocation has the correct body syntax and
+	by page composition tools to assist the page author
+	in providing a valid tag body.
+
+	There are currently four values specified:
+
+	tagdependent    The body of the tag is interpreted by the tag
+			implementation itself, and is most likely
+			in a different "language", e.g embedded SQL
+			statements.
+
+	JSP             The body of the tag contains nested JSP
+			syntax.
+
+	empty           The body must be empty
+
+	scriptless      The body accepts only template text, EL
+			Expressions, and JSP action elements.  No
+			scripting elements are allowed.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="tagdependent"/>
+	<xsd:enumeration value="JSP"/>
+	<xsd:enumeration value="empty"/>
+	<xsd:enumeration value="scriptless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="extensibleType" abstract="true">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The extensibleType is an abstract base type that is used to
+	define the type of extension-elements. Instance documents
+	must substitute a known type to define the extension by
+	using xsi:type attribute to define the actual type of
+	extension-elements.
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The function element is used to provide information on each
+	function in the tag library that is to be exposed to the EL.
+
+	The function element may have several subelements defining:
+
+	description         Optional tag-specific information
+
+	display-name        A short name that is intended to be
+			    displayed by tools
+
+	icon                Optional icon element that can be used
+			    by tools
+
+	name                A unique name for this function
+
+	function-class      Provides the name of the Java class that
+			    implements the function
+
+	function-signature  Provides the signature, as in the Java
+			    Language Specification, of the Java
+			    method that is to be used to implement
+			    the function.
+
+	example             Optional informal description of an
+			    example of a use of this function
+
+	function-extension  Zero or more extensions that provide extra
+			    information about this function, for tool
+			    consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="name"
+		   type="javaee:tld-canonical-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    A unique name for this function.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Provides the fully-qualified class name of the Java
+	    class containing the static method that implements
+	    the function.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="function-signature"
+		   type="javaee:string">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Provides the signature, of the static Java method that is
+	    to be used to implement the function.  The syntax of the
+	    function-signature element is as follows:
+
+		FunctionSignature ::= ReturnType S MethodName S?
+				      '(' S? Parameters? S? ')'
+
+                ReturnType        ::= Type
+
+		MethodName        ::= Identifier
+
+		Parameters        ::=   Parameter
+				      | ( Parameter S? ',' S? Parameters )
+
+                Parameter         ::= Type
+
+		Where:
+
+ 		    * Type is a basic type or a fully qualified
+		      Java class name (including package name),
+		      as per the 'Type' production in the Java
+		      Language Specification, Second Edition,
+		      Chapter 18.
+
+                    * Identifier is a Java identifier, as per
+		      the 'Identifier' production in the Java
+		      Language Specification, Second
+		      Edition, Chapter 18.
+
+	    Example:
+
+	    java.lang.String nickName( java.lang.String, int )
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="example"
+		   type="javaee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The example element contains an informal description
+	    of an example of the use of this function.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="function-extension"
+		   type="javaee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Function extensions are for tool use only and must not
+            affect the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagFileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Defines an action in this tag library that is implemented
+	as a .tag file.
+
+	The tag-file element has two required subelements:
+
+	description       Optional tag-specific information
+
+	display-name      A short name that is intended to be
+			  displayed by tools
+
+	icon              Optional icon element that can be used
+			  by tools
+
+	name              The unique action name
+
+	path              Where to find the .tag file implementing this
+			  action, relative to the root of the web
+			  application or the root of the JAR file for a
+			  tag library packaged in a JAR.  This must
+			  begin with /WEB-INF/tags if the .tag file
+			  resides in the WAR, or /META-INF/tags if the
+			  .tag file resides in a JAR.
+
+	example           Optional informal description of an
+			  example of a use of this tag
+
+	tag-extension     Zero or more extensions that provide extra
+			  information about this tag, for tool
+			  consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="name"
+		   type="javaee:tld-canonical-nameType"/>
+      <xsd:element name="path"
+		   type="javaee:pathType"/>
+      <xsd:element name="example"
+		   type="javaee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The example element contains an informal description
+	    of an example of the use of a tag.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="tag-extension"
+		   type="javaee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Tag extensions are for tool use only and must not affect
+	    the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The tag defines a unique tag in this tag library.  It has one
+	attribute, id.
+
+	The tag element may have several subelements defining:
+
+	description       Optional tag-specific information
+
+	display-name      A short name that is intended to be
+			  displayed by tools
+
+	icon              Optional icon element that can be used
+			  by tools
+
+	name              The unique action name
+
+	tag-class         The tag handler class implementing
+			  javax.servlet.jsp.tagext.JspTag
+
+	tei-class         An optional subclass of
+			  javax.servlet.jsp.tagext.TagExtraInfo
+
+	body-content      The body content type
+
+	variable          Optional scripting variable information
+
+	attribute         All attributes of this action that are
+			  evaluated prior to invocation.
+
+	dynamic-attributes Whether this tag supports additional
+			   attributes with dynamic names.  If
+			   true, the tag-class must implement the
+			   javax.servlet.jsp.tagext.DynamicAttributes
+			   interface.  Defaults to false.
+
+	example           Optional informal description of an
+			  example of a use of this tag
+
+	tag-extension     Zero or more extensions that provide extra
+			  information about this tag, for tool
+			  consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="name"
+		   type="javaee:tld-canonical-nameType"/>
+      <xsd:element name="tag-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the subclass of javax.serlvet.jsp.tagext.JspTag
+	    that implements the request time semantics for
+	    this tag. (required)
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="tei-class"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the subclass of javax.servlet.jsp.tagext.TagExtraInfo
+	    for this tag. (optional)
+
+	    If this is not given, the class is not consulted at
+	    translation time.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="body-content"
+		   type="javaee:body-contentType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Specifies the format for the body of this tag.
+	    The default in JSP 1.2 was "JSP" but because this
+	    is an invalid setting for simple tag handlers, there
+	    is no longer a default in JSP 2.0.  A reasonable
+	    default for simple tag handlers is "scriptless" if
+	    the tag can have a body.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="variable"
+		   type="javaee:variableType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+		   type="javaee:tld-attributeType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="dynamic-attributes"
+		   type="javaee:generic-booleanType"
+		   minOccurs="0"/>
+      <xsd:element name="example"
+		   type="javaee:xsdStringType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The example element contains an informal description
+	    of an example of the use of a tag.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="tag-extension"
+		   type="javaee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Tag extensions are for tool use only and must not affect
+	    the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The attribute element defines an attribute for the nesting
+	tag.  The attribute element may have several subelements
+	defining:
+
+	description     a description of the attribute
+
+	name            the name of the attribute
+
+	required        whether the attribute is required or
+			optional
+
+	rtexprvalue     whether the attribute is a runtime attribute
+
+	type            the type of the attributes
+
+	fragment        whether this attribute is a fragment
+
+        deferred-value  present if this attribute is to be parsed as a
+                        javax.el.ValueExpression
+
+        deferred-method present if this attribute is to be parsed as a
+                        javax.el.MethodExpression
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:element name="name"
+		   type="javaee:java-identifierType"/>
+      <xsd:element name="required"
+		   type="javaee:generic-booleanType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines if the nesting attribute is required or
+	    optional.
+
+	    If not present then the default is "false", i.e
+	    the attribute is optional.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+	<xsd:sequence>
+          <xsd:sequence minOccurs="0">
+	    <xsd:element name="rtexprvalue"
+		         type="javaee:generic-booleanType">
+	      <xsd:annotation>
+	        <xsd:documentation>
+
+		  Defines if the nesting attribute can have scriptlet
+		  expressions as a value, i.e the value of the
+		  attribute may be dynamically calculated at request
+		  time, as opposed to a static value determined at
+		  translation time.
+		  If not present then the default is "false", i.e the
+		  attribute has a static value
+
+	        </xsd:documentation>
+	      </xsd:annotation>
+	    </xsd:element>
+	    <xsd:element name="type"
+		         type="javaee:fully-qualified-classType"
+		         minOccurs="0">
+	      <xsd:annotation>
+	        <xsd:documentation>
+
+		  Defines the Java type of the attributes value.
+                  If this element is omitted, the expected type is
+                  assumed to be "java.lang.Object".
+
+	        </xsd:documentation>
+	      </xsd:annotation>
+	    </xsd:element>
+	  </xsd:sequence>
+
+          <xsd:choice>
+	    <xsd:element name="deferred-value"
+		         type="javaee:tld-deferred-valueType"
+		         minOccurs="0">
+	      <xsd:annotation>
+	        <xsd:documentation>
+
+                  Present if the value for this attribute is to be
+                  passed to the tag handler as a
+                  javax.el.ValueExpression. This allows for deferred
+                  evaluation of EL expressions. An optional subelement
+                  will contain the expected type that the value will
+                  be coerced to after evaluation of the expression.
+                  The type defaults to Object if one is not provided.
+
+	        </xsd:documentation>
+	      </xsd:annotation>
+	    </xsd:element>
+	    <xsd:element name="deferred-method"
+		       type="javaee:tld-deferred-methodType"
+		       minOccurs="0">
+	      <xsd:annotation>
+	        <xsd:documentation>
+
+                Present if the value for this attribute is to be
+                passed to the tag handler as a
+                javax.el.MethodExpression. This allows for deferred
+                evaluation of an EL expression that identifies a
+                method to be invoked on an Object. An optional
+                subelement will contain the expected method
+                signature. The signature defaults to "void method()"
+                if one is not provided.
+
+	        </xsd:documentation>
+	      </xsd:annotation>
+	    </xsd:element>
+          </xsd:choice>
+        </xsd:sequence>
+
+	<xsd:element name="fragment"
+		     type="javaee:generic-booleanType"
+		     minOccurs="0">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      "true" if this attribute is of type
+	      javax.jsp.tagext.JspFragment, representing dynamic
+	      content that can be re-evaluated as many times
+	      as needed by the tag handler.  If omitted or "false",
+	      the default is still type="java.lang.String"
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-canonical-nameType">
+
+    <xsd:annotation>
+      <xsd:documentation>
+
+	Defines the canonical name of a tag or attribute being
+	defined.
+
+	The name must conform to the lexical rules for an NMTOKEN.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-deferred-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines information about how to provide the value for a
+        tag handler attribute that accepts a javax.el.MethodExpression.
+
+	The deferred-method element has one optional subelement:
+
+	method-signature  Provides the signature, as in the Java
+                          Language Specifies, that is expected for
+                          the method being identified by the
+                          expression.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="method-signature"
+                   type="javaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the expected signature of the method identified
+            by the javax.el.MethodExpression.
+
+            This disambiguates overloaded methods and ensures that
+            the return value is of the expected type.
+
+            The syntax of the method-signature element is identical
+            to that of the function-signature element.  See the
+            documentation for function-signature for more details.
+
+	    The name of the method is for documentation purposes only
+	    and is ignored by the JSP container.
+
+            Example:
+
+              boolean validate(java.lang.String)
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-deferred-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines information about how to provide the value for a
+        tag handler attribute that accepts a javax.el.ValueExpression.
+
+	The deferred-value element has one optional subelement:
+
+	type            the expected type of the attribute
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="type"
+                   type="javaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully-qualified name of the Java type that is the
+            expected type for this deferred expression.  If this
+            element is omitted, the expected type is assumed to be
+            "java.lang.Object".
+
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The tld-extensionType is used to indicate
+	extensions to a specific TLD element.
+
+	It is used by elements to designate an extension block
+	that is targeted to a specific extension designated by
+	a set of extension elements that are declared by a
+	namespace. The namespace identifies the extension to
+	the tool that processes the extension.
+
+	The type of the extension-element is abstract. Therefore,
+	a concrete type must be specified by the TLD using
+	xsi:type attribute for each extension-element.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="extension-element"
+		   type="javaee:extensibleType"
+		   maxOccurs="unbounded"/>
+    </xsd:sequence>
+
+    <xsd:attribute name="namespace"
+		   use="required"
+		   type="xsd:anyURI"/>
+    <xsd:attribute name="id" type="xsd:ID"/>
+
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The taglib tag is the document root, it defines:
+
+	description     a simple string describing the "use" of this
+			taglib, should be user discernable
+
+	display-name    the display-name element contains a
+			short name that is intended to be displayed
+			by tools
+
+	icon            optional icon that can be used by tools
+
+	tlib-version    the version of the tag library implementation
+
+	short-name      a simple default short name that could be
+			used by a JSP authoring tool to create
+			names with a mnemonic value; for example,
+			the it may be used as the prefered prefix
+			value in taglib directives
+
+	uri             a uri uniquely identifying this taglib
+
+	validator       optional TagLibraryValidator information
+
+	listener        optional event listener specification
+
+	tag             tags in this tag library
+
+	tag-file        tag files in this tag library
+
+	function        zero or more EL functions defined in this
+			tag library
+
+	taglib-extension zero or more extensions that provide extra
+			information about this taglib, for tool
+			consumption
+
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="javaee:descriptionGroup"/>
+      <xsd:element name="tlib-version"
+		   type="javaee:dewey-versionType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Describes this version (number) of the taglibrary.
+	    It is described as a dewey decimal.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+
+      <xsd:element name="short-name"
+		   type="javaee:tld-canonical-nameType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a simple default name that could be used by
+	    a JSP authoring tool to create names with a
+	    mnemonicvalue; for example, it may be used as the
+	    preferred prefix value in taglib directives.  Do
+	    not use white space, and do not start with digits
+	    or underscore.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="uri"
+		   type="javaee:xsdAnyURIType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines a public URI that uniquely identifies this
+	    version of the taglibrary.  Leave it empty if it
+	    does not apply.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+      <xsd:element name="validator"
+		   type="javaee:validatorType"
+		   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="listener"
+		   type="javaee:listenerType"
+		   minOccurs="0" maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="tag"
+		   type="javaee:tagType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="tag-file"
+		   type="javaee:tagFileType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="function"
+		   type="javaee:functionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="taglib-extension"
+		   type="javaee:tld-extensionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Taglib extensions are for tool use only and must not
+            affect the behavior of a container.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+		   type="javaee:dewey-versionType"
+		   fixed="2.1"
+		   use="required">
+      <xsd:annotation>
+	<xsd:documentation>
+
+	  Describes the JSP version (number) this taglibrary
+	  requires in order to function (dewey decimal)
+
+	</xsd:documentation>
+      </xsd:annotation>
+
+    </xsd:attribute>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	A validator that can be used to validate
+	the conformance of a JSP page to using this tag library is
+	defined by a validatorType.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0"
+		   maxOccurs="unbounded"/>
+      <xsd:element name="validator-class"
+		   type="javaee:fully-qualified-classType">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Defines the TagLibraryValidator class that can be used
+	    to validate the conformance of a JSP page to using this
+	    tag library.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+		   type="javaee:param-valueType"
+		   minOccurs="0" maxOccurs="unbounded">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The init-param element contains a name/value pair as an
+	    initialization param.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variable-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	This type defines scope of the scripting variable.  See
+	TagExtraInfo for details.  The allowed values are,
+	"NESTED", "AT_BEGIN" and "AT_END".
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:simpleContent>
+      <xsd:restriction base="javaee:string">
+	<xsd:enumeration value="NESTED"/>
+	<xsd:enumeration value="AT_BEGIN"/>
+	<xsd:enumeration value="AT_END"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variableType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+	The variableType provides information on the scripting
+	variables defined by using this tag.  It is a (translation
+	time) error for a tag that has one or more variable
+	subelements to have a TagExtraInfo class that returns a
+	non-null value from a call to getVariableInfo().
+
+	The subelements of variableType are of the form:
+
+	description              Optional description of this
+				 variable
+
+	name-given               The variable name as a constant
+
+	name-from-attribute      The name of an attribute whose
+				 (translation time) value will
+				 give the name of the
+				 variable.  One of name-given or
+				 name-from-attribute is required.
+
+	variable-class           Name of the class of the variable.
+				 java.lang.String is default.
+
+	declare                  Whether the variable is declared
+				 or not.  True is the default.
+
+	scope                    The scope of the scripting varaible
+				 defined.  NESTED is default.
+
+      </xsd:documentation>
+    </xsd:annotation>
+
+    <xsd:sequence>
+      <xsd:element name="description"
+		   type="javaee:descriptionType"
+		   minOccurs="0" maxOccurs="unbounded"/>
+      <xsd:choice>
+	<xsd:element name="name-given"
+		     type="javaee:java-identifierType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The name for the scripting variable.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+
+	<xsd:element name="name-from-attribute"
+		     type="javaee:java-identifierType">
+	  <xsd:annotation>
+	    <xsd:documentation>
+
+	      The name of an attribute whose
+	      (translation-time) value will give the name of
+	      the variable.
+
+	    </xsd:documentation>
+	  </xsd:annotation>
+	</xsd:element>
+      </xsd:choice>
+      <xsd:element name="variable-class"
+		   type="javaee:fully-qualified-classType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The optional name of the class for the scripting
+	    variable.  The default is java.lang.String.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+
+      </xsd:element>
+
+      <xsd:element name="declare"
+		   type="javaee:generic-booleanType"
+		   minOccurs="0">
+
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    Whether the scripting variable is to be defined
+	    or not.  See TagExtraInfo for details.  This
+	    element is optional and "true" is the default.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scope"
+		   type="javaee:variable-scopeType"
+		   minOccurs="0">
+	<xsd:annotation>
+	  <xsd:documentation>
+
+	    The element is optional and "NESTED" is the default.
+
+	  </xsd:documentation>
+	</xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id" type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
+
diff --git a/wildfly/docs/schema/web-jsptaglibrary_3_0.xsd b/wildfly/docs/schema/web-jsptaglibrary_3_0.xsd
new file mode 100644
index 0000000..a6b581f
--- /dev/null
+++ b/wildfly/docs/schema/web-jsptaglibrary_3_0.xsd
@@ -0,0 +1,1109 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the JSP Taglibrary 
+      descriptor.  All Taglibrary descriptors must 
+      indicate the tag library schema by using the Taglibrary 
+      namespace: 
+      
+      https://jakarta.ee/xml/ns/jakartaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <taglib xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.0">
+      ...
+      </taglib>
+      
+      The instance documents may indicate the published 
+      version of the schema using xsi:schemaLocation attribute 
+      for Jakarta EE namespace with the following location: 
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-jsptaglibrary_3_0.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="taglib"
+               type="jakartaee:tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglib tag is the document root.
+        The definition of taglib is provided
+        by the tldTaglibType. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="tag-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The taglib element contains, among other things, tag and 
+          tag-file elements.
+          The name subelements of these elements must each be unique.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:tag|jakartaee:tag-file"/>
+      <xsd:field xpath="jakartaee:name"/>
+    </xsd:unique>
+    <xsd:unique name="function-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The taglib element contains function elements.
+          The name subelements of these elements must each be unique.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:function"/>
+      <xsd:field xpath="jakartaee:name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="body-contentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies the type of body that is valid for a tag.
+        This value is used by the JSP container to validate 
+        that a tag invocation has the correct body syntax and 
+        by page composition tools to assist the page author 
+        in providing a valid tag body.
+        		    
+        There are currently four values specified:
+        
+        tagdependent    The body of the tag is interpreted by the tag
+        		implementation itself, and is most likely 
+        		in a different "language", e.g embedded SQL 
+        		statements.
+        
+        JSP             The body of the tag contains nested JSP 
+        		syntax.
+        
+        empty           The body must be empty
+        
+        scriptless      The body accepts only template text, EL 
+        		Expressions, and JSP action elements.  No 
+        		scripting elements are allowed.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="tagdependent"/>
+        <xsd:enumeration value="JSP"/>
+        <xsd:enumeration value="empty"/>
+        <xsd:enumeration value="scriptless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-canonical-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the canonical name of a tag or attribute being
+        defined.
+        
+        The name must conform to the lexical rules for an NMTOKEN.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A validator that can be used to validate
+        the conformance of a JSP page to using this tag library is
+        defined by a validatorType.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="validator-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the TagLibraryValidator class that can be used
+            to validate the conformance of a JSP page to using this
+            tag library.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as an
+            initialization param. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tag defines a unique tag in this tag library.  It has one
+        attribute, id.
+        
+        The tag element may have several subelements defining:
+        
+        description       Optional tag-specific information
+        
+        display-name      A short name that is intended to be 
+        		  displayed by tools
+        
+        icon              Optional icon element that can be used 
+        		  by tools
+        
+        name              The unique action name
+        
+        tag-class         The tag handler class implementing
+        		  jakarta.servlet.jsp.tagext.JspTag
+        
+        tei-class         An optional subclass of
+        		  jakarta.servlet.jsp.tagext.TagExtraInfo
+        
+        body-content      The body content type
+        
+        variable          Optional scripting variable information
+        
+        attribute         All attributes of this action that are
+        		  evaluated prior to invocation.
+        
+        dynamic-attributes Whether this tag supports additional 
+        		   attributes with dynamic names.  If 
+        		   true, the tag-class must implement the 
+        		   jakarta.servlet.jsp.tagext.DynamicAttributes
+        		   interface.  Defaults to false.
+        
+        example           Optional informal description of an 
+        		  example of a use of this tag
+        
+        tag-extension     Zero or more extensions that provide extra
+        		  information about this tag, for tool 
+        		  consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:tld-canonical-nameType"/>
+      <xsd:element name="tag-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the subclass of jakarta.serlvet.jsp.tagext.JspTag
+            that implements the request time semantics for 
+            this tag. (required)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tei-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the subclass of jakarta.servlet.jsp.tagext.TagExtraInfo
+            for this tag. (optional)
+            
+            If this is not given, the class is not consulted at
+            translation time.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="body-content"
+                   type="jakartaee:body-contentType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies the format for the body of this tag.
+            The default in JSP 1.2 was "JSP" but because this 
+            is an invalid setting for simple tag handlers, there 
+            is no longer a default in JSP 2.0.  A reasonable 
+            default for simple tag handlers is "scriptless" if 
+            the tag can have a body.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="variable"
+                   type="jakartaee:variableType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="jakartaee:tld-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="dynamic-attributes"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0"/>
+      <xsd:element name="example"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The example element contains an informal description
+            of an example of the use of a tag.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Tag extensions are for tool use only and must not affect
+            the behavior of a container.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagFileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines an action in this tag library that is implemented
+        as a .tag file.
+        
+        The tag-file element has two required subelements:
+        
+        description       Optional tag-specific information
+        
+        display-name      A short name that is intended to be 
+        		  displayed by tools
+        
+        icon              Optional icon element that can be used 
+        		  by tools
+        
+        name              The unique action name
+        
+        path              Where to find the .tag file implementing this
+        		  action, relative to the root of the web
+        		  application or the root of the JAR file for a
+        		  tag library packaged in a JAR.  This must
+        		  begin with /WEB-INF/tags if the .tag file
+        		  resides in the WAR, or /META-INF/tags if the
+        		  .tag file resides in a JAR.
+        
+        example           Optional informal description of an 
+        		  example of a use of this tag
+        
+        tag-extension     Zero or more extensions that provide extra
+        		  information about this tag, for tool 
+        		  consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:tld-canonical-nameType"/>
+      <xsd:element name="path"
+                   type="jakartaee:pathType"/>
+      <xsd:element name="example"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The example element contains an informal description
+            of an example of the use of a tag.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Tag extensions are for tool use only and must not affect
+            the behavior of a container.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The function element is used to provide information on each
+        function in the tag library that is to be exposed to the EL.
+        
+        The function element may have several subelements defining:
+        
+        description         Optional tag-specific information
+        
+        display-name        A short name that is intended to be 
+        		    displayed by tools
+        
+        icon                Optional icon element that can be used 
+        		    by tools
+        
+        name                A unique name for this function
+        
+        function-class      Provides the name of the Java class that 
+        		    implements the function
+        
+        function-signature  Provides the signature, as in the Java 
+        		    Language Specification, of the Java 
+        		    method that is to be used to implement 
+        		    the function.
+        
+        example             Optional informal description of an 
+        		    example of a use of this function
+        
+        function-extension  Zero or more extensions that provide extra
+        		    information about this function, for tool 
+        		    consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:tld-canonical-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A unique name for this function.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the fully-qualified class name of the Java
+            class containing the static method that implements 
+            the function.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-signature"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the signature, of the static Java method that is
+            to be used to implement the function.  The syntax of the
+            function-signature element is as follows:
+            
+            	FunctionSignature ::= ReturnType S MethodName S?
+            			      '(' S? Parameters? S? ')'
+            
+            ReturnType        ::= Type
+            
+            	MethodName        ::= Identifier
+            
+            	Parameters        ::=   Parameter
+            			      | ( Parameter S? ',' S? Parameters )
+            
+            Parameter         ::= Type
+            
+            	Where:
+            
+            	    * Type is a basic type or a fully qualified
+            	      Java class name (including package name),
+            	      as per the 'Type' production in the Java 
+            	      Language Specification, Second Edition, 
+            	      Chapter 18.
+            
+            * Identifier is a Java identifier, as per
+            	      the 'Identifier' production in the Java 
+            	      Language Specification, Second
+            	      Edition, Chapter 18.
+            
+            Example: 
+            
+            java.lang.String nickName( java.lang.String, int )
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="example"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The example element contains an informal description
+            of an example of the use of this function.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Function extensions are for tool use only and must not 
+            affect the behavior of a container.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglib tag is the document root, it defines:
+        
+        description     a simple string describing the "use" of this
+        		taglib, should be user discernable
+        
+        display-name    the display-name element contains a 
+        		short name that is intended to be displayed 
+        		by tools
+        
+        icon            optional icon that can be used by tools
+        
+        tlib-version    the version of the tag library implementation 
+        
+        short-name      a simple default short name that could be 
+        		used by a JSP authoring tool to create 
+        		names with a mnemonic value; for example, 
+        		the it may be used as the prefered prefix 
+        		value in taglib directives
+        
+        uri             a uri uniquely identifying this taglib
+        
+        validator       optional TagLibraryValidator information
+        
+        listener        optional event listener specification
+        
+        tag             tags in this tag library
+        
+        tag-file        tag files in this tag library
+        
+        function        zero or more EL functions defined in this 
+        		tag library
+        
+        taglib-extension zero or more extensions that provide extra
+        		information about this taglib, for tool 
+        		consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="tlib-version"
+                   type="jakartaee:dewey-versionType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Describes this version (number) of the taglibrary.
+            It is described as a dewey decimal. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="short-name"
+                   type="jakartaee:tld-canonical-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a simple default name that could be used by
+            a JSP authoring tool to create names with a 
+            mnemonicvalue; for example, it may be used as the 
+            preferred prefix value in taglib directives.  Do 
+            not use white space, and do not start with digits 
+            or underscore. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="uri"
+                   type="jakartaee:xsdAnyURIType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a public URI that uniquely identifies this
+            version of the taglibrary.  Leave it empty if it
+            does not apply.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator"
+                   type="jakartaee:validatorType"
+                   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="listener"
+                   type="jakartaee:listenerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="tag"
+                   type="jakartaee:tagType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="tag-file"
+                   type="jakartaee:tagFileType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="function"
+                   type="jakartaee:functionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="taglib-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Taglib extensions are for tool use only and must not 
+            affect the behavior of a container.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="3.0"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          Describes the JSP version (number) this taglibrary
+          requires in order to function (dewey decimal)
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variableType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The variableType provides information on the scripting
+        variables defined by using this tag.  It is a (translation 
+        time) error for a tag that has one or more variable 
+        subelements to have a TagExtraInfo class that returns a 
+        non-null value from a call to getVariableInfo().
+        
+        The subelements of variableType are of the form:
+        
+        description              Optional description of this 
+        			 variable
+        
+        name-given               The variable name as a constant
+        
+        name-from-attribute      The name of an attribute whose 
+        			 (translation time) value will 
+        			 give the name of the
+        			 variable.  One of name-given or
+        			 name-from-attribute is required.
+        
+        variable-class           Name of the class of the variable.
+        			 java.lang.String is default.
+        
+        declare                  Whether the variable is declared 
+        			 or not.  True is the default.
+        
+        scope                    The scope of the scripting varaible
+        			 defined.  NESTED is default.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="name-given"
+                     type="jakartaee:java-identifierType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The name for the scripting variable.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="name-from-attribute"
+                     type="jakartaee:java-identifierType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The name of an attribute whose
+              (translation-time) value will give the name of 
+              the variable.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="variable-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The optional name of the class for the scripting
+            variable.  The default is java.lang.String.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="declare"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Whether the scripting variable is to be defined
+            or not.  See TagExtraInfo for details.  This 
+            element is optional and "true" is the default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scope"
+                   type="jakartaee:variable-scopeType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The element is optional and "NESTED" is the default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variable-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines scope of the scripting variable.  See
+        TagExtraInfo for details.  The allowed values are, 
+        "NESTED", "AT_BEGIN" and "AT_END".
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NESTED"/>
+        <xsd:enumeration value="AT_BEGIN"/>
+        <xsd:enumeration value="AT_END"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The attribute element defines an attribute for the nesting
+        tag.  The attribute element may have several subelements 
+        defining: 
+        
+        description     a description of the attribute
+        
+        name            the name of the attribute 
+        
+        required        whether the attribute is required or 
+        		optional 
+        
+        rtexprvalue     whether the attribute is a runtime attribute 
+        
+        type            the type of the attributes 
+        
+        fragment        whether this attribute is a fragment
+        
+        deferred-value  present if this attribute is to be parsed as a
+        jakarta.el.ValueExpression
+        
+        deferred-method present if this attribute is to be parsed as a
+        jakarta.el.MethodExpression
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"/>
+      <xsd:element name="required"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines if the nesting attribute is required or
+            optional.
+            
+            If not present then the default is "false", i.e 
+            the attribute is optional.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:sequence>
+          <xsd:sequence minOccurs="0">
+            <xsd:element name="rtexprvalue"
+                         type="jakartaee:generic-booleanType">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  	  Defines if the nesting attribute can have scriptlet
+                  	  expressions as a value, i.e the value of the
+                  	  attribute may be dynamically calculated at request
+                  	  time, as opposed to a static value determined at
+                  	  translation time.
+                  	  If not present then the default is "false", i.e the
+                  	  attribute has a static value
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="type"
+                         type="jakartaee:fully-qualified-classType"
+                         minOccurs="0">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  	  Defines the Java type of the attributes value.  
+                  If this element is omitted, the expected type is 
+                  assumed to be "java.lang.Object".  
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+          </xsd:sequence>
+          <xsd:choice>
+            <xsd:element name="deferred-value"
+                         type="jakartaee:tld-deferred-valueType"
+                         minOccurs="0">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Present if the value for this attribute is to be 
+                  passed to the tag handler as a 
+                  jakarta.el.ValueExpression. This allows for deferred 
+                  evaluation of EL expressions. An optional subelement 
+                  will contain the expected type that the value will 
+                  be coerced to after evaluation of the expression.
+                  The type defaults to Object if one is not provided.
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="deferred-method"
+                         type="jakartaee:tld-deferred-methodType"
+                         minOccurs="0">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Present if the value for this attribute is to be 
+                  passed to the tag handler as a 
+                  jakarta.el.MethodExpression. This allows for deferred 
+                  evaluation of an EL expression that identifies a 
+                  method to be invoked on an Object. An optional 
+                  subelement will contain the expected method
+                  signature. The signature defaults to "void method()" 
+                  if one is not provided.
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+          </xsd:choice>
+        </xsd:sequence>
+        <xsd:element name="fragment"
+                     type="jakartaee:generic-booleanType"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              "true" if this attribute is of type
+              jakarta.servlet.jsp.tagext.JspFragment, representing dynamic
+              content that can be re-evaluated as many times 
+              as needed by the tag handler.  If omitted or "false",
+              the default is still type="java.lang.String"
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-deferred-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines information about how to provide the value for a
+        tag handler attribute that accepts a jakarta.el.ValueExpression.
+        
+        The deferred-value element has one optional subelement:
+        
+        type            the expected type of the attribute
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully-qualified name of the Java type that is the 
+            expected type for this deferred expression.  If this 
+            element is omitted, the expected type is assumed to be 
+            "java.lang.Object".
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-deferred-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines information about how to provide the value for a
+        tag handler attribute that accepts a jakarta.el.MethodExpression.
+        
+        The deferred-method element has one optional subelement:
+        
+        method-signature  Provides the signature, as in the Java
+        Language Specifies, that is expected for 
+        the method being identified by the 
+        expression.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-signature"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the expected signature of the method identified 
+            by the jakarta.el.MethodExpression.
+            
+            This disambiguates overloaded methods and ensures that 
+            the return value is of the expected type.
+            
+            The syntax of the method-signature element is identical 
+            to that of the function-signature element.  See the 
+            documentation for function-signature for more details.
+            
+            The name of the method is for documentation purposes only 
+            and is ignored by the JSP container.
+            
+            Example:
+            
+            boolean validate(java.lang.String)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tld-extensionType is used to indicate
+        extensions to a specific TLD element.
+        
+        It is used by elements to designate an extension block
+        that is targeted to a specific extension designated by
+        a set of extension elements that are declared by a
+        namespace. The namespace identifies the extension to
+        the tool that processes the extension.
+        
+        The type of the extension-element is abstract. Therefore,
+        a concrete type must be specified by the TLD using
+        xsi:type attribute for each extension-element. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="extension-element"
+                   type="jakartaee:extensibleType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="namespace"
+                   use="required"
+                   type="xsd:anyURI"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="extensibleType"
+                   abstract="true">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The extensibleType is an abstract base type that is used to
+        define the type of extension-elements. Instance documents
+        must substitute a known type to define the extension by
+        using xsi:type attribute to define the actual type of
+        extension-elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-jsptaglibrary_3_1.xsd b/wildfly/docs/schema/web-jsptaglibrary_3_1.xsd
new file mode 100644
index 0000000..e0dde1a
--- /dev/null
+++ b/wildfly/docs/schema/web-jsptaglibrary_3_1.xsd
@@ -0,0 +1,1109 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.1">
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      This is the XML Schema for the JSP Taglibrary 
+      descriptor.  All Taglibrary descriptors must 
+      indicate the tag library schema by using the Taglibrary 
+      namespace: 
+      
+      https://jakarta.ee/xml/ns/jakartaee 
+      
+      and by indicating the version of the schema by 
+      using the version element as shown below: 
+      
+      <taglib xmlns="https://jakarta.ee/xml/ns/jakartaee"
+      xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+      xsi:schemaLocation="..."
+      version="3.1">
+      ...
+      </taglib>
+      
+      The instance documents may indicate the published 
+      version of the schema using xsi:schemaLocation attribute 
+      for Jakarta EE namespace with the following location: 
+      
+      https://jakarta.ee/xml/ns/jakartaee/web-jsptaglibrary_3_1.xsd
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="taglib"
+               type="jakartaee:tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglib tag is the document root.
+        The definition of taglib is provided
+        by the tldTaglibType. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:unique name="tag-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The taglib element contains, among other things, tag and 
+          tag-file elements.
+          The name subelements of these elements must each be unique.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:tag|jakartaee:tag-file"/>
+      <xsd:field xpath="jakartaee:name"/>
+    </xsd:unique>
+    <xsd:unique name="function-name-uniqueness">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          The taglib element contains function elements.
+          The name subelements of these elements must each be unique.
+          
+        </xsd:documentation>
+      </xsd:annotation>
+      <xsd:selector xpath="jakartaee:function"/>
+      <xsd:field xpath="jakartaee:name"/>
+    </xsd:unique>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="body-contentType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Specifies the type of body that is valid for a tag.
+        This value is used by the JSP container to validate 
+        that a tag invocation has the correct body syntax and 
+        by page composition tools to assist the page author 
+        in providing a valid tag body.
+        		    
+        There are currently four values specified:
+        
+        tagdependent    The body of the tag is interpreted by the tag
+        		implementation itself, and is most likely 
+        		in a different "language", e.g embedded SQL 
+        		statements.
+        
+        JSP             The body of the tag contains nested JSP 
+        		syntax.
+        
+        empty           The body must be empty
+        
+        scriptless      The body accepts only template text, EL 
+        		Expressions, and JSP action elements.  No 
+        		scripting elements are allowed.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="tagdependent"/>
+        <xsd:enumeration value="JSP"/>
+        <xsd:enumeration value="empty"/>
+        <xsd:enumeration value="scriptless"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-canonical-nameType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines the canonical name of a tag or attribute being
+        defined.
+        
+        The name must conform to the lexical rules for an NMTOKEN.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:xsdNMTOKENType"/>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="validatorType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        A validator that can be used to validate
+        the conformance of a JSP page to using this tag library is
+        defined by a validatorType.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="validator-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the TagLibraryValidator class that can be used
+            to validate the conformance of a JSP page to using this
+            tag library.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="init-param"
+                   type="jakartaee:param-valueType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The init-param element contains a name/value pair as an
+            initialization param. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tag defines a unique tag in this tag library.  It has one
+        attribute, id.
+        
+        The tag element may have several subelements defining:
+        
+        description       Optional tag-specific information
+        
+        display-name      A short name that is intended to be 
+        		  displayed by tools
+        
+        icon              Optional icon element that can be used 
+        		  by tools
+        
+        name              The unique action name
+        
+        tag-class         The tag handler class implementing
+        		  jakarta.servlet.jsp.tagext.JspTag
+        
+        tei-class         An optional subclass of
+        		  jakarta.servlet.jsp.tagext.TagExtraInfo
+        
+        body-content      The body content type
+        
+        variable          Optional scripting variable information
+        
+        attribute         All attributes of this action that are
+        		  evaluated prior to invocation.
+        
+        dynamic-attributes Whether this tag supports additional 
+        		   attributes with dynamic names.  If 
+        		   true, the tag-class must implement the 
+        		   jakarta.servlet.jsp.tagext.DynamicAttributes
+        		   interface.  Defaults to false.
+        
+        example           Optional informal description of an 
+        		  example of a use of this tag
+        
+        tag-extension     Zero or more extensions that provide extra
+        		  information about this tag, for tool 
+        		  consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:tld-canonical-nameType"/>
+      <xsd:element name="tag-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the subclass of jakarta.servlet.jsp.tagext.JspTag
+            that implements the request time semantics for 
+            this tag. (required)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tei-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines the subclass of jakarta.servlet.jsp.tagext.TagExtraInfo
+            for this tag. (optional)
+            
+            If this is not given, the class is not consulted at
+            translation time.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="body-content"
+                   type="jakartaee:body-contentType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Specifies the format for the body of this tag.
+            The default in JSP 1.2 was "JSP" but because this 
+            is an invalid setting for simple tag handlers, there 
+            is no longer a default in JSP 2.0.  A reasonable 
+            default for simple tag handlers is "scriptless" if 
+            the tag can have a body.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="variable"
+                   type="jakartaee:variableType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="attribute"
+                   type="jakartaee:tld-attributeType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="dynamic-attributes"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0"/>
+      <xsd:element name="example"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The example element contains an informal description
+            of an example of the use of a tag.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Tag extensions are for tool use only and must not affect
+            the behavior of a container.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tagFileType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines an action in this tag library that is implemented
+        as a .tag file.
+        
+        The tag-file element has two required subelements:
+        
+        description       Optional tag-specific information
+        
+        display-name      A short name that is intended to be 
+        		  displayed by tools
+        
+        icon              Optional icon element that can be used 
+        		  by tools
+        
+        name              The unique action name
+        
+        path              Where to find the .tag file implementing this
+        		  action, relative to the root of the web
+        		  application or the root of the JAR file for a
+        		  tag library packaged in a JAR.  This must
+        		  begin with /WEB-INF/tags if the .tag file
+        		  resides in the WAR, or /META-INF/tags if the
+        		  .tag file resides in a JAR.
+        
+        example           Optional informal description of an 
+        		  example of a use of this tag
+        
+        tag-extension     Zero or more extensions that provide extra
+        		  information about this tag, for tool 
+        		  consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:tld-canonical-nameType"/>
+      <xsd:element name="path"
+                   type="jakartaee:pathType"/>
+      <xsd:element name="example"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The example element contains an informal description
+            of an example of the use of a tag.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="tag-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Tag extensions are for tool use only and must not affect
+            the behavior of a container.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="functionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The function element is used to provide information on each
+        function in the tag library that is to be exposed to the EL.
+        
+        The function element may have several subelements defining:
+        
+        description         Optional tag-specific information
+        
+        display-name        A short name that is intended to be 
+        		    displayed by tools
+        
+        icon                Optional icon element that can be used 
+        		    by tools
+        
+        name                A unique name for this function
+        
+        function-class      Provides the name of the Java class that 
+        		    implements the function
+        
+        function-signature  Provides the signature, as in the Java 
+        		    Language Specification, of the Java 
+        		    method that is to be used to implement 
+        		    the function.
+        
+        example             Optional informal description of an 
+        		    example of a use of this function
+        
+        function-extension  Zero or more extensions that provide extra
+        		    information about this function, for tool 
+        		    consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="name"
+                   type="jakartaee:tld-canonical-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            A unique name for this function.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-class"
+                   type="jakartaee:fully-qualified-classType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the fully-qualified class name of the Java
+            class containing the static method that implements 
+            the function.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-signature"
+                   type="jakartaee:string">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the signature, of the static Java method that is
+            to be used to implement the function.  The syntax of the
+            function-signature element is as follows:
+            
+            	FunctionSignature ::= ReturnType S MethodName S?
+            			      '(' S? Parameters? S? ')'
+            
+            ReturnType        ::= Type
+            
+            	MethodName        ::= Identifier
+            
+            	Parameters        ::=   Parameter
+            			      | ( Parameter S? ',' S? Parameters )
+            
+            Parameter         ::= Type
+            
+            	Where:
+            
+            	    * Type is a basic type or a fully qualified
+            	      Java class name (including package name),
+            	      as per the 'Type' production in the Java 
+            	      Language Specification, Second Edition, 
+            	      Chapter 18.
+            
+            * Identifier is a Java identifier, as per
+            	      the 'Identifier' production in the Java 
+            	      Language Specification, Second
+            	      Edition, Chapter 18.
+            
+            Example: 
+            
+            java.lang.String nickName( java.lang.String, int )
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="example"
+                   type="jakartaee:xsdStringType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The example element contains an informal description
+            of an example of the use of this function.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="function-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Function extensions are for tool use only and must not 
+            affect the behavior of a container.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tldTaglibType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The taglib tag is the document root, it defines:
+        
+        description     a simple string describing the "use" of this
+        		taglib, should be user discernable
+        
+        display-name    the display-name element contains a 
+        		short name that is intended to be displayed 
+        		by tools
+        
+        icon            optional icon that can be used by tools
+        
+        tlib-version    the version of the tag library implementation 
+        
+        short-name      a simple default short name that could be 
+        		used by a JSP authoring tool to create 
+        		names with a mnemonic value; for example, 
+        		the it may be used as the prefered prefix 
+        		value in taglib directives
+        
+        uri             a uri uniquely identifying this taglib
+        
+        validator       optional TagLibraryValidator information
+        
+        listener        optional event listener specification
+        
+        tag             tags in this tag library
+        
+        tag-file        tag files in this tag library
+        
+        function        zero or more EL functions defined in this 
+        		tag library
+        
+        taglib-extension zero or more extensions that provide extra
+        		information about this taglib, for tool 
+        		consumption
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:group ref="jakartaee:descriptionGroup"/>
+      <xsd:element name="tlib-version"
+                   type="jakartaee:dewey-versionType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Describes this version (number) of the taglibrary.
+            It is described as a dewey decimal. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="short-name"
+                   type="jakartaee:tld-canonical-nameType">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a simple default name that could be used by
+            a JSP authoring tool to create names with a 
+            mnemonicvalue; for example, it may be used as the 
+            preferred prefix value in taglib directives.  Do 
+            not use white space, and do not start with digits 
+            or underscore. 
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="uri"
+                   type="jakartaee:xsdAnyURIType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines a public URI that uniquely identifies this
+            version of the taglibrary.  Leave it empty if it
+            does not apply.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="validator"
+                   type="jakartaee:validatorType"
+                   minOccurs="0">
+      </xsd:element>
+      <xsd:element name="listener"
+                   type="jakartaee:listenerType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+      </xsd:element>
+      <xsd:element name="tag"
+                   type="jakartaee:tagType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="tag-file"
+                   type="jakartaee:tagFileType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="function"
+                   type="jakartaee:functionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="taglib-extension"
+                   type="jakartaee:tld-extensionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Taglib extensions are for tool use only and must not 
+            affect the behavior of a container.  
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="version"
+                   type="jakartaee:dewey-versionType"
+                   fixed="3.1"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+
+          Describes the JSP version (number) this taglibrary
+          requires in order to function (dewey decimal)
+          
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variableType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The variableType provides information on the scripting
+        variables defined by using this tag.  It is a (translation 
+        time) error for a tag that has one or more variable 
+        subelements to have a TagExtraInfo class that returns a 
+        non-null value from a call to getVariableInfo().
+        
+        The subelements of variableType are of the form:
+        
+        description              Optional description of this 
+        			 variable
+        
+        name-given               The variable name as a constant
+        
+        name-from-attribute      The name of an attribute whose 
+        			 (translation time) value will 
+        			 give the name of the
+        			 variable.  One of name-given or
+        			 name-from-attribute is required.
+        
+        variable-class           Name of the class of the variable.
+        			 java.lang.String is default.
+        
+        declare                  Whether the variable is declared 
+        			 or not.  True is the default.
+        
+        scope                    The scope of the scripting varaible
+        			 defined.  NESTED is default.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:choice>
+        <xsd:element name="name-given"
+                     type="jakartaee:java-identifierType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The name for the scripting variable.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+        <xsd:element name="name-from-attribute"
+                     type="jakartaee:java-identifierType">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              The name of an attribute whose
+              (translation-time) value will give the name of 
+              the variable.
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+      <xsd:element name="variable-class"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The optional name of the class for the scripting
+            variable.  The default is java.lang.String.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="declare"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Whether the scripting variable is to be defined
+            or not.  See TagExtraInfo for details.  This 
+            element is optional and "true" is the default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="scope"
+                   type="jakartaee:variable-scopeType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The element is optional and "NESTED" is the default.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="variable-scopeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        This type defines scope of the scripting variable.  See
+        TagExtraInfo for details.  The allowed values are, 
+        "NESTED", "AT_BEGIN" and "AT_END".
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:simpleContent>
+      <xsd:restriction base="jakartaee:string">
+        <xsd:enumeration value="NESTED"/>
+        <xsd:enumeration value="AT_BEGIN"/>
+        <xsd:enumeration value="AT_END"/>
+      </xsd:restriction>
+    </xsd:simpleContent>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-attributeType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The attribute element defines an attribute for the nesting
+        tag.  The attribute element may have several subelements 
+        defining: 
+        
+        description     a description of the attribute
+        
+        name            the name of the attribute 
+        
+        required        whether the attribute is required or 
+        		optional 
+        
+        rtexprvalue     whether the attribute is a runtime attribute 
+        
+        type            the type of the attributes 
+        
+        fragment        whether this attribute is a fragment
+        
+        deferred-value  present if this attribute is to be parsed as a
+        jakarta.el.ValueExpression
+        
+        deferred-method present if this attribute is to be parsed as a
+        jakarta.el.MethodExpression
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="description"
+                   type="jakartaee:descriptionType"
+                   minOccurs="0"
+                   maxOccurs="unbounded"/>
+      <xsd:element name="name"
+                   type="jakartaee:java-identifierType"/>
+      <xsd:element name="required"
+                   type="jakartaee:generic-booleanType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Defines if the nesting attribute is required or
+            optional.
+            
+            If not present then the default is "false", i.e 
+            the attribute is optional.
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:choice>
+        <xsd:sequence>
+          <xsd:sequence minOccurs="0">
+            <xsd:element name="rtexprvalue"
+                         type="jakartaee:generic-booleanType">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  	  Defines if the nesting attribute can have scriptlet
+                  	  expressions as a value, i.e the value of the
+                  	  attribute may be dynamically calculated at request
+                  	  time, as opposed to a static value determined at
+                  	  translation time.
+                  	  If not present then the default is "false", i.e the
+                  	  attribute has a static value
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="type"
+                         type="jakartaee:fully-qualified-classType"
+                         minOccurs="0">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  	  Defines the Java type of the attributes value.  
+                  If this element is omitted, the expected type is 
+                  assumed to be "java.lang.Object".  
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+          </xsd:sequence>
+          <xsd:choice>
+            <xsd:element name="deferred-value"
+                         type="jakartaee:tld-deferred-valueType"
+                         minOccurs="0">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Present if the value for this attribute is to be 
+                  passed to the tag handler as a 
+                  jakarta.el.ValueExpression. This allows for deferred 
+                  evaluation of EL expressions. An optional subelement 
+                  will contain the expected type that the value will 
+                  be coerced to after evaluation of the expression.
+                  The type defaults to Object if one is not provided.
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="deferred-method"
+                         type="jakartaee:tld-deferred-methodType"
+                         minOccurs="0">
+              <xsd:annotation>
+                <xsd:documentation>
+
+                  Present if the value for this attribute is to be 
+                  passed to the tag handler as a 
+                  jakarta.el.MethodExpression. This allows for deferred 
+                  evaluation of an EL expression that identifies a 
+                  method to be invoked on an Object. An optional 
+                  subelement will contain the expected method
+                  signature. The signature defaults to "void method()" 
+                  if one is not provided.
+                  
+                </xsd:documentation>
+              </xsd:annotation>
+            </xsd:element>
+          </xsd:choice>
+        </xsd:sequence>
+        <xsd:element name="fragment"
+                     type="jakartaee:generic-booleanType"
+                     minOccurs="0">
+          <xsd:annotation>
+            <xsd:documentation>
+
+              "true" if this attribute is of type
+              jakarta.servlet.jsp.tagext.JspFragment, representing dynamic
+              content that can be re-evaluated as many times 
+              as needed by the tag handler.  If omitted or "false",
+              the default is still type="java.lang.String"
+              
+            </xsd:documentation>
+          </xsd:annotation>
+        </xsd:element>
+      </xsd:choice>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-deferred-valueType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines information about how to provide the value for a
+        tag handler attribute that accepts a jakarta.el.ValueExpression.
+        
+        The deferred-value element has one optional subelement:
+        
+        type            the expected type of the attribute
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="type"
+                   type="jakartaee:fully-qualified-classType"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            The fully-qualified name of the Java type that is the 
+            expected type for this deferred expression.  If this 
+            element is omitted, the expected type is assumed to be 
+            "java.lang.Object".
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-deferred-methodType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        Defines information about how to provide the value for a
+        tag handler attribute that accepts a jakarta.el.MethodExpression.
+        
+        The deferred-method element has one optional subelement:
+        
+        method-signature  Provides the signature, as in the Java
+        Language Specifies, that is expected for 
+        the method being identified by the 
+        expression.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="method-signature"
+                   type="jakartaee:string"
+                   minOccurs="0">
+        <xsd:annotation>
+          <xsd:documentation>
+
+            Provides the expected signature of the method identified 
+            by the jakarta.el.MethodExpression.
+            
+            This disambiguates overloaded methods and ensures that 
+            the return value is of the expected type.
+            
+            The syntax of the method-signature element is identical 
+            to that of the function-signature element.  See the 
+            documentation for function-signature for more details.
+            
+            The name of the method is for documentation purposes only 
+            and is ignored by the JSP container.
+            
+            Example:
+            
+            boolean validate(java.lang.String)
+            
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="tld-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The tld-extensionType is used to indicate
+        extensions to a specific TLD element.
+        
+        It is used by elements to designate an extension block
+        that is targeted to a specific extension designated by
+        a set of extension elements that are declared by a
+        namespace. The namespace identifies the extension to
+        the tool that processes the extension.
+        
+        The type of the extension-element is abstract. Therefore,
+        a concrete type must be specified by the TLD using
+        xsi:type attribute for each extension-element. 
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="extension-element"
+                   type="jakartaee:extensibleType"
+                   maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="namespace"
+                   use="required"
+                   type="xsd:anyURI"/>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="extensibleType"
+                   abstract="true">
+    <xsd:annotation>
+      <xsd:documentation>
+
+        The extensibleType is an abstract base type that is used to
+        define the type of extension-elements. Instance documents
+        must substitute a known type to define the extension by
+        using xsi:type attribute to define the actual type of
+        extension-elements.
+        
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-partialresponse_2_2.xsd b/wildfly/docs/schema/web-partialresponse_2_2.xsd
new file mode 100644
index 0000000..df60fa5
--- /dev/null
+++ b/wildfly/docs/schema/web-partialresponse_2_2.xsd
@@ -0,0 +1,426 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            attributeFormDefault="unqualified"
+            elementFormDefault="qualified"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            version="2.2"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <xsd:include schemaLocation="javaee_7.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+      
+      Copyright (c) 2011 - 2013 Oracle and/or its affiliates. All rights reserved.
+      
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+      
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+      
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+      
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+      
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[[
+      [
+      <p>
+      
+      The XML Schema for the JavaServer Faces (Version 2.2)  
+      Partial Response used in JSF Ajax frameworks.
+      
+      </p>
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="partial-response"
+               type="javaee:partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.</p>
+        
+        <p>This element must have an "id" attribute whose value
+        is the return from calling getContainerClientId() on the
+        UIViewRoot to which this response pertains.
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.
+        
+        <p>
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice>
+      <xsd:element name="changes"
+                   type="javaee:partial-response-changesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="redirect"
+                   type="javaee:partial-response-redirectType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="error"
+                   type="javaee:partial-response-errorType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[[
+          [
+          <p class="changed_added_2_2">This element must have an "id" attribute whose value
+          is the return from calling getContainerClientId() on the
+          UIViewRoot to which this response pertains.<p> 
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-changesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "changes" element contains a collection of child elements,
+        each of which describes a different change to be applied to the
+        view in the user agent.
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="update"
+                   type="javaee:partial-response-updateType"/>
+      <xsd:element name="insert"
+                   type="javaee:partial-response-insertType"/>
+      <xsd:element name="delete"
+                   type="javaee:partial-response-deleteType"/>
+      <xsd:element name="attributes"
+                   type="javaee:partial-response-attributesType"/>
+      <xsd:element name="eval"
+                   type="xsd:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[[
+            [
+            <p>
+            
+            The "eval" element enables this element's
+            contents to be executed as JavaScript.
+            
+            </p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="extension"
+                   type="javaee:partial-response-extensionType"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-updateType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "update" element enables DOM elements matching the "id"
+        attribute to be updated with the contents of this element. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence maxOccurs="unbounded">
+      <xsd:any processContents="skip"
+               namespace="##any"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-insertType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "insert" element enables content to be inserted into the DOM
+        before or after an existing DOM element as specified by the
+        nested "before" or "after" elements.  The elements "before" and
+        "after" are mutually exclusive - one of them must be specified. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="1"
+                maxOccurs="1">
+      <xsd:element name="before">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="after">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-deleteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "delete" element enables DOM elements matching the "id"
+        attribute to be removed. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-attributesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "attributes" element enables attributes of DOM elements matching the "id"
+        attribute to be updated.  If this element is used, then it must contain at
+        least one "attribute" element. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:attribute name="name"
+                         type="xsd:string"
+                         use="required"/>
+          <xsd:attribute name="value"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-redirectType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "redirect" element enables a redirect to the location as specified by the
+        "url" attribute. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="url"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-errorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        
+        The "error" element contains error information from the server. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="error-name"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+      <xsd:element name="error-message"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[[
+        [
+        <p>
+        Extension element for partial response.  It may contain
+        implementation specific content.
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-partialresponse_2_3.xsd b/wildfly/docs/schema/web-partialresponse_2_3.xsd
new file mode 100644
index 0000000..1c7fa68
--- /dev/null
+++ b/wildfly/docs/schema/web-partialresponse_2_3.xsd
@@ -0,0 +1,427 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:javaee="http://xmlns.jcp.org/xml/ns/javaee"
+            attributeFormDefault="unqualified"
+            elementFormDefault="qualified"
+            targetNamespace="http://xmlns.jcp.org/xml/ns/javaee"
+            version="2.3"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <xsd:include schemaLocation="javaee_8.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER.
+
+      Copyright (c) 2011 - 2017 Oracle and/or its affiliates. All rights reserved.
+
+      The contents of this file are subject to the terms of either the GNU
+      General Public License Version 2 only ("GPL") or the Common Development
+      and Distribution License("CDDL") (collectively, the "License").  You
+      may not use this file except in compliance with the License.  You can
+      obtain a copy of the License at
+      https://glassfish.java.net/public/CDDL+GPL_1_1.html
+      or packager/legal/LICENSE.txt.  See the License for the specific
+      language governing permissions and limitations under the License.
+
+      When distributing the software, include this License Header Notice in each
+      file and include the License file at packager/legal/LICENSE.txt.
+
+      GPL Classpath Exception:
+      Oracle designates this particular file as subject to the "Classpath"
+      exception as provided by Oracle in the GPL Version 2 section of the License
+      file that accompanied this code.
+
+      Modifications:
+      If applicable, add the following below the License Header, with the fields
+      enclosed by brackets [] replaced by your own identifying information:
+      "Portions Copyright [year] [name of copyright owner]"
+
+      Contributor(s):
+      If you wish your version of this file to be governed by only the CDDL or
+      only the GPL Version 2, indicate your decision by adding "[Contributor]
+      elects to include this software in this distribution under the [CDDL or GPL
+      Version 2] license."  If you don't indicate a single choice of license, a
+      recipient has the option to distribute your version of this file under
+      either the CDDL, the GPL Version 2 or to extend the choice of license to
+      its licensees as provided above.  However, if you add GPL Version 2 code
+      and therefore, elected the GPL Version 2 license, then the option applies
+      only if the new code is made subject to such option by the copyright
+      holder.
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      [
+      <p>
+
+      The XML Schema for the JavaServer Faces (Version 2.3)
+      Partial Response used in JSF Ajax frameworks.
+
+      </p>
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="partial-response"
+               type="javaee:partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.</p>
+
+        <p>This element must have an "id" attribute whose value
+        is the return from calling getContainerClientId() on the
+        UIViewRoot to which this response pertains.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.
+
+        <p>
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="changes"
+                   type="javaee:partial-response-changesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="redirect"
+                   type="javaee:partial-response-redirectType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="error"
+                   type="javaee:partial-response-errorType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          [
+          <p class="changed_added_2_2">This element must have an "id" attribute whose value
+          is the return from calling getContainerClientId() on the
+          UIViewRoot to which this response pertains.<p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-changesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "changes" element contains a collection of child elements,
+        each of which describes a different change to be applied to the
+        view in the user agent.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="update"
+                   type="javaee:partial-response-updateType"/>
+      <xsd:element name="insert"
+                   type="javaee:partial-response-insertType"/>
+      <xsd:element name="delete"
+                   type="javaee:partial-response-deleteType"/>
+      <xsd:element name="attributes"
+                   type="javaee:partial-response-attributesType"/>
+      <xsd:element name="eval"
+                   type="xsd:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            [
+            <p>
+
+            The "eval" element enables this element's
+            contents to be executed as JavaScript.
+
+            </p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="extension"
+                   type="javaee:partial-response-extensionType"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-updateType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "update" element enables DOM elements matching the "id"
+        attribute to be updated with the contents of this element.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence maxOccurs="unbounded">
+      <xsd:any processContents="skip"
+               namespace="##any"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-insertType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "insert" element enables content to be inserted into the DOM
+        before or after an existing DOM element as specified by the
+        nested "before" or "after" elements.  The elements "before" and
+        "after" are mutually exclusive - one of them must be specified.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="1"
+                maxOccurs="1">
+      <xsd:element name="before">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="after">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-deleteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "delete" element enables DOM elements matching the "id"
+        attribute to be removed.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-attributesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "attributes" element enables attributes of DOM elements matching the "id"
+        attribute to be updated.  If this element is used, then it must contain at
+        least one "attribute" element.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:attribute name="name"
+                         type="xsd:string"
+                         use="required"/>
+          <xsd:attribute name="value"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-redirectType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "redirect" element enables a redirect to the location as specified by the
+        "url" attribute.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="url"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-errorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "error" element contains error information from the server.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="error-name"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+      <xsd:element name="error-message"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        Extension element for partial response.  It may contain
+        implementation specific content.
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-partialresponse_3_0.xsd b/wildfly/docs/schema/web-partialresponse_3_0.xsd
new file mode 100644
index 0000000..5224d21
--- /dev/null
+++ b/wildfly/docs/schema/web-partialresponse_3_0.xsd
@@ -0,0 +1,403 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            attributeFormDefault="unqualified"
+            elementFormDefault="qualified"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            version="3.0"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <xsd:include schemaLocation="jakartaee_9.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2020 Oracle and/or its affiliates. All rights reserved.
+      
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+      
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+      
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+      
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      [
+      <p>
+      
+      The XML Schema for the Jakarta Server Faces (Version 3.0)  
+      Partial Response used in JSF Ajax frameworks.
+      
+      </p>
+      
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+<!-- **************************************************** -->
+
+  <xsd:element name="partial-response"
+               type="jakartaee:partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.</p>
+        
+        <p>This element must have an "id" attribute whose value
+        is the return from calling getContainerClientId() on the
+        UIViewRoot to which this response pertains.
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.
+        
+        <p>
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="changes"
+                   type="jakartaee:partial-response-changesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="redirect"
+                   type="jakartaee:partial-response-redirectType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="error"
+                   type="jakartaee:partial-response-errorType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          [
+          <p class="changed_added_2_2">This element must have an "id" attribute whose value
+          is the return from calling getContainerClientId() on the
+          UIViewRoot to which this response pertains.<p> 
+          
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-changesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "changes" element contains a collection of child elements,
+        each of which describes a different change to be applied to the
+        view in the user agent.
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="update"
+                   type="jakartaee:partial-response-updateType"/>
+      <xsd:element name="insert"
+                   type="jakartaee:partial-response-insertType"/>
+      <xsd:element name="delete"
+                   type="jakartaee:partial-response-deleteType"/>
+      <xsd:element name="attributes"
+                   type="jakartaee:partial-response-attributesType"/>
+      <xsd:element name="eval"
+                   type="xsd:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            [
+            <p>
+            
+            The "eval" element enables this element's
+            contents to be executed as JavaScript.
+            
+            </p>
+            
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="extension"
+                   type="jakartaee:partial-response-extensionType"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-updateType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "update" element enables DOM elements matching the "id"
+        attribute to be updated with the contents of this element. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence maxOccurs="unbounded">
+      <xsd:any processContents="skip"
+               namespace="##any"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-insertType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "insert" element enables content to be inserted into the DOM
+        before or after an existing DOM element as specified by the
+        nested "before" or "after" elements.  The elements "before" and
+        "after" are mutually exclusive - one of them must be specified. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="1"
+                maxOccurs="1">
+      <xsd:element name="before">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="after">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-deleteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "delete" element enables DOM elements matching the "id"
+        attribute to be removed. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-attributesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "attributes" element enables attributes of DOM elements matching the "id"
+        attribute to be updated.  If this element is used, then it must contain at
+        least one "attribute" element. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+
+<!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:attribute name="name"
+                         type="xsd:string"
+                         use="required"/>
+          <xsd:attribute name="value"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-redirectType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "redirect" element enables a redirect to the location as specified by the
+        "url" attribute. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="url"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-errorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        
+        The "error" element contains error information from the server. 
+        
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="error-name"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+      <xsd:element name="error-message"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+<!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        Extension element for partial response.  It may contain
+        implementation specific content.
+        </p>
+        
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/web-partialresponse_4_0.xsd b/wildfly/docs/schema/web-partialresponse_4_0.xsd
new file mode 100644
index 0000000..236e036
--- /dev/null
+++ b/wildfly/docs/schema/web-partialresponse_4_0.xsd
@@ -0,0 +1,403 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<xsd:schema xmlns:jakartaee="https://jakarta.ee/xml/ns/jakartaee"
+            attributeFormDefault="unqualified"
+            elementFormDefault="qualified"
+            targetNamespace="https://jakarta.ee/xml/ns/jakartaee"
+            version="4.0"
+            xmlns:xsd="http://www.w3.org/2001/XMLSchema">
+  <xsd:include schemaLocation="jakartaee_10.xsd"/>
+
+  <xsd:annotation>
+    <xsd:documentation>
+
+      Copyright (c) 2009, 2021 Oracle and/or its affiliates. All rights reserved.
+
+      This program and the accompanying materials are made available under the
+      terms of the Eclipse Public License v. 2.0, which is available at
+      http://www.eclipse.org/legal/epl-2.0.
+
+      This Source Code may also be made available under the following Secondary
+      Licenses when the conditions for such availability set forth in the
+      Eclipse Public License v. 2.0 are satisfied: GNU General Public License,
+      version 2 with the GNU Classpath Exception, which is available at
+      https://www.gnu.org/software/classpath/license.html.
+
+      SPDX-License-Identifier: EPL-2.0 OR GPL-2.0 WITH Classpath-exception-2.0
+
+    </xsd:documentation>
+  </xsd:annotation>
+
+  <xsd:annotation>
+    <xsd:documentation>
+      <![CDATA[
+      [
+      <p>
+
+      The XML Schema for the Jakarta Faces (Version 4.0)
+      Partial Response used in Jakarta Faces Ajax frameworks.
+
+      </p>
+
+      ]]>
+    </xsd:documentation>
+  </xsd:annotation>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:element name="partial-response"
+               type="jakartaee:partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.</p>
+
+        <p>This element must have an "id" attribute whose value
+        is the return from calling getContainerClientId() on the
+        UIViewRoot to which this response pertains.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+  </xsd:element>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-responseType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "partial-response" element is the root of the
+        partial response information hierarchy, and contains
+        nested elements for all possible elements that can exist
+        in the response.
+
+        <p>
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="changes"
+                   type="jakartaee:partial-response-changesType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="redirect"
+                   type="jakartaee:partial-response-redirectType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+      <xsd:element name="error"
+                   type="jakartaee:partial-response-errorType"
+                   minOccurs="0"
+                   maxOccurs="1"/>
+    </xsd:choice>
+    <xsd:attribute name="id"
+                   type="xsd:ID"
+                   use="required">
+      <xsd:annotation>
+        <xsd:documentation>
+          <![CDATA[
+          [
+          <p class="changed_added_2_2">This element must have an "id" attribute whose value
+          is the return from calling getContainerClientId() on the
+          UIViewRoot to which this response pertains.<p>
+
+          ]]>
+        </xsd:documentation>
+      </xsd:annotation>
+    </xsd:attribute>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-changesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "changes" element contains a collection of child elements,
+        each of which describes a different change to be applied to the
+        view in the user agent.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="0"
+                maxOccurs="unbounded">
+      <xsd:element name="update"
+                   type="jakartaee:partial-response-updateType"/>
+      <xsd:element name="insert"
+                   type="jakartaee:partial-response-insertType"/>
+      <xsd:element name="delete"
+                   type="jakartaee:partial-response-deleteType"/>
+      <xsd:element name="attributes"
+                   type="jakartaee:partial-response-attributesType"/>
+      <xsd:element name="eval"
+                   type="xsd:string">
+        <xsd:annotation>
+          <xsd:documentation>
+            <![CDATA[
+            [
+            <p>
+
+            The "eval" element enables this element's
+            contents to be executed as JavaScript.
+
+            </p>
+
+            ]]>
+          </xsd:documentation>
+        </xsd:annotation>
+      </xsd:element>
+      <xsd:element name="extension"
+                   type="jakartaee:partial-response-extensionType"/>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-updateType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "update" element enables DOM elements matching the "id"
+        attribute to be updated with the contents of this element.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence maxOccurs="unbounded">
+      <xsd:any processContents="skip"
+               namespace="##any"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-insertType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "insert" element enables content to be inserted into the DOM
+        before or after an existing DOM element as specified by the
+        nested "before" or "after" elements.  The elements "before" and
+        "after" are mutually exclusive - one of them must be specified.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:choice minOccurs="1"
+                maxOccurs="1">
+      <xsd:element name="before">
+
+        <!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+      <xsd:element name="after">
+
+        <!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:sequence>
+            <xsd:any namespace="##any"
+                     processContents="lax"
+                     minOccurs="0"
+                     maxOccurs="unbounded"/>
+          </xsd:sequence>
+          <xsd:attribute name="id"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:choice>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-deleteType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "delete" element enables DOM elements matching the "id"
+        attribute to be removed.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-attributesType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "attributes" element enables attributes of DOM elements matching the "id"
+        attribute to be updated.  If this element is used, then it must contain at
+        least one "attribute" element.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="attribute"
+                   minOccurs="1"
+                   maxOccurs="unbounded">
+
+        <!-- **************************************************** -->
+
+        <xsd:complexType>
+          <xsd:attribute name="name"
+                         type="xsd:string"
+                         use="required"/>
+          <xsd:attribute name="value"
+                         type="xsd:string"
+                         use="required"/>
+        </xsd:complexType>
+      </xsd:element>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-redirectType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "redirect" element enables a redirect to the location as specified by the
+        "url" attribute.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:attribute name="url"
+                   type="xsd:string"
+                   use="required"/>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-errorType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+
+        The "error" element contains error information from the server.
+
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:element name="error-name"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+      <xsd:element name="error-message"
+                   type="xsd:string"
+                   minOccurs="1"
+                   maxOccurs="1"/>
+    </xsd:sequence>
+  </xsd:complexType>
+
+
+  <!-- **************************************************** -->
+
+  <xsd:complexType name="partial-response-extensionType">
+    <xsd:annotation>
+      <xsd:documentation>
+        <![CDATA[
+        [
+        <p>
+        Extension element for partial response.  It may contain
+        implementation specific content.
+        </p>
+
+        ]]>
+      </xsd:documentation>
+    </xsd:annotation>
+    <xsd:sequence>
+      <xsd:any namespace="##any"
+               processContents="lax"
+               minOccurs="0"
+               maxOccurs="unbounded"/>
+    </xsd:sequence>
+    <xsd:attribute name="id"
+                   type="xsd:ID"/>
+  </xsd:complexType>
+
+</xsd:schema>
diff --git a/wildfly/docs/schema/wildfly-agroal_1_0.xsd b/wildfly/docs/schema/wildfly-agroal_1_0.xsd
new file mode 100644
index 0000000..15f08c0
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-agroal_1_0.xsd
@@ -0,0 +1,276 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" targetNamespace="urn:jboss:domain:datasources-agroal:1.0"
+           xmlns="urn:jboss:domain:datasources-agroal:1.0" xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           elementFormDefault="qualified" version="1.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation><![CDATA[ The configuration of the agroal subsystem ]]></xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="datasource" type="datasourceType">
+                    <xs:annotation>
+                        <xs:documentation><![CDATA[ A datasource ]]></xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="xa-datasource" type="xaDatasourceType">
+                    <xs:annotation>
+                        <xs:documentation><![CDATA[ A XA datasource ]]></xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="drivers" type="driversType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ List of available JDBC drivers ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- common datasource attributes -->
+
+    <xs:attributeGroup name="common-datasourceAttributes">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Name for the datasource (used for management) ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ JNDI name for the datasource ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Enable statistics for this datasource ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <!-- datasource -->
+
+    <xs:complexType name="datasourceType">
+        <xs:all>
+            <xs:element name="connection-factory" type="connectionFactoryType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection factory ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="connectionPoolType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection pool ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="jta" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Enable JTA integration ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connectable" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Enable CMR (Commit Markable Resource) functionality on this datasource ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attributeGroup ref="common-datasourceAttributes"/>
+    </xs:complexType>
+
+    <!-- xa-datasource -->
+
+    <xs:complexType name="xaDatasourceType">
+        <xs:all>
+            <xs:element name="connection-factory" type="connectionFactoryType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection factory ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="connectionPoolType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection pool ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attributeGroup ref="common-datasourceAttributes"/>
+    </xs:complexType>
+
+    <!-- connection-factory -->
+
+    <xs:complexType name="connectionFactoryType">
+        <xs:all>
+            <xs:element name="connection-properties" type="connectionPropertiesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Properties for the JDBC driver ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Access to credentials defined through CredentialStorage. Alternative to username / password. ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="driver" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Unique reference to the JDBC driver ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ JDBC driver connection URL (e.g. "jdbc:h2:tcp://localhost:1234") ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transaction-isolation" type="transactionIsolationType">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Set the java.sql.Connection transaction isolation level to use ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-connection-sql" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ SQL statement to be executed on a connection after creation ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Username to use for basic authentication with the database ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Password to use for basic authentication with the database ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Reference to a authentication context in Elytron. Alternative to username / password. ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="transactionIsolationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[ Define constants used as the possible transaction isolation levels in transaction-isolation type ]>
+                <![CDATA[ Include: NONE, READ_UNCOMMITTED, READ_COMMITTED, REPEATABLE_READ, SERIALIZABLE ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE"/>
+            <xs:enumeration value="READ_UNCOMMITTED"/>
+            <xs:enumeration value="READ_COMMITTED"/>
+            <xs:enumeration value="REPEATABLE_READ"/>
+            <xs:enumeration value="SERIALIZABLE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <!-- connection-factory features -->
+
+    <xs:complexType name="connectionPropertiesType">
+        <xs:sequence minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="connectionPropertyType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[ Properties to be passed to the JDBC driver when creating a connection ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="connectionPropertyType">
+        <xs:attribute name="name" type="xs:token" use="required"/>
+        <xs:attribute name="value" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <!-- connection-pool -->
+
+    <xs:complexType name="connectionPoolType">
+        <xs:attribute name="max-size" type="xs:nonNegativeInteger" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Maximum number of connections in the pool ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-size" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Minimum number of connections the pool should hold ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-size" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Initial number of connections the pool should hold ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="blocking-timeout" type="xs:nonNegativeInteger" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Maximum time in milliseconds to block while waiting for a connection before throwing an exception ]]>
+                    <![CDATA[ This will never throw an exception if creating a new connection takes an inordinately long period of time ]]>
+                    <![CDATA[ Default is 0 meaning that a call will wait indefinitely ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="background-validation" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Time in milliseconds between background validation runs ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="leak-detection" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Time in milliseconds a connection has to be held before a leak warning ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="idle-removal" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Time in minutes a connection has to be idle before it can be removed ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- drivers -->
+
+    <xs:complexType name="driversType">
+        <xs:sequence>
+            <xs:element name="driver" type="driverType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Reference to a JDBC driver class ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="driverType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Symbolic name of this JDBC driver (used to reference this driver) ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Name of module providing this driver ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Fully qualified name of the connection provider class (either java.sql.Driver class (e.g. "org.h2.Driver"), javax.sql.DataSource or javax.sql.XADataSource) ]]>
+                    <![CDATA[ If this property is not set, the subsystem will try to load the driver using ServiceLoader ]]>
+                    <![CDATA[ XADataSource is required for xa-datasource ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-agroal_2_0.xsd b/wildfly/docs/schema/wildfly-agroal_2_0.xsd
new file mode 100644
index 0000000..c015073
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-agroal_2_0.xsd
@@ -0,0 +1,276 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" targetNamespace="urn:jboss:domain:datasources-agroal:2.0"
+           xmlns="urn:jboss:domain:datasources-agroal:2.0" xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" version="1.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation><![CDATA[ The configuration of the agroal subsystem ]]></xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="0" maxOccurs="unbounded">
+                <xs:element name="datasource" type="datasourceType">
+                    <xs:annotation>
+                        <xs:documentation><![CDATA[ A datasource ]]></xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="xa-datasource" type="xaDatasourceType">
+                    <xs:annotation>
+                        <xs:documentation><![CDATA[ A XA datasource ]]></xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="drivers" type="driversType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ List of available JDBC drivers ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- common datasource attributes -->
+
+    <xs:attributeGroup name="common-datasourceAttributes">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Name for the datasource (used for management) ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ JNDI name for the datasource ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Enable statistics for this datasource ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <!-- datasource -->
+
+    <xs:complexType name="datasourceType">
+        <xs:all>
+            <xs:element name="connection-factory" type="connectionFactoryType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection factory ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="connectionPoolType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection pool ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="jta" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Enable JTA integration ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connectable" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Enable CMR (Commit Markable Resource) functionality on this datasource ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attributeGroup ref="common-datasourceAttributes"/>
+    </xs:complexType>
+
+    <!-- xa-datasource -->
+
+    <xs:complexType name="xaDatasourceType">
+        <xs:all>
+            <xs:element name="connection-factory" type="connectionFactoryType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection factory ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool" type="connectionPoolType">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Configuration for the connection pool ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attributeGroup ref="common-datasourceAttributes"/>
+    </xs:complexType>
+
+    <!-- connection-factory -->
+
+    <xs:complexType name="connectionFactoryType">
+        <xs:all>
+            <xs:element name="connection-properties" type="connectionPropertiesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Properties for the JDBC driver ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Access to credentials defined through CredentialStorage. Alternative to username / password. ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="driver" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Unique reference to the JDBC driver ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ JDBC driver connection URL (e.g. "jdbc:h2:tcp://localhost:1234") ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transaction-isolation" type="transactionIsolationType">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Set the java.sql.Connection transaction isolation level to use ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-connection-sql" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ SQL statement to be executed on a connection after creation ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Username to use for basic authentication with the database ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Password to use for basic authentication with the database ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:token">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Reference to a authentication context in Elytron. Alternative to username / password. ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="transactionIsolationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[ Define constants used as the possible transaction isolation levels in transaction-isolation type ]>
+                <![CDATA[ Include: NONE, READ_UNCOMMITTED, READ_COMMITTED, REPEATABLE_READ, SERIALIZABLE ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NONE"/>
+            <xs:enumeration value="READ_UNCOMMITTED"/>
+            <xs:enumeration value="READ_COMMITTED"/>
+            <xs:enumeration value="REPEATABLE_READ"/>
+            <xs:enumeration value="SERIALIZABLE"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <!-- connection-factory features -->
+
+    <xs:complexType name="connectionPropertiesType">
+        <xs:sequence minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="connectionPropertyType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[ Properties to be passed to the JDBC driver when creating a connection ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="connectionPropertyType">
+        <xs:attribute name="name" type="xs:token" use="required"/>
+        <xs:attribute name="value" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <!-- connection-pool -->
+
+    <xs:complexType name="connectionPoolType">
+        <xs:attribute name="max-size" type="xs:nonNegativeInteger" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Maximum number of connections in the pool ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="min-size" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Minimum number of connections the pool should hold ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-size" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Initial number of connections the pool should hold ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="blocking-timeout" type="xs:nonNegativeInteger" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Maximum time in milliseconds to block while waiting for a connection before throwing an exception ]]>
+                    <![CDATA[ This will never throw an exception if creating a new connection takes an inordinately long period of time ]]>
+                    <![CDATA[ Default is 0 meaning that a call will wait indefinitely ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="background-validation" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Time in milliseconds between background validation runs ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="leak-detection" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Time in milliseconds a connection has to be held before a leak warning ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="idle-removal" type="xs:nonNegativeInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Time in minutes a connection has to be idle before it can be removed ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- drivers -->
+
+    <xs:complexType name="driversType">
+        <xs:sequence>
+            <xs:element name="driver" type="driverType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation><![CDATA[ Reference to a JDBC driver class ]]></xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="driverType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Symbolic name of this JDBC driver (used to reference this driver) ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation><![CDATA[ Name of module providing this driver ]]></xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class" type="xs:token">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Fully qualified name of the connection provider class (either java.sql.Driver class (e.g. "org.h2.Driver"), javax.sql.DataSource or javax.sql.XADataSource) ]]>
+                    <![CDATA[ If this property is not set, the subsystem will try to load the driver using ServiceLoader ]]>
+                    <![CDATA[ XADataSource is required for xa-datasource ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-batch-jberet_1_0.xsd b/wildfly/docs/schema/wildfly-batch-jberet_1_0.xsd
new file mode 100644
index 0000000..037689d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-batch-jberet_1_0.xsd
@@ -0,0 +1,126 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:batch-jberet:1.0"
+           targetNamespace="urn:jboss:domain:batch-jberet:1.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The batch subsystem root element -->
+    <xs:element name="subsystem" type="batch-subsystemType"/>
+
+    <xs:complexType name="batch-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the batch subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="default-job-repository" type="namedType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the default job-repository for the batch environment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-thread-pool" type="namedType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the default thread-pool for the batch environment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="restart-jobs-on-resume" type="booleanType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        If set to true when a resume operation has be invoked after a suspend operation any jobs stopped
+                        during the suspend will be restarted. A value of false will leave the jobs in a stopped state.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="job-repository" type="job-repositoryType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="thread-pool" type="thread-poolType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="thread-factory" type="threads:thread-factory" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanType">
+        <xs:attribute name="value" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="job-repositoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The name of the job repository to use
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="in-memory" type="in-memoryType"/>
+            <xs:element name="jdbc" type="jdbcType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-memoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe an in-memory job repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe how the job repository should connect to a database.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="data-source" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="thread-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-batch-jberet_2_0.xsd b/wildfly/docs/schema/wildfly-batch-jberet_2_0.xsd
new file mode 100644
index 0000000..f2fc98d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-batch-jberet_2_0.xsd
@@ -0,0 +1,133 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:batch-jberet:2.0"
+           targetNamespace="urn:jboss:domain:batch-jberet:2.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The batch subsystem root element -->
+    <xs:element name="subsystem" type="batch-subsystemType"/>
+
+    <xs:complexType name="batch-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the batch subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="default-job-repository" type="namedType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the default job-repository for the batch environment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-thread-pool" type="namedType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the default thread-pool for the batch environment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="restart-jobs-on-resume" type="booleanType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        If set to true when a resume operation has be invoked after a suspend operation any jobs stopped
+                        during the suspend will be restarted. A value of false will leave the jobs in a stopped state.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security-domain" type="namedType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the name of the default security domain to use as a default for batch jobs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="job-repository" type="job-repositoryType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="thread-pool" type="thread-poolType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="thread-factory" type="threads:thread-factory" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanType">
+        <xs:attribute name="value" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="job-repositoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The name of the job repository to use
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="in-memory" type="in-memoryType"/>
+            <xs:element name="jdbc" type="jdbcType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-memoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe an in-memory job repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe how the job repository should connect to a database.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="data-source" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="thread-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-batch-jberet_3_0.xsd b/wildfly/docs/schema/wildfly-batch-jberet_3_0.xsd
new file mode 100644
index 0000000..77643ae
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-batch-jberet_3_0.xsd
@@ -0,0 +1,134 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:batch-jberet:3.0"
+           targetNamespace="urn:jboss:domain:batch-jberet:3.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The batch subsystem root element -->
+    <xs:element name="subsystem" type="batch-subsystemType"/>
+
+    <xs:complexType name="batch-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the batch subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="default-job-repository" type="namedType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the default job-repository for the batch environment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-thread-pool" type="namedType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the default thread-pool for the batch environment.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="restart-jobs-on-resume" type="booleanType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        If set to true when a resume operation has be invoked after a suspend operation any jobs stopped
+                        during the suspend will be restarted. A value of false will leave the jobs in a stopped state.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="security-domain" type="namedType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Defines the name of the default security domain to use as a default for batch jobs.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="job-repository" type="job-repositoryType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="thread-pool" type="thread-poolType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="thread-factory" type="threads:thread-factory" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="booleanType">
+        <xs:attribute name="value" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="job-repositoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The name of the job repository to use
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="1">
+            <xs:element name="in-memory" type="in-memoryType"/>
+            <xs:element name="jdbc" type="jdbcType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="execution-records-limit" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-memoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe an in-memory job repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        Used to describe how the job repository should connect to a database.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="data-source" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="thread-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-bean-validation_1_0.xsd b/wildfly/docs/schema/wildfly-bean-validation_1_0.xsd
new file mode 100644
index 0000000..3661f03
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-bean-validation_1_0.xsd
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:bean-validation:1.0"
+           targetNamespace="urn:jboss:domain:bean-validation:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The bean-validation subsystem root element -->
+    <xs:element name="subsystem" type="bean-validation-subsystemType"/>
+    <xs:complexType name="bean-validation-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the bean-validation subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>        
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-cli_3_0.xsd b/wildfly/docs/schema/wildfly-cli_3_0.xsd
new file mode 100644
index 0000000..12ee9e5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-cli_3_0.xsd
@@ -0,0 +1,228 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:3.0" targetNamespace="urn:jboss:cli:3.0"
+    elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="http-remoting">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remoting
+                                            protocol - this attribute set to true causes the protocol to default to remoting if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be http-remoting if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+                            
+                            Even if the value is false, the messages will still be logged using 
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault" type="vaultType" minOccurs="0" />
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-cli_3_1.xsd b/wildfly/docs/schema/wildfly-cli_3_1.xsd
new file mode 100644
index 0000000..fb5ac95
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-cli_3_1.xsd
@@ -0,0 +1,245 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:3.1" targetNamespace="urn:jboss:cli:3.1"
+    elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="remote+http">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remote
+                                            protocol - this attribute set to true causes the protocol to default to remote if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be remote+http if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+                            
+                            Even if the value is false, the messages will still be logged using 
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                
+                <xs:element name="echo-command" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Commands executed in non interactive modes (scripts, list of commands, CLI API), have their name and list of options
+                            printed prior to the command actual output. This does help match command with printed result.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="command-timeout" type="xs:int" default="0" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of seconds the CLI will wait for a command to complete. Default timeout of 0 means no timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault" type="vaultType" minOccurs="0" />
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-cli_3_2.xsd b/wildfly/docs/schema/wildfly-cli_3_2.xsd
new file mode 100644
index 0000000..ddcab75
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-cli_3_2.xsd
@@ -0,0 +1,254 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:3.2" targetNamespace="urn:jboss:cli:3.2"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="remote+http">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remote
+                                            protocol - this attribute set to true causes the protocol to default to remote if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be remote+http if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+
+                            Even if the value is false, the messages will still be logged using
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="echo-command" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Commands executed in non interactive modes (scripts, list of commands, CLI API), have their name and list of options
+                            printed prior to the command actual output. This does help match command with printed result.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="command-timeout" type="xs:int" default="0" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of seconds the CLI will wait for a command to complete. Default timeout of 0 means no timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="output-json" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Display operation responses using JSON syntax. By default responses are displayed using
+                            DMR string syntax.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault" type="vaultType" minOccurs="0" />
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-cli_3_3.xsd b/wildfly/docs/schema/wildfly-cli_3_3.xsd
new file mode 100644
index 0000000..f3f98fc
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-cli_3_3.xsd
@@ -0,0 +1,293 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:3.3" targetNamespace="urn:jboss:cli:3.3"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="remote+http">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remote
+                                            protocol - this attribute set to true causes the protocol to default to remote if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be remote+http if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+
+                            Even if the value is false, the messages will still be logged using
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="echo-command" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Commands executed in non interactive modes (scripts, list of commands, CLI API), have their name and list of options
+                            printed prior to the command actual output. This does help match command with printed result.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="command-timeout" type="xs:int" default="0" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of seconds the CLI will wait for a command to complete. Default timeout of 0 means no timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="output-json" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Display operation responses using JSON syntax. By default responses are displayed using
+                            DMR string syntax.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="color-output" type="colorConfigType" minOccurs="0" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault" type="vaultType" minOccurs="0" />
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="colorConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables/disables and configures the CLI color output. Only foreground colors are configurable.
+                Available colors: black, blue, cyan, green, magenta, red, white, yellow and default.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" default="true" minOccurs="1"/>
+            <xs:element name="error-color" type="colorChoiceType" default="red"/>
+            <xs:element name="warn-color" type="colorChoiceType" default="yellow"/>
+            <xs:element name="success-color" type="colorChoiceType" default="default"/>
+            <xs:element name="required-color" type="colorChoiceType" default="magenta"/>
+            <xs:element name="workflow-color" type="colorChoiceType" default="green"/>
+            <xs:element name="prompt-color" type="colorChoiceType" default="blue"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="colorChoiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The available color choices
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="black" />
+            <xs:enumeration value="blue" />
+            <xs:enumeration value="cyan" />
+            <xs:enumeration value="green" />
+            <xs:enumeration value="magenta" />
+            <xs:enumeration value="red" />
+            <xs:enumeration value="white" />
+            <xs:enumeration value="yellow" />
+            <xs:enumeration value="default" />
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-cli_3_4.xsd b/wildfly/docs/schema/wildfly-cli_3_4.xsd
new file mode 100644
index 0000000..2200d91
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-cli_3_4.xsd
@@ -0,0 +1,305 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:3.4" targetNamespace="urn:jboss:cli:3.4"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="remote+http">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remote
+                                            protocol - this attribute set to true causes the protocol to default to remote if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be remote+http if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+
+                            Even if the value is false, the messages will still be logged using
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="echo-command" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Commands executed in non interactive modes (scripts, list of commands, CLI API), have their name and list of options
+                            printed prior to the command actual output. This does help match command with printed result.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="command-timeout" type="xs:int" default="0" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of seconds the CLI will wait for a command to complete. Default timeout of 0 means no timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="output-json" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Display operation responses using JSON syntax. By default responses are displayed using
+                            DMR string syntax.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="color-output" type="colorConfigType" minOccurs="0" />
+
+                <xs:element name="output-paging" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            By default, if the OS supports it, the output of commands is not printed at once,
+                            instead you can scroll through it and search in it.
+                            This behaviour is similar to 'less' linux command.
+                            When this option is set to false the paging will be disabled
+                            and the whole output of all commands will be written at once(useful e.g.for copy/paste).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault" type="vaultType" minOccurs="0" />
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="colorConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables/disables and configures the CLI color output. Only foreground colors are configurable.
+                Available colors: black, blue, cyan, green, magenta, red, white, yellow and default.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" default="true" minOccurs="1"/>
+            <xs:element name="error-color" type="colorChoiceType" default="red"/>
+            <xs:element name="warn-color" type="colorChoiceType" default="yellow"/>
+            <xs:element name="success-color" type="colorChoiceType" default="default"/>
+            <xs:element name="required-color" type="colorChoiceType" default="magenta"/>
+            <xs:element name="workflow-color" type="colorChoiceType" default="green"/>
+            <xs:element name="prompt-color" type="colorChoiceType" default="blue"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="colorChoiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The available color choices
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="black" />
+            <xs:enumeration value="blue" />
+            <xs:enumeration value="cyan" />
+            <xs:enumeration value="green" />
+            <xs:enumeration value="magenta" />
+            <xs:enumeration value="red" />
+            <xs:enumeration value="white" />
+            <xs:enumeration value="yellow" />
+            <xs:enumeration value="default" />
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-cli_4_0.xsd b/wildfly/docs/schema/wildfly-cli_4_0.xsd
new file mode 100644
index 0000000..0c27d89
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-cli_4_0.xsd
@@ -0,0 +1,282 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema" xmlns="urn:jboss:cli:4.0" targetNamespace="urn:jboss:cli:4.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:element name="jboss-cli">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the WildFly Command Line Interface configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="default-protocol" minOccurs="0" default="remote+http">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The default protocol to use when controller addresses are supplied without one.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:simpleContent>
+                            <xs:extension base="xs:string">
+                                <xs:attribute name="use-legacy-override" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default protocol is used where a connection address is specified and no
+                                            protocol is specified, in previous versions the port 9999 would have been used with the remote
+                                            protocol - this attribute set to true causes the protocol to default to remote if the port
+                                            number is 9999.
+
+                                            If this attribute is set to false then the specified default is used regardless
+                                            of the port number for addresses with no protocol.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:simpleContent>
+                    </xs:complexType>
+                </xs:element>
+
+                <xs:element name="default-controller" type="controllerAddress" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If no default controller is specifed then the default will be assumed to be using host 'localhost'
+                            along with the default-protocol (Which will be remote+http if not defined) and the port will be whatever
+                            default corresponds to the selected protocol.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="controllers" type="controllersType" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The names controller alias mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="validate-operation-requests" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates whether the parameter list of the operation reuqests should be validated before the
+                            requests are sent to the controller for the execution.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="history" type="historyType" minOccurs="0" />
+
+                <xs:element name="resolve-parameter-values" type="xs:boolean" minOccurs="0" maxOccurs="1" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to resolve system properties specified as command argument (or operation parameter) values
+                            before sending the operation request to the controller or let the resolution happen on the server side.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="connection-timeout" type="xs:int" default="5000" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time allowed to establish a connection with the controller.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="ssl" type="sslType" minOccurs="0" />
+
+                <xs:element name="silent" type="xs:boolean" default="false" minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether to write info and error messages to the terminal output.
+
+                            Even if the value is false, the messages will still be logged using
+                            the logger if its configuration allows and/or if the output target was
+                            specified as part of the command line using '>'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="access-control" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the management-related commands and attributes should be filtered for the current user
+                            based on the permissions the user has been granted. In other words, if access-control is true, the
+                            tab-completion will hide commands and attributes the user is not allowed to access. In case the user attempts to
+                            execute a command or an operation without having sufficient permissions to do so, regardless of the value this
+                            element has, the attempt will fail with an access control error.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="echo-command" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Commands executed in non interactive modes (scripts, list of commands, CLI API), have their name and list of options
+                            printed prior to the command actual output. This does help match command with printed result.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="command-timeout" type="xs:int" default="0" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of seconds the CLI will wait for a command to complete. Default timeout of 0 means no timeout.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="output-json" type="xs:boolean" default="false" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Display operation responses using JSON syntax. By default responses are displayed using
+                            DMR string syntax.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+
+                <xs:element name="color-output" type="colorConfigType" minOccurs="0" />
+
+                <xs:element name="output-paging" type="xs:boolean" default="true" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            By default, if the OS supports it, the output of commands is not printed at once,
+                            instead you can scroll through it and search in it.
+                            This behaviour is similar to 'less' linux command.
+                            When this option is set to false the paging will be disabled
+                            and the whole output of all commands will be written at once(useful e.g.for copy/paste).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="controllerAddress">
+        <xs:annotation>
+            <xs:documentation>
+                The address of a controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="protocol" type="xs:string" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If no protocol is specified then the value for 'default-protocol' will be used.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="host" type="xs:string" minOccurs="0" default="localhost" />
+            <xs:element name="port" type="xs:int" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        If a port is not specified then the default port will be identified based on the protocol selected.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="namedController">
+        <xs:complexContent>
+            <xs:extension base="controllerAddress">
+                <xs:attribute name="name" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of this controller alias.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="controllersType">
+        <xs:sequence>
+            <xs:element name="controller" type="namedController" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="historyType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the commands and operations history log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" minOccurs="0" default="true" />
+            <xs:element name="file-name" type="xs:string" minOccurs="0" default=".jboss-cli-history" />
+            <xs:element name="file-dir" type="xs:string" minOccurs="0" default="${user.home}" />
+            <xs:element name="max-size" type="xs:int" minOccurs="0" default="500" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                This element contains the configuration for the Key and Trust stores
+                used for SSL.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-store" type="xs:string" minOccurs="0" />
+            <xs:element name="key-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="alias" type="xs:string" minOccurs="0" />
+            <xs:element name="key-password" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store" type="xs:string" minOccurs="0" />
+            <xs:element name="trust-store-password" type="xs:string" minOccurs="0" />
+            <xs:element name="modify-trust-store" type="xs:boolean" default="true" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Setting to true will cause the CLI to prompt when unrecognised certificates are received and allow
+                        them to be stored in the truststore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="colorConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables/disables and configures the CLI color output. Only foreground colors are configurable.
+                Available colors: black, blue, cyan, green, magenta, red, white, yellow and default.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="enabled" type="xs:boolean" default="true" minOccurs="1"/>
+            <xs:element name="error-color" type="colorChoiceType" default="red"/>
+            <xs:element name="warn-color" type="colorChoiceType" default="yellow"/>
+            <xs:element name="success-color" type="colorChoiceType" default="default"/>
+            <xs:element name="required-color" type="colorChoiceType" default="magenta"/>
+            <xs:element name="workflow-color" type="colorChoiceType" default="green"/>
+            <xs:element name="prompt-color" type="colorChoiceType" default="blue"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="colorChoiceType">
+        <xs:annotation>
+            <xs:documentation>
+                The available color choices
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="black" />
+            <xs:enumeration value="blue" />
+            <xs:enumeration value="cyan" />
+            <xs:enumeration value="green" />
+            <xs:enumeration value="magenta" />
+            <xs:enumeration value="red" />
+            <xs:enumeration value="white" />
+            <xs:enumeration value="yellow" />
+            <xs:enumeration value="default" />
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-client-ejb_3_0.xsd b/wildfly/docs/schema/wildfly-client-ejb_3_0.xsd
new file mode 100644
index 0000000..ea49c4a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-client-ejb_3_0.xsd
@@ -0,0 +1,136 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:wildfly-client-ejb:3.0"
+            xmlns="urn:jboss:wildfly-client-ejb:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root elements -->
+
+    <xsd:element name="jboss-ejb-client" type="ejb-client-type"/>
+
+    <!-- Types -->
+
+    <xsd:complexType name="ejb-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Container for EJB client configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="invocation-timeout" type="invocation-timeout-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="global-interceptors" type="interceptors-type" minOccurs="0" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Container for global EJB client interceptor definitions.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connections" type="connections-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="invocation-timeout-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB invocation timeout.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="seconds" type="xsd:integer" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in seconds, for the EJB handshake or method invocation request/response cycle.
+                    The invocation of any method throws a java.util.concurrent.TimeoutException if the execution
+                    takes longer than the timeout period. The server side will not be interrupted.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Interceptors -->
+
+    <xsd:complexType name="interceptors-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="interceptor" type="interceptor-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="interceptor-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB client interceptor.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.EJBClientInterceptor interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the interceptor class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Connections -->
+
+    <xsd:complexType name="connections-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Container for EJB client connection definitions.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="connection" type="connection-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB client connection.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="interceptors" type="interceptors-type" minOccurs="0" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Container for EJB client interceptor definitions.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The connection destination URI.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-client-ejb_3_1.xsd b/wildfly/docs/schema/wildfly-client-ejb_3_1.xsd
new file mode 100644
index 0000000..36d71da
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-client-ejb_3_1.xsd
@@ -0,0 +1,182 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:wildfly-client-ejb:3.1"
+            xmlns="urn:jboss:wildfly-client-ejb:3.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root elements -->
+
+    <xsd:element name="jboss-ejb-client" type="ejb-client-type"/>
+
+    <!-- Types -->
+
+    <xsd:complexType name="ejb-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Container for EJB client configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="invocation-timeout" type="invocation-timeout-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="global-interceptors" type="interceptors-type" minOccurs="0" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Container for global EJB client interceptor definitions.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connections" type="connections-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="deployment-node-selector" type="deployment-node-selector-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="cluster-node-selector" type="cluster-node-selector-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="invocation-timeout-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB invocation timeout.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="seconds" type="xsd:integer" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in seconds, for the EJB handshake or method invocation request/response cycle.
+                    The invocation of any method throws a java.util.concurrent.TimeoutException if the execution
+                    takes longer than the timeout period. The server side will not be interrupted.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="deployment-node-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of a DeploymentNodeSelctor
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.DeploymentNodeSelector interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the node selector class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="cluster-node-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of a ClusterNodeSelctor
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.ClusterNodeSelector interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the node selector class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Interceptors -->
+
+    <xsd:complexType name="interceptors-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="interceptor" type="interceptor-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="interceptor-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB client interceptor.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.EJBClientInterceptor interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the interceptor class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Connections -->
+
+    <xsd:complexType name="connections-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Container for EJB client connection definitions.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="connection" type="connection-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB client connection.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="interceptors" type="interceptors-type" minOccurs="0" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Container for EJB client interceptor definitions.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The connection destination URI.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-client-ejb_3_2.xsd b/wildfly/docs/schema/wildfly-client-ejb_3_2.xsd
new file mode 100644
index 0000000..a0f48cb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-client-ejb_3_2.xsd
@@ -0,0 +1,198 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:wildfly-client-ejb:3.2"
+            xmlns="urn:jboss:wildfly-client-ejb:3.2"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Root elements -->
+
+    <xsd:element name="jboss-ejb-client" type="ejb-client-type"/>
+
+    <!-- Types -->
+
+    <xsd:complexType name="ejb-client-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Container for EJB client configuration.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="invocation-timeout" type="invocation-timeout-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="global-interceptors" type="interceptors-type" minOccurs="0" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Container for global EJB client interceptor definitions.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+            <xsd:element name="connections" type="connections-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="deployment-node-selector" type="deployment-node-selector-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="cluster-node-selector" type="cluster-node-selector-type" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="max-allowed-connected-nodes" type="max-allowed-connected-nodes-type" minOccurs="0" maxOccurs="1"/>
+        </xsd:all>
+    </xsd:complexType>
+
+    <xsd:complexType name="invocation-timeout-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB invocation timeout.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="seconds" type="xsd:integer" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The timeout, in seconds, for the EJB handshake or method invocation request/response cycle.
+                    The invocation of any method throws a java.util.concurrent.TimeoutException if the execution
+                    takes longer than the timeout period. The server side will not be interrupted.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="deployment-node-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of a DeploymentNodeSelctor
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.DeploymentNodeSelector interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the node selector class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="cluster-node-selector-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of a ClusterNodeSelctor
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.ClusterNodeSelector interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the node selector class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Interceptors -->
+
+    <xsd:complexType name="interceptors-type">
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="interceptor" type="interceptor-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="interceptor-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB client interceptor.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a class that implements the org.jboss.ejb.client.EJBClientInterceptor interface.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of the module that should be used to load the interceptor class.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <!-- Connections -->
+
+    <xsd:complexType name="connections-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Container for EJB client connection definitions.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:choice minOccurs="0" maxOccurs="unbounded">
+            <xsd:element name="connection" type="connection-type"/>
+        </xsd:choice>
+    </xsd:complexType>
+
+    <xsd:complexType name="connection-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of an EJB client connection.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:all minOccurs="1" maxOccurs="1">
+            <xsd:element name="interceptors" type="interceptors-type" minOccurs="0" maxOccurs="1">
+                <xsd:annotation>
+                    <xsd:documentation>
+                        Container for EJB client interceptor definitions.
+                    </xsd:documentation>
+                </xsd:annotation>
+            </xsd:element>
+        </xsd:all>
+        <xsd:attribute name="uri" type="xsd:anyURI" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The connection destination URI.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="max-allowed-connected-nodes-type">
+        <xsd:annotation>
+            <xsd:documentation>
+                Definition of maximum connected cluster nodes.
+            </xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="nodes" type="xsd:integer" use="required">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The maximum number of connected cluster nodes, for connection-based protocols which support eager connection.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-client_1_0.xsd b/wildfly/docs/schema/wildfly-client_1_0.xsd
new file mode 100644
index 0000000..1074eda
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-client_1_0.xsd
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:client:1.0"
+            xmlns="urn:wildfly:client:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="configuration">
+        <xs:complexType>
+            <xs:choice maxOccurs="unbounded">
+                <xs:any namespace="##other"/>
+            </xs:choice>
+        </xs:complexType>
+    </xs:element>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-config_10_0.xsd b/wildfly/docs/schema/wildfly-config_10_0.xsd
new file mode 100644
index 0000000..5bf31c9
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_10_0.xsd
@@ -0,0 +1,4986 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:10.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:10.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_11_0.xsd b/wildfly/docs/schema/wildfly-config_11_0.xsd
new file mode 100644
index 0000000..54eaa8c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_11_0.xsd
@@ -0,0 +1,5030 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:11.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:11.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_12_0.xsd b/wildfly/docs/schema/wildfly-config_12_0.xsd
new file mode 100644
index 0000000..ce7b500
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_12_0.xsd
@@ -0,0 +1,5066 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:12.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:12.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_13_0.xsd b/wildfly/docs/schema/wildfly-config_13_0.xsd
new file mode 100644
index 0000000..e04a439
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_13_0.xsd
@@ -0,0 +1,5075 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:13.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:13.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly19.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 12.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_14_0.xsd b/wildfly/docs/schema/wildfly-config_14_0.xsd
new file mode 100644
index 0000000..829c1a2
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_14_0.xsd
@@ -0,0 +1,5090 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:14.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:14.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly19.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 12.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_15_0.xsd b/wildfly/docs/schema/wildfly-config_15_0.xsd
new file mode 100644
index 0000000..444c483
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_15_0.xsd
@@ -0,0 +1,5108 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:15.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:15.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly19.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 12.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly20.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 13.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly21.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 14.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_16_0.xsd b/wildfly/docs/schema/wildfly-config_16_0.xsd
new file mode 100644
index 0000000..7288ab9
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_16_0.xsd
@@ -0,0 +1,5126 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:16.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:16.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="graceful-startup" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers in the group start gracefully, queuing or cleanly rejecting incoming
+                    requests until the server is fully started. If set to false, the server will pass the request to the
+                    appropriate subsystem for processing, irrespective of whether or not that system is ready.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly19.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 12.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly20.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 13.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly21.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 14.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly22.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 15.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_17_0.xsd b/wildfly/docs/schema/wildfly-config_17_0.xsd
new file mode 100644
index 0000000..758e486
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_17_0.xsd
@@ -0,0 +1,5144 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:17.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:17.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="graceful-startup" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers in the group start gracefully, queuing or cleanly rejecting incoming
+                    requests until the server is fully started. If set to false, the server will pass the request to the
+                    appropriate subsystem for processing, irrespective of whether or not that system is ready.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly19.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 12.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly20.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 13.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly21.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 14.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly22.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 15.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 16.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly23.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 16.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_18_0.xsd b/wildfly/docs/schema/wildfly-config_18_0.xsd
new file mode 100644
index 0000000..9f93694
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_18_0.xsd
@@ -0,0 +1,4083 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:18.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:18.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+        <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+                <xs:attribute name="compact" type="xs:boolean" default="false">
+                    <xs:annotation>
+                       <xs:documentation>
+                           If true will format the JSON on one line. There may still be
+                           values containing new lines, so if having the whole record on
+                           one line is important, set escape-new-line or escape-control-characters to true.
+                       </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="RFC5424">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="RFC3164">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="max-length" type="xs:int">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+                        <xs:enumeration value="KERNEL">
+        	                <xs:annotation>
+        	                   <xs:documentation>0</xs:documentation>
+        	                </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                    </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the authentication
+                        factory associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="graceful-startup" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers in the group start gracefully, queuing or cleanly rejecting incoming
+                    requests until the server is fully started. If set to false, the server will pass the request to the
+                    appropriate subsystem for processing, irrespective of whether or not that system is ready.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly15.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 9.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly16.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly17.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly18.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly19.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 12.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly20.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 13.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly21.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 14.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 10.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly22.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 15.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 16.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly23.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 16.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly24.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 17.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_19_0.xsd b/wildfly/docs/schema/wildfly-config_19_0.xsd
new file mode 100644
index 0000000..33068af
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_19_0.xsd
@@ -0,0 +1,3879 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:19.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:19.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+        <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+                <xs:attribute name="compact" type="xs:boolean" default="false">
+                    <xs:annotation>
+                       <xs:documentation>
+                           If true will format the JSON on one line. There may still be
+                           values containing new lines, so if having the whole record on
+                           one line is important, set escape-new-line or escape-control-characters to true.
+                       </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="RFC5424">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="RFC3164">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="max-length" type="xs:int">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+                        <xs:enumeration value="KERNEL">
+        	                <xs:annotation>
+        	                   <xs:documentation>0</xs:documentation>
+        	                </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                    </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the authentication
+                        factory associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="graceful-startup" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers in the group start gracefully, queuing or cleanly rejecting incoming
+                    requests until the server is fully started. If set to false, the server will pass the request to the
+                    appropriate subsystem for processing, irrespective of whether or not that system is ready.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              The short hand identifier can have two forms:
+                              * EAP<major>.<minor> (for example, EAP6.2 or EAP7.3)
+                              * WildFly<major>.<minor> (for example WildFly10.0 or WildFly10.1)
+
+                              The corresponding kernel management API version is defined in the enum
+                              org.jboss.as.domain.controller.resources.HostExcludeResourceDefinition.KnownRelease.
+                            ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_20_0.xsd b/wildfly/docs/schema/wildfly-config_20_0.xsd
new file mode 100644
index 0000000..fc7906f
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_20_0.xsd
@@ -0,0 +1,3879 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:20.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:20.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the main document specifying the core configuration
+                for the servers in a domain. There should be one such main
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+        <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+                <xs:attribute name="compact" type="xs:boolean" default="false">
+                    <xs:annotation>
+                       <xs:documentation>
+                           If true will format the JSON on one line. There may still be
+                           values containing new lines, so if having the whole record on
+                           one line is important, set escape-new-line or escape-control-characters to true.
+                       </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="RFC5424">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="RFC3164">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="max-length" type="xs:int">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+                        <xs:enumeration value="KERNEL">
+        	                <xs:annotation>
+        	                   <xs:documentation>0</xs:documentation>
+        	                </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                    </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-domain-controller'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-domain-controller'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-domain-controller'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the Domain Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a secondary host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the authentication
+                        factory associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-domain-controller">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the Domain Controller to pull down
+                        the current domain wide configuration, but do not actually register with the Domain Controller as a member
+                        of the domain. If the Domain Controller cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a secondary Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                secondary Host Controller to a primary Host Controller running a later release, by letting the secondary
+                ignore portions of the configuration its version of the software cannot understand. This strategy can
+                only be successful if the servers managed by the secondary Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="graceful-startup" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers in the group start gracefully, queuing or cleanly rejecting incoming
+                    requests until the server is fully started. If set to false, the server will pass the request to the
+                    appropriate subsystem for processing, irrespective of whether or not that system is ready.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              The short hand identifier can have two forms:
+                              * EAP<major>.<minor> (for example, EAP6.2 or EAP7.3)
+                              * WildFly<major>.<minor> (for example WildFly10.0 or WildFly10.1)
+
+                              The corresponding kernel management API version is defined in the enum
+                              org.jboss.as.domain.controller.resources.HostExcludeResourceDefinition.KnownRelease.
+                            ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_3_0.xsd b/wildfly/docs/schema/wildfly-config_3_0.xsd
new file mode 100644
index 0000000..a407b12
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_3_0.xsd
@@ -0,0 +1,4348 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:3.0"
+           targetNamespace="urn:jboss:domain:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>                
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+                            
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host 
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+                            
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             3 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+                              
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+                                
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                    
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element> 
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM, 
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups 
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means 
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" />
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                    
+                    Note: When specified the interface must also be configured to reference a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to instruct the master Host Controller to automatically not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+    
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_4_0.xsd b/wildfly/docs/schema/wildfly-config_4_0.xsd
new file mode 100644
index 0000000..13bbd65
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_4_0.xsd
@@ -0,0 +1,4464 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:4.0"
+           targetNamespace="urn:jboss:domain:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+                            
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host 
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+                            
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+                              
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+                                
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+                    
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element> 
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM, 
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups 
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means 
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+                    
+                    Note: When specified the interface must also be configured to reference a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+    
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_4_1.xsd b/wildfly/docs/schema/wildfly-config_4_1.xsd
new file mode 100644
index 0000000..9c93808
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_4_1.xsd
@@ -0,0 +1,4709 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:4.1"
+           targetNamespace="urn:jboss:domain:4.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_4_2.xsd b/wildfly/docs/schema/wildfly-config_4_2.xsd
new file mode 100644
index 0000000..91cd18b
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_4_2.xsd
@@ -0,0 +1,4721 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:4.2"
+           targetNamespace="urn:jboss:domain:4.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="keystore-password" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+			        <xs:attribute name="path" type="xs:string" use="required">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The path of the audit log.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			        <xs:attribute name="relative-to" use="optional" type="xs:string">
+			            <xs:annotation>
+			                <xs:documentation>
+			                    The name of another previously named path, or of one of the
+			                    standard paths provided by the system. If 'relative-to' is
+			                    provided, the value of the 'path' attribute is treated as
+			                    relative to the path specified by this attribute.
+			                </xs:documentation>
+			            </xs:annotation>
+			        </xs:attribute>
+			   </xs:extension>
+			</xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified the security-realm will be required to obtain
+                            the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="http-upgrade-enabled" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <!-- XX:PermSize, XX:MaxPermSize -->
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0"/>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for a kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_5_0.xsd b/wildfly/docs/schema/wildfly-config_5_0.xsd
new file mode 100644
index 0000000..0d30496
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_5_0.xsd
@@ -0,0 +1,4965 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:5.0"
+           targetNamespace="urn:jboss:domain:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_6_0.xsd b/wildfly/docs/schema/wildfly-config_6_0.xsd
new file mode 100644
index 0000000..b369c5c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_6_0.xsd
@@ -0,0 +1,4965 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:6.0"
+           targetNamespace="urn:jboss:domain:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+    	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_7_0.xsd b/wildfly/docs/schema/wildfly-config_7_0.xsd
new file mode 100644
index 0000000..f0fed7c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_7_0.xsd
@@ -0,0 +1,4992 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:7.0"
+           targetNamespace="urn:jboss:domain:7.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_8_0.xsd b/wildfly/docs/schema/wildfly-config_8_0.xsd
new file mode 100644
index 0000000..d8f29af
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_8_0.xsd
@@ -0,0 +1,5001 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:8.0"
+           targetNamespace="urn:jboss:domain:8.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_9_0.xsd b/wildfly/docs/schema/wildfly-config_9_0.xsd
new file mode 100644
index 0000000..4b2ebc7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_9_0.xsd
@@ -0,0 +1,5010 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:9.0"
+           targetNamespace="urn:jboss:domain:9.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the master document specifying the core configuration
+                for the servers in a domain. There should be one such master
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="security-realms" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="security-realm" type="security-realmType" minOccurs="1"
+                                    maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="outbound-connections" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="ldap" type="ldapConnectionType" minOccurs="1" /> <!-- TODO minOccurs only while ldap is only supported connection. -->
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapConnectionType">
+        <xs:annotation>
+            <xs:documentation>
+                The LDAP connection definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0" />
+            <xs:element name="search-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to use when connecting to perform a search.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The URL to connect to ldap.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The distinguished name to use when connecting to LDAP to perform searches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-credential" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential to use when connecting to perform a search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a security realm to obtain an initialised SSLContext to use when establishing a
+                    connection to the LDAP server.
+
+                    The realm referenced here MUST NOT be a realm that is also configured to use this connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-context-factory" type="xs:string" default="com.sun.jndi.ldap.LdapCtxFactory">
+            <xs:annotation>
+                <xs:documentation>
+                    The initial context factory to establish the LdapContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referrals" default="IGNORE" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines how referrals should be handled if encountered when using this connection, by default they are
+                    ignored.
+
+                    If set to FOLLOW then if referrals are encountered using this connection they will automatically be followed. Apart from the alternative
+                    location if set to FOLLOW it is assumed the remainder of settings for this connection can be applied to the connection
+                    for the referral.
+
+                    Finally if this option is set to THROW an exception is thrown by the connection when referrals are encountered, the security realm will then
+                    use information from the Exception to identify an alternative connection to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="IGNORE" />
+                    <xs:enumeration value="FOLLOW" />
+                    <xs:enumeration value="THROW" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="handles-referrals-for" type="urlListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A space seaparated list of URLs that this connection will handle referrals for.
+
+                    Note: Only the prototocol, host and port should be specified in the URLs.  The LDAP connections are not ordered so a single URL should only
+                    be listed against a single connection, if multpile connections are defined as handling the same URL which connection will be selected is undefined
+                    and subject to change.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="always-send-client-cert" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where an LDAPS connection is established for the purpose of validating the provided credential by default the local servers certificate is not sent to 
+                    avoid inadvertently authenticating as the server.
+
+                    This attribute can be set to true to ensure the local servers certificate is always sent where this is required independently of the authentication 
+                    based on the credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:complexType name="security-realmType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a security realm for securing access to the management interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-ins" type="plug-insType" minOccurs="0" />
+            <xs:element name="server-identities" type="server-identitiesType" minOccurs="0" />
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" />
+            <xs:element name="authorization" type="authorizationType" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this security-realm, each security-realm must be assigned a unique name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-insType">
+        <xs:annotation>
+            <xs:documentation>
+                List of modules to be searched for supported security realm plug-ins.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="plug-in" type="plug-inType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inType">
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="plug-inAuthType">
+        <xs:annotation>
+            <xs:documentation>
+                This type defines which plug in will be used to handle either the loading of the
+                authentication data or authorization data during the authentication process.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" type="properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The properties to be made available to the plug-in.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The short name of the plug-in as already dynamically registered by being referenced
+                    in the plug-ins element.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mechanism" default="DIGEST" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    By default plug-ins will be assumed to be used with the DIGEST authentication mechanism,
+                    this attribute can override the plug-in for use with the PLAIN mechanism.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="DIGEST" />
+                    <xs:enumeration value="PLAIN" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authorizationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration defining how to load the authorization information for the authenticated user.
+
+                After a user has been authenticated additional information such as groups or roles can be loaded and
+                associated with the user for subsequent authorization checks, this type is used to define
+                how the roles are loaded.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="properties" type="propertiesFileType" minOccurs="0" />
+            <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            <xs:element name="ldap" type="ldapAuthorizationType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="map-groups-to-roles" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The membership information loaded is the authenticated identities group membership, commonly there
+                    is a 1:1 mapping between group membership and the applicable roles, this attribute allows for the
+                    mapping to be performed automatically.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-identitiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the identities that represent the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="ssl" type="sslType" minOccurs="0" />
+            <xs:element name="secret" type="secretType" minOccurs="0" />
+            <xs:element name="kerberos" type="kerberosIdentityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosIdentityType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a servers Kerberos identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keytab">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to an individual keytab.
+
+                            On handling the authentication for an incoming request two pieces of information are known, the protocol and the name of the host
+                            this server is acting as.  For HTTP requests the protocol will always be HTTP, for requests over Remoting by default the protocol will
+                            be 'remote' although this can be overridden.
+
+                            At the time authentication is going to be handled the keytab will be selected as follows: -
+                             1 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching protocol/hostname.
+                             2 - Iterate the list of keytabs and identify one where the name of the principal matches matches protocol/hostname.
+                             3 - Iterate the list of keytabs and identity one where the for-hosts attribute contains an entry matching hostname.
+                             4 - Iterate the list of keytabs and identify one where the hostname portion of the principal matches the hostname of the request.
+                             5 - Use the keytab where for-hosts is set to '*'.
+
+                            If no match is found no keytab will be selected and Kerberos will not be available for communication as that host.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path of the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="relative-to" use="optional" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of another previously named path, or of one of the
+                                standard paths provided by the system. If 'relative-to' is
+                                provided, the value of the 'path' attribute is treated as
+                                relative to the path specified by this attribute.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="principal" use="required" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the principal represented by the keytab.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="for-hosts" use="optional" type="stringListType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                A space separated list of the host names this keytab can be used for.  Can also be set to '*' if applicable for all hosts if a better match is not found.
+
+                                If multiple keytabs are defined as handling the same host which one is selected is undefined and subject to change,
+                                for predictability you should ensure that no more than one keytab is defined per host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="sslType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the SSL identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="engine" type="engineType" minOccurs="0" />
+            <xs:element name="keystore" type="realmExtendedKeyStoreType" />
+        </xs:sequence>
+        <xs:attribute name="protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use when creating the SSLContext.
+
+                    Note: This is separate from the enabled protocols on the underlying SSLEngine, to configure those add the engine specific configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="engineType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration options specific to the
+                unlerlying SSLEngine created for request handling.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enabled-protocols" use="optional" type="stringListType" default="TLSv1 TLSv1.1 TLSv1.2">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of protocols that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available protocols and the protocols specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled-cipher-suites" use="optional" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A space separated list of cipher suites that may be enabled on the SSLEngine handling requests.
+
+                    At runtime the intersection of the available suites and the suites specified here will be used, if that
+                    results in an empy list an error will be reported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="realmExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used by realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="provider" type="xs:string" default="JKS">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The provider for the store, the default is a file based JKS store.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="localType">
+        <xs:annotation>
+            <xs:documentation>
+                This type definition is used to control the local authentication mechanism.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="default-user" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When using the local mechanism it is optional for the client side to send an
+                    authentication user name - this attribute specifies the user name to be assumed
+                    if the remote client does not send one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="allowed-users" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A comma separated list of users that can be specified by the client when connecting
+                    using the local authentication mechanism.
+
+                    If a default user has been specified then that user is automatically added to the
+                    allowed list.  If both default-user and allowed-users are omitted despite the mechanism
+                    being enabled no incoming connection attemps using the mechanism will succeed.
+
+                    If any user name should be accepted the value should be set to "*".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="skip-group-loading" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    After authentication has occurred the username of the authenticated user is then passed
+                    to the configured authorization mechanism to load the group membership information for
+                    the authenticated user.
+
+                    As the local authenitication mechanism is a special case with an artificial identifier
+                    for the authenticated user this can cause problems during group loading where a user
+                    with the same name does not exist.
+
+                    Setting this attribute to 'false' will disable the loading of groups for the local user.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the server side authentication mechanisms.
+
+                Optionally one truststore can be defined and one username/password based store can be defined.
+                Authentication will first attempt to use the truststore and if this is not available will fall back
+                to the username/password authentication.
+
+                If none of these are specified the only available mechanism will be the local mechanism for the
+                Native interface and the HTTP interface will not be accessible.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="truststore" type="realmKeyStoreType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of a keystore to use to create a trust manager to verify clients.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local" type="localType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable the local authentication mechanism, if this element
+                        is omitted then local authentication will be disabled.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="kerberos" type="kerberosAuthenticationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration to enable Kerberos authentication.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="jaas" type="jaasAuthenticationType" minOccurs="0" />
+                <xs:element name="ldap" type="ldapAuthenticationType" minOccurs="0" />
+                <xs:element name="properties" type="propertiesAuthenticationType" minOccurs="0" />
+                <xs:element name="users" type="usersAuthenticationType" minOccurs="0" />
+                <xs:element name="plug-in" type="plug-inAuthType" minOccurs="0" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to enable Kerberos for
+                authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="remove-realm" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When a user is authenticated using Kerberos typically their identity will be represented in the form username@REALM,
+                    setting this option to true will strip the @REALM part of the name.
+
+                    This may be desired to bring the names in-line with username/password based authentication if used in parallel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaasAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use a JAAS based configuration for authentication.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name identifying the jaas configuration of LoginModules.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="assign-groups" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    When JAAS is delegated to for authentication a user is also assigned a set of roles,
+                    if this attribute is set to true then those roles will be assigned to the user a groups.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapAuthType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base type used for LDAP authentication and authorization definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="connection" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the connection to use to connect to LDAP.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to use LDAP as the user repository.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+                    <xs:choice>
+                        <xs:element name="username-filter">
+                            <xs:complexType>
+                                <xs:attribute name="attribute" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform
+                                            a simple search where the username entered by the user matches the attribute
+                                            specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="advanced-filter">
+                            <xs:complexType>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered
+                                            user ID. The filter should contain a variable in the form {0} - this will be
+                                            replaced with the username supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+                <xs:attribute name="base-dn" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The base distinguished name to commence the search for the user.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="recursive" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the search be recursive.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="user-dn" type="xs:string" default="dn">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute which is the users distinguished name.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="username-load" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This attribute is independent of the filtering configuration, if this attribute is set then after
+                            the users entry in LDAP is identified this attribute will be read to discover the users actual username.
+
+                            This is optional but could be useful in a few scenarios e.g. authenticate with an e-mail address but be identified by a username,
+                            correcting the case of an entered username or even in the future ensuring consistency after a different
+                            authentication approach.
+
+                            Note: This value will become the username used for any subsequent group loading.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-empty-passwords" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should users be allowed to supply an empty password? Some LDAP servers will
+                            allow an anonymous bind
+                            so an empty password could appear as a successful authentication
+                            even though no password was sent to verify.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAuthorizationType">
+        <xs:complexContent>
+            <xs:extension base="baseLdapAuthType">
+                <xs:sequence>
+                    <xs:element name="username-to-dn" type="ldapUserSearchType" minOccurs="0" />
+                    <xs:element name="group-search" type="ldapGroupSearchType" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="baseLdapSearchType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type of common attributes used for
+                LDAP searches.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="base-dn" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The base distinguished name to commence the search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="recursive" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the search be recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapUserSearchType">
+        <xs:annotation>
+            <xs:documentation>
+                Search definition to locate a user from
+                the supplied username.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="username-is-dn" />
+                <xs:element name="username-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="attribute" type="xs:string" use="optional" default="uid">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the attribute to search for the user, this filter will then perform a
+                                            simple search where the username entered by the user matches the attribute specified here.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="advanced-filter">
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:attribute name="user-dn-attribute" type="xs:string" use="optional" default="dn">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The attribute on the user entry which is their distinguished name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="filter" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The fully defined filter to be used to search for the user based on their entered user
+                                            ID. The filter should contain a variable in
+                                            the form {0} - this will be replaced with the username
+                                            supplied by the user.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="force" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    If the username was already converted to a distinguished name during authentication this attribute forces
+                    the search to be repeated
+                    before loading group information.
+
+                    This would most likely be required if a different LDAP server
+                    was being used to load group information as was used for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="groupMode">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="DISTINGUISHED_NAME" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="membershipFilterType">
+        <xs:attribute name="principal-attribute" type="xs:string" default="member">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute on the group entry that references the principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapGroupSearchType">
+        <xs:sequence>
+            <xs:element name="cache" type="ldapCacheType" minOccurs="0" />
+            <xs:choice>
+                <xs:element name="group-to-principal">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the group references the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:complexContent>
+                            <xs:extension base="baseLdapSearchType">
+                                <xs:sequence>
+                                    <xs:element name="membership-filter" type="membershipFilterType" minOccurs="1" />
+                                </xs:sequence>
+                                <xs:attribute name="search-by" type="groupMode" default="DISTINGUISHED_NAME">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            Should searching use the simple name or distinguished name of the principal.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            After a referral has been followed should the original LDAP connection defined for
+                                            group loading be used or should the connection from the last referral be used instead.
+
+                                            By default each attempt to load a group will revert back to the original connection as defined
+                                            in the configuration, however setting this attribute to false will cause subsequent searches to
+                                            use the connection of the last referral.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:extension>
+                        </xs:complexContent>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="principal-to-group">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Group search definition where an attribute on the principal references the group.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="group-attribute" type="xs:string" default="memberOf">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The name of the attribute on the principal that references the group.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="prefer-original-connection" type="xs:boolean" default="true">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    After a referral has been followed should the original LDAP connection defined for
+                                    group loading be used or should the connection from the last referral be used instead.
+
+                                    By default each attempt to load a group will revert back to the original connection as defined
+                                    in the configuration, however setting this attribute to false will cause subsequent searches to
+                                    use the connection of the last referral.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="skip-missing-groups" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    If an entry references non-existent groups then authentication is aborted due to the inability to
+                                    query a users complete set of groups, setting this option to true allows for non-existent groups
+                                    to be silently ignored.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="parse-group-name-from-dn" type="xs:boolean" default="false">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Extract the groupe name from the distinguished name instead of requesting it.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="group-name" type="groupMode" use="optional" default="SIMPLE">
+            <xs:annotation>
+                <xs:documentation>
+                    Defines the form the name of the group should take, either it's simple name or it's complete
+                    distringuished name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterative" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should any group searching be iterative, i.e. should additional searches be performed to identify the
+                    groups that the groups are members of.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-dn-attribute" type="xs:string" default="dn">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's distingushed name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="group-name-attribute" type="xs:string" default="uid">
+            <xs:annotation>
+                <xs:documentation>
+                    On the group entry which of it's attributes is it's simple name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="cacheType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="by-search-time" />
+            <xs:enumeration value="by-access-time" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ldapCacheType">
+        <xs:attribute name="type" type="cacheType" default="by-search-time">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of cache, by-search-time and the entries are evicted based on search time and search order, by-access-time and
+                    the entires are evicted based on the time they were last accessed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="eviction-time" type="xs:int" default="900">
+            <xs:annotation>
+                <xs:documentation>
+                    The time until an entry is evicted from the cache in seconds, a time of &lt;=0 means no eviction based
+                    on time.
+
+                    If items are not going to be evicted based on time then max-cache-size should be set otherwise the cache
+                    could grow without restriction.
+
+                    Note: The eviction time is handled on a best-efforts basis, during times of many concurrent authentications
+                    there could be small delay before the evictions fire.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-failures" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should non IO failures be cached? e.g. should searches for a non-existent user be cached to avoid
+                    repeating the same search.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-cache-size" type="xs:int" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of items to hold in the cache before items are evicted, or &lt;=0 where the size of
+                    the cache is unlimited.
+
+                    This value should be higher than the anticipated cache size for current users otherwise items
+                    will be continually evicted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="usersAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                A set of users
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="userType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="userType">
+        <xs:annotation>
+            <xs:documentation>
+                A single user.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="password" type="xs:string" />
+        </xs:choice>
+        <xs:attribute name="username" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The users username.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of a location of a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path of the properties file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesAuthenticationType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of users stored within properties files.
+
+                The entries within the properties file are username={credentials} with each user
+                being specified on it's own line.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="propertiesFileType">
+                <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Are the credentials within the properties file stored in plain text, if not
+                            the {credential} is expected to be the hex encoded Digest hash
+                            of 'username : realm : password'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+	        <xs:attribute name="compact" type="xs:boolean" default="false">
+		            <xs:annotation>
+		               <xs:documentation>
+		                   If true will format the JSON on one line. There may still be
+		                   values containing new lines, so if having the whole record on
+		                   one line is important, set escape-new-line or escape-control-characters to true.
+		               </xs:documentation>
+		            </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+		            <xs:annotation>
+		                <xs:documentation>
+		                    The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+		                </xs:documentation>
+		            </xs:annotation>
+		            <xs:simpleType>
+		                <xs:restriction base="xs:token">
+		                    <xs:enumeration value="RFC5424">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                    <xs:enumeration value="RFC3164">
+		                        <xs:annotation>
+		                            <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+		                        </xs:annotation>
+		                    </xs:enumeration>
+		                </xs:restriction>
+		            </xs:simpleType>
+		        </xs:attribute>
+		        <xs:attribute name="max-length" type="xs:int">
+		          <xs:annotation>
+		             <xs:documentation>
+		                The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+		             </xs:documentation>
+		          </xs:annotation>
+		        </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+		                <xs:enumeration value="KERNEL">
+			                <xs:annotation>
+			                   <xs:documentation>0</xs:documentation>
+			                </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+		                <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+		                </xs:enumeration>
+	                </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+
+                    If this is not set then the SSLContext will be obtained from any referenced security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The security realm to use for this management interface, the capabilities
+                    of the security realm will be queried to identify the authentication mechanism(s) to
+                    offer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context or security-realm will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context or a security realm with a configured keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-master'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the master Host Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a slave host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the security
+                        realm associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-master">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the master host controller to pull down
+                        the current domain wide configuration, but do not actually register with the master as a member
+                        of the domain. If the master cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a slave Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                slave to a master Host Controller running a later release, by letting the slave ignore portions
+                of the configuration its version of the software cannot understand. This strategy can only be
+                successful if the servers managed by the slave Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="vaultType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Vault Configuration. If no 'code' and 'module' are supplied the default implementation will be used.
+                    If 'code' is specified but no 'module', it will look for the class named by 'specified' in the picketbox module.
+                    If 'module' is specified, it will look for the class specified by 'code' in the module specified by 'module'.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="code" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the master Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="EAP6.2">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.5.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.3">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.6.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP6.4">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 1.7.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.1.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly10.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 4.2.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly11.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="EAP7.1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 5.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly12.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 6.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly13.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 7.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="WildFly14.0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   A shorthand identifier for kernel management API version 8.0.x
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the master Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-config_community_20_0.xsd b/wildfly/docs/schema/wildfly-config_community_20_0.xsd
new file mode 100644
index 0000000..c4c27b0
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-config_community_20_0.xsd
@@ -0,0 +1,3909 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:community:20.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:community:20.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+        >
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="domain">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for the main document specifying the core configuration
+                for the servers in a domain. There should be one such main
+                document per domain, available to the host controller that
+                is configured to act as the domain controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="named-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="domain-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="interfaces" type="named-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-groups" type="socket-binding-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="domain-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="domain-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="server-groups" type="server-groupsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="host-excludes" type="host-excludesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management-client-content" type="management-client-contentType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional" default="Unnamed Domain">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for the domain controller. Useful for administrators who need to work with multiple domains.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="domain-organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this domain.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="host">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document configuring a host controller and
+                the group of servers under the control of that host controller.
+                The standard usage would be for a domain to have one such host controller
+                on each physical (or virtual) host machine. Emphasis in this
+                document is on enumerating the servers, configuring items that
+                are specific to the host environment (e.g. IP addresses), and
+                on any server-specific configuration settings.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+                <xs:element name="management" type="host-managementType" minOccurs="1" maxOccurs="1"/>
+                <xs:element name="domain-controller" type="domain-controllerType"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+                <xs:element name="jvms" type="jvmsType" minOccurs="0"/>
+                <xs:element name="servers" type="serversType" minOccurs="0"/>
+                <xs:element name="profile" type="host-profileType" minOccurs="0"/>
+                <xs:element name="socket-binding-group" type="host-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this host's host controller. Must be unique across the domain.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this host.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:element name="server">
+        <xs:annotation>
+            <xs:documentation>
+                Root element for a document specifying the configuration
+                of a single "standalone" server that does not operate
+                as part of a domain.
+
+                Note that this element is distinct from the 'serverType'
+                specified in this schema. The latter type forms part of the
+                configuration of a server that operates as part of a domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="extensions" type="extensionsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="system-properties" type="properties" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="management" type="server-managementType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="profile" type="standalone-profileType" minOccurs="0"/>
+                <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="socket-binding-group" type="standalone-socket-binding-groupType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployments" type="server-deploymentsType" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="deployment-overlays" type="standalone-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+            </xs:sequence>
+            <xs:attribute name="name" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name to use for this server.
+                        If not set, defaults to the runtime value "HOSTNAME" or "COMPUTERNAME" environment variables,
+                        or, if neither environment variable is present, to the value of InetAddress.getLocalHost().getHostName().
+
+                        If the special value "jboss.domain.uuid" is used, a java.util.UUID will be created
+                        and used, based on the value of InetAddress.getLocalHost().
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="organization" type="xs:string" use="optional">
+                <xs:annotation>
+                    <xs:documentation>
+                        The name of the organization running this server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="base-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                Domain-wide default configuration settings for the management of standalone servers and a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for the history of configuration changes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Number of configuration changes that are available in history.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of a Host Controller.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                                <xs:element name="server-logger" type="audit-log-loggerType" minOccurs="0"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="host-management-interfacesType" minOccurs="1"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for the management of standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-managementType">
+                <xs:sequence>
+                    <xs:element name="audit-log" minOccurs="0">
+                        <xs:complexType>
+                            <xs:sequence minOccurs="0">
+                                <xs:element name="formatters" type="audit-log-formattersType"/>
+                                <xs:element name="handlers" type="audit-log-handlersType"/>
+                                <xs:element name="logger" type="audit-log-loggerType"/>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="management-interfaces" type="server-management-interfacesType" minOccurs="0"/>
+                    <xs:element name="access-control" type="server-access-controlType" minOccurs="0"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-managementType">
+        <xs:annotation>
+            <xs:documentation>
+                The centralized configuration for domain-wide management.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="access-control" type="domain-access-controlType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="urlListType">
+        <xs:annotation>
+            <xs:documentation>A list of URLs.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:anyURI"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="secretType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the secret/password-based identity of this server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret / password - Base64 Encoded
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                The keystore configuration for the server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="keystore-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential reference to be used by as protection parameter for the Keystore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="keystore-password" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the keystore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+        <xs:complexType name="extendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                This is a more complex keystore definition which also allows for an alias
+                and key password to be specified.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:sequence>
+                    <xs:element name="key-password-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Credential reference to be used by as protection parameter when loading keys from the keystore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias of the entry to use from the keystore, if specified all remaining
+                            entries in the keystore will be ignored.
+
+                            Note: The use of aliases is only available for JKS based stores, for other store types this will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-password" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The password to use when loading keys from the keystore.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this is set and the key store does not exist then a new keystore will be created and a
+                            self-signed certificate will be generated. The host name for the self-signed certificate
+                            will be the value of this attribute.
+
+                            This is not intended for production use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An extension of keyStoreType used for audit logging configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="keyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="auditExtendedKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit specific extension of the extended key store type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="extendedKeyStoreType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the keystore, this is required if the provider is JKS otherwise it will be ignored.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this
+                            attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+   <xs:complexType name="audit-log-formattersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging formatters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="json-formatter" type="json-audit-log-formatterType"/>
+        </xs:choice>
+   </xs:complexType>
+
+   <xs:complexType name="base-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Shared configuration for audit log formatters..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+               <xs:documentation>
+                  The name of the formatter. Must be unique across all types of formatter
+                  (there is only the JSON formatter at present but more are planned for the
+                  future)
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-date" type="xs:boolean" default="true">
+            <xs:annotation>
+               <xs:documentation>
+                  Whether or not to include the date in the formatted log record
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-format" type="xs:string" default="yyyy-MM-dd HH:mm:ss">
+            <xs:annotation>
+               <xs:documentation>
+                  The date format to use as understood by {@link java.text.SimpleDateFormat}.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="date-separator" type="xs:string" default=" - ">
+            <xs:annotation>
+               <xs:documentation>
+                  The separator between the date and the rest of the formatted log message.
+                  Will be ignored if include-date="false".
+               </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+   </xs:complexType>
+
+   <xs:complexType name="json-audit-log-formatterType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a JSON formatter for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-formatterType">
+                <xs:attribute name="compact" type="xs:boolean" default="false">
+                    <xs:annotation>
+                       <xs:documentation>
+                           If true will format the JSON on one line. There may still be
+                           values containing new lines, so if having the whole record on
+                           one line is important, set escape-new-line or escape-control-characters to true.
+                       </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="escape-new-line" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all new lines with the ascii code in octal,
+                         e.g. #012.
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="escape-control-characters" type="xs:boolean" default="false">
+                  <xs:annotation>
+                     <xs:documentation>
+                         If true will escape all control characters (ascii entries with a decimal
+                         value less than 32) with the ascii code in octal, e.g.'\n\ becomes '#012'.
+                         If this is true, it will override escape-new-line="false"
+                     </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+   </xs:complexType>
+
+    <xs:complexType name="audit-log-handlersType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging handlers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="file-handler" type="file-audit-log-handlerType"/>
+            <xs:element name="size-rotating-file-handler" type="size-rotating-file-audit-log-handlerType"/>
+            <xs:element name="periodic-rotating-file-handler" type="periodic-rotating-file-audit-log-handlerType"/>
+            <xs:element name="syslog-handler" type="syslog-audit-log-handlerType"/>
+            <xs:element name="in-memory-handler">
+                <xs:complexType>
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of a in memory handler for the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:attribute name="name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The name of the handler. The name must be unique across all types of handler.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="max-history" type="xs:integer" default="10">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The number of logging entries stored in memory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Common configuration of a handler for the audit log.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the handler. The name must be unique across all types of handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="formatter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the formatter to use for the handler.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-failure-count" type="xs:string" default="10">
+            <xs:annotation>
+                <xs:documentation>
+                    The number of logging failures before this handler is disabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path of the audit log.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the
+                            standard paths provided by the system. If 'relative-to' is
+                            provided, the value of the 'path' attribute is treated as
+                            relative to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a simple file handler for the audit log. This writes to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-at-startup" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether or not should an old log file be rotated during a handler initialization.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="size-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a size rotating file handler for the audit log. This writes to a local file,
+                rotating the log after the size of the file grows beyond a certain point and keeping
+                a fixed number of backups..
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="rotate-size" type="sizeType" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The size at which to rotate the log file.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-backup-index" type="xs:positiveInteger" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of backups to keep.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodic-rotating-file-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a periodic rotating file handler for the audit log. This writes to a local file,
+                rotating the log after a time period derived from the given suffix string,
+                which should be in a format understood by java.text.SimpleDateFormat.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstract-file-audit-log-handlerType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.text.SimpleDateFormat.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="sizeType">
+        <xs:annotation>
+            <xs:documentation>A positive number optionally followed by one of [bBkKmMgGtT]</xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:pattern value="[0-9]+[bBkKmMgGtT]?"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="syslog-audit-log-handlerType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a syslog file handler for the audit log on a server. This writes to syslog server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-handlerType">
+                <xs:choice minOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The configuration of the protocol to use communication with the syslog server. See your
+                            syslog provider's documentation for configuration options.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:element name="udp" type="udp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tcp" type="tcp-audit-log-protocolType">
+                    </xs:element>
+                    <xs:element name="tls" type="tls-audit-log-protocolType">
+                    </xs:element>
+                </xs:choice>
+                <xs:attribute name="syslog-format" default="RFC5424">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use for the syslog messages. See your syslog provider's documentation for what is supported.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="RFC5424">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-5424 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="RFC3164">
+                                <xs:annotation>
+                                    <xs:documentation>Format the syslog data according to the RFC-3164 standard</xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="max-length" type="xs:int">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The maximum length in bytes a log message, including the header, is allowed to be. If undefined, it will default to 1024 bytes if the syslog-format is RFC3164, or 2048 bytes if the syslog-format is RFC5424.
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+              <xs:attribute name="truncate" type="xs:boolean" default="true">
+                <xs:annotation>
+                   <xs:documentation>
+                      Whether or not a message, including the header, should truncate the message if the length in bytes is greater than the maximum length. If set to false messages will be split and sent with the same header values.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="facility" default="USER_LEVEL">
+                <xs:annotation>
+                   <xs:documentation>
+                      The facility to use for syslog logging as defined in section 6.2.1 of RFC-5424, and section 4.1.1 of RFC-3164.
+                      The numerical values in the enumeration entries, is the numerical value as defined in the RFC.
+                   </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+	                <xs:restriction base="xs:token">
+                        <xs:enumeration value="KERNEL">
+        	                <xs:annotation>
+        	                   <xs:documentation>0</xs:documentation>
+        	                </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="USER_LEVEL">
+                         <xs:annotation>
+                            <xs:documentation>1</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="MAIL_SYSTEM">
+                         <xs:annotation>
+                            <xs:documentation>2</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSTEM_DAEMONS">
+                         <xs:annotation>
+                            <xs:documentation>3</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY">
+                         <xs:annotation>
+                            <xs:documentation>4</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SYSLOGD">
+                         <xs:annotation>
+                            <xs:documentation>5</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LINE_PRINTER">
+                         <xs:annotation>
+                            <xs:documentation>6</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NETWORK_NEWS">
+                         <xs:annotation>
+                            <xs:documentation>7</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="UUCP">
+                         <xs:annotation>
+                            <xs:documentation>8</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>9</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="SECURITY2">
+                         <xs:annotation>
+                            <xs:documentation>10</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="FTP_DAEMON">
+                         <xs:annotation>
+                            <xs:documentation>11</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="NTP">
+                         <xs:annotation>
+                            <xs:documentation>12</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_AUDIT">
+                         <xs:annotation>
+                            <xs:documentation>13</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOG_ALERT">
+                         <xs:annotation>
+                            <xs:documentation>14</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="CLOCK_DAEMON2">
+                         <xs:annotation>
+                            <xs:documentation>15</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_0">
+                         <xs:annotation>
+                            <xs:documentation>16</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_1">
+                         <xs:annotation>
+                            <xs:documentation>17</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_2">
+                         <xs:annotation>
+                            <xs:documentation>18</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_3">
+                         <xs:annotation>
+                            <xs:documentation>19</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_4">
+                         <xs:annotation>
+                            <xs:documentation>20</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_5">
+                         <xs:annotation>
+                            <xs:documentation>21</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_6">
+                         <xs:annotation>
+                            <xs:documentation>22</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                        <xs:enumeration value="LOCAL_USE_7">
+                         <xs:annotation>
+                            <xs:documentation>23</xs:documentation>
+                         </xs:annotation>
+                        </xs:enumeration>
+                    </xs:restriction>
+                </xs:simpleType>
+              </xs:attribute>
+              <xs:attribute name="app-name" type="xs:string">
+                <xs:annotation>
+                   <xs:documentation>
+                      The application name to add to the syslog records as defined in section 6.2.5 of RFC-5424. If not specified it will default to the name of the product.
+                   </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-audit-log-protocolType">
+        <xs:attribute name="host" default="localhost">
+            <xs:annotation>
+                <xs:documentation>
+                    The host of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" default="514">
+            <xs:annotation>
+                <xs:documentation>
+                    The port of the syslog server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="udp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure udp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tcp-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tcp as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-audit-log-protocolType">
+                <xs:attribute name="message-transfer" default="NON_TRANSPARENT_FRAMING">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The message transfer setting as described in section 3.4 of RFC-6587. See your syslog provider's
+                            documentation for what is supported
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:token">
+                            <xs:enumeration value="OCTET_COUNTING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the octet counting format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                            <xs:enumeration value="NON_TRANSPARENT_FRAMING">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Use the non-transparent-framing format for message transfer as described in section 3.4.1 of RFC-6587.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:enumeration>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="reconnect-timeout" type="xs:int" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If a connection drop is detected, the number of seconds to wait before reconnecting. A negative number means
+                            don't reconnect automatically.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tls-audit-log-protocolType">
+        <xs:annotation>
+            <xs:documentation>Configure tls as the protocol for communicating with the syslog server</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="tcp-audit-log-protocolType">
+                <xs:sequence>
+                    <xs:element name="truststore" type="auditKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore to use to create a trust manager to verify the server
+                                certificate for encrypted communications. If the server certificate is signed off by a
+                                signing authority, tls can be used without a truststore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="client-certificate-store" type="auditExtendedKeyStoreType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Configuration of a keystore containing a client certificate and a private key, e.g. in
+                                PKCS12 format. This turns on authenticating the clients against the syslog server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-loggerType">
+        <xs:annotation>
+            <xs:documentation>
+                Declaration of management operation audit logging configuration coming from the model controller core.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="handlers" type="audit-log-handlers-refType"/>
+        </xs:choice>
+        <xs:attribute name="log-boot" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations should be logged on boot.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="log-read-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether operations that do not modify the configuration or any runtime services should be logged.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether audit logging is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handlers-refType">
+        <xs:annotation>
+            <xs:documentation>
+                References to audit-log-handlers defined in the audit-log-handlers section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0">
+            <xs:element name="handler" type="audit-log-handler-refType" minOccurs="0"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="audit-log-handler-refType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an audit-log-handler defined in the audit-log-appenders section
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-interface" type="host-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="host-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="management-interfaceType">
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SSLContext to use for this management interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" use="optional" default="remote">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connections part of the authentication process
+                    advertises the name of the protocol in use, by default this is 'remote' but this attribute
+                    can be set if an alternative is required.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Where Remoting is accepting incomming connection the initial exchange and the authentication
+                    process both advertise the name of the server, by default this is derived from the address Remoting
+                    is listening on but this attribute can be set to override the name.
+                 </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="http-upgrade" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                HTTP Upgrade configuration on the management interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="enabled" type="xs:boolean" use="optional" default="false">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Is HTTP Upgrade to 'remote' enabled.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The SASL authentication policy to secure connections upgraded from HTTP.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="constant-headers" type="constant-headersType" minOccurs="0" />
+                </xs:sequence>
+                <xs:attribute name="http-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The HTTP authentication factory to use to secure normal HTTP requests.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="backlog" type="xs:int" use="optional" default="50">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of pending connections on the socket.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="no-request-timeout" type="xs:int" use="optional" default="60000">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum time in milliseconds a connection can be idle without a HTTP request before it is closed.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="connection-high-water" type="xs:int" use="optional" default="100">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of connections that can be open at any one time.
+
+                            Once reached no further connections will be accepted until the count reduces to the connection-low-water level.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="connection-low-water" type="xs:int" use="optional" default="75">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of connections that the open count must reduce to before the connection-high-water level is reset.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constant-headersType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition to HTTP headers to be added to responses based on the path of the request.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="header-mapping" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="header" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The name of the header to set.
+
+                                            Must be a valid HTTP Header name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The value to set the header to.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The path prefix this header mapping applies to.
+                            </xs:documentation>
+                       </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-interfaceType" abstract="true">
+        <xs:complexContent>
+            <xs:extension base="management-interfaceType">
+                <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The SASL server authentication policy to secure connections upgraded from HTTP.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="native-management-socketType"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Network interface on which the host's socket for
+                    management communication should be opened.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for native
+                            management communication should be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:sequence>
+                    <xs:element name="socket" type="host-http-management-socketType"/>
+                </xs:sequence>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="management-socketType">
+                <xs:attribute name="port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secure-port" type="xs:int" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Port on which the host's socket for HTTPS
+                            management communication should be opened.
+
+                            If not specified the port will not be opened.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-http-management-socketType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-socketType">
+                <xs:attribute name="secure-interface" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Network interface on which the host's socket for
+                            HTTPS management communication should be opened
+                            if a different interface should be used from that
+                            specified by the 'interface' attribute.
+
+                            If not specified the interface specified by the 'interface'
+                            attribute will be used.
+
+                            Has no effect if the 'secure-port' attribute is not set.
+
+                            If specified with a different value from the 'interface'
+                            attribute, redirect of HTTPS requests received on the HTTP
+                            socket to the HTTPS address will not be supported.
+
+                            If specified an ssl-context will be
+                            required to obtain the SSL configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="server-management-interfacesType">
+        <xs:sequence>
+            <xs:element name="native-remoting-interface" type="management-remoting-interfaceType" minOccurs="0"/>
+            <xs:element name="native-interface" type="server-native-management-interfaceType" minOccurs="0"/>
+            <xs:element name="http-interface" type="server-http-management-interfaceType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-native-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of the socket used by host or standalone server's exposed HTTP management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="native-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the native management interface is a choice
+                        between a direct configuration of the address and port, or a reference to a socket-binding
+                        configuration in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="native-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="native-management-socket-binding-refType"/>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="native-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configuration of the socket to be used by a standalone server's exposed native management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="native" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-http-management-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Configuration of a standalone server's exposed HTTP/HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="http-management-interfaceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the socket to use for the HTTP/HTTPS management interface is a choice
+                        between a direct configuration of the address and ports, or a reference to socket-binding
+                        configurations in the server's socket-binding-group element. The latter is the recommended
+                        approach as it makes it easier to avoid port conflicts by taking advantage of the
+                        socket-binding-group's port-offset configuration. Direct configuration of the address and
+                        ports is deprecated and is only provided to preserve backward compatibility.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:choice>
+                    <xs:element name="socket" type="http-management-socketType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use 'socket-binding'
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="socket-binding" type="http-management-socket-binding-refType"/>
+                </xs:choice>
+                <xs:attribute name="console-enabled" type="xs:boolean" use="optional" default="true"/>
+                <xs:attribute name="allowed-origins" type="urlListType" use="optional" >
+                    <xs:annotation>
+                        <xs:documentation>
+                            A space separated list of Origins that will be trusted to send request to the management
+                            API once the user is authenticated. This is used following the Cross-Origin Resource Sharing
+                            recommendation (http://www.w3.org/TR/access-control/).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-management-socket-binding-refType">
+        <xs:annotation>
+            <xs:documentation>
+                Reference to the configurations of the sockets to be used by a standalone server's exposed HTTP and HTTPS management interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTP socket.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="https" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of a socket-binding configuration declared in the server's socket-binding-group to use for a HTTPS socket.
+
+                    Note: When specified the interface must also be configured to reference an ssl-context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="management-remoting-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                Makes the native management interface available via the connectors set up in the remoting subsystem,
+                using the remoting subsystem's endpoint. This should only be used for a server not for a HC/DC.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controllerType">
+        <xs:choice>
+            <xs:element name="local" type="domain-controller-localType"/>
+            <xs:element name="remote" type="domain-controller-remoteType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-localType">
+        <xs:sequence>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-controller-remoteType">
+        <xs:sequence>
+            <xs:element name="ignored-resources" type="ignored-resourcesType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="discovery-options" type="discovery-optionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-domain-controller'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-domain-controller'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:integer" use="optional" >
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port. If not set, a discovery option must be provided,
+                    or the --cached-dc startup option must be used, or the --admin-only startup option must be used
+                    with the 'admin-only-policy' attribute set to a value other than 'fetch-from-domain-controller'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the authentication-context to use when establishing the remote connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional" />
+        <xs:attribute name="ignore-unused-configuration" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    When set to true, this instructs the Domain Controller to not forward configuration and
+                    operations for profiles, socket binding groups and server groups which do not affect our servers.
+                    Setting to false will ensure that all of this configuration information is copied. Note that using
+                    the '--backup' startup option on the command line will set this to false if the value is unspecified
+                    in host.xml. If the value is specified in host.xml, then using '--backup' will not override the
+                    specified value (for example: setting ignore-unused-configuration="true" and using --backup will
+                    not override the value of ignore-unused-configuration, which will remain true). If --backup is not
+                    used, this value will be true at runtime.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="admin-only-policy" type="admin-only-policyType" default="allow-no-config">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Policy options for how a secondary host controller started in 'admin-only' mode and
+                    without the use of the '--cached-dc' startup option should deal with the absence
+                    of a local copy of the domain-wide configuration.
+
+                    This question is particularly relevant when fine grained management operation
+                    authorization scheme is used, as the configuration for management authorization
+                    in a managed domain comes from the domain wide configuration.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="admin-only-policyType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="allow-no-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Allow the host to function without any domain wide configuration.
+
+                        The management authorization configuration system (which is ordinarily
+                        configured according to policies set in the domain wide configuration)
+                        will use default settings, whereby user who can authenticate to the authentication
+                        factory associated with the management interface to which they connect
+                        will have all permissions.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="fetch-from-domain-controller">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Unless the --cached-dc startup option was used, contact the Domain Controller to pull down
+                        the current domain wide configuration, but do not actually register with the Domain Controller as a member
+                        of the domain. If the Domain Controller cannot be reached, the start of the host controller will fail.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="require-local-config">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Require the presence of a locally cached copy of the domain wide configuration
+                        policy. If not present, the start of the host controller will fail.
+
+                        The '--cached-dc' startup option is used to indicate to the host controller
+                        process that a locally cached copy of the domain wide configuration
+                        policy should be used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="ignored-resourcesType">
+        <xs:annotation>
+            <xs:documentation>
+                Provides names of direct child resources of the domain root resource requests for which the
+                Host Controller should ignore. Only relevant on a secondary Host Controller. Configuring such
+                "ignored resources" may help allow a Host Controller from an earlier release to function as a
+                secondary Host Controller to a primary Host Controller running a later release, by letting the secondary
+                ignore portions of the configuration its version of the software cannot understand. This strategy can
+                only be successful if the servers managed by the secondary Host Controller do not reference any of the
+                ignored configuration.
+
+                Supports the following attributes:
+
+                type -- the type of resource (e.g. 'profile' or 'socket-binding-group') certain instances of which
+                should be ignored. The value corresponds to the 'key' portion of the first element in the
+                resource's address (e.g. 'profile' in the address /profile=ha/subsystem=web)
+
+                wildcard -- if 'true', all resources of the given type should be ignored.
+
+                Child elements list the names of specific instances of the given type of resource
+                that should be ignored. Each element in the list corresponds to the 'value' portion of
+                the first element in the resource's address (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="instance" type="ignored-resource-instanceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="type" type="xs:string" use="required" />
+        <xs:attribute name="wildcard" type="xs:boolean" use="optional" default="false" />
+        <xs:attribute name="names" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="ignored-resource-instanceType">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a specific instances of a particular type of resource that should be ignored.
+                The 'name' attribute corresponds to the 'value' portion of the first element in the resource's address
+                (e.g. 'ha' in the address /profile=ha/subsystem=web.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionsType">
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="discovery-option" type="discovery-optionType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="static-discovery" type="static-discoveryType" minOccurs="0" maxOccurs="1" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="discovery-optionType">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="code" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name for the DiscoveryOption implementation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The module from which the DiscoveryOption implementation should be loaded. If not provided,
+                    the DiscoveryOption implementation must be available from the Host Controller's own module.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="static-discoveryType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name for this domain controller discovery option.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="remote-protocol-type" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                     The remote domain controller's protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote domain controller's port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serversType">
+        <xs:sequence>
+            <xs:element name="server" type="serverType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="directory-grouping" default="by-server" use="optional">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="by-server">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped under the server's name
+                                in the domain/servers directory. This is the default option.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="by-type">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Indicates each server's writable directories should be grouped based on their "type"
+                                (i.e. "data", "log", "tmp") with directories of a given type for all servers appearing
+                                in the domain level directory for that type, e.g. domain/data/servers/server-name.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverType">
+        <xs:all>
+            <xs:element name="paths" type="specified-pathsType" minOccurs="0" maxOccurs="1" />
+
+            <xs:element name="interfaces" type="specified-interfacesType" minOccurs="0"/>
+            <xs:element name="socket-bindings" type="server-socket-bindingsType" minOccurs="0"/>
+
+            <!--<xs:element name="loggers" type="loggersType" minOccurs="0"/>-->
+            <xs:element name="system-properties" type="properties-with-boottime" minOccurs="0"/>
+            <xs:element name="jvm" minOccurs="0" type="serverJvmType"/>
+
+            <xs:element name="ssl" minOccurs="0" type="server-sslType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration of the SSLContext used for the connection from the application server back to it's host controller.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group" type="xs:string" use="required"/>
+        <xs:attribute name="auto-start" type="xs:boolean" default="true"/>
+        <xs:attribute name="update-auto-start-with-server-status" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Iif the server last status (STARTED or STOPPED) is to be used to define the value of auto-start.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-sslType">
+        <xs:attribute name="ssl-protocol" type="xs:string" default="TLS">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to initialise the SSLContext, if 'Default' is specified the JVM wide default SSLContext will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager-algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm to use when initialising the TrustManagerFactory.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The type of the trust store.
+
+                    If not specified the JVM default is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified path to the truststore.
+
+                    If not specified the no file will be used to initialise the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="truststore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The password to open the truststore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-socket-bindingsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                Server-specific overrides to the default socket binding configuration inherited from the server group.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding-group" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The socket binding group to use for the server. If undefined, the socket binding group
+                    specified for the server group is used.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Increment to apply to the base port values defined in the
+                    referenced socket binding group to derive the values to use on this
+                    server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="extensionsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of extension modules.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="extensionType">
+        <xs:annotation>
+            <xs:documentation>
+                A module that extends the standard capabilities of a domain
+                or a standalone server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of the module</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupsType">
+        <xs:sequence>
+            <xs:element name="server-group" type="server-groupType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0"/>
+            <xs:element name="socket-binding-group" type="socket-binding-group-refType" minOccurs="1"/>
+
+            <xs:element name="deployments" type="server-groupDeploymentsType" minOccurs="0"/>
+            <xs:element name="deployment-overlays" type="server-group-deployment-overlaysType" minOccurs="0" maxOccurs="1"/>
+
+            <xs:element name="system-properties" minOccurs="0" type="properties-with-boottime"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the server group
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="profile" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the profile this server is running.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="graceful-startup" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers in the group start gracefully, queuing or cleanly rejecting incoming
+                    requests until the server is fully started. If set to false, the server will pass the request to the
+                    appropriate subsystem for processing, irrespective of whether or not that system is ready.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="management-subsystem-endpoint" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Set to true to have servers belonging to the server group connect back to the host controller using the
+                    endpoint from their remoting subsystem. The subsystem must be preset for this to
+                    work.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server-group.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="base-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-groupDeploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server group.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="base-deploymentType">
+        <xs:attribute name="name" use="required">
+            <xs:annotation>
+                <xs:documentation>Unique identifier of the deployment. Must be unique across all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="runtime-name" use="required">
+            <xs:annotation>
+                <xs:documentation>Name by which the deployment will be known within a running server.of the deployment.
+                    Does not need to be unique across all deployments in the domain, although it must be unique within
+                    an individual server. For example, two different deployments running on different servers in
+                    the domain could both have a 'runtime-name' of 'example.war', with one having a 'name'
+                    of 'example.war_v1' and another with an 'name' of 'example.war_v2'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of deployments that have been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="server-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-deploymentType">
+        <xs:annotation>
+            <xs:documentation>A deployment that has been mapped to a server.</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+                <!--  TODO clarify what a value of 'false' means -->
+                <xs:attribute name="enabled" use="optional" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>Whether the deployment deploy automatically when the server starts up.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="contentType">
+        <xs:attribute name="sha1" use="required">
+            <xs:annotation>
+                <xs:documentation>The checksum of the content</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fs-archiveType">
+        <xs:annotation>
+            <xs:documentation>Archived content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="fs-baseType">
+        <xs:complexContent>
+            <xs:extension base="pathType"/>
+        </xs:complexContent>
+        <!-- TODO: make path required
+        <xs:complexContent>
+            <xs:restriction base="pathType">
+                <xs:attribute name="path" use="required"/>
+            </xs:restriction>
+        </xs:complexContent>
+        -->
+    </xs:complexType>
+
+    <xs:complexType name="fs-explodedType">
+        <xs:annotation>
+            <xs:documentation>Exploded content found on the filesystem</xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fs-baseType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of domain-level deployments</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment" type="domain-deploymentType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deploymentType">
+        <xs:annotation>
+            <xs:documentation>Deployment represents anything that can be deployed (e.g. an application such as EJB-JAR,
+                WAR, EAR,
+                any kind of standard archive such as RAR or JBoss-specific deployment),
+                which can be enabled or disabled on a domain level.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-deploymentType">
+                <xs:sequence>
+                    <!-- TODO: maxOccurs should be unbounded once overlays are in place -->
+                    <xs:choice maxOccurs="1">
+                        <xs:element name="content" type="contentType"/>
+                        <xs:element name="fs-archive" type="fs-archiveType"/>
+                        <xs:element name="fs-exploded" type="fs-explodedType"/>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- TODO this is not used anywhere yet -->
+    <xs:complexType name="clustersType">
+        <xs:complexContent>
+            <xs:extension base="server-groupType">
+                <xs:sequence>
+                    <xs:element name="partition-name" type="xs:string"/>
+                    <xs:element name="state-transfer-timeout" type="xs:integer"/>
+                    <xs:element name="method-call-timeout" type="xs:integer"/>
+                </xs:sequence>
+                <xs:attribute name="category" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- domain-configuration related definitions -->
+    <xs:complexType name="domain-configurationType">
+        <xs:annotation>
+            <xs:documentation>The domain controller/server bootstrap configuration</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element ref="bootstrapURI"/>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:element name="bootstrapURI" type="xs:string">
+        <xs:annotation>
+            <xs:documentation>The URI for bootstrapping a domain server</xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="profilesType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of profiles available for use in the domain</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="profile" type="domain-profileType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:any namespace="##other" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>A profile declaration may include configuration
+                        elements from other namespaces for the subsystems that make up the profile.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Name of the profile</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-profileType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of subsystems that will be run on the host</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="1" maxOccurs="unbounded">
+                <xs:any namespace="##other">
+                    <xs:annotation>
+                        <xs:documentation>A profile declaration may include configuration
+                            elements from other namespaces for the subsystems that make up the profile.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:any>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- general socket definition -->
+    <xs:complexType name="socket-binding-groupsType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket binding groups</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding-group" type="socket-binding-groupType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="includes" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A profile may include another profile. Overriding of included profiles is not supported.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-socket-binding-groupType">
+        <xs:annotation>
+            <xs:documentation>Contains a list of socket configurations</xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="socket-binding" type="socket-bindingType" maxOccurs="unbounded"/>
+            <xs:element name="outbound-socket-binding" type="outbound-socket-bindingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="default-interface" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="client-mapping" type="socket-binding-client-mappingType"
+                        minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Specifies zero or more client mappings for this socket binding.
+                        A client connecting to this socket should use the destination address
+                        specified in the mapping that matches its desired outbound interface.
+                        This allows for advanced network topologies that use either network
+                        address translation, or have bindings on multiple network interfaces
+                        to function.
+
+                        Each mapping should be evaluated in declared order, with the first successful
+                        match used to determine the destination.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. Must be configured if 'multicast-address' is configured.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-client-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Type definition for a client mapping on a socket binding. A client
+                mapping specifies how external clients should connect to this
+                socket's port, provided that the client's outbound interface
+                match the specified source network value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="source-network" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Source network the client connection binds on. This value is in
+                    the form of ip/netmask. A client should match this value against
+                    the desired client host network interface, and if matched the
+                    client should connect to the corresponding destination values.
+
+                    If omitted this mapping should match any interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-address" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination address that a client should connect to if the
+                    source-network matches. This value can either be a hostname or
+                    an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="destination-port" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The destination port that a client should connect to if the
+                    source-network matches.
+
+                    If omitted this mapping will reuse the effective socket binding
+                    port.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-socket-bindingType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for an outbound socket.</xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="remote-destination" type="remote-destinationType" maxOccurs="1"/>
+            <xs:element name="local-destination" type="local-destinationType" maxOccurs="1"/>
+        </xs:choice>
+
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the outbound socket binding
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="source-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the interface that should be used for setting up the source address of the
+                    outbound socket. This should be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+
+        </xs:attribute>
+        <xs:attribute name="source-port" type="xs:nonNegativeInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The port number that will be used for setting the source address of the outbound socket. If the
+                    source-interface attribute has been specified and the source-port attribute equals 0 or is absent,
+                    then the system uses an ephemeral port while binding the socket to a source address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-source-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the source-port value should remain fixed even if the socket binding group specifies
+                    a port offset
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="remote-destinationType">
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote server address to which the outbound socket has to be connect.
+                    The address can be either an IP address of the host server of the hostname of the server
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:positiveInteger" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remote port to which the outbound socket has to connect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="remote-protocol-type">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="remote"/>
+            <xs:enumeration value="http-remoting"/>
+            <xs:enumeration value="https-remoting"/>
+            <xs:enumeration value="remote+http"/>
+            <xs:enumeration value="remote+https"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="local-destinationType">
+        <xs:attribute name="socket-binding-ref" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to a socket binding that has to be used as the destination for the outbound
+                    socket binding. This socket binding name should belong to the same socket binding group
+                    to which this local destination client socket belongs.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="socket-binding-group-refType">
+        <xs:attribute name="ref" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The socket group to use for the server group or server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port-offset" type="xs:int" default="0" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Increment to apply to the base port values defined in the
+                    referenced socket group to derive the values to use on this
+                    server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Name of an interface that should be used as the interface for
+                    any sockets that do not explicitly declare one, overiding the one defined
+                    in the socket-binding-group referenced.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="named-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named network interfaces. The interfaces may or may
+                not be fully specified (i.e. include criteria on how to determine
+                their IP address.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="named-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- TODO make this and specified-interfaceType the same except for interface-criteriaGroup minOccurs -->
+    <xs:complexType name="named-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, but without any criteria
+                for determining the IP address to associate with that interface.
+                Acts as a placeholder in the model (e.g. at the domain level)
+                until a fully specified interface definition is applied at a
+                lower level (e.g. at the server level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="0"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfacesType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of fully specified named network interfaces.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="interface" type="specified-interfaceType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-interfaceType">
+        <xs:annotation>
+            <xs:documentation>
+                A named network interface, along with required criteria
+                for determining the IP address to associate with that interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:group ref="interface-criteriaGroup" minOccurs="1"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:group name="interface-criteriaGroup">
+        <xs:annotation>
+            <xs:documentation>
+                A set of criteria that can be used at runtime to determine
+                what IP address to use for an interface.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="any-address" type="any-addressType"/>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="inet-address" type="inet-addressType"/>
+                <xs:element name="loopback" type="loopbackType"/>
+                <xs:element name="loopback-address" type="loopback-addressType"/>
+                <xs:element name="multicast" type="multicastType"/>
+                <xs:element name="point-to-point" type="point-to-pointType"/>
+                <xs:element name="virtual" type="interface-virtualType"/>
+                <xs:element name="up" type="interface-upType"/>
+                <xs:element name="public-address" type="public-addressType"/>
+                <xs:element name="link-local-address" type="link-local-addressType"/>
+                <xs:element name="site-local-address" type="site-local-addressType"/>
+                <xs:element name="nic" type="nicType"/>
+                <xs:element name="nic-match" type="nic-matchType"/>
+                <xs:element name="subnet-match" type="subnet-matchType"/>
+                <xs:element name="not" type="address-exclusionType"/>
+                <xs:element name="any" type="address-exclusionType"/>
+            </xs:choice>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="inet-addressType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Either an IP address in IPv6 or IPv4 dotted decimal notation,
+                    or a hostname that can be resolved to an IP address.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nicType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a network interface (e.g. eth0, eth1, lo).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="nic-matchType">
+        <xs:attribute name="pattern" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A regular expression against which the names of the network
+                    interfaces available on the machine can be matched to find
+                    an acceptable interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="subnet-matchType">
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A network IP address and the number of bits in the
+                    address' network prefix, written in "slash notation";
+                    e.g. "192.168.0.0/16".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="address-exclusionType">
+        <xs:choice>
+            <xs:element name="inet-address" type="inet-addressType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="loopback" type="loopbackType"/>
+            <xs:element name="loopback-address" type="loopback-addressType"/>
+            <xs:element name="multicast" type="multicastType"/>
+            <xs:element name="point-to-point" type="point-to-pointType"/>
+            <xs:element name="virtual" type="interface-virtualType"/>
+            <xs:element name="up" type="interface-upType"/>
+            <xs:element name="public-address" type="public-addressType"/>
+            <xs:element name="link-local-address" type="link-local-addressType"/>
+            <xs:element name="site-local-address" type="site-local-addressType"/>
+            <xs:element name="nic" type="nicType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="nic-match" type="nic-matchType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="subnet-match" type="subnet-matchType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="loopbackType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a loopback
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="loopback-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                A loopback address that may not actually be configured on the machine's loopback interface.
+                Differs from inet-addressType in that the given value will be used even if no NIC can
+                be found that has the IP address associated with it.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An IP address in IPv6 or IPv4 dotted decimal notation.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="multicastType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it supports
+                multicast.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="point-to-pointType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a point-to-point
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-upType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is currently up.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="interface-virtualType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it is a virtual
+                interface.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="public-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not it has a publicly
+                routable address.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="site-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is site-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="link-local-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that part of the selection criteria
+                for an interface should be whether or not an address associated
+                with it is link-local.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="any-addressType">
+        <xs:annotation>
+            <xs:documentation>
+                Empty element indicating that sockets using this interface
+                should be bound to a wildcard address. The IPv6 wildcard
+                address (::) will be used unless the java.net.preferIpV4Stack
+                system property is set to true, in which case the IPv4
+                wildcard address (0.0.0.0) will be used. If a socket is
+                bound to an IPv6 anylocal address on a dual-stack machine,
+                it can accept both IPv6 and IPv4 traffic; if it is bound to
+                an IPv4 (IPv4-mapped) anylocal address, it can only accept
+                IPv4 traffic.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="socketType">
+        <xs:annotation>
+            <xs:documentation>Configuration information for a socket.</xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="interface" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the interface to which the socket should be bound, or, for multicast
+                    sockets, the interface on which it should listen. This should
+                    be one of the declared interfaces.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:unsignedShort" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Number of the port to which the socket should be bound.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fixed-port" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Whether the port value should remain fixed even if numerically offsets
+                    are applied to the other sockets in the socket group..
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-address" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Multicast address on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="multicast-port" type="xs:positiveInteger" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Port on which the socket should receive multicast
+                    traffic. If unspecified, the socket will not be configured
+                    to receive multicast.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- Path configurations -->
+    <xs:complexType name="named-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths. The paths may or may
+                not be fully specified (i.e. include the actual paths.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="named-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="named-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path, but without a requirement to specify
+                the actual path. If no actual path is specified, acts as a
+                as a placeholder in the model (e.g. at the domain level)
+                until a fully specified path definition is applied at a
+                lower level (e.g. at the host level, where available addresses
+                are known.)
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="pathType">
+                <xs:attribute name="name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the path. Cannot be one of the standard fixed paths
+                            provided by the system:
+
+                            jboss.home.dir - the root directory of the JBoss AS distribution
+                            user.home - user's home directory
+                            user.dir - user's current working directory
+                            java.home - java installation directory
+                            jboss.server.base.dir - root directory for an individual server
+                            instance
+
+                            Note that the system provides other standard paths that can be
+                            overridden by declaring them in the configuration file. See
+                            the 'relative-to' attribute documentation for a complete
+                            list of standard paths.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="pathType">
+        <xs:attribute name="path">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathsType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of named filesystem paths.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="path" type="specified-pathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="specified-pathType">
+        <xs:annotation>
+            <xs:documentation>
+                A named filesystem path.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the path. Cannot be one of the standard fixed paths
+                    provided by the system:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+
+                    Note that the system provides other standard paths that can be
+                    overridden by declaring them in the configuration file. See
+                    the 'relative-to' attribute documentation for a complete
+                    list of standard paths.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The actual filesystem path. Treated as an absolute path, unless the
+                    'relative-to' attribute is specified, in which case the value
+                    is treated as relative to that path.
+
+                    If treated as an absolute path, the actual runtime pathname specified
+                    by the value of this attribute will be determined as follows:
+
+                    If this value is already absolute, then the value is directly
+                    used.  Otherwise the runtime pathname is resolved in a
+                    system-dependent way.  On UNIX systems, a relative pathname is
+                    made absolute by resolving it against the current user directory.
+                    On Microsoft Windows systems, a relative pathname is made absolute
+                    by resolving it against the current directory of the drive named by the
+                    pathname, if any; if not, it is resolved against the current user
+                    directory.
+
+                    Note relative path declarations have to use '/' as file separator.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:minLength value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of another previously named path, or of one of the
+                    standard paths provided by the system. If 'relative-to' is
+                    provided, the value of the 'path' attribute is treated as
+                    relative to the path specified by this attribute. The standard
+                    paths provided by the system include:
+
+                    jboss.home.dir - the root directory of the JBoss AS distribution
+                    user.home - user's home directory
+                    user.dir - user's current working directory
+                    java.home - java installation directory
+                    jboss.server.base.dir - root directory for an individual server
+                    instance
+                    jboss.server.config.dir - directory in which server configuration
+                    files are stored.
+                    jboss.server.data.dir - directory the server will use for persistent
+                    data file storage
+                    jboss.server.log.dir - directory the server will use for
+                    log file storage
+                    jboss.server.temp.dir - directory the server will use for
+                    temporary file storage
+                    jboss.domain.servers.dir - directory under which a host controller
+                    will create the working area for
+                    individual server instances
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--  JVM configurations -->
+    <xs:complexType name="jvmsType">
+        <xs:sequence>
+            <xs:element name="jvm" type="namedJvmType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvmType">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="heap" type="heapType" minOccurs="0"/>
+            <xs:element name="permgen" type="bounded-memory-sizeType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                    Deprecated. Has no effect on current version servers or on any servers controlled
+                    by previous version host controllers running on JDK 8 or later, as the JVM no
+                    longer provides a separate Permanent Generation space.
+
+                    For legacy version servers running on JDK 7 or earlier, this configures the size of the
+                    server VM's Permanent Generation space (i.e. -XX:PermSize, -XX:MaxPermSize.)
+                    ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <!-- Xss -->
+            <xs:element name="stack" type="memory-sizeType" minOccurs="0"/>
+            <xs:element name="agent-lib" type="jvm-agentLibType" minOccurs="0"/>
+            <xs:element name="agent-path" type="jvm-agentPathType" minOccurs="0"/>
+            <xs:element name="java-agent" type="jvm-javaagentType" minOccurs="0"/>
+            <xs:element name="jvm-options" type="jvm-optionsType" minOccurs="0"/>
+            <xs:element name="environment-variables" type="environmentVariablesType" minOccurs="0"/>
+            <xs:element name="launch-command" type="launch-commandType" minOccurs="0"/>
+            <xs:element name="module-options" type="moduleOptionsType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="java-home" type="xs:string"/>
+        <xs:attribute name="type" default="SUN">
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="SUN">
+                        <xs:annotation>
+                            <xs:documentation>Allows the full set of JVM options to be set via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                    <xs:enumeration value="IBM">
+                        <xs:annotation>
+                            <xs:documentation>Sets a subset of the JVM options via the jvm schema elements</xs:documentation>
+                        </xs:annotation>
+                    </xs:enumeration>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="env-classpath-ignored" default="true" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedJvmType">
+        <xs:complexContent>
+            <xs:extension base="jvmType">
+                <xs:attribute name="name" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serverJvmType">
+        <xs:complexContent>
+            <xs:extension base="namedJvmType">
+                <xs:attribute name="debug-enabled" type="xs:boolean" default="false"/>
+                <xs:attribute name="debug-options" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="heapType">
+        <xs:attribute name="size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Initial JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-size" use="optional">
+            <xs:annotation>
+                <xs:documentation>Maximum JVM heap size</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionsType">
+        <xs:sequence>
+            <xs:element name="option" type="jvm-optionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-optionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentLibType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent lib value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-agentPathType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM agent path value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jvm-javaagentType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JVM javaagent value </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionsType">
+        <xs:sequence>
+            <xs:element name="option" type="moduleOptionType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleOptionType">
+        <xs:attribute name="value" use="required">
+            <xs:annotation>
+                <xs:documentation>JBoss Modules option value</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-memory-sizeType">
+        <xs:attribute name="size" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="memory-sizeType">
+        <xs:attribute name="size" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="properties-with-boottime">
+        <xs:sequence>
+            <xs:element name="property" type="boottimePropertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="environmentVariablesType">
+        <xs:sequence>
+            <xs:element name="variable" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="launch-commandType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Prepend commands to the JVM process launch.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="prefix" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    JVM launch command prefix
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="boottimePropertyType">
+        <xs:complexContent>
+            <xs:extension base="propertyType">
+                <xs:attribute name="boot-time" type="xs:boolean" default="true"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="management-client-contentType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Storage information about re-usable chunks of data useful to management clients that are stored
+                   in the domain content repository.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="rollout-plans" type="contentType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Storage information about a set of named management update rollout plans useful to management
+                           clients that are stored in the domain content repository. The management API exposed by the domain
+                           controller provides access to these plans to management clients, allowing clients to use the plans
+                           by referencing them by name, avoiding the need to recreate them for each use.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="standalone-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="standalone-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="domain-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="domain-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="content" type="deployment-overlay-contentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlaysType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about deployment overlays that can be used to override deployment content.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-overlay" type="server-group-deployment-overlayType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-deployment-overlayType">
+        <xs:sequence>
+            <xs:element name="deployment" type="deployment-overlay-deploymentType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-contentType">
+        <xs:attribute name="path" type="xs:token" use="required"/>
+        <xs:attribute name="content" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="deployment-overlay-deploymentType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="domain-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the central access control configuration for a domain.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-group-scoped-roles" type="server-group-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="host-scoped-roles" type="host-scoped-rolesType" minOccurs="0"/>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+        <xs:attribute name="permission-combination-policy" type="permission-combination-policyType" use="optional" default="permissive"/>
+    </xs:complexType>
+
+    <xs:simpleType name="access-control-providerType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="simple">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Simple access control implementation that gives all permissions to any authenticated
+                        user.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rbac">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        WildFly's standard Role Based Access Control implementation.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="permission-combination-policyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  The policy for combining access control permissions when the configuration grants the user
+                  more than one type of permission for a given action. For example, in the standard WildFly role based
+                  access control system, a user may map to more than one role. This attribute would control how the permissions
+                   associated with those roles should be combined to make access control decisions.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="permissive">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist, if any of them allow the action,
+                        the action is allowed.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="rejecting">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If multiple permissions for the same action exist an exception should be thrown and the action
+                        should not be allowed. This value indicates that creating multiple permissions (e.g. by
+                        mapping a user to multiple roles) should be treated as a configuration error.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="server-access-controlType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Contains the access control configuration for a standalone server.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role-mapping" type="role-mappingType" minOccurs="0"/>
+            <xs:element name="constraints" type="constraintsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="provider" type="access-control-providerType" use="optional" default="simple"/>
+        <xs:attribute name="use-identity-roles" type="xs:boolean" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of the security domain to use to obtain the current identity from.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security domain to use to obtain the current identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="role-mappingType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Contains the mapping of authenticated users to roles.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="role" type="roleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    An individual role definition.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="include" type="include-excludeType" minOccurs="0"/>
+            <xs:element name="exclude" type="include-excludeType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the role, this should either be one of the standard roles or a scoped role.
+
+                        A user is added to a role if any of the following are true: -
+                          1 - The user is a member of a group listed in the includes element.
+                          2 - The user is explicitly listed in the includes element.
+                        AND neither of the following are true: -
+                          1 - The user is a member of a group listed in the excludes element.
+                          2 - The user is explicitly listed in the groups element.
+
+                        i.e. Any excludes definition takes priority over any includes definition.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="include-all" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If set to true all authenticated users will be granted this role provided that they
+                        have not been matched to the exclude list.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="include-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of users or groups to be included/excluded from the role containing this type.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="user" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="group" type="principalType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="principalType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  Representation of a single principal to indicate role assignment.
+
+                  If the realm attribute is specified then the realm used to authenticated the user
+                  will also be taken into account when performing the comparison.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        If you are editing the XML configuration directly you do not need to be adding
+                        this attribute and in general you should not be adding this attribute.
+
+                        When the management tools are used to add include and exclude definitions for
+                        groups and users the name used in the address is an arbitrary String, this attribute
+                        is used when non-standard forms of the address are used so that it can be persisted
+                        and the model will be consistent when it is reloaded.
+
+                        But as in the first sentence, if you are questioning if you should use this attribute
+                        yourself - DON'T.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the realm the user used to authenticate.
+
+                        This attribute is deprecated and should not be used once management security is migrated to WildFly Elytron.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The name of the principal.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="server-group-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-rolesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Roles scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="role" type="host-scoped-roleType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Basic attributes of a scoped-role.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="base-role" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   The name of the standard role upon which the scoped role is based.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="server-group-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of server groups
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="server-group" type="namedType" minOccurs="1" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the server groups to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="host-scoped-roleType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A role scoped to a given set of hosts
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-scoped-roleType">
+                <xs:choice>
+                    <xs:element name="host" type="namedType" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[
+                                   One of the hosts to which the role is constrained.
+                                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constraintsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about configured access constraints.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="vault-expression-sensitivity" type="vault-expression-sensitivityType" minOccurs="0"/>
+            <xs:element name="sensitive-classifications" type="sensitive-classificationsType" minOccurs="0"/>
+            <xs:element name="application-classifications" type="application-classificationsType" minOccurs="0"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="base-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Common configuration of a sensitivity constraint
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="requires-read" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's read is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="requires-write" type="xs:boolean">
+          <xs:annotation>
+             <xs:documentation>
+                Configuration of if a classification's write is sensitive
+             </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="vault-expression-sensitivityType">
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sensitive-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="sensitive-classification" type="typed-sensitivityType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="typed-sensitivityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured sensitive classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="base-sensitivityType">
+                <xs:attribute name="requires-addressable" type="xs:boolean">
+                      <xs:annotation>
+                         <xs:documentation>
+                            Configuration of if a classification's addressability is sensitive
+                         </xs:documentation>
+                      </xs:annotation>
+                  </xs:attribute>
+                <xs:attribute name="name" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        The name of the constraint, must be unique for each name
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="type" type="xs:string" use="required">
+                  <xs:annotation>
+                     <xs:documentation>
+                        'core' or the name of the subsystem defining the constraint
+                     </xs:documentation>
+                  </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="application-classificationsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classifications
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="application-classification" type="application-classificationType"/>
+        </xs:choice>
+
+    </xs:complexType>
+    <xs:complexType name="application-classificationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Stores information about a configured application classification
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+           <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   The name of the constraint, must be unique for each name
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="type" type="xs:string" use="required">
+             <xs:annotation>
+                <xs:documentation>
+                   'core' or the name of the subsystem defining the constraint
+                </xs:documentation>
+             </xs:annotation>
+           </xs:attribute>
+           <xs:attribute name="application" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="namedType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A type with a 'name' attribute
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludesType">
+        <xs:sequence>
+            <xs:element name="host-exclude" type="host-excludeType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="host-excludeType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of management resources that should be made invisible to Host Controllers
+                   (excluding the Domain Controller) running a particular software version. This is
+                   used to shield Host Controllers running earlier software versions from resources whose
+                   management API the host cannot understand (e.g. profiles including subsystems unavailable on
+                   that host.)
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="host-release" type="host-releaseType"/>
+                <xs:element name="host-api-version" type="host-api-versionType"/>
+            </xs:choice>
+            <xs:element name="excluded-extensions" type="excluded-extensionsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       Unique identifier for this particular configuration.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-server-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of server-group names specifying all the server groups that have servers
+                   running on the target hosts. These are the groups used by the host's servers. For these groups,
+                   the server-group resource and related profile, socket-binding-group and deployment resources will
+                   not be hidden; all other server-group, profile, socket-binding-group and deployment resources
+                   will be hidden.
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="active-socket-binding-groups" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                   A space-delimited list of socket-binding-group names specifying all the socket binding groups that
+                   are used by servers running on the target hosts. Only used if 'active-server-groups' is set;
+                   otherwise ignored. Only needs to be set if the socket binding groups specified in the configuration
+                   of the server groups listed in 'active-server-groups' isn't the complete set of socket binding
+                   groups used on the servers (i.e. some other socket binding groups are specified in the target
+                   hosts' 'server-config' resources.)
+
+                   NOTE: For any host, the Domain Controller only applies this setting if, when the host registers
+                   with the Domain Controller, it does not inform the Domain Controller that it is configured to
+                   "ignore-unused-configuration". The host.xml "ignore-unused-configuration" setting provides similar
+                   functionality and takes precedence over this domain-wide setting.
+
+                   The primary expecuted use case for this setting is for managing hosts running releases prior to the
+                   introduction of the host.xml "ignore-unused-configuration" setting.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-releaseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A shorthand identifier for a well known EAP or WildFly Core based software distribution that the
+                   Host Controller is running. Used as a simpler alternative to specifying the kernel management API
+                   versions. When a Host Controller running the kernel major + minor management API associated with
+                   this release registers with the Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="id">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              The short hand identifier can have two forms:
+                              * EAP<major>.<minor> (for example, EAP6.2 or EAP7.3)
+                              * WildFly<major>.<minor> (for example WildFly10.0 or WildFly10.1)
+
+                              The corresponding kernel management API version is defined in the enum
+                              org.jboss.as.domain.controller.resources.HostExcludeResourceDefinition.KnownRelease.
+                            ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="host-api-versionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   Specification of the kernel (i.e. non-subsystem) management API version that the
+                   Host Controller is running. When a Host Controller running this management API version
+                   registers with the Domain Controller, the settings associated with
+                   the enclosing host-ignore configuration will be used to determine what resources are visible
+                   to the host.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="major-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API major version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="minor-version" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API minor version used by the host.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="micro-version" type="xs:int" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       The kernel management API micro version. If unspecified, the enclosing host-ignore
+                       configuration applies to all releases of the given major + minor version, excluding any
+                       for which a different configuration with a micro version also specified is present.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="excluded-extensionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                   A list of extension names the resources for which (i.e those administered at the /extension=*
+                   addresses in the CLI) should be hidden from the target hosts.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="extension" type="extensionType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-core-management_1_0.xsd b/wildfly/docs/schema/wildfly-core-management_1_0.xsd
new file mode 100644
index 0000000..adb7136
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-core-management_1_0.xsd
@@ -0,0 +1,97 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:core-management:1.0"
+           xmlns="urn:jboss:domain:core-management:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The core-management subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration for the history of configuration changes.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Number of configuration changes that are available in history.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="process-state-listener" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration for a process state listener.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="properties" minOccurs="0" type="properties">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Configuration properties for the process state listener.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Name of the process state listener.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="class" type="xs:string" use="required">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    ControlledProcessStateListener class implementation.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="module" type="xs:string" use="required">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Module where the ControlledProcessStateListener implementation class may be found.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="timeout" type="xs:int" use="optional" default="30">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Timeout used in seconds, for listener operations.
+                                    If an individual listener operation takes longer than this timeout it will be canceled.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-core-management_preview_1_0.xsd b/wildfly/docs/schema/wildfly-core-management_preview_1_0.xsd
new file mode 100644
index 0000000..3ebcafe
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-core-management_preview_1_0.xsd
@@ -0,0 +1,121 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:core-management:preview:1.0"
+           xmlns="urn:jboss:domain:core-management:preview:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The core-management subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:all minOccurs="0" maxOccurs="1">
+                <xs:element name="configuration-changes" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration for the history of configuration changes.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="max-history" type="xs:integer" use="optional" default="10">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Number of configuration changes that are available in history.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="unstable-api-annotations" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration of the handling of finding unstable api annotations in the
+                            user's code
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="level" default="LOG">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Whether to log or throw an error if use of unstable api annotations are found
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:token">
+                                    <xs:enumeration value="LOG"/>
+                                    <xs:enumeration value="ERROR"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="process-state-listener" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configuration for a process state listener.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="properties" minOccurs="0" type="properties">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Configuration properties for the process state listener.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Name of the process state listener.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="class" type="xs:string" use="required">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    ControlledProcessStateListener class implementation.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="module" type="xs:string" use="required">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Module where the ControlledProcessStateListener implementation class may be found.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="timeout" type="xs:int" use="optional" default="30">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Timeout used in seconds, for listener operations.
+                                    If an individual listener operation takes longer than this timeout it will be canceled.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:all>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="properties">
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:attribute name="name" use="required"/>
+        <xs:attribute name="value" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-credential-reference_1_0.xsd b/wildfly/docs/schema/wildfly-credential-reference_1_0.xsd
new file mode 100644
index 0000000..313f8ba
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-credential-reference_1_0.xsd
@@ -0,0 +1,65 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:credential-reference:1.0"
+           xmlns="urn:wildfly:credential-reference:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- Shared Credential Reference Types
+         See README.md for a description of what needs to be done if you are adding a new version of this schema. -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:annotation>
+            <xs:documentation>
+                Credential to be used by the configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-credential-reference_1_1.xsd b/wildfly/docs/schema/wildfly-credential-reference_1_1.xsd
new file mode 100644
index 0000000..6e270fe
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-credential-reference_1_1.xsd
@@ -0,0 +1,80 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:credential-reference:1.1"
+           xmlns="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- Shared Credential Reference Types
+         See README.md for a description of what needs to be done if you are adding a new version of this schema. -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:annotation>
+            <xs:documentation>
+                Credential to be used by the configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. If used on its own, this should only be used for testing purposes.
+
+                    This attribute can also be specified together with the 'store' attribute. If the 'alias' attribute
+                    is also specified, one of the following will then occur:
+
+                    If the credential store does not contain an entry for the given 'alias', a new entry will be added
+                    to the credential store to hold the clear text password that was specified.
+
+                    If the credential store does contain an entry for the given 'alias', the existing credential will
+                    be replaced with the clear text password that was specified.
+
+                    If the 'clear-text' attribute is specified together with the 'store' attribute but the 'alias' is
+                    not specified, an alias will be generated and a new entry will be added to the credential store to
+                    hold the clear text password that was specified.
+
+                    In all three cases, the 'clear-text' attribute will be removed from the model after adding / updating
+                    an entry in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_2_0.xsd b/wildfly/docs/schema/wildfly-datasources_2_0.xsd
new file mode 100644
index 0000000..deca3a4
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_2_0.xsd
@@ -0,0 +1,1018 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:2.0" xmlns="urn:jboss:domain:datasources:2.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+      <xs:sequence>
+        <xs:choice>
+          <xs:sequence>
+            <xs:element name="user-name" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the username used when creating a new connection.
+                            Ex: <user-name>sa</user-name>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="password" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the password used when creating a new connection.
+                    Ex: <password>sa-pass</password>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            Thios tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-verion" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_3_0.xsd b/wildfly/docs/schema/wildfly-datasources_3_0.xsd
new file mode 100644
index 0000000..5253930
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_3_0.xsd
@@ -0,0 +1,1046 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:3.0" xmlns="urn:jboss:domain:datasources:3.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+      <xs:sequence>
+        <xs:choice>
+          <xs:sequence>
+            <xs:element name="user-name" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the username used when creating a new connection.
+                            Ex: <user-name>sa</user-name>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="password" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the password used when creating a new connection.
+                    Ex: <password>sa-pass</password>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            Thios tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-verion" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_4_0.xsd b/wildfly/docs/schema/wildfly-datasources_4_0.xsd
new file mode 100644
index 0000000..37121df
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_4_0.xsd
@@ -0,0 +1,1074 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:4.0" xmlns="urn:jboss:domain:datasources:4.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+      <xs:sequence>
+        <xs:choice>
+          <xs:sequence>
+            <xs:element name="user-name" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the username used when creating a new connection.
+                            Ex: <user-name>sa</user-name>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="password" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the password used when creating a new connection.
+                    Ex: <password>sa-pass</password>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            This tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-verion" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_5_0.xsd b/wildfly/docs/schema/wildfly-datasources_5_0.xsd
new file mode 100644
index 0000000..40b7ce5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_5_0.xsd
@@ -0,0 +1,1119 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:5.0" xmlns="urn:jboss:domain:datasources:5.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+      <xs:sequence>
+        <xs:choice>
+          <xs:sequence>
+            <xs:element name="user-name" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the username used when creating a new connection.
+                            Ex: <user-name>sa</user-name>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:choice>
+              <xs:element name="password" type="xs:token" minOccurs="0">
+                <xs:annotation>
+                  <xs:documentation>
+                    <![CDATA[[
+                    Specify the password used when creating a new connection.
+                    Ex: <password>sa-pass</password>
+                  ]]>
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:element>
+              <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                  <xs:documentation>
+                    Credential to be used by the configuration.
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:element>
+            </xs:choice>
+          </xs:sequence>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0">
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use the specified context
+                for authenticating. Else, Elytron will use the current authentication context of the caller that
+                is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                  <elytron-enabled/>
+                  <authentication-context>HsqlDbContext</authentication-context>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            This tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-version" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_6_0.xsd b/wildfly/docs/schema/wildfly-datasources_6_0.xsd
new file mode 100644
index 0000000..0dbaf6d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_6_0.xsd
@@ -0,0 +1,1119 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:6.0" xmlns="urn:jboss:domain:datasources:6.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="extensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+      <xs:sequence>
+        <xs:choice>
+          <xs:sequence>
+            <xs:element name="user-name" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the username used when creating a new connection.
+                            Ex: <user-name>sa</user-name>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:choice>
+              <xs:element name="password" type="xs:token" minOccurs="0">
+                <xs:annotation>
+                  <xs:documentation>
+                    <![CDATA[[
+                    Specify the password used when creating a new connection.
+                    Ex: <password>sa-pass</password>
+                  ]]>
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:element>
+              <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                  <xs:documentation>
+                    Credential to be used by the configuration.
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:element>
+            </xs:choice>
+          </xs:sequence>
+          <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0">
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use the specified context
+                for authenticating. Else, Elytron will use the current authentication context of the caller that
+                is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                  <elytron-enabled/>
+                  <authentication-context>HsqlDbContext</authentication-context>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            This tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-version" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_7_0.xsd b/wildfly/docs/schema/wildfly-datasources_7_0.xsd
new file mode 100644
index 0000000..c8913b9
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_7_0.xsd
@@ -0,0 +1,1127 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:7.0" xmlns="urn:jboss:domain:datasources:7.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="moduleExtensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="moduleExtensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="moduleExtensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:sequence>
+          <xs:element name="user-name" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                    Specify the username used when creating a new connection.
+                            Ex: <user-name>sa</user-name>
+                  ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:choice>
+            <xs:element name="password" type="xs:token" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                    Specify the password used when creating a new connection.
+                    Ex: <password>sa-pass</password>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  Credential to be used by the configuration.
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+          </xs:choice>
+        </xs:sequence>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0">
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use the specified context
+                for authenticating. Else, Elytron will use the current authentication context of the caller that
+                is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                  <elytron-enabled/>
+                  <authentication-context>HsqlDbContext</authentication-context>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="moduleExtensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            This tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-version" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_7_1.xsd b/wildfly/docs/schema/wildfly-datasources_7_1.xsd
new file mode 100644
index 0000000..9573383
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_7_1.xsd
@@ -0,0 +1,1121 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:7.1" xmlns="urn:jboss:domain:datasources:7.1"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType" mixed="false">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="connection-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="xa-datasource-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An unique reference to the classloader module which contains the JDBC driver
+              The accepted format is driverName#majorVersion.minorVersion
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies the delimeter for URLs in the connection url for HA datasources
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               Specifies an SQL statement to execute whenever a connection is added
+               to the connection pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes" />
+  </xs:complexType>
+  <xs:complexType name="boolean-presenceType" />
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED" />
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED" />
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ" />
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE" />
+      <xs:enumeration value="TRANSACTION_NONE" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="xa-datasource-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="connection-propertyType" mixed="true">
+    <xs:attribute name="name" use="required" type="xs:token" />
+  </xs:complexType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="moduleExtensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="moduleExtensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="moduleExtensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="set-tx-query-timeout" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true" />
+      <xs:enumeration value="false" />
+      <xs:enumeration value="nowarn" />
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="boolean-presenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+          <xs:annotation>
+            <xs:documentation>
+              Credential to be used by the configuration.
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0">
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use the specified context
+                for authenticating. Else, Elytron will use the current authentication context of the caller that
+                is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                  <elytron-enabled/>
+                  <authentication-context>HsqlDbContext</authentication-context>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="user-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the username used when creating a new connection.
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="password" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the password used when creating a new connection.
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="moduleExtensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional"></xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies a Java bean property value
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+      <xs:annotation>
+          <xs:documentation>
+           <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            This tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-version" type="xs:int" use="optional">
+    <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-datasources_7_2.xsd b/wildfly/docs/schema/wildfly-datasources_7_2.xsd
new file mode 100644
index 0000000..036ab99
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-datasources_7_2.xsd
@@ -0,0 +1,1026 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:datasources:7.2" xmlns="urn:jboss:domain:datasources:7.2"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="datasources" type="datasourcesType" minOccurs="1" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="datasourcesType">
+    <xs:sequence>
+      <xs:choice minOccurs="0" maxOccurs="unbounded">
+        <xs:element name="datasource" type="datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a non-XA datasource, using local transactions
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-datasource" type="xa-datasourceType">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies a XA datasource
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="drivers" type="driversType" maxOccurs="1" minOccurs="0"/>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="datasourceType">
+    <xs:sequence>
+      <xs:element name="connection-url" type="xs:token">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The JDBC driver connection URL Ex: <connection-url>jdbc:hsqldb:hsql://localhost:1701</connection-url>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC datasource class Ex: <datasource-class>org.h2.jdbcx.JdbcDataSource</datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The connection-property element allows you to pass in arbitrary connection
+              properties to the Driver.connect(url, props) method. Each connection-property
+              specifies a string name/value pair with the property name coming from the
+              name attribute and the value coming from the element content. Ex:
+              <connection-property name="char.encoding">UTF-8</connection-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:group ref="common-simpleDatasourceElements"/>
+      <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:group ref="common-complexDatasourceElements"/>
+    </xs:sequence>
+    <xs:attribute name="jta" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable JTA integration
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-datasourceAttributes"/>
+  </xs:complexType>
+  <xs:complexType name="xa-datasourceType">
+    <xs:sequence>
+      <xs:element name="xa-datasource-property" type="config-propertyType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a property to assign to the XADataSource implementation class.
+              Each property is identified by the name attribute and the property value
+              is given by the xa-datasource-property element content. The property is mapped
+              onto the XADataSource implementation by looking for a JavaBeans style getter
+              method for the property name. If found, the value of the property is set
+              using the JavaBeans setter with the element text translated to the true property
+              type using the java.beans.PropertyEditor for the type. Ex:
+              <xa-datasource-property name="IfxWAITTIME">10</xa-datasource-property>
+              <xa-datasource-property name="IfxIFXHOST">myhost.mydomain.com</xa-datasource-property>
+              <xa-datasource-property name="PortNumber">1557</xa-datasource-property>
+              <xa-datasource-property name="DatabaseName">mydb</xa-datasource-property>
+              <xa-datasource-property name="ServerName">myserver</xa-datasource-property>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-property" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                     Specifies the property for the URL property in the xa-datasource-property values
+                    ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:group ref="common-simpleDatasourceElements"/>
+      <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the pooling settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"/>
+      <xs:group ref="common-complexDatasourceElements"/>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-datasourceAttributes"/>
+  </xs:complexType>
+  <xs:attributeGroup name="common-datasourceAttributes">
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name for the datasource
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the datasource used for management
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if the datasource should be enabled
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Setting this to false will bind the DataSource into global JNDI
+            Ex: use-java-context="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="spy" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable spy functionality on the JDBC layer - e.g. log all JDBC traffic to the datasource.
+            Remember to enable the logging category (org.jboss.jdbc) too.
+            Ex: spy="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-ccm" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable the use of a cached connection manager
+            Ex: use-ccm="true"
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                  Enable cmr functionality on this datsource's connections
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                  Enable statistics for this datasource
+                 ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:group name="common-simpleDatasourceElements">
+    <xs:sequence>
+      <xs:element name="driver" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                An unique reference to the classloader module which contains the JDBC driver
+                The accepted format is driverName#majorVersion.minorVersion
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-delimiter" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the delimeter for URLs in connection-url for HA datasources
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="url-selector-strategy-class-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              A class that implements org.jboss.jca.adapters.jdbc.URLSelectorStrategy
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="new-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to execute whenever a connection is added
+              to the connection pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-isolation" type="transaction-isolationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Set java.sql.Connection transaction isolation level to use. The constants
+              defined by transaction-isolation-values are the possible transaction isolation
+              levels and include: TRANSACTION_READ_UNCOMMITTED TRANSACTION_READ_COMMITTED
+              TRANSACTION_REPEATABLE_READ TRANSACTION_SERIALIZABLE TRANSACTION_NONE
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:group>
+
+  <xs:group name="common-complexDatasourceElements">
+    <xs:sequence>
+      <xs:element name="security" type="dsSecurityType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the time out settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="statement" type="statementType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the statement settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:group>
+
+  <xs:simpleType name="transaction-isolationType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define constants used as the possible transaction isolation levels in transaction-isolation
+          type. Include: TRANSACTION_READ_UNCOMMITTED, TRANSACTION_READ_COMMITTED, TRANSACTION_REPEATABLE_READ,
+          TRANSACTION_SERIALIZABLE, TRANSACTION_NONE
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="TRANSACTION_READ_UNCOMMITTED"/>
+      <xs:enumeration value="TRANSACTION_READ_COMMITTED"/>
+      <xs:enumeration value="TRANSACTION_REPEATABLE_READ"/>
+      <xs:enumeration value="TRANSACTION_SERIALIZABLE"/>
+      <xs:enumeration value="TRANSACTION_NONE"/>
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="valid-connection-checker" type="moduleExtensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ValidConnectionChecker that provides
+              a SQLException isValidConnection(Connection e) method to validate is a connection
+              is valid. An exception means the connection is destroyed. This overrides
+              the check-valid-connection-sql when present. Ex:
+              <valid-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleValidConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+
+      <xs:element name="check-valid-connection-sql" type="xs:string" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specify an SQL statement to check validity of a pool connection. This
+              may be called when managed connection is taken from pool for use.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The background-validation-millis element specifies the amount of
+              time, in millis, that background validation will run.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether fail a connection allocation on the first connection if it
+              is invalid (true) or keep trying until the pool is exhausted of all potential
+              connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element minOccurs="0" name="stale-connection-checker" type="moduleExtensionType">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.StaleConnectionChecker that provides
+              a boolean isStaleConnection(SQLException e) method which if it it returns
+              true will wrap the exception in an org.jboss.jca.adapters.jdbc.StaleConnectionException
+              which is a subclass of SQLException. Ex:
+              <stale-connection-checker class-name="org.jboss.jca.adapters.jdbc.vendor.OracleStaleConnectionChecker"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="exception-sorter" type="moduleExtensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An org.jboss.jca.adapters.jdbc.ExceptionSorter that provides a
+              boolean isExceptionFatal(SQLException e) method to validate is an exception
+              should be broadcast to all javax.resource.spi.ConnectionEventListener as
+              a connectionErrorOccurred message. Ex:
+              <exception-sorter class-name="org.jboss.jca.adapters.jdbc.vendor.OracleExceptionSorter"/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="set-tx-query-timeout" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to set the query timeout based on the time remaining until
+              transaction timeout, any configured query timeout will be used if there is
+              no transaction. The default is false. e.g. <set-tx-query-timeout/>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The blocking-timeout-millis element indicates the maximum time in
+              milliseconds to block while waiting for a connection before throwing an exception.
+              Note that this blocks only while waiting for a permit for a connection, and
+              will never throw an exception if creating a new connection takes an inordinately
+              long time. The default is 30000 (30 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="query-timeout" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured query timeout in seconds The default is no timeout
+              e.g. 5 minutes <query-timeout>300</query-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-try-lock" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Any configured timeout for internal locks on the resource adapter
+              objects in seconds The default is a 60 second timeout e.g. 5 minutes <use-try-lock>300</use-try-lock>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is 0.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5 seconds).
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout() Default is zero which
+              does not invoke the setter. In seconds e.g. 5 minutes <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:simpleType name="track-statementsType">
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="true"/>
+      <xs:enumeration value="false"/>
+      <xs:enumeration value="nowarn"/>
+    </xs:restriction>
+  </xs:simpleType>
+  <xs:complexType name="statementType">
+    <xs:sequence>
+      <xs:element name="track-statements" type="track-statementsType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to check for unclosed statements when a connection is returned
+              to the pool and result sets are closed when a statement is closed/return
+              to the prepared statement cache. valid values are: false - do not track statements
+              and results true - track statements and result sets and warn when they are
+              not closed nowarn - track statements but do no warn about them being unclosed
+              (the default) e.g. <track-statements>nowarn</track-statements>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prepared-statement-cache-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The number of prepared statements per connection in an LRU cache
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="share-prepared-statements" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to share prepare statements, i.e. whether asking for same
+              statement twice without closing uses the same underlying prepared statement.
+              The default is false. e.g. <share-prepared-statements/>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Empty element denotes
+              a true value. e.g. <prefill>true</prefill>.
+              Default is false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered a strictly.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allow-multiple-users" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies if multiple users will access the datasource through the getConnection(user, password)
+              method and hence if the internal pool type should account for that
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-listener" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    An org.jboss.jca.adapters.jdbc.spi.listener.ConnectionListener that provides
+                    a possible to listen for connection activation and passivation in order to
+                    perform actions before the connection is returned to the application or returned
+                    to the pool. Ex:
+                    <connection-listener class-name="com.acme.jdbc.OracleConnectionListener"/>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the capacity policies for the pool
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+  <xs:complexType name="dsSecurityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                  <elytron-enabled/>
+                  <authentication-context>HsqlDbContext</authentication-context>
+                ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            Credential to be used by the configuration.
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="elytron-enabled" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use the specified context
+                for authenticating. Else, Elytron will use the current authentication context of the caller that
+                is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="reauth-plugin" type="extensionType" minOccurs="0" maxOccurs="1"/>
+    </xs:sequence>
+    <xs:attribute name="user-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the username used when creating a new connection.
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="password" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the password used when creating a new connection.
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded"/>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"/>
+  </xs:complexType>
+
+  <xs:complexType name="moduleExtensionType">
+    <xs:complexContent>
+      <xs:extension base="extensionType">
+        <xs:attribute name="module" type="xs:token" use="optional"/>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token"/>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="dsSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driverType">
+    <xs:sequence>
+      <xs:element name="driver-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the JDBC driver class Ex: <driver-class>org.hsqldb.jdbcDriver</driver-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.XADataSource implementation
+              class. Ex: <xa-datasource-class>oracle.jdbc.xa.client.OracleXADataSource</xa-datasource-class>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="datasource-class" type="xs:token" maxOccurs="1" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The fully qualifed name of the javax.sql.DataSource implementation
+              class.
+             ]]>
+          </xs:documentation>
+        </xs:annotation></xs:element>
+    </xs:sequence>
+    <xs:attribute name="name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the symbolic name of this driver used to reference this driver
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="module" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the name of AS7 module providing this driver.
+            This tag is not used in IronJacamar standalone container.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="major-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the major version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="minor-version" type="xs:int" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the minor version of this driver. If the major and minor versions are omitted the first available
+            Driver in module will be used.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="driversType">
+    <xs:sequence>
+      <xs:element name="driver" type="driverType" maxOccurs="unbounded" minOccurs="1"/>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for incrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Defines the policy for decrementing connections in the pool
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-discovery_1_0.xsd b/wildfly/docs/schema/wildfly-discovery_1_0.xsd
new file mode 100644
index 0000000..e98cb2d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-discovery_1_0.xsd
@@ -0,0 +1,168 @@
+<?xml version="1.0" encoding="UTF-8" ?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:discovery:1.0"
+           xmlns="urn:jboss:domain:discovery:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem" type="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                The discovery subsystem root element.
+            </xs:documentation>
+        </xs:annotation>
+    </xs:element>
+
+    <xs:complexType name="subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                The discovery subsystem root type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="aggregate-provider" type="aggregateType">
+                <xs:annotation>
+                    <xs:documentation>
+                        An aggregating discovery provider element.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="static-provider" type="staticType">
+                <xs:annotation>
+                    <xs:documentation>
+                        A static discovery provider definition element.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateType">
+        <xs:annotation>
+            <xs:documentation>
+                A provider which aggregates multiple other providers into one.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="providersType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The list of providers which make up this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="staticType">
+        <xs:annotation>
+            <xs:documentation>
+                A provider which contains a list of static services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="service" type="serviceType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A single service definition within the service list.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serviceType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition of a single static service.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="attribute" type="attributeType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A single attribute in this attribute list.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="abstract-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The abstract type of the service being advertised.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="abstract-type-authority" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the authority which defined the abstract service type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="uri" type="xs:anyURI" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The concrete URI of the service being advertised.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="uri-scheme-authority" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the authority which defined the concrete URI scheme.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="attributeType">
+        <xs:annotation>
+            <xs:documentation>
+                A service's attribute definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The attribute value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="providersType">
+        <xs:annotation>
+            <xs:documentation>
+                A list of providers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-distributable-ejb_1_0.xsd b/wildfly/docs/schema/wildfly-distributable-ejb_1_0.xsd
new file mode 100644
index 0000000..47b11f5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-distributable-ejb_1_0.xsd
@@ -0,0 +1,127 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:distributable-ejb:1.0"
+           xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns:tns="urn:jboss:domain:distributable-ejb:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem" type="tns:subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-bean-management" type="tns:infinispan-bean-management">
+                    <xs:annotation>
+                        <xs:documentation>An Infinispan-based bean management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice>
+                <xs:element name="local-client-mappings-registry" type="tns:empty">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for local client mappings registry</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="infinispan-client-mappings-registry" type="tns:infinispan-client-mappings-registry">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for cluster-aware client mappings registry</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-timer-management" type="tns:infinispan-timer-management">
+                    <xs:annotation>
+                        <xs:documentation>References an existing timer management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="default-bean-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default bean management provider for ejb applications.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-bean-management">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The name of this bean management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attributeGroup ref="tns:infinispan"/>
+        <xs:attribute name="max-active-beans" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>The maximum number active beans to retain in memory at a time, after which the least recently used will passivate.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-client-mappings-registry">
+        <xs:attributeGroup ref="tns:infinispan"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="infinispan">
+        <xs:attribute name="cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    References a cache within the associated cache-container.
+                    If unspecified, the default cache of the associated cache-container is assumed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="infinispan-timer-management">
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References the name of an existing bean management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attributeGroup ref="tns:infinispan"/>
+        <xs:attribute name="max-active-timers" type="xs:integer">
+            <xs:annotation>
+                <xs:documentation>The maximum number active timers to retain in memory at a time, after which the least recently used will passivate.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="JBOSS">
+            <xs:annotation>
+                <xs:documentation>Indicates the marshalling implementation used for serializing the timeout context of a timer.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Marshaller based on JBoss Marshalling.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>
+                        Marshaller based on ProtoStream.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-distributable-web_1_0.xsd b/wildfly/docs/schema/wildfly-distributable-web_1_0.xsd
new file mode 100644
index 0000000..7bc225c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-distributable-web_1_0.xsd
@@ -0,0 +1,227 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:distributable-web:1.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:distributable-web:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="subsystem" type="tns:subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-single-sign-on-management" type="tns:infinispan-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-single-sign-on-management" type="tns:hotrod-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an HotRod remote cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice>
+                <xs:element name="local-routing" type="tns:empty">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for local routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="infinispan-routing" type="tns:infinispan-routing">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for cluster-aware routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="default-session-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default session management provider for distributable web applications</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-single-sign-on-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default single sign-on management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this session management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-single-sign-on-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this single sign-on management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:group ref="tns:affinity"/>
+                    <xs:element name="primary-owner-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the primary owner of a given session.
+                                Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-routing">
+        <xs:attributeGroup ref="tns:infinispan"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="infinispan">
+        <xs:attribute name="cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    References a cache within the associated cache-container.
+                    If unspecified, the default cache of the associated cache-container is assumed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:attributeGroup name="hotrod">
+        <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-configuration" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-distributable-web_2_0.xsd b/wildfly/docs/schema/wildfly-distributable-web_2_0.xsd
new file mode 100644
index 0000000..85ad455
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-distributable-web_2_0.xsd
@@ -0,0 +1,249 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:distributable-web:2.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:distributable-web:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <xs:element name="subsystem" type="tns:subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-single-sign-on-management" type="tns:infinispan-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-single-sign-on-management" type="tns:hotrod-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an HotRod remote cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice>
+                <xs:element name="local-routing" type="tns:empty">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for local routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="infinispan-routing" type="tns:infinispan-routing">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for cluster-aware routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="default-session-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default session management provider for distributable web applications</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-single-sign-on-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default single sign-on management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this session management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-single-sign-on-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this single sign-on management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:group ref="tns:affinity"/>
+                    <xs:element name="primary-owner-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the primary owner of a given session.
+                                Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="ranked-affinity" type="tns:ranked-affinity">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the first available node in a list comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                                Behaves the same as local-affinity if the cache is not distributed, nor replicated.
+                                Must be explicitly supported by the load balancer.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-routing">
+        <xs:attributeGroup ref="tns:infinispan"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="infinispan">
+        <xs:attribute name="cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    References a cache within the associated cache-container.
+                    If unspecified, the default cache of the associated cache-container is assumed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:attributeGroup name="hotrod">
+        <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-configuration" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string" default=".">
+            <xs:annotation>
+                <xs:documentation>The delimiter used to separate ranked routes within the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-routes" type="xs:string" default="3">
+            <xs:annotation>
+                <xs:documentation>The maximum number of routes to append to the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-distributable-web_3_0.xsd b/wildfly/docs/schema/wildfly-distributable-web_3_0.xsd
new file mode 100644
index 0000000..889d6fb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-distributable-web_3_0.xsd
@@ -0,0 +1,273 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:distributable-web:3.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:distributable-web:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <xs:element name="subsystem" type="tns:subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-single-sign-on-management" type="tns:infinispan-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-single-sign-on-management" type="tns:hotrod-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an HotRod remote cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice>
+                <xs:element name="local-routing" type="tns:empty">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for local routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="infinispan-routing" type="tns:infinispan-routing">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for cluster-aware routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="default-session-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default session management provider for distributable web applications</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-single-sign-on-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default single sign-on management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this session management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="JBOSS">
+            <xs:annotation>
+                <xs:documentation>Indicates the marshalling implementation used for serializing attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-single-sign-on-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this single sign-on management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:group ref="tns:affinity"/>
+                    <xs:element name="primary-owner-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the primary owner of a given session.
+                                Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="ranked-affinity" type="tns:ranked-affinity">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the first available node in a list comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                                Behaves the same as local-affinity if the cache is not distributed, nor replicated.
+                                Must be explicitly supported by the load balancer.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-routing">
+        <xs:attributeGroup ref="tns:infinispan"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="infinispan">
+        <xs:attribute name="cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    References a cache within the associated cache-container.
+                    If unspecified, the default cache of the associated cache-container is assumed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:attributeGroup name="hotrod">
+        <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-configuration" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using JBoss Marshalling.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using ProtoStream.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string" default=".">
+            <xs:annotation>
+                <xs:documentation>The delimiter used to separate ranked routes within the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-routes" type="xs:string" default="3">
+            <xs:annotation>
+                <xs:documentation>The maximum number of routes to append to the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-distributable-web_4_0.xsd b/wildfly/docs/schema/wildfly-distributable-web_4_0.xsd
new file mode 100644
index 0000000..2c7227d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-distributable-web_4_0.xsd
@@ -0,0 +1,280 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema targetNamespace="urn:jboss:domain:distributable-web:4.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:distributable-web:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <xs:element name="subsystem" type="tns:subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-session-management" type="tns:infinispan-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-session-management" type="tns:hotrod-session-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines a deployment specific HotRod remote cache-based session management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice maxOccurs="unbounded">
+                <xs:element name="infinispan-single-sign-on-management" type="tns:infinispan-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an Infinispan cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="hotrod-single-sign-on-management" type="tns:hotrod-single-sign-on-management">
+                    <xs:annotation>
+                        <xs:documentation>Defines an HotRod remote cache-based single sign-on management provider</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:choice>
+                <xs:element name="local-routing" type="tns:empty">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for local routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="infinispan-routing" type="tns:infinispan-routing">
+                    <xs:annotation>
+                        <xs:documentation>Configures support for cluster-aware routing</xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="default-session-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default session management provider for distributable web applications</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-single-sign-on-management" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default single sign-on management provider</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-session-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this session management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="granularity" type="tns:granularity" use="required">
+            <xs:annotation>
+                <xs:documentation>Defines the granularity of cache entry mapping for the attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="marshaller" type="tns:marshaller" default="JBOSS">
+            <xs:annotation>
+                <xs:documentation>Indicates the marshalling implementation used for serializing attributes of a session.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstract-single-sign-on-management" abstract="true">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Uniquely identifies this single sign-on management provider.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:group ref="tns:affinity"/>
+                    <xs:element name="primary-owner-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the primary owner of a given session.
+                                Behaves the same as local-affinity if the backing cache is not distributed nor replicated.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="ranked-affinity" type="tns:ranked-affinity">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests will have an affinity for the first available node in a list comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                                Behaves the same as local-affinity if the cache is not distributed, nor replicated.
+                                Must be explicitly supported by the load balancer.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:infinispan"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-session-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-session-management">
+                <xs:choice>
+                    <xs:element name="no-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests not have an affinity for any particular server.
+                                Intended for use cases where web session state is not maintained within the application server.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="local-affinity" type="tns:empty">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Web requests have an affinity for the member that last handled a given session.
+                                This option corresponds to traditional sticky session behavior.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:choice>
+                <xs:attributeGroup ref="tns:hotrod"/>
+                <xs:attribute name="expiration-thread-pool-size" type="xs:positiveInteger">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configures the number of threads dedicated to processing expiration events from the remote Infinispan cluster.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="hotrod-single-sign-on-management">
+        <xs:complexContent>
+            <xs:extension base="tns:abstract-single-sign-on-management">
+                <xs:attributeGroup ref="tns:hotrod"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="infinispan-routing">
+        <xs:attributeGroup ref="tns:infinispan"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="infinispan">
+        <xs:attribute name="cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    References a cache within the associated cache-container.
+                    If unspecified, the default cache of the associated cache-container is assumed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:attributeGroup name="hotrod">
+        <xs:attribute name="remote-cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>References a remote-cache-container defined by the Infinispan subsystem.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-configuration" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>References a named configuration on the remote server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:simpleType name="granularity">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="SESSION">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores all session attributes within a single cache entry.
+                        Generally more expensive than ATTRIBUTE granularity, but preserves any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="ATTRIBUTE">
+                <xs:annotation>
+                    <xs:documentation>
+                        Stores each session attribute within a separate cache entry.
+                        Generally more efficient than SESSION granularity, but does not preserve any cross-attribute object references.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="marshaller">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="JBOSS">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using JBoss Marshalling.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="PROTOSTREAM">
+                <xs:annotation>
+                    <xs:documentation>
+                        Session attributes will be marshalled using ProtoStream.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests not have an affinity for any particular server.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="local-affinity" type="tns:empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string" default=".">
+            <xs:annotation>
+                <xs:documentation>The delimiter used to separate ranked routes within the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-routes" type="xs:string" default="3">
+            <xs:annotation>
+                <xs:documentation>The maximum number of routes to append to the session ID.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-ee-security_1_0.xsd b/wildfly/docs/schema/wildfly-ee-security_1_0.xsd
new file mode 100644
index 0000000..0b7e375
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ee-security_1_0.xsd
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:ee-security:1.0"
+            xmlns="urn:jboss:domain:ee-security:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The naming subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem"/>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb-timer_1_0.xsd b/wildfly/docs/schema/wildfly-ejb-timer_1_0.xsd
new file mode 100644
index 0000000..97f2037
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb-timer_1_0.xsd
@@ -0,0 +1,81 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:wildfly:ejb-timers:1.0"
+           xmlns="urn:jboss:wildfly:ejb-timers:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="timers" type="timersType"/>
+
+    <xs:complexType name="timersType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                EJB timer listing
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="timer" minOccurs="0" maxOccurs="unbounded" type="timerType"/>
+            <xs:element name="calendar-timer" minOccurs="0" maxOccurs="unbounded" type="calendar-timerType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="timerType">
+        <xs:sequence>
+            <xs:element name="info" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="primary-key" type="xs:string" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="timed-object-id" type="xs:string" use="required"/>
+        <xs:attribute name="timer-id" type="xs:string" use="required"/>
+        <xs:attribute name="initial-date" use="required"/>
+        <xs:attribute name="repeat-interval" use="required"/>
+        <xs:attribute name="next-date" use="optional"/>
+        <xs:attribute name="previous-run" use="optional"/>
+        <xs:attribute name="timer-state" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="calendar-timerType">
+        <xs:sequence>
+            <xs:element name="info" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="primary-key" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timeout-method" type="timeout-methodType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="timed-object-id" type="xs:string" use="required"/>
+        <xs:attribute name="timer-id" type="xs:string" use="required"/>
+        <xs:attribute name="initial-date" use="optional"/>
+        <xs:attribute name="next-date" use="optional"/>
+        <xs:attribute name="previous-run" use="optional"/>
+        <xs:attribute name="timer-state" use="required"/>
+        <xs:attribute name="schedule-expr-second" use="required"/>
+        <xs:attribute name="schedule-expr-minute" use="required"/>
+        <xs:attribute name="schedule-expr-hour" use="required"/>
+        <xs:attribute name="schedule-expr-day-of-week" use="required"/>
+        <xs:attribute name="schedule-expr-day-of-month" use="required"/>
+        <xs:attribute name="schedule-expr-month" use="required"/>
+        <xs:attribute name="schedule-expr-year" use="required"/>
+        <xs:attribute name="schedule-expr-start-date" use="optional"/>
+        <xs:attribute name="schedule-expr-end-date" use="optional"/>
+        <xs:attribute name="schedule-expr-timezone" use="optional"/>
+
+    </xs:complexType>
+
+    <xs:complexType name="timeout-methodType">
+        <xs:sequence>
+            <xs:element name="parameter" type="parameterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="declaring-class" type="xs:string" use="required" />
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="parameterType">
+        <xs:attribute name="type" type="xs:string" use="required" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_10_0.xsd b/wildfly/docs/schema/wildfly-ejb3_10_0.xsd
new file mode 100644
index 0000000..e95425f
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_10_0.xsd
@@ -0,0 +1,644 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:10.0"
+           xmlns="urn:jboss:domain:ejb3:10.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="10.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use distributable-cache instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="enable-graceful-txn-shutdown" type="enable-graceful-txn-shutdownType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-ejb-name-regex" type="allow-ejb-name-regexType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="server-interceptors" type="serverInterceptorsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-interceptors" type="clientInterceptorsType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connectors" type="connectorsType" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use client-mappings-registry element of distributable-ejb subsystem instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="connectorsType">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:sequence>
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="remote-http-connection" type="remote-http-connectionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="static-ejb-discovery" type="static-ejb-discoveryType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="exclude-local-receiver" type="xs:boolean" use="optional"/>
+        <xs:attribute name="local-receiver-pass-by-value" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="static-ejb-discoveryType">
+        <xs:sequence>
+            <xs:element name="module" type="static-ejb-discovery-moduleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="static-ejb-discovery-moduleType">
+        <xs:attribute name="uri" use="required" type="xs:string" />
+        <xs:attribute name="module-name" use="required" type="xs:string" />
+        <xs:attribute name="app-name" use="optional" type="xs:string" />
+        <xs:attribute name="distinct-name" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-http-connectionType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="uri" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default session timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use simple-cache or distributable-cache instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="simple-cache" type="simpleCacheType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Used to define a non-distributable, non-passivating cache factory for a SFSB</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="distributable-cache" type="distributableCacheType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Used to define a distributable, passivating cache factory for a SFSB</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="simpleCacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="distributableCacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="bean-management" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use distributable-cache instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token"/>
+        <xs:attribute name="default-data-store" type="xs:token"/>
+        <xs:attribute name="default-persistent-timer-management" type="xs:token"/>
+        <xs:attribute name="default-transient-timer-management" type="xs:token"/>
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with core threads, max threads and unbounded queue.  When a task is submitted,
+                it will be assigned to an available thread for execution. If no thread is available, a new thread will
+                be created, subject to max-threads restriction.  Otherwise, the task is placed in queue.
+                If too many tasks are allowed to be submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that non-core threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron security domain that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="legacy-compliant-principal-propagation" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Option to switch between legacy compliant principal propagation or Elytron principal propagation.
+                    If there is no incoming run-as identity, then the current principal obtained from local unsecured bean is anonymous in Elytron.
+                    However in legacy it is the current authenticated principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:attribute name="outflow-security-domains" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    List of security domain references to attempt to outflow any established identity to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="allow-ejb-name-regexType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then regular expression names can be used in the assembly descriptor.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="enable-graceful-txn-shutdownType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the server is going to wait for open transactions involving EJB3 to complete
+                       before notifying the client that the server is no longer available. As a collateral effect, this behavior
+                       may cause ejb clients to send messages to suspending cluster nodes.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="serverInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="clientInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_3_0.xsd b/wildfly/docs/schema/wildfly-ejb3_3_0.xsd
new file mode 100644
index 0000000..faae058
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_3_0.xsd
@@ -0,0 +1,440 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:3.0"
+           xmlns="urn:jboss:domain:ejb3:3.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_4_0.xsd b/wildfly/docs/schema/wildfly-ejb3_4_0.xsd
new file mode 100644
index 0000000..b70563e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_4_0.xsd
@@ -0,0 +1,455 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:4.0"
+           xmlns="urn:jboss:domain:ejb3:4.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional"/>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType"/>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_5_0.xsd b/wildfly/docs/schema/wildfly-ejb3_5_0.xsd
new file mode 100644
index 0000000..8806ca5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_5_0.xsd
@@ -0,0 +1,550 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:5.0"
+           xmlns="urn:jboss:domain:ejb3:5.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="enable-graceful-txn-shutdown" type="enable-graceful-txn-shutdownType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-ejb-name-regex" type="allow-ejb-name-regexType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional"/>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:sequence>
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="static-ejb-discovery" type="static-ejb-discoveryType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="static-ejb-discoveryType">
+        <xs:sequence>
+            <xs:element name="module" type="static-ejb-discovery-moduleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="static-ejb-discovery-moduleType">
+        <xs:attribute name="uri" use="required" type="xs:string" />
+        <xs:attribute name="module-name" use="required" type="xs:string" />
+        <xs:attribute name="app-name" use="optional" type="xs:string" />
+        <xs:attribute name="distinct-name" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron security domain that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:attribute name="outflow-security-domains" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    List of security domain references to attempt to outflow any established identity to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="allow-ejb-name-regexType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then regular expression names can be used in the assembly descriptor.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="enable-graceful-txn-shutdownType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the server is going to wait for open transactions involving EJB3 to complete
+                       before notifying the client that the server is no longer available. As a collateral effect, this behavior
+                       may cause ejb clients to send messages to suspending cluster nodes.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_6_0.xsd b/wildfly/docs/schema/wildfly-ejb3_6_0.xsd
new file mode 100644
index 0000000..2b747b5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_6_0.xsd
@@ -0,0 +1,575 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:6.0"
+           xmlns="urn:jboss:domain:ejb3:6.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="enable-graceful-txn-shutdown" type="enable-graceful-txn-shutdownType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-ejb-name-regex" type="allow-ejb-name-regexType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="server-interceptors" type="serverInterceptorsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-interceptors" type="clientInterceptorsType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional"/>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:sequence>
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="static-ejb-discovery" type="static-ejb-discoveryType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="static-ejb-discoveryType">
+        <xs:sequence>
+            <xs:element name="module" type="static-ejb-discovery-moduleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="static-ejb-discovery-moduleType">
+        <xs:attribute name="uri" use="required" type="xs:string" />
+        <xs:attribute name="module-name" use="required" type="xs:string" />
+        <xs:attribute name="app-name" use="optional" type="xs:string" />
+        <xs:attribute name="distinct-name" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with core threads, max threads and unbounded queue.  When a task is submitted,
+                it will be assigned to an available thread for execution. If no thread is available, a new thread will
+                be created, subject to max-threads restriction.  Otherwise, the task is placed in queue.
+                If too many tasks are allowed to be submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that non-core threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron security domain that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:attribute name="outflow-security-domains" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    List of security domain references to attempt to outflow any established identity to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="allow-ejb-name-regexType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then regular expression names can be used in the assembly descriptor.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="enable-graceful-txn-shutdownType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the server is going to wait for open transactions involving EJB3 to complete
+                       before notifying the client that the server is no longer available. As a collateral effect, this behavior
+                       may cause ejb clients to send messages to suspending cluster nodes.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="serverInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="clientInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_7_0.xsd b/wildfly/docs/schema/wildfly-ejb3_7_0.xsd
new file mode 100644
index 0000000..9edafc5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_7_0.xsd
@@ -0,0 +1,580 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:7.0"
+           xmlns="urn:jboss:domain:ejb3:7.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="7.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="enable-graceful-txn-shutdown" type="enable-graceful-txn-shutdownType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-ejb-name-regex" type="allow-ejb-name-regexType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="server-interceptors" type="serverInterceptorsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-interceptors" type="clientInterceptorsType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="xs:string" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional"/>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:sequence>
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="static-ejb-discovery" type="static-ejb-discoveryType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="static-ejb-discoveryType">
+        <xs:sequence>
+            <xs:element name="module" type="static-ejb-discovery-moduleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="static-ejb-discovery-moduleType">
+        <xs:attribute name="uri" use="required" type="xs:string" />
+        <xs:attribute name="module-name" use="required" type="xs:string" />
+        <xs:attribute name="app-name" use="optional" type="xs:string" />
+        <xs:attribute name="distinct-name" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default session timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with core threads, max threads and unbounded queue.  When a task is submitted,
+                it will be assigned to an available thread for execution. If no thread is available, a new thread will
+                be created, subject to max-threads restriction.  Otherwise, the task is placed in queue.
+                If too many tasks are allowed to be submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that non-core threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron security domain that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:attribute name="outflow-security-domains" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    List of security domain references to attempt to outflow any established identity to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="allow-ejb-name-regexType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then regular expression names can be used in the assembly descriptor.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="enable-graceful-txn-shutdownType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the server is going to wait for open transactions involving EJB3 to complete
+                       before notifying the client that the server is no longer available. As a collateral effect, this behavior
+                       may cause ejb clients to send messages to suspending cluster nodes.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="serverInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="clientInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_8_0.xsd b/wildfly/docs/schema/wildfly-ejb3_8_0.xsd
new file mode 100644
index 0000000..0552054
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_8_0.xsd
@@ -0,0 +1,596 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:8.0"
+           xmlns="urn:jboss:domain:ejb3:8.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="8.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="enable-graceful-txn-shutdown" type="enable-graceful-txn-shutdownType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-ejb-name-regex" type="allow-ejb-name-regexType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="server-interceptors" type="serverInterceptorsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-interceptors" type="clientInterceptorsType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connectors" type="connectorsType" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional"/>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="connectorsType">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:sequence>
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="remote-http-connection" type="remote-http-connectionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="static-ejb-discovery" type="static-ejb-discoveryType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="static-ejb-discoveryType">
+        <xs:sequence>
+            <xs:element name="module" type="static-ejb-discovery-moduleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="static-ejb-discovery-moduleType">
+        <xs:attribute name="uri" use="required" type="xs:string" />
+        <xs:attribute name="module-name" use="required" type="xs:string" />
+        <xs:attribute name="app-name" use="optional" type="xs:string" />
+        <xs:attribute name="distinct-name" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-http-connectionType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="uri" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default session timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with core threads, max threads and unbounded queue.  When a task is submitted,
+                it will be assigned to an available thread for execution. If no thread is available, a new thread will
+                be created, subject to max-threads restriction.  Otherwise, the task is placed in queue.
+                If too many tasks are allowed to be submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that non-core threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron security domain that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:attribute name="outflow-security-domains" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    List of security domain references to attempt to outflow any established identity to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+                   <xs:documentation>
+                       <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+                   </xs:documentation>
+               </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="allow-ejb-name-regexType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then regular expression names can be used in the assembly descriptor.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="enable-graceful-txn-shutdownType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the server is going to wait for open transactions involving EJB3 to complete
+                       before notifying the client that the server is no longer available. As a collateral effect, this behavior
+                       may cause ejb clients to send messages to suspending cluster nodes.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="serverInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="clientInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-ejb3_9_0.xsd b/wildfly/docs/schema/wildfly-ejb3_9_0.xsd
new file mode 100644
index 0000000..1b2bafb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-ejb3_9_0.xsd
@@ -0,0 +1,607 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:ejb3:9.0"
+           xmlns="urn:jboss:domain:ejb3:9.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="9.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <!-- The ejb3 subsystem root element -->
+    <xs:element name="subsystem" type="ejb3-subsystemType"/>
+
+    <xs:complexType name="ejb3-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                EJB3 subsystem configurations
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="session-bean" type="session-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="mdb" type="mdbType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="entity-bean" type="entityType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pools" type="poolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="caches" type="cachesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="passivation-stores" type="passivation-storesType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="async" type="asyncType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="timer-service" type="timerServiceType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="remote" type="remoteType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="thread-pools" type="threadPoolsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="iiop" type="iiopType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="in-vm-remote-interface-invocation" type="in-vm-remote-interface-invocationType"
+                        minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-distinct-name" type="default-distinct-nameType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="default-security-domain" type="default-security-domainType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="identity" type="identityType" minOccurs="0" />
+            <xs:element name="default-missing-method-permissions-deny-access" type="default-missing-method-permissions-deny-accessType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="disable-default-ejb-permissions" type="disable-default-ejb-permissionsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="enable-graceful-txn-shutdown" type="enable-graceful-txn-shutdownType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="statistics" type="statisticsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="log-system-exceptions" type="log-system-exceptionsType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-ejb-name-regex" type="allow-ejb-name-regexType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="server-interceptors" type="serverInterceptorsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-interceptors" type="clientInterceptorsType" minOccurs="0" maxOccurs="1" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="mdbType">
+        <xs:all>
+            <xs:element name="resource-adapter-ref" type="resource-adapter-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="delivery-groups" type="delivery-groupsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="entityType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="optimistic-locking" type="optimistic-lockingType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="optimistic-lockingType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoteType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+            <xs:element name="profiles" type="profilesType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="connectors" type="connectorsType" use="required"/>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="cluster" type="xs:string" use="optional"/>
+        <xs:attribute name="execute-in-worker" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="connectorsType">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="profilesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="profile" type="profileType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="profileType">
+        <xs:sequence>
+            <xs:element name="remoting-ejb-receiver" type="remoting-ejb-receiverType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="remote-http-connection" type="remote-http-connectionType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="static-ejb-discovery" type="static-ejb-discoveryType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="exclude-local-receiver" type="xs:boolean" use="optional"/>
+        <xs:attribute name="local-receiver-pass-by-value" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="static-ejb-discoveryType">
+        <xs:sequence>
+            <xs:element name="module" type="static-ejb-discovery-moduleType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="static-ejb-discovery-moduleType">
+        <xs:attribute name="uri" use="required" type="xs:string" />
+        <xs:attribute name="module-name" use="required" type="xs:string" />
+        <xs:attribute name="app-name" use="optional" type="xs:string" />
+        <xs:attribute name="distinct-name" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-http-connectionType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="uri" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="remoting-ejb-receiverType">
+        <xs:all>
+            <xs:element name="channel-creation-options" type="channel-creation-optionsType" minOccurs="0"
+                        maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="outbound-connection-ref" type="xs:string" use="required"/>
+        <xs:attribute name="connect-timeout" type="xs:long" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="asyncType">
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="session-beanType">
+        <xs:all>
+            <xs:element name="stateless" type="stateless-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stateful" type="stateful-beanType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="singleton" type="singleton-beanType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateless-beanType">
+        <xs:all>
+            <xs:element name="bean-instance-pool-ref" type="bean-instance-pool-refType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="stateful-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default session timeout, for stateful session beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-ref" type="xs:string"/>
+        <xs:attribute name="clustered-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated. Not supported on current version servers; only allowed in managed domain profiles for use
+                    on servers running earlier versions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="passivation-disabled-cache-ref" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    EJB 3.2 spec allows individual stateful EJBs to declare whether they want to disable passivation for those beans.
+                    The EJB3 subsystem as a result is expected to have a passivation disabled cache factory, which it can use as a default
+                    for such EJBs.
+                    This passivation-disabled-cache-ref attribute points to such a cache configuration in the EJB3 subsystem
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-beanType">
+        <xs:attribute name="default-access-timeout" type="xs:positiveInteger" default="5000" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The default access timeout, for singleton beans, in milliseconds
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapter-refType">
+        <xs:attribute name="resource-adapter-name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-pool-refType">
+        <xs:attribute name="pool-name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupsType">
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="delivery-group" type="delivery-groupType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="delivery-groupType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="active" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="poolsType">
+        <xs:all>
+            <xs:element name="bean-instance-pools" type="bean-instance-poolsType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="bean-instance-poolsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="strict-max-pool" type="strict-max-poolType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="strict-max-poolType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="max-pool-size" type="xs:positiveInteger" default="20" use="optional"/>
+        <xs:attribute name="derive-size" type="xs:string" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout" type="xs:positiveInteger" default="5" use="optional"/>
+        <xs:attribute name="instance-acquisition-timeout-unit" type="timeout-unitType"
+                      default="MINUTES" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="cachesType">
+        <xs:sequence>
+            <xs:element name="cache" type="cacheType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="cacheType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="passivation-store-ref" type="xs:string"/>
+        <xs:attribute name="aliases" type="aliases"/>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storesType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="passivation-store" type="passivation-storeType"/>
+            <xs:element name="file-passivation-store" type="file-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cluster-passivation-store" type="cluster-passivation-storeType">
+                <xs:annotation>
+                    <xs:documentation>Deprecated. Use passivation-store instead.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="passivation-storeType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+    </xs:complexType>
+
+    <xs:attributeGroup name="legacy-passivation">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="idle-timeout" type="xs:positiveInteger" default="300"/>
+        <xs:attribute name="idle-timeout-unit" type="timeout-unitType" default="SECONDS"/>
+    </xs:attributeGroup>
+
+    <xs:complexType name="file-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="100000"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir"/>
+        <xs:attribute name="sessions-path" type="xs:string" default="ejb3/sessions"/>
+        <xs:attribute name="groups-path" type="xs:string" default="ejb3/groups"/>
+        <xs:attribute name="subdirectory-count" type="xs:positiveInteger" default="100"/>
+    </xs:complexType>
+
+    <xs:complexType name="cluster-passivation-storeType">
+        <xs:attributeGroup ref="legacy-passivation"/>
+        <xs:attribute name="max-size" type="xs:positiveInteger" default="10000"/>
+        <xs:attribute name="passivate-events-on-replicate" type="xs:boolean" default="true"/>
+        <xs:attribute name="cache-container" type="xs:string" default="ejb"/>
+        <xs:attribute name="bean-cache" type="xs:string"/>
+        <xs:attribute name="client-mappings-cache" type="xs:string" default="remote-connector-client-mappings"/>
+    </xs:complexType>
+
+    <xs:simpleType name="aliases">
+        <xs:annotation>
+            <xs:documentation>A list of aliases.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="timeout-unitType">
+        <xs:annotation>
+            <xs:documentation>
+                TimeUnit that are allowed for instance-acquisition-timeout on a pool
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="DAYS"/>
+            <xs:enumeration value="HOURS"/>
+            <xs:enumeration value="MINUTES"/>
+            <xs:enumeration value="SECONDS"/>
+            <xs:enumeration value="MILLISECONDS"/>
+            <xs:enumeration value="MICROSECONDS"/>
+            <xs:enumeration value="NANOSECONDS"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="timerServiceType">
+        <xs:sequence>
+            <xs:element name="data-stores" type="dataStoresType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="thread-pool-name" type="xs:token" use="required"/>
+        <xs:attribute name="default-data-store" type="xs:token" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="dataStoresType">
+        <xs:sequence>
+            <xs:element name="file-data-store" type="fileDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="database-data-store" type="databaseDataStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolsType">
+        <xs:sequence>
+            <xs:element name="thread-pool" type="threadPoolType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="threadPoolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with core threads, max threads and unbounded queue.  When a task is submitted,
+                it will be assigned to an available thread for execution. If no thread is available, a new thread will
+                be created, subject to max-threads restriction.  Otherwise, the task is placed in queue.
+                If too many tasks are allowed to be submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that non-core threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific threads subsystem thread factory to
+                use to create worker threads. Usually it will not be set for an EJB3 thread pool and an appropriate
+                default thread factory will be used.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="fileDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="path" type="xs:string"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="databaseDataStoreType">
+        <xs:attribute name="name" type="xs:token"/>
+        <xs:attribute name="datasource-jndi-name" type="xs:token"/>
+        <xs:attribute name="database" type="xs:token" use="optional"/>
+        <xs:attribute name="partition" type="xs:token" use="optional" default="default"/>
+        <xs:attribute name="refresh-interval" type="xs:integer" use="optional"/>
+        <xs:attribute name="allow-execution" type="xs:boolean" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="iiopType">
+        <xs:attribute name="enable-by-default" type="xs:boolean" use="required"/>
+        <xs:attribute name="use-qualified-name" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-remote-interface-invocationType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The EJB3 spec mandates that the invocations on remote interfaces of an EJB, use pass-by-value
+                semantics for parameters (i.e. parameter values are serialized/deserialized) during invocation.
+                The pass-by-value attribute of this element can be used to switch that behaviour to pass the parameters
+                by reference (and skip the serialization/deserialization step). Setting the pass-by-value to false will
+                return in pass-by-reference semantics.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="pass-by-value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-distinct-nameType">
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-security-domainType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The default security domain name that will be used for EJBs in the absence of any explicitly configured
+                security domain name for the bean
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="statisticsType">
+        <xs:attribute name="enabled" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the Elytron security domain that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="legacy-compliant-principal-propagation" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Option to switch between legacy compliant principal propagation or Elytron principal propagation.
+                    If there is no incoming run-as identity, then the current principal obtained from local unsecured bean is anonymous in Elytron.
+                    However in legacy it is the current authenticated principal.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityType">
+        <xs:attribute name="outflow-security-domains" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    List of security domain references to attempt to outflow any established identity to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="channel-creation-optionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The options that will be used while creating the channel for EJB remote invocation communication
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="option" type="optionType"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="optionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The "name" attribute specifies the name of the option being configured.
+
+                The "value" attribute is the value that's going to be set for the option.
+
+                The "type" attribute value can either be "xnio" or "remoting". If it's "xnio", then the option
+                being configured will be looked up against the org.xnio.Options class. If it's "remoting" then
+                the option will be looked up against the org.xnio.Option.RemotingOptions class.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string"/>
+        <xs:attribute name="type" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="default-missing-method-permissions-deny-accessType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then lack of any security metadata for an EJB method is an
+                       implicit deny.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="log-system-exceptionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then system exceptions will be logged by the EJB subsystem.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="allow-ejb-name-regexType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then regular expression names can be used in the assembly descriptor.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="disable-default-ejb-permissionsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the default security manager permissions required by spec will not
+                       be added to EJB deployments.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="enable-graceful-txn-shutdownType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       If this is enabled then the server is going to wait for open transactions involving EJB3 to complete
+                       before notifying the client that the server is no longer available. As a collateral effect, this behavior
+                       may cause ejb clients to send messages to suspending cluster nodes.
+                   ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="serverInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorsType">
+        <xs:sequence>
+            <xs:element name="interceptor" type="clientInterceptorType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientInterceptorType">
+        <xs:attribute name="module" type="xs:string" use="required"/>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron-oidc-client_1_0.xsd b/wildfly/docs/schema/wildfly-elytron-oidc-client_1_0.xsd
new file mode 100644
index 0000000..4270daf
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron-oidc-client_1_0.xsd
@@ -0,0 +1,1306 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron-oidc-client:1.0"
+            xmlns="urn:wildfly:elytron-oidc-client:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem-type"/>
+
+    <xs:complexType name="subsystem-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="realm" maxOccurs="unbounded" minOccurs="0" type="realm-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for a Keycloak realm. If you have multiple deployments secured by the same
+                        realm you can share the realm configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" maxOccurs="unbounded" minOccurs="0" type="provider-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for an OpenID Connect provider. If you have multiple deployments secured by
+                        the same OpenID provider you can share the provider configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-deployment" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        A deployment secured by an OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realm-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value
+                        of the 'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with Keycloak over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification will be skipped when communicating with Keycloak
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. It is recommended to use the 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with Keycloak over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with Keycloak should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by Keycloak when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the Keycloak realm in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from Keycloak when needed.
+                        If the public key is set, the subsystem never downloads new keys from Keycloak, breaking the subsystem when Keycloak rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to Keycloak to obtain a new access token.
+
+                        This can result in a higher load on the Keycloak and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to Keycloak.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the Keycloak login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Keycloak realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secure-deployment-type">
+        <xs:all>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-resource-role-mappings" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem will look inside the token for application-level role mappings for a user.
+                        If set to 'false', the subsystem will look at the realm-level for user-role mappings. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. This is Keycloak-specific. It is recommended to use 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Keycloak realm to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID Connect provider to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider
+                        over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Bearer-Token only authentication. Set this to 'true' if your application serves only web services and does not authenticate users.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="resource" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique, legacy identifier for a client application registered in the OpenID provider.
+                        It is recommended to use the 'client-id'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-id" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique identifier for a client application registered in the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-client" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', no client credentials are sent when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential" type="credential-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The credential used to communicate with the OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="redirect-rewrite-rule" type="redirect-rewrite-rule-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The rewrite rule for the redirect URI. The rewrite rule is an object notation, where the key is
+                        a regular expression with which the redirect URI is matched and the value is the replacement String.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-basic-auth" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Basic authentication. This is not supported in the current release.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="turn-off-change-session-id-on-login" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Session ID is changed by default on a successful login. Set this to 'true' if you want to turn this off.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-minimum-time-to-live" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        he subsystem will refresh the token if it will expire within the duration specified in
+                        'token-minimum-time-to-live' seconds. This value should never exceed the access token lifespan.
+                        If the value is set to 0 seconds, the subsystem will refresh the token only if the token has expired.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="min-time-between-jwks-requests" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If the subsystem recognizes a token signed by an unknown public key, it will try to download
+                        a new public key from the server. The subsystem won't try to download a public key if it already tried
+                        last in less than 'min-time-between-jwks-requests' seconds.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-key-cache-ttl" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The maximum interval between two requests to retrieve new public keys in seconds.
+                        New public keys are downloaded when the subsystem recognizes a token signed by an unknown public key.
+                        Even if the token's key is already known, new public keys are downloaded periodically as per the interval set here at least once.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="adapter-state-cookie-path" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set, this defines the path used in cookies set by the subsystem.
+                        This is useful when deploying an application in the root context path.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credential-type">
+        <xs:attribute name="client-keystore-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The path to the client keystore when the credential provider is used. This is optional.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client keystore type when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client keystore when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client key when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-alias" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client key alias when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="token-timeout" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The amount of time after which the token expires and can no longer be used to authenticate requests.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client secret that was registered with the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The credential signature algorithm used by the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the credential type.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="redirect-rewrite-rule-type">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Redirect URI rewrite rule.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replacement" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The replacement String in the rewrite rule for the redirect URI.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron-oidc-client_2_0.xsd b/wildfly/docs/schema/wildfly-elytron-oidc-client_2_0.xsd
new file mode 100644
index 0000000..41b64b2
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron-oidc-client_2_0.xsd
@@ -0,0 +1,1315 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron-oidc-client:2.0"
+            xmlns="urn:wildfly:elytron-oidc-client:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem-type"/>
+
+    <xs:complexType name="subsystem-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="realm" maxOccurs="unbounded" minOccurs="0" type="realm-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for a Keycloak realm. If you have multiple deployments secured by the same
+                        realm you can share the realm configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" maxOccurs="unbounded" minOccurs="0" type="provider-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for an OpenID Connect provider. If you have multiple deployments secured by
+                        the same OpenID provider you can share the provider configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-deployment" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        A deployment secured by an OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-server" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration used to secure the management console using Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realm-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value
+                        of the 'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with Keycloak over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification will be skipped when communicating with Keycloak
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. It is recommended to use the 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with Keycloak over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with Keycloak should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by Keycloak when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the Keycloak realm in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from Keycloak when needed.
+                        If the public key is set, the subsystem never downloads new keys from Keycloak, breaking the subsystem when Keycloak rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to Keycloak to obtain a new access token.
+
+                        This can result in a higher load on the Keycloak and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to Keycloak.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the Keycloak login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Keycloak realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secure-deployment-type">
+        <xs:all>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-resource-role-mappings" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem will look inside the token for application-level role mappings for a user.
+                        If set to 'false', the subsystem will look at the realm-level for user-role mappings. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. This is Keycloak-specific. It is recommended to use 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Keycloak realm to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID Connect provider to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider
+                        over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Bearer-Token only authentication. Set this to 'true' if your application serves only web services and does not authenticate users.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="resource" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique, legacy identifier for a client application registered in the OpenID provider.
+                        It is recommended to use the 'client-id'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-id" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique identifier for a client application registered in the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-client" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', no client credentials are sent when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential" type="credential-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The credential used to communicate with the OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="redirect-rewrite-rule" type="redirect-rewrite-rule-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The rewrite rule for the redirect URI. The rewrite rule is an object notation, where the key is
+                        a regular expression with which the redirect URI is matched and the value is the replacement String.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-basic-auth" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Basic authentication. This is not supported in the current release.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="turn-off-change-session-id-on-login" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Session ID is changed by default on a successful login. Set this to 'true' if you want to turn this off.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-minimum-time-to-live" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        he subsystem will refresh the token if it will expire within the duration specified in
+                        'token-minimum-time-to-live' seconds. This value should never exceed the access token lifespan.
+                        If the value is set to 0 seconds, the subsystem will refresh the token only if the token has expired.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="min-time-between-jwks-requests" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If the subsystem recognizes a token signed by an unknown public key, it will try to download
+                        a new public key from the server. The subsystem won't try to download a public key if it already tried
+                        last in less than 'min-time-between-jwks-requests' seconds.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-key-cache-ttl" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The maximum interval between two requests to retrieve new public keys in seconds.
+                        New public keys are downloaded when the subsystem recognizes a token signed by an unknown public key.
+                        Even if the token's key is already known, new public keys are downloaded periodically as per the interval set here at least once.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="adapter-state-cookie-path" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set, this defines the path used in cookies set by the subsystem.
+                        This is useful when deploying an application in the root context path.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credential-type">
+        <xs:attribute name="client-keystore-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The path to the client keystore when the credential provider is used. This is optional.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client keystore type when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client keystore when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client key when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-alias" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client key alias when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="token-timeout" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The amount of time after which the token expires and can no longer be used to authenticate requests.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client secret that was registered with the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The credential signature algorithm used by the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the credential type.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="redirect-rewrite-rule-type">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Redirect URI rewrite rule.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replacement" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The replacement String in the rewrite rule for the redirect URI.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron-oidc-client_preview_2_0.xsd b/wildfly/docs/schema/wildfly-elytron-oidc-client_preview_2_0.xsd
new file mode 100644
index 0000000..072d0c7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron-oidc-client_preview_2_0.xsd
@@ -0,0 +1,1320 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron-oidc-client:preview:2.0"
+            xmlns="urn:wildfly:elytron-oidc-client:preview:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem-type"/>
+
+    <xs:complexType name="subsystem-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="realm" maxOccurs="unbounded" minOccurs="0" type="realm-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for a Keycloak realm. If you have multiple deployments secured by the same
+                        realm you can share the realm configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" maxOccurs="unbounded" minOccurs="0" type="provider-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for an OpenID Connect provider. If you have multiple deployments secured by
+                        the same OpenID provider you can share the provider configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-deployment" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        A deployment secured by an OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-server" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration used to secure the management console using Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realm-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value
+                        of the 'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with Keycloak over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification will be skipped when communicating with Keycloak
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. It is recommended to use the 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with Keycloak over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with Keycloak should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by Keycloak when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the Keycloak realm in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from Keycloak when needed.
+                        If the public key is set, the subsystem never downloads new keys from Keycloak, breaking the subsystem when Keycloak rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to Keycloak to obtain a new access token.
+
+                        This can result in a higher load on the Keycloak and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to Keycloak.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the Keycloak login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Keycloak realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secure-deployment-type">
+        <xs:all>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-resource-role-mappings" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem will look inside the token for application-level role mappings for a user.
+                        If set to 'false', the subsystem will look at the realm-level for user-role mappings. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. This is Keycloak-specific. It is recommended to use 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Keycloak realm to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID Connect provider to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider
+                        over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Bearer-Token only authentication. Set this to 'true' if your application serves only web services and does not authenticate users.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="resource" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique, legacy identifier for a client application registered in the OpenID provider.
+                        It is recommended to use the 'client-id'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-id" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique identifier for a client application registered in the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-client" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', no client credentials are sent when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential" type="credential-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The credential used to communicate with the OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="redirect-rewrite-rule" type="redirect-rewrite-rule-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The rewrite rule for the redirect URI. The rewrite rule is an object notation, where the key is
+                        a regular expression with which the redirect URI is matched and the value is the replacement String.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-basic-auth" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Basic authentication. This is not supported in the current release.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="turn-off-change-session-id-on-login" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Session ID is changed by default on a successful login. Set this to 'true' if you want to turn this off.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-minimum-time-to-live" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        he subsystem will refresh the token if it will expire within the duration specified in
+                        'token-minimum-time-to-live' seconds. This value should never exceed the access token lifespan.
+                        If the value is set to 0 seconds, the subsystem will refresh the token only if the token has expired.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="min-time-between-jwks-requests" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If the subsystem recognizes a token signed by an unknown public key, it will try to download
+                        a new public key from the server. The subsystem won't try to download a public key if it already tried
+                        last in less than 'min-time-between-jwks-requests' seconds.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-key-cache-ttl" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The maximum interval between two requests to retrieve new public keys in seconds.
+                        New public keys are downloaded when the subsystem recognizes a token signed by an unknown public key.
+                        Even if the token's key is already known, new public keys are downloaded periodically as per the interval set here at least once.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="adapter-state-cookie-path" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set, this defines the path used in cookies set by the subsystem.
+                        This is useful when deploying an application in the root context path.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="scope" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        A space separated list of scope values that should be used in the OIDC authentication request.
+                        Scopes can be used to request that specific sets of information be made available as Claim Values.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credential-type">
+        <xs:attribute name="client-keystore-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The path to the client keystore when the credential provider is used. This is optional.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client keystore type when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client keystore when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client key when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-alias" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client key alias when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="token-timeout" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The amount of time after which the token expires and can no longer be used to authenticate requests.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client secret that was registered with the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The credential signature algorithm used by the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the credential type.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="redirect-rewrite-rule-type">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Redirect URI rewrite rule.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replacement" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The replacement String in the rewrite rule for the redirect URI.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-elytron-oidc-client_preview_3_0.xsd b/wildfly/docs/schema/wildfly-elytron-oidc-client_preview_3_0.xsd
new file mode 100644
index 0000000..feae980
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron-oidc-client_preview_3_0.xsd
@@ -0,0 +1,1584 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:elytron-oidc-client:preview:3.0"
+           xmlns="urn:wildfly:elytron-oidc-client:preview:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem-type"/>
+
+    <xs:complexType name="subsystem-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="realm" maxOccurs="unbounded" minOccurs="0" type="realm-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for a Keycloak realm. If you have multiple deployments secured by the same
+                        realm you can share the realm configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" maxOccurs="unbounded" minOccurs="0" type="provider-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration for an OpenID Connect provider. If you have multiple deployments secured by
+                        the same OpenID provider you can share the provider configuration here.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-deployment" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        A deployment secured by an OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="secure-server" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Configuration used to secure the management console using Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realm-type">
+        <xs:all>
+            <xs:element name="authentication-request-format" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The format to use for specifying query parameters in authentication request.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value
+                        of the 'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with Keycloak over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-file" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when signing the request object.
+                        This is required if signing algorithm for request object is indicated.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the keystore used to sign the request object.
+                        This is required if 'request-object-signing-keystore-file` has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-type" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The client keystore type used to specify the client key pair used to sign request objects.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'request-object-signing-keystore-file` has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-key-alias" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The client key alias when a key pair is used to sign or encrypt request objects.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-encryption-enc-value" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The content encryption algorithm used to encrypt the request object. The default value of this parameter
+                        is null, which indicates that the request object will not be encrypted. The `request-object-encryption-alg-value`
+                        attribute must be set along with this attribute to encrypt the request object.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-encryption-alg-value" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The encryption algorithm used to encrypt the request object. The default value of this parameter
+                        is null, which indicates that the request object will not be encrypted. The `request-object-encryption-enc-value`
+                        attribute must be set along with this attribute to encrypt the request object.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The algorithm used to sign the request object. The default value of this attribute is
+                        "none", indicating that the request object will be sent as a plain text.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification will be skipped when communicating with Keycloak
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. It is recommended to use the 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with Keycloak over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with Keycloak should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by Keycloak when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the Keycloak realm in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from Keycloak when needed.
+                        If the public key is set, the subsystem never downloads new keys from Keycloak, breaking the subsystem when Keycloak rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to Keycloak to obtain a new access token.
+
+                        This can result in a higher load on the Keycloak and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to Keycloak.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the Keycloak login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by Keycloak.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Keycloak realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="provider-type">
+        <xs:all>
+            <xs:element name="authentication-request-format" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The format to use for specifying query parameters in authentication request.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-file" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when signing the request object.
+                        This is required if signing algorithm for request object is indicated.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the keystore used to sign the request object.
+                        This is required if 'request-object-signing-keystore-file` has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-type" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The client keystore type used to specify the client key pair used to sign request objects.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'request-object-signing-keystore-file` has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-key-alias" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The client key alias when a key pair is used to sign or encrypt request objects.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-encryption-enc-value" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The content encryption algorithm used to encrypt the request object. The default value of this parameter
+                        is null, which indicates that the request object will not be encrypted. The `request-object-encryption-alg-value`
+                        attribute must be set along with this attribute to encrypt the request object.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-encryption-alg-value" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The encryption algorithm used to encrypt the request object. The default value of this parameter
+                        is null, which indicates that the request object will not be encrypted. The `request-object-encryption-enc-value`
+                        attribute must be set along with this attribute to encrypt the request object.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The algorithm used to sign the request object. The default value of this attribute is
+                        "none", indicating that the request object will be sent as a plain text.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secure-deployment-type">
+        <xs:all>
+            <xs:element name="authentication-request-format" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The format to use for specifying query parameters in authentication request.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client keystore. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when communicating with the OpenID provider over HTTPS. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-file" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the client keystore to use when signing the request object.
+                        This is required if signing algorithm for request object is indicated.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the keystore used to sign the request object.
+                        This is required if 'request-object-signing-keystore-file` has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-keystore-type" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The client keystore type used to specify the client key pair used to sign request objects.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'request-object-signing-keystore-file` has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-key-alias" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The client key alias when a key pair is used to sign or encrypt request objects.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable the Keycloak Cross-Origin Resource Sharing (CORS) support. This is optional. This is Keycloak-specific.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', hostname verification is skipped when communicating with the OpenID provider
+                        over HTTPS. This can be useful in testing environments.
+
+                        This should never be set to 'true' in production environments as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-resource-role-mappings" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem will look inside the token for application-level role mappings for a user.
+                        If set to 'false', the subsystem will look at the realm-level for user-role mappings. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Max-Age' header. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The base URL of the Keycloak authorization server. This is Keycloak-specific. It is recommended to use 'provider-url' instead.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID provider URL.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Keycloak realm to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="provider" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The OpenID Connect provider to use for authentication.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether or not to make use of a trust manager when communicating with the OpenID provider
+                        over HTTPS. This is optional.
+
+                        This should be set to 'true' only during development and never in production as it disables verification of SSL certificates.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Methods' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Bearer-Token only authentication. Set this to 'true' if your application serves only web services and does not authenticate users.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Allow-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If Cross-Origin Resource Sharing (CORS) is enabled, this sets the value of the
+                        'Access-Control-Expose-Headers' header. This should be a comma-separated string.
+                        This is optional. If not set, this header is not returned in CORS responses.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="resource" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique, legacy identifier for a client application registered in the OpenID provider.
+                        It is recommended to use the 'client-id'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-encryption-enc-value" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The content encryption algorithm used to encrypt the request object. The default value of this parameter
+                        is null, which indicates that the request object will not be encrypted. The `request-object-encryption-alg-value`
+                        attribute must be set along with this attribute to encrypt the request object.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-encryption-alg-value" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The encryption algorithm used to encrypt the request object. The default value of this parameter
+                        is null, which indicates that the request object will not be encrypted. The `request-object-encryption-enc-value`
+                        attribute must be set along with this attribute to encrypt the request object.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="request-object-signing-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The algorithm used to sign the request object. The default value of this attribute is
+                        "none", indicating that the request object will be sent as a plain text.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-id" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The unique identifier for a client application registered in the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The path to the truststore to use when communicating with Keycloak over HTTPS.
+                        Prefix the path with 'classpath:' to obtain the truststore from the deployment's classpath.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the truststore.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The password for the client key. This is required if 'client-keystore' has been specified.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-client" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', no client credentials are sent when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The connection pool size to use when communicating with the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', an authenticated browser client can obtain the signed access token
+                        (through a Javascript HTTP invocation) via the URL 'root/k_query_bearer_token'. This is optional.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether the communication with the OpenID provider should be over HTTPS. Valid values are:
+
+                        'all' - to always require HTTPS,
+                        'external' - to only require HTTPS for external requests,
+                        'none' - if HTTPS is not required.
+
+                        This should be set to 'all' in production environments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The confidential port used by the OpenID provider when communicating securely over SSL/TLS.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The public key of the OpenID provider in PEM format. This is optional. It is not recommended to set it.
+
+                        If the public key is not set, the subsystem downloads the public key from the OpenID provider when needed.
+                        If the public key is set, the subsystem never downloads new keys from the OpenID provider, breaking the subsystem when the OpenID provider rotates its keys.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential" type="credential-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The credential used to communicate with the OpenID Connect provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="redirect-rewrite-rule" type="redirect-rewrite-rule-type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The rewrite rule for the redirect URI. The rewrite rule is an object notation, where the key is
+                        a regular expression with which the redirect URI is matched and the value is the replacement String.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem refreshes the token every time your application receives
+                        a web request, and a new request is sent to the OpenID provider to obtain a new access token.
+
+                        This can result in a higher load on the OpenID provider and may impact the performance of the application.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', the subsystem sends a registration request to the OpenID provider.
+                        This attribute is useful only when your application is clustered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If 'register-node-at-startup' is set to 'true', this specifies the frequency (in seconds) at which the node should be re-registered.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Defines whether to store account information in an HTTP session or in a cookie.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Indicates which value from the ID token to use as the principal for the identity.
+                        The principal defaults to the value of the 'sub' if the token attribute is null.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="enable-basic-auth" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Enable Basic authentication. This is not supported in the current release.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="turn-off-change-session-id-on-login" type="xs:boolean" minOccurs="0" maxOccurs="1" >
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The Session ID is changed by default on a successful login. Set this to 'true' if you want to turn this off.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-minimum-time-to-live" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        he subsystem will refresh the token if it will expire within the duration specified in
+                        'token-minimum-time-to-live' seconds. This value should never exceed the access token lifespan.
+                        If the value is set to 0 seconds, the subsystem will refresh the token only if the token has expired.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="min-time-between-jwks-requests" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If the subsystem recognizes a token signed by an unknown public key, it will try to download
+                        a new public key from the server. The subsystem won't try to download a public key if it already tried
+                        last in less than 'min-time-between-jwks-requests' seconds.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="public-key-cache-ttl" type="xs:integer" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The maximum interval between two requests to retrieve new public keys in seconds.
+                        New public keys are downloaded when the subsystem recognizes a token signed by an unknown public key.
+                        Even if the token's key is already known, new public keys are downloaded periodically as per the interval set here at least once.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Whether to auto-detect SOAP or REST clients based on headers like 'X-Requested-With',
+                        'SOAPAction' or 'Accept'.
+
+                        If set to 'true', the subsystem sends an HTTP 401 status code to unauthenticated SOAP or REST clients
+                        instead of redirecting them to the OpenID provider login page.
+
+                        Set the value to 'true' if your application serves both applications and web services.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        Disable query parameter parsing for the 'access_token'. Users will not be able to authenticate if they only pass in an 'access_token'.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The URL for the HTTP proxy if one is used.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set to 'true', then during bearer-only authentication, the subsystem verifies if the token
+                        contains the client name defined as an audience. It is recommended to set the value to 'true' for improved security.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="adapter-state-cookie-path" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        If set, this defines the path used in cookies set by the subsystem.
+                        This is useful when deploying an application in the root context path.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for the socket waiting for data after establishing the connection in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The amount of time in milliseconds for the connection to be kept alive.
+                        A value less than or equal to zero is interpreted as an infinite value.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The timeout for establishing a connection with the remote host in milliseconds.
+                        A timeout value of zero is interpreted as an infinite timeout, and a negative value is interpreted as undefined.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="token-signature-algorithm" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        The token signature algorithm used by the OpenID provider.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="scope" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                        A space separated list of scope values that should be used in the OIDC authentication request.
+                        Scopes can be used to request that specific sets of information be made available as Claim Values.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the realm.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credential-type">
+        <xs:attribute name="client-keystore-file" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The path to the client keystore when the credential provider is used. This is optional.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-type" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client keystore type when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-keystore-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client keystore when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-password" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The password for the client key when the credential provider is used.
+                    This is required if 'client-keystore-file' has been specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-key-alias" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client key alias when the credential provider is used.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="token-timeout" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The amount of time after which the token expires and can no longer be used to authenticate requests.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The client secret that was registered with the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The credential signature algorithm used by the OpenID provider.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the credential type.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="redirect-rewrite-rule-type">
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The name of the Redirect URI rewrite rule.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="replacement" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The replacement String in the rewrite rule for the redirect URI.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-elytron_10_0.xsd b/wildfly/docs/schema/wildfly-elytron_10_0.xsd
new file mode 100644
index 0000000..e1a511e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_10_0.xsd
@@ -0,0 +1,5900 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:10.0"
+            xmlns="urn:wildfly:elytron:10.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_11_0.xsd b/wildfly/docs/schema/wildfly-elytron_11_0.xsd
new file mode 100644
index 0000000..5fbb726
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_11_0.xsd
@@ -0,0 +1,5955 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:11.0"
+            xmlns="urn:wildfly:elytron:11.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_12_0.xsd b/wildfly/docs/schema/wildfly-elytron_12_0.xsd
new file mode 100644
index 0000000..c7dc145
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_12_0.xsd
@@ -0,0 +1,5989 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:12.0"
+            xmlns="urn:wildfly:elytron:12.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_13_0.xsd b/wildfly/docs/schema/wildfly-elytron_13_0.xsd
new file mode 100644
index 0000000..4980c5a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_13_0.xsd
@@ -0,0 +1,6132 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:13.0"
+            xmlns="urn:wildfly:elytron:13.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_14_0.xsd b/wildfly/docs/schema/wildfly-elytron_14_0.xsd
new file mode 100644
index 0000000..d626115
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_14_0.xsd
@@ -0,0 +1,6240 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:14.0"
+            xmlns="urn:wildfly:elytron:14.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_15_0.xsd b/wildfly/docs/schema/wildfly-elytron_15_0.xsd
new file mode 100644
index 0000000..eb57b7a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_15_0.xsd
@@ -0,0 +1,6306 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:15.0"
+            xmlns="urn:wildfly:elytron:15.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jaas-realm" type="jaasRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jaasRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which uses JAAS Login Context to verify user's credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all minOccurs="0">
+                    <xs:element name="file" type="basicFileTypeOptional">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file with JAAS Login Context configuration.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="entry" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the entry defined in JAAS configuration file that should be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The module with custom login module classes and optional custom callback handler class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="callback-handler" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The class name of the callback handler to pass to JAAS Login Context.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="basicFileTypeOptional">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_15_1.xsd b/wildfly/docs/schema/wildfly-elytron_15_1.xsd
new file mode 100644
index 0000000..e2f8f72
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_15_1.xsd
@@ -0,0 +1,6320 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:15.1"
+            xmlns="urn:wildfly:elytron:15.1"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jaas-realm" type="jaasRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jaasRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which uses JAAS Login Context to verify user's credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all minOccurs="0">
+                    <xs:element name="file" type="basicFileTypeOptional">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file with JAAS Login Context configuration.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="entry" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the entry defined in JAAS configuration file that should be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The module with custom login module classes and optional custom callback handler class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="callback-handler" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The class name of the callback handler to pass to JAAS Login Context.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="credential-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the credential store that contains the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secret-key" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            An alias to the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="basicFileTypeOptional">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_16_0.xsd b/wildfly/docs/schema/wildfly-elytron_16_0.xsd
new file mode 100644
index 0000000..0922064
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_16_0.xsd
@@ -0,0 +1,6335 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:16.0"
+            xmlns="urn:wildfly:elytron:16.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jaas-realm" type="jaasRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jaasRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which uses JAAS Login Context to verify user's credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all minOccurs="0">
+                    <xs:element name="file" type="basicFileTypeOptional">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file with JAAS Login Context configuration.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="entry" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the entry defined in JAAS configuration file that should be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The module with custom login module classes and optional custom callback handler class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="callback-handler" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The class name of the callback handler to pass to JAAS Login Context.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="credential-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the credential store that contains the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secret-key" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            An alias to the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the key store that contains the key pair to perform filesystem integrity checks.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store-alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias within the key-store that identifies the PrivateKeyEntry to use to perform filesystem integrity checks
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="basicFileTypeOptional">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_17_0.xsd b/wildfly/docs/schema/wildfly-elytron_17_0.xsd
new file mode 100644
index 0000000..7a50320
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_17_0.xsd
@@ -0,0 +1,6383 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:17.0"
+            xmlns="urn:wildfly:elytron:17.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+            <xs:element name="virtual-security-domain" type="virtualSecurityDomainType" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-virtual-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to virtual security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jaas-realm" type="jaasRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jaasRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which uses JAAS Login Context to verify user's credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all minOccurs="0">
+                    <xs:element name="file" type="basicFileTypeOptional">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file with JAAS Login Context configuration.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="entry" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the entry defined in JAAS configuration file that should be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The module with custom login module classes and optional custom callback handler class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="callback-handler" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The class name of the callback handler to pass to JAAS Login Context.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="credential-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the credential store that contains the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secret-key" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            An alias to the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the key store that contains the key pair to perform filesystem integrity checks.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store-alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias within the key-store that identifies the PrivateKeyEntry to use to perform filesystem integrity checks
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="basicFileTypeOptional">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="virtualSecurityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single virtual security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    virtual domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-method" type="xs:string" default="OIDC" >
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication mechanism that will be used with the virtual security domain.
+                    Allowed values: 'OIDC', 'MP-JWT'.
+                    The default value is 'OIDC'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_18_0.xsd b/wildfly/docs/schema/wildfly-elytron_18_0.xsd
new file mode 100644
index 0000000..1ff88e4
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_18_0.xsd
@@ -0,0 +1,6405 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:18.0"
+            xmlns="urn:wildfly:elytron:18.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The file encoding to use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+            <xs:element name="virtual-security-domain" type="virtualSecurityDomainType" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-virtual-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to virtual security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jaas-realm" type="jaasRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ignore-unavailable-realms" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether subsequent realms should be checked after an unavailable realm is reached.
+                            If set to false or not set, when the unavailable realm is reached org.wildfly.security.auth.server.RealmUnavailableException is thrown and the search stops.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether a SecurityEvent signifying realm unavailability should be emitted.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jaasRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which uses JAAS Login Context to verify user's credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all minOccurs="0">
+                    <xs:element name="file" type="basicFileTypeOptional">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file with JAAS Login Context configuration.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="entry" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the entry defined in JAAS configuration file that should be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The module with custom login module classes and optional custom callback handler class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="callback-handler" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The class name of the callback handler to pass to JAAS Login Context.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="credential-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the credential store that contains the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secret-key" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            An alias to the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the key store that contains the key pair to perform filesystem integrity checks.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store-alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias within the key-store that identifies the PrivateKeyEntry to use to perform filesystem integrity checks
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values. 
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="relative-to" type="xs:string">
+           <xs:annotation>
+               <xs:documentation>
+                   A reference to a previously defined path that the file name is
+                   relative to.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="path" type="xs:string" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   The path to the credential store file.
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!-- 
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+              An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                  The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="basicFileTypeOptional">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+    
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="virtualSecurityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single virtual security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    virtual domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-method" type="xs:string" default="OIDC" >
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication mechanism that will be used with the virtual security domain.
+                    Allowed values: 'OIDC', 'MP-JWT'.
+                    The default value is 'OIDC'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_1_0.xsd b/wildfly/docs/schema/wildfly-elytron_1_0.xsd
new file mode 100644
index 0000000..7ee3879
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_1_0.xsd
@@ -0,0 +1,4914 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:1.0"
+            xmlns="urn:wildfly:elytron:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListener" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListener">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement the Configurable interface.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="password-salt-digest-md5" />
+            		<xs:enumeration value="password-salt-digest-sha-1" />
+            		<xs:enumeration value="password-salt-digest-sha-256" />
+            		<xs:enumeration value="password-salt-digest-sha-384" />
+            		<xs:enumeration value="password-salt-digest-sha-512" />
+            		<xs:enumeration value="salt-password-digest-md5" />
+            		<xs:enumeration value="salt-password-digest-sha-1" />
+            		<xs:enumeration value="salt-password-digest-sha-256" />
+            		<xs:enumeration value="salt-password-digest-sha-384" />
+            		<xs:enumeration value="salt-password-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="simple-digest-md2" />
+            		<xs:enumeration value="simple-digest-md5" />
+            		<xs:enumeration value="simple-digest-sha-1" />
+            		<xs:enumeration value="simple-digest-sha-256" />
+            		<xs:enumeration value="simple-digest-sha-384" />
+            		<xs:enumeration value="simple-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="scram-sha-1" />
+            		<xs:enumeration value="scram-sha-256" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+
+                            <xs:attribute name="principals" type="stringListType">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        If the identities principal name matches any of the principals listed here then this permission mapping will be a match.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="roles" type="stringListType">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        If the identity is a member of any of the roles listed here then the permission mapping will be a match.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="0" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="default-policy" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a default policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_1_1.xsd b/wildfly/docs/schema/wildfly-elytron_1_1.xsd
new file mode 100644
index 0000000..8338603
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_1_1.xsd
@@ -0,0 +1,4937 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:1.1"
+            xmlns="urn:wildfly:elytron:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListener" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListener">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement the Configurable interface.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="password-salt-digest-md5" />
+            		<xs:enumeration value="password-salt-digest-sha-1" />
+            		<xs:enumeration value="password-salt-digest-sha-256" />
+            		<xs:enumeration value="password-salt-digest-sha-384" />
+            		<xs:enumeration value="password-salt-digest-sha-512" />
+            		<xs:enumeration value="salt-password-digest-md5" />
+            		<xs:enumeration value="salt-password-digest-sha-1" />
+            		<xs:enumeration value="salt-password-digest-sha-256" />
+            		<xs:enumeration value="salt-password-digest-sha-384" />
+            		<xs:enumeration value="salt-password-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="simple-digest-md2" />
+            		<xs:enumeration value="simple-digest-md5" />
+            		<xs:enumeration value="simple-digest-sha-1" />
+            		<xs:enumeration value="simple-digest-sha-256" />
+            		<xs:enumeration value="simple-digest-sha-384" />
+            		<xs:enumeration value="simple-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="scram-sha-1" />
+            		<xs:enumeration value="scram-sha-256" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="0" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="0" />
+        </xs:choice>
+        <xs:attribute name="default-policy" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a default policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_1_2.xsd b/wildfly/docs/schema/wildfly-elytron_1_2.xsd
new file mode 100644
index 0000000..6305488
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_1_2.xsd
@@ -0,0 +1,4923 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:elytron:1.2"
+           xmlns="urn:wildfly:elytron:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.2">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+    <xs:complexType name="providersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container of Provider configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+            <xs:element name="provider-loader" type="providerLoaderType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="providerLoaderType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single provider loader.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration" minOccurs="0" >
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the providers.
+
+                    If this is not specified the ClassLoader used to load the service will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class-names" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class names of the providers to load.
+
+                    If this attribute is not specified then service loader based discovery will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the path of the configuration is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="argument" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Argument to pass into the constructor as the Provider is instantiated.
+
+                    Can only be used where the class names to load are specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListener" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListener">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                        Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                        services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                        By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a custom realm implementation.
+
+                Generally subsystems that provide security realms should make them available
+                using the capabilities and requirements features of the application
+                server, this custom mechanism is provided for truly isolated realm implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityRealm implementation.
+
+                                Note: If configuration is supplied the realm MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="module" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The module to use to load the permission class.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="target-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The target-name to pass to the constructor of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="action" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The action to pass to the constructor of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                              use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                              default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+    <xs:complexType name="httpType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition to hold the various HTTP definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+            <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+            <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+            <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+            <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    This configuration will only apply where a mechanism with the name specified is used.
+
+                                                    If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Attribute of newly created entry. At least objectClass attribute and required
+                                    attributes (which are not part of keystore item) should be defined here.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The LDAP attribute name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="stringListType" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default value(s) of LDAP attribute delimited by space.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:attributeGroup name="customComponentAttributes">
+        <xs:annotation>
+            <xs:documentation>The attributes required for a custom component.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to use to load the custom component.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the custom component implementation to
+                    load.
+
+                    The specified class must have a public no-args constructor.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="customComponentConfiguration">
+        <xs:annotation>
+            <xs:documentation>
+                The optional configuration for a custom component.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_2_0.xsd b/wildfly/docs/schema/wildfly-elytron_2_0.xsd
new file mode 100644
index 0000000..9019c61
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_2_0.xsd
@@ -0,0 +1,4931 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:2.0"
+            xmlns="urn:wildfly:elytron:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListener" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListener">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement the Configurable interface.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="password-salt-digest-md5" />
+            		<xs:enumeration value="password-salt-digest-sha-1" />
+            		<xs:enumeration value="password-salt-digest-sha-256" />
+            		<xs:enumeration value="password-salt-digest-sha-384" />
+            		<xs:enumeration value="password-salt-digest-sha-512" />
+            		<xs:enumeration value="salt-password-digest-md5" />
+            		<xs:enumeration value="salt-password-digest-sha-1" />
+            		<xs:enumeration value="salt-password-digest-sha-256" />
+            		<xs:enumeration value="salt-password-digest-sha-384" />
+            		<xs:enumeration value="salt-password-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="simple-digest-md2" />
+            		<xs:enumeration value="simple-digest-md5" />
+            		<xs:enumeration value="simple-digest-sha-1" />
+            		<xs:enumeration value="simple-digest-sha-256" />
+            		<xs:enumeration value="simple-digest-sha-384" />
+            		<xs:enumeration value="simple-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="scram-sha-1" />
+            		<xs:enumeration value="scram-sha-256" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_3_0.xsd b/wildfly/docs/schema/wildfly-elytron_3_0.xsd
new file mode 100644
index 0000000..789265e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_3_0.xsd
@@ -0,0 +1,5013 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:3.0"
+            xmlns="urn:wildfly:elytron:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListener" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListener">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement the Configurable interface.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="password-salt-digest-md5" />
+            		<xs:enumeration value="password-salt-digest-sha-1" />
+            		<xs:enumeration value="password-salt-digest-sha-256" />
+            		<xs:enumeration value="password-salt-digest-sha-384" />
+            		<xs:enumeration value="password-salt-digest-sha-512" />
+            		<xs:enumeration value="salt-password-digest-md5" />
+            		<xs:enumeration value="salt-password-digest-sha-1" />
+            		<xs:enumeration value="salt-password-digest-sha-256" />
+            		<xs:enumeration value="salt-password-digest-sha-384" />
+            		<xs:enumeration value="salt-password-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="simple-digest-md2" />
+            		<xs:enumeration value="simple-digest-md5" />
+            		<xs:enumeration value="simple-digest-sha-1" />
+            		<xs:enumeration value="simple-digest-sha-256" />
+            		<xs:enumeration value="simple-digest-sha-384" />
+            		<xs:enumeration value="simple-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="scram-sha-1" />
+            		<xs:enumeration value="scram-sha-256" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement the Configurable interface.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_4_0.xsd b/wildfly/docs/schema/wildfly-elytron_4_0.xsd
new file mode 100644
index 0000000..d28d8ab
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_4_0.xsd
@@ -0,0 +1,5168 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:4.0"
+            xmlns="urn:wildfly:elytron:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="password-salt-digest-md5" />
+            		<xs:enumeration value="password-salt-digest-sha-1" />
+            		<xs:enumeration value="password-salt-digest-sha-256" />
+            		<xs:enumeration value="password-salt-digest-sha-384" />
+            		<xs:enumeration value="password-salt-digest-sha-512" />
+            		<xs:enumeration value="salt-password-digest-md5" />
+            		<xs:enumeration value="salt-password-digest-sha-1" />
+            		<xs:enumeration value="salt-password-digest-sha-256" />
+            		<xs:enumeration value="salt-password-digest-sha-384" />
+            		<xs:enumeration value="salt-password-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+            	<xs:restriction base="xs:string">
+                	<xs:enumeration value="simple-digest-md2" />
+            		<xs:enumeration value="simple-digest-md5" />
+            		<xs:enumeration value="simple-digest-sha-1" />
+            		<xs:enumeration value="simple-digest-sha-256" />
+            		<xs:enumeration value="simple-digest-sha-384" />
+            		<xs:enumeration value="simple-digest-sha-512" />
+            	</xs:restriction>
+        	</xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="LetsEncrypt"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_5_0.xsd b/wildfly/docs/schema/wildfly-elytron_5_0.xsd
new file mode 100644
index 0000000..df10412
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_5_0.xsd
@@ -0,0 +1,5411 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:5.0"
+            xmlns="urn:wildfly:elytron:5.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="LetsEncrypt"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_6_0.xsd b/wildfly/docs/schema/wildfly-elytron_6_0.xsd
new file mode 100644
index 0000000..2cdbf66
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_6_0.xsd
@@ -0,0 +1,5411 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:6.0"
+            xmlns="urn:wildfly:elytron:6.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="LetsEncrypt"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_7_0.xsd b/wildfly/docs/schema/wildfly-elytron_7_0.xsd
new file mode 100644
index 0000000..94b9bc7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_7_0.xsd
@@ -0,0 +1,5523 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:7.0"
+            xmlns="urn:wildfly:elytron:7.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="LetsEncrypt"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_8_0.xsd b/wildfly/docs/schema/wildfly-elytron_8_0.xsd
new file mode 100644
index 0000000..492ea51
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_8_0.xsd
@@ -0,0 +1,5739 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:8.0"
+            xmlns="urn:wildfly:elytron:8.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_0.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_9_0.xsd b/wildfly/docs/schema/wildfly-elytron_9_0.xsd
new file mode 100644
index 0000000..8d1fffc
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_9_0.xsd
@@ -0,0 +1,5782 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:elytron:9.0"
+            xmlns="urn:wildfly:elytron:9.0"
+            xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_0.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                  Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+     <xs:complexType name="providersType">
+         <xs:annotation>
+             <xs:documentation>
+                 Container of Provider configuration.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+             <xs:element name="provider-loader" type="providerLoaderType" />
+         </xs:choice>
+     </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+     </xs:complexType>
+
+         <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+     <xs:complexType name="providerLoaderType">
+         <xs:annotation>
+             <xs:documentation>
+                 Definition of a single provider loader.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:sequence>
+             <xs:element name="configuration" minOccurs="0" >
+                 <xs:complexType>
+                     <xs:sequence>
+                         <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                     </xs:sequence>
+                 </xs:complexType>
+             </xs:element>
+         </xs:sequence>
+         <xs:attribute name="name" type="xs:string" use="required">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name to use to represent this provider loader in the management model.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="module" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The name of the module to use to load the providers.
+
+                     If this is not specified the ClassLoader used to load the service will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="class-names" type="stringListType">
+             <xs:annotation>
+                 <xs:documentation>
+                     The fully qualified class names of the providers to load.
+
+                     If this attribute is not specified then service loader based discovery will be used instead.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="path" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     The path to the configuration to use to initialise the provider.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="relative-to" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     A reference to a previously defined path that the path of the configuration is
+                     relative to.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+         <xs:attribute name="argument" type="xs:string">
+             <xs:annotation>
+                 <xs:documentation>
+                     Argument to pass into the constructor as the Provider is instantiated.
+
+                     Can only be used where the class names to load are specified.
+                 </xs:documentation>
+             </xs:annotation>
+         </xs:attribute>
+     </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                      Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                      services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                      Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                      By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an 
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:complexType name="customRealmType">
+		<xs:annotation>
+			<xs:documentation>
+				Realm definition for a custom realm implementation.
+
+				Generally subsystems that provide security realms should make them available
+				using the capabilities and requirements features of the application
+				server, this custom mechanism is provided for truly isolated realm implementations.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:complexContent>
+		    <xs:extension base="realmType">
+		        <xs:sequence>
+		            <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+		                <xs:annotation>
+		                    <xs:documentation>
+		                        The configuration to apply to the SecurityRealm implementation.
+
+		                        Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+		                    </xs:documentation>
+		                </xs:annotation>
+		            </xs:element>
+		        </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+		    </xs:extension>
+		</xs:complexContent>
+	</xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="module" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                             The module to use to load the permission class.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="target-name" type="xs:string">
+                                                     <xs:annotation>
+                                                                 <xs:documentation>
+                                                     The target-name to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                         <xs:attribute name="action" type="xs:string">
+                                             <xs:annotation>
+                                                 <xs:documentation>
+                                                     The action to pass to the constructor of the permission.
+                                                 </xs:documentation>
+                                             </xs:annotation>
+                                         </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                    use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                    default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+              A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                        type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                  A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+     <xs:complexType name="httpType">
+         <xs:annotation>
+             <xs:documentation>
+                 Complex type definition to hold the various HTTP definitions within the subsystem.
+             </xs:documentation>
+         </xs:annotation>
+         <xs:choice maxOccurs="unbounded">
+             <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+             <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+             <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+         </xs:choice>
+     </xs:complexType>
+
+     <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+         </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                   This configuration will only apply where a mechanism with the name specified is used.
+
+                                                   If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                    <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Attribute of newly created entry. At least objectClass attribute and required
+                                attributes (which are not part of keystore item) should be defined here.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The LDAP attribute name.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The default value(s) of LDAP attribute delimited by space.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+	<xs:attributeGroup name="customComponentAttributes">
+		<xs:annotation>
+			<xs:documentation>The attributes required for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:attribute name="module" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The module to use to load the custom component.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+		<xs:attribute name="class-name" type="xs:string" use="required">
+			<xs:annotation>
+				<xs:documentation>
+					The fully qualified class name of the custom component implementation to
+					load.
+
+					The specified class must have a public no-args constructor.
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+	</xs:attributeGroup>
+
+	<xs:complexType name="customComponentConfiguration">
+		<xs:annotation>
+			<xs:documentation>
+				The optional configuration for a custom component.
+			</xs:documentation>
+		</xs:annotation>
+		<xs:sequence>
+			<xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+		</xs:sequence>
+	</xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            </xs:sequence>
+                <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-elytron_community_18_0.xsd b/wildfly/docs/schema/wildfly-elytron_community_18_0.xsd
new file mode 100644
index 0000000..3b7daeb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-elytron_community_18_0.xsd
@@ -0,0 +1,6441 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:elytron:community:18.0"
+           xmlns="urn:wildfly:elytron:community:18.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- Need to include the path to the schema location here in order for the xml-validation that's defined in
+         elytron/pom.xml to succeed. -->
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="../controller/src/main/resources/schema/wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="security-properties" type="securityPropertiesType" minOccurs="0" />
+            <xs:element name="authentication-client" type="authenticationClientType" minOccurs="0" />
+            <xs:element name="providers" type="providersType" minOccurs="0" />
+            <xs:element name="audit-logging" type="auditLoggingType" minOccurs="0" />
+            <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" />
+            <xs:element name="security-realms" type="realmsType" minOccurs="0" />
+            <xs:element name="credential-security-factories" type="credentialSecurityFactoriesType" minOccurs="0" />
+            <xs:element name="mappers" type="mappersType" minOccurs="0" />
+            <xs:element name="permission-sets" type="permissionSetsType" minOccurs="0" />
+            <xs:element name="http" type="httpType" minOccurs="0" />
+            <xs:element name="sasl" type="saslType" minOccurs="0" />
+            <xs:element name="tls" type="tlsType" minOccurs="0" />
+            <xs:element name="credential-stores" type="credentialStoresType" minOccurs="0" />
+            <xs:element name="expression-resolver" type="expressionResolverType" minOccurs="0" />
+            <xs:element name="dir-contexts" type="dirContextsType" minOccurs="0" />
+            <xs:element name="policy" type="policyType" minOccurs="0" />
+            <xs:element name="jaspi" type="jaspiType" minOccurs="0" />
+        </xs:all>
+        <xs:attribute name="default-authentication-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the default authentication context to be associated with all deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="initial-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally ahead of all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-providers" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a capability providing a Provider[] which will be registered globally after all existing Provider registrations.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disallowed-providers" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of providers that are disallowed, and will be removed from the providers list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="register-jaspi-factory" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the WildFly Elytron AuthConfigFactory implementation be automatically registered.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an SSLContext which should be globally registered as the default.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Security Properties
+     -->
+
+    <xs:complexType name="securityPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Type to contain a list of security properties to be set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="security-property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="propertyType">
+        <xs:annotation>
+            <xs:documentation>
+                Representation of a key/value property pair.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The key for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value for this property.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <!--
+        Authentication Client
+     -->
+
+    <xs:complexType name="webservicesType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a Web Services configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="http-mechanism" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    HTTP mechanism web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ws-security-type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    WS-security method web services client will use when connecting to the server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationClientType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the authentication client definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="authentication-configuration" type="authenticationConfigurationType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="authentication-context" type="authenticationContextType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication configuration definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-properties" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of properties to be used to configure all of the providers.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="webservices" type="webservicesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web Services client configuration definition.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-configuration, note names used for authentication-configurations must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication configuration to extend.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enables anonymous authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authorization-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for authorization.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the host to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The protocol to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="port" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    The port to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The realm to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security domain to use for a forwarded identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="forwarding-mode" default="authentication">
+            <xs:simpleType>
+                <xs:annotation>
+                    <xs:documentation>
+                        The type of identity forwarding to use when security-domain is specified. The value "authenticaiton" forwards
+                        the identity of the currently authenticated user, including credentials. The value "authorization" forwards
+                        the underlying authorization identity, which allows for a different identity to be used for authentication.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="authentication" />
+                    <xs:enumeration value="authorization" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name = "sasl-mechanism-selector" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL mechanism selector string. Allows to specify allowed/forbidden SASL mechanisms.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="kerberos-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a kerberos security factory used to obtain a GSS kerberos credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Authentication context definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="match-rule" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of match-rules to be defined on this authentication context.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="match-abstract-type" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-abstract-type-authority" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on abstract type authority.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-host" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on host.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-local-security-domain" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on local security domain.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-no-user" type="xs:boolean" default="false">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on no user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-path" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on path.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-port" type="xs:int">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on port.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-protocol" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on protocol.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-urn" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on urn.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="match-user" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Match based on user.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="authentication-configuration" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The AuthenticationConfiguration to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="ssl-context" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The SSLContext to use with this match.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the authentication-context, note names used for authentication-contexts must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extends" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a previously defined authentication context to extend.
+
+                    match-rules defined here are added after the rules of the parent.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Providers
+     -->
+
+    <xs:complexType name="providersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container of Provider configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-providers" type="aggregateProvidersType" />
+            <xs:element name="provider-loader" type="providerLoaderType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateProvidersType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="providers" type="providersRefType" minOccurs="2" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="providersRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a Provider[] resource.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="providerLoaderType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single provider loader.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="configuration" minOccurs="0" >
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use to represent this provider loader in the management model.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the providers.
+
+                    If this is not specified the ClassLoader used to load the service will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class-names" type="stringListType">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class names of the providers to load.
+
+                    If this attribute is not specified then service loader based discovery will be used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the path of the configuration is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="argument" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Argument to pass into the constructor as the Provider is instantiated.
+
+                    Can only be used where the class names to load are specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Audit Logging
+     -->
+
+    <xs:complexType name="auditLoggingType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="aggregate-security-event-listener" type="aggregateSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-security-event-listener" type="customSecurityEventListenerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="file-audit-log" type="fileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="periodic-rotating-file-audit-log" type="periodicRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="size-rotating-file-audit-log" type="sizeRotatingFileAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="syslog-audit-log" type="syslogAuditLogType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="formatType">
+        <xs:annotation>
+            <xs:documentation>
+                The format type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="SIMPLE" />
+            <xs:enumeration value="JSON" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transportType">
+        <xs:annotation>
+            <xs:documentation>
+                The syslog transport method type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="TCP" />
+            <xs:enumeration value="UDP" />
+            <xs:enumeration value="SSL_TCP" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="auditLogType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all audit log types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the audit log.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition that is actually an aggregation of other security event listeners.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="security-event-listener" type="securityEventListenerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityEventListenerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security event listener.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="fileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to write the audit log to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a previously defined path that the path of the audit log is
+                            relative to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="synchronized" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately synchronised to disk.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="autoflush" type="xs:boolean">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether every event should be immediately flushed to output stream.
+                            When not specified, "synchronized" value is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" default="SIMPLE" type="formatType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoding" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The file encoding to use.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="periodicRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after a time period
+                derived from the given suffix string, which should be in a format understood by java.time.format.DateTimeFormatter.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix string in a format which can be understood by java.time.format.DateTimeFormatter.
+                            The period of the rotation is automatically calculated based on the suffix.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sizeRotatingFileAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file rotating the log after the
+                size of the file grows beyond a certain point and keeping a fixed number of backups.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="fileAuditLogType">
+                <xs:attribute name="max-backup-index" default="1" type="xs:long" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of files to backup when rotating.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-on-boot" type="xs:boolean" default="false" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the file should be rotated before the a new file is set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="rotate-size" default="10m" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The log file size the file should rotate at.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="suffix" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Format of date used as suffix of log file names in java.time.format.DateTimeFormatter.
+                            The suffix does not play a role in determining when the file should be rotated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="syslogAuditLogType">
+        <xs:annotation>
+            <xs:documentation>
+                An audit log definition for persisting an audit log to a local file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:attribute name="server-address" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Address of the server to send syslog messages to.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="port" type="xs:int" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The port number the remote syslog server is listening on.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="transport" type="transportType" default="TCP">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The transport to use to communicate with the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="format" type="formatType" default="SIMPLE">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The format to use to log the event.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="host-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The host name to send within all events sent to the syslog server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of ssl-context used to secure connection to the syslog server.
+                            Applies only when SSL_TCP transport is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="syslog-format" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RFC format to be used for formatting the log entry, default value of RFC5424.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reconnect-attempts" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum amount of failed reconnect attempts that should be made for sending messages to a syslog server before the endpoint is closed, default value of 0 (no reconnect attempts).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customSecurityEventListenerType">
+        <xs:annotation>
+            <xs:documentation>
+                A security event listener definition for a custom security event listener implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="auditLogType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the security event listener implementation.
+
+                                Note: If configuration is supplied the listener MUST implement a void initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        Domains and Realms
+     -->
+
+    <xs:complexType name="securityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security domain definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="security-domain" type="securityDomainType" maxOccurs="unbounded" />
+            <xs:element name="virtual-security-domain" type="virtualSecurityDomainType" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="securityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="realm" type="realmRefType" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="default-realm" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Which of the listed realms should be the default?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalTransformer to be applied after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PrincipalDecoder to be used by this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="evidence-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to an EvidenceDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleDecoder to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RoleMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="permission-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the PermissionMapper to be used by the domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trusted-virtual-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to virtual security domains that are trusted by this security domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-event-listener" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a security event listener to be notified of security events
+                    emitted from this domain.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a security realm.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The PrincipalTransformer to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-decoder" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleDecoder to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The RoleMapper to be associated with this realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="realmsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the security realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-realm" type="aggregateRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom realm definitions can implement either the SecurityRealm interface or the ModifiableSecurityRealm interface.
+
+                        Regardless of which interface is implemented management operations will not be exposed to manage the realm.  However other
+                        services that depend on the realm will still be able to perform a type check and cast to gain access to the modification API.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="custom-modifiable-realm" type="customRealmType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        Custom realm configured as being modifiable will be expected to implement the ModifiableSecurityRealm interface.
+
+                        By configuring a realm as being modifiable management operations will be made available to manipulate the realm.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="identity-realm" type="identityRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jdbc-realm" type="jdbcRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="key-store-realm" type="keyStoreRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="properties-realm" type="propertiesRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="ldap-realm" type="ldapRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="filesystem-realm" type="fileSystemRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="token-realm" type="tokenRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="caching-realm" type="cachingRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="distributed-realm" type="distributedRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="failover-realm" type="failoverRealmType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="jaas-realm" type="jaasRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realmType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all realm definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the realm, note names used for realms must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that is an aggregation of two realms, one for the authentication steps
+                and one for loading the identity for the authorization steps.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="authentication-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authentication steps (obtaining or validating credentials).
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use for the authorization steps (loading of the identity).
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="authorization-realms" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for the authorizations steps resulting in an
+                            aggregation of attributes if the identity is contained in multiple realms.
+
+                            Exactly one of 'authorization-realm' and 'authorization-realms' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="principal-transformer" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A principal transformer to be applied after the authentication steps but before the authorization
+                            steps.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="cachingRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition that enables caching to another security realm. Caching strategy is LRU (Least Recently Used) where least accessed entries are discarded when maximum number of entries is reached.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to a cacheable security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-entries" type="xs:int" use="optional" default="16">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of entries to keep in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-age" type="xs:long" use="optional" default="-1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The time in milliseconds that an item can stay in the cache.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a custom realm implementation.
+
+                Generally subsystems that provide security realms should make them available
+                using the capabilities and requirements features of the application
+                server, this custom mechanism is provided for truly isolated realm implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="configuration" type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityRealm implementation.
+
+                                Note: If configuration is supplied the realm MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="distributedRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition for authentication and authorization of identities distributed between multiple realms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="realms" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A list of security realms that should be used for authentication until one succeeds.
+                            At least one realm must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="ignore-unavailable-realms" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether subsequent realms should be checked after an unavailable realm is reached.
+                            If set to false or not set, when the unavailable realm is reached org.wildfly.security.auth.server.RealmUnavailableException is thrown and the search stops.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether a SecurityEvent signifying realm unavailability should be emitted.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="failoverRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which wraps one realm and delegates to another in case the first is unavailable.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="delegate-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use as a default.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="failover-realm" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the realm to use in case the default realm is unavailable.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="emit-events" type="xs:boolean" use="optional" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whenever security events should be emitted when failover takes place.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="identityRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm which contains a single pre-defined identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="identity" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the identity available from the security realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute associated with this identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-values" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The values associated with the identity attributes.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by database using JDBC.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:sequence>
+                    <xs:element name="principal-query" type="authenticationQueryType" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jaasRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A realm definition which uses JAAS Login Context to verify user's credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all minOccurs="0">
+                    <xs:element name="file" type="basicFileTypeOptional">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file with JAAS Login Context configuration.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="entry" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the entry defined in JAAS configuration file that should be used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="module" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The module with custom login module classes and optional custom callback handler class.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="callback-handler" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The class name of the callback handler to pass to JAAS Login Context.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="authenticationQueryType">
+        <xs:annotation>
+            <xs:documentation>
+                The authentication query used to authenticate users based on specific key types.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="clear-password-mapper" type="clearPasswordMapperType" minOccurs="0"/>
+            <xs:element name="bcrypt-mapper" type="bcryptMapperType" minOccurs="0"/>
+            <xs:element name="simple-digest-mapper" type="simpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="salted-simple-digest-mapper" type="saltedSimpleDigestMapperType" minOccurs="0"/>
+            <xs:element name="scram-mapper" type="scramMapperType" minOccurs="0"/>
+            <xs:element name="modular-crypt-mapper" type="modularCryptMapperType" minOccurs="0"/>
+            <xs:element name="attribute-mapping" type="jdbcAttributeMappingType" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="sql" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SQL statement used to obtain the keys(as table columns) for a specific user and map them accordingly with their type.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="data-source" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the datasource used to connect to the database.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="jdbcAttributeType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jdbcAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific column in a table as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from a query that representing the mapped attribute.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a column returned from a SQL query.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clearPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Clear Password key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bcryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Bcrypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64"/>
+                    <xs:enumeration value="hex"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saltedSimpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Salted Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="password-salt-digest-md5" />
+                    <xs:enumeration value="password-salt-digest-sha-1" />
+                    <xs:enumeration value="password-salt-digest-sha-256" />
+                    <xs:enumeration value="password-salt-digest-sha-384" />
+                    <xs:enumeration value="password-salt-digest-sha-512" />
+                    <xs:enumeration value="salt-password-digest-md5" />
+                    <xs:enumeration value="salt-password-digest-sha-1" />
+                    <xs:enumeration value="salt-password-digest-sha-256" />
+                    <xs:enumeration value="salt-password-digest-sha-384" />
+                    <xs:enumeration value="salt-password-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simpleDigestMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Simple Digest key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="simple-digest-md2" />
+                    <xs:enumeration value="simple-digest-md5" />
+                    <xs:enumeration value="simple-digest-sha-1" />
+                    <xs:enumeration value="simple-digest-sha-256" />
+                    <xs:enumeration value="simple-digest-sha-384" />
+                    <xs:enumeration value="simple-digest-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="scramMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Scram key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The encryption algorithm name to use.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="scram-sha-1" />
+                    <xs:enumeration value="scram-sha-256" />
+                    <xs:enumeration value="scram-sha-384" />
+                    <xs:enumeration value="scram-sha-512" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user's password.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's salt, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="iteration-count-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the password's iteration count, if supported.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="hash-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password hash.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="salt-encoding" default="base64">
+            <xs:annotation>
+                <xs:documentation>
+                    The encoding of the password salt.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="base64" />
+                    <xs:enumeration value="hex" />
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="modularCryptMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A key mapper that maps a column returned from a SQL query to a Modular Crypt key type.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="password-index" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The column index from an authentication query that represents the user password in Modular Crypt Format.
+                </xs:documentation>
+            </xs:annotation>
+            <xs:simpleType>
+                <xs:restriction base="xs:int">
+                    <xs:minInclusive value="1"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreRealmType">
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the KeyStore to be used by this realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="propertiesRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a realm backed by a properties file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="users-properties">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their passwords.
+                                The file should contain realm name declaration.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType >
+                            <xs:complexContent>
+                                <xs:extension base="basicFileType">
+                                    <xs:attribute name="plain-text" type="xs:boolean" default="false">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Are the passwords in properties file stored in plain text or pre-hashed?
+                                                (Pre-hashed form: HEX( MD5( username ":" realm ":" password ) ) )
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                    <xs:attribute name="digest-realm-name" type="xs:string">
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                The realm name to use for digested passwords if one is not discovered in the properties file.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                    </xs:attribute>
+                                </xs:extension>
+                            </xs:complexContent>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="groups-properties" type="basicFileType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the properties file containing the users and their groups.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="groups-attribute" type="xs:string" default="groups">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the attribute in the returned AuthorizationIdentity that should contain the group membership information for the identity.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="hex" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Ldap Security Realm -->
+
+    <xs:complexType name="ldapRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A security realm definition backed by LDAP.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="identity-mapping" type="identityMappingType" nillable="false"/>
+                </xs:all>
+                <xs:attribute name="dir-context" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of dir-context used to connect to the LDAP server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="direct-verification" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should this realm instance support verification of credentials by directly connecting to LDAP as the account being authenticated?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="allow-blank-password" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should direct verification in this realm to allow login attempt with blank password?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- FileSystem Security Realm -->
+    <xs:complexType name="fileSystemRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple security realm definition backed by the filesystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:all>
+                    <xs:element name="file" type="basicFileType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The location of the file to use to handle the security realm.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="levels" type="xs:int" default="2">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The number of levels of directory hashing to apply
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="encoded" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Whether the identity names should be stored encoded (Base32) in file names.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="hash-encoding" default="base64" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string format for the password in the properties file if they are not
+                            stored in plain text.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="base64"/>
+                            <xs:enumeration value="hex"/>
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="hash-charset" default="UTF-8" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The character set to use when converting the password string
+                            to a byte array.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="credential-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the credential store that contains the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="secret-key" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            An alias to the secret key used to encrypt and decrypt the filesystem-realm.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A reference to the key store that contains the key pair to perform filesystem integrity checks.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-store-alias" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The alias within the key-store that identifies the PrivateKeyEntry to use to perform filesystem integrity checks
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="tokenRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Realm definition for a token realm where authentication and authorization are handled by
+                a given token validator.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmType">
+                <xs:choice>
+                    <xs:element name="jwt" type="jwtTokenRealmValidatorType"/>
+                    <xs:element name="oauth2-introspection" type="oauth2IntrospectionTokenRealmValidatorType"/>
+                </xs:choice>
+                <xs:attribute name="principal-claim" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the claim that should be used to obtain the principal's name. Defaults to 'username'.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="jwtTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles security tokens based on the JWT/JWS standard.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="kid" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The JWK kid. Tokens with the same kid will use this public key for signature verification.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="public-key" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                RSA public key in PEM format.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="issuer" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the issuers supported by this configuration. During validation JWT tokens must have an "iss" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="audience" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of strings representing the audiences supported by this configuration. During validation JWT tokens must have an "aud" claim that contains one of the values defined here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="public-key" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A public key in PEM Format. During validation, if a public key is provided, signature will be verified based on the key you provided here.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A key store from where the certificate with a public key should be loaded from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the certificate with a public key to load from the key store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the jwks endpoint specified in the jku token claim. This configuration is mandatory if you want to use remote keys with jku.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="verificationPolicy" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS for fetching jwks.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="oauth2IntrospectionTokenRealmValidatorType">
+        <xs:annotation>
+            <xs:documentation>
+                A token validator to be used in conjunction with a token-based realm that handles OAuth2 Access Tokens and validate them based on RFC-7662 (OAuth2 Token Introspection).
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="client-id" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The identifier of a client registered within the OAuth2 Authorization Server that will be used to authenticate this server in order to validate bearer tokens arriving to this server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-secret" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The secret of the client identified by the given client-id.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="introspection-url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    An URL pointing to a RFC-7662 OAuth2 Token Introspection compatible endpoint.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A predefined client-ssl-context that will be used to connect to the token introspection endpoint when using SSL/TLS. This configuration is mandatory if the given token introspection url is using SSL/TLS.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name-verification-policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A policy that defines how host names should be verified when using HTTPS. Allowed values: "ANY".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="dir-context" type="dirContextType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="dirContextType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how to connect to the LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="properties" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to authenticate and connect to the LDAP server.
+                        Can be omitted if authentication-level is "none" (anonymous).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of the connection. Allows to refer the DirContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The connection url.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-level" type="xs:string" use="optional" default="simple">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication level (security level/authentication mechanism) to use.
+                    Corresponds to SECURITY_AUTHENTICATION ("java.naming.security.authentication") environment property.
+                    Allowed values: "none", "simple", sasl_mech, where sasl_mech is a space-separated list of SASL mechanism names.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="principal" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The principal to authenticate and connect to the LDAP server.
+                    Can be omitted if authentication-level is "none" (anonymous).
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-connection-pooling" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if connection pooling is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="referral-mode" type="xs:string" default="ignore" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If LDAP referrals should be followed.
+                    Corresponds to REFERRAL ("java.naming.referral") environment property.
+                    Allowed values: "ignore", "follow", "throw".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ssl-context used to secure connection to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of authentication-context used to secure connection and to authenticate to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="connection-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for connecting to the LDAP server in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="read-timeout" type="xs:integer" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The read timeout for an LDAP operation in milliseconds.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Name of module that will be used to load custom context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="identityMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration options that define how principals are mapped to their corresponding entries in the underlying LDAP server.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="attribute-mapping" type="ldapAttributeMappingType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attribute mappings defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="user-password-mapper" type="userPasswordMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="otp-credential-mapper" type="otpCredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The user password credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="x509-credential-mapper" type="x509CredentialMapperType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The X509 user certificate credential mapping defined for this resource.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="new-identity-attributes" type="ldapNewIdentityAttributesType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        The attributes of newly created identities. Required for modifiability.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="rdn-identifier" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN part of the principal's DN to be used to obtain the principal's name from an LDAP entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base DN to be used when executing queries.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-recursive-search" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-name" type="xs:string" use="optional" default="(rdn_identifier={0})">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for getting identity by name.
+                    The string "{0}" will be replaced by searched identity name and the "rdn_identifier" will be the value of the attribute "rdn-identifier".
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="iterator-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The LDAP filter for iterating over identities of the realm. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="new-identity-parent-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The DN of parent of newly created identities. Optional, but required for modifiability.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeMappingType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute as an identity attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity attribute.
+                    If not defined, DN of the whole entry is used as value.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the identity attribute mapped from a specific LDAP attribute.
+                    If not provided, the name of the attribute is the same as define in 'from'.
+                    If the 'from' is not defined too, value 'dn' is used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="reference" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of LDAP attribute containing DN of entry to obtain value from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to use to obtain the values for a specific attribute.
+                    String "{0}" will be replaced by username, "{1}" by user identity DN.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="filter-base-dn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the context where the filter should be performed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="search-recursive" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Indicates if attribute LDAP search queries are recursive.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion" type="xs:int" use="optional" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    Sets recursive roles assignment - value determine maximum depth of recursion. (0 for no recursion)
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="role-recursion-name" type="xs:string" use="optional" default="cn">
+            <xs:annotation>
+                <xs:documentation>
+                    Determine LDAP attribute of role entry which will be substitute for "{0}" in filter-name when searching roles of role.
+                    Used only when role-recursion is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="extract-rdn" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The RDN key to use as the value for an attribute, in case the value in its raw form is in X.500 format.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="userPasswordMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration used to map a specific LDAP attribute (userPassword usually) as an identity password credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an identity user password credential.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="writable" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is writable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="verifiable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If the password credential is verifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="otpCredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use the LDAP as storage of one time password (OTP) credentials.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="algorithm-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential algorithm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="hash-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a Base64 encoded OTP credential hash.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="seed-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential seed.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sequence-from" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an OTP credential sequence number.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x509CredentialMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration allowing to use LDAP as storage of X509 credentials.
+                X509 credential is user certificate or information allowing to identify it.
+                (serial number, subject DN, digest of certificate)
+                At least one *-from attribute should be specified. This definition will be ignored otherwise.
+                If more *-from attributes is defined, user certificate must match all defined criteria.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="digest-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a user certificate digest.
+                    If not defined, certificate digest will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="digest-algorithm" type="xs:string" use="optional" default="SHA-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The digest algorithm (hash function) used to compute digest of the user certificate.
+                    Will be used only if digest-from have been defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to an encoded user certificate.
+                    If not defined, encoded certificate will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="serial-number-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a serial number of user certificate.
+                    If not defined, serial number will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="subject-dn-from" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute to map to a subject DN of user certificate.
+                    If not defined, subject DN will not be checked.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributesType">
+        <xs:sequence>
+            <xs:element name="attribute" type="ldapNewIdentityAttributeType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="ldapNewIdentityAttributeType">
+        <xs:annotation>
+            <xs:documentation>
+                Attribute of newly created LDAP identity.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the LDAP attribute.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="value" type="stringListType" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The value(s) of LDAP attribute delimited by space.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoriesType">
+        <xs:annotation>
+            <xs:documentation>
+                A container type to hold SecurityFactory definitions to obtain Credential instances.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="custom-credential-security-factory" type="customCredentialSecurityFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="kerberos-security-factory" type="kerberosSecurityFactory" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="credentialSecurityFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all SecurityFactory definitions which return a Credential.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the SecurityFactory, note names used for SecurityFactories must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customCredentialSecurityFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom credential SecurityFactory implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the SecurityFactory implementation.
+
+                                Note: If configuration is supplied the SecurityFactory MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="kerberosSecurityFactory">
+        <xs:complexContent>
+            <xs:extension base="credentialSecurityFactoryType">
+                <xs:sequence>
+                    <xs:element name="option" maxOccurs="unbounded" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The Krb5LoginModule additional option.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The key of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="value" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The value of the option.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="principal" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The principal represented by the KeyTab
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="path" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The path to the KeyTab to use to obtain the credential.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="relative-to" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of another previously named path, or of one of the standard paths provided by the system.
+                            If 'relative-to' is provided, the value of the 'path' attribute is treated as relative
+                            to the path specified by this attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="minimum-remaining-lifetime" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should a cached credential have remaining before it is recreated.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="request-lifetime" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            How much lifetime (in seconds) should be requested for newly created credentials.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="fail-cache" type="xs:int">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Amount of seconds before new try to obtain server credential should be done if it has failed last time.
+                            Allows to prevent long waiting to unavailable KDC on every authentication.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If this for use server side or client side?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="obtain-kerberos-ticket" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the KerberosTicket also be obtained and associated with the credential.
+
+                            This is required to be true where credentials are delegated to the server.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="debug" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should the JAAS step of obtaining the credential have debug logging enabled.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="wrap-gss-credential" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should generated GSS credentials be wrapped to prevent improper disposal or not?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Is the keytab file with adequate principal required to exist at the time the service starts?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-names" type="stringListType" default="KRB5 SPNEGO">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism names the credential should be usable with.
+                            Names will be converted to OIDs and used together with OIDs from mechanism-oids attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="mechanism-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The mechanism OIDs the credential should be usable with.
+                            Will be used together with OIDs derived from names from mechanism-names attribute.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!--
+        General Mappers and Rewriters
+     -->
+
+    <xs:complexType name="mappersType">
+        <xs:annotation>
+            <xs:documentation>
+                A general container type to hold the various name rewriter and mapper definitions
+                as used within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="aggregate-principal-decoder" type="aggregatePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="concatenating-principal-decoder" type="concatenatingPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-decoder" type="constantPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-decoder" type="customPrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-attribute-principal-decoder" type="x500AttributePrincipalDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-principal-transformer" type="aggregatePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="chained-principal-transformer" type="chainedPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-principal-transformer" type="constantPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-principal-transformer" type="customPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-principal-transformer" type="regexPrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="case-principal-transformer" type="casePrincipalTransformerType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-validating-principal-transformer" type="regexValidatingPrincipalTransformer" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-permission-mapper" type="customPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-permission-mapper" type="logicalPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-permission-mapper" type="simplePermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-permission-mapper" type="constantPermissionMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-realm-mapper" type="constantRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-realm-mapper" type="customRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-regex-realm-mapper" type="simpleRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-regex-realm-mapper" type="mappedRegexRealmMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-decoder" type="customRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="simple-role-decoder" type="simpleRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="source-address-role-decoder" type="sourceAddressRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-decoder" type="aggregateRoleDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-prefix-role-mapper" type="addPrefixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="add-suffix-role-mapper" type="addSuffixRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-role-mapper" type="aggregateRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="constant-role-mapper" type="constantRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-role-mapper" type="customRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="logical-role-mapper" type="logicalRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mapped-role-mapper" type="mappedRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x500-subject-evidence-decoder" type="x500SubjectEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="x509-subject-alt-name-evidence-decoder" type="x509SubjectAltNameEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="custom-evidence-decoder" type="customEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-evidence-decoder" type="aggregateEvidenceDecoderType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="regex-role-mapper" type="regexRoleMapperType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="permissionMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PermissionMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PermissionMapper, note names used for PermissionMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PermissionMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PermissionMapper implementation.
+
+                                Note: If configuration is supplied the PermissionMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="logicalPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A PermissionMapper definition for a PermissionMapper that performs a logical operation using two referenced PermissionMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:attribute name="logical-operation" type="logicalPermissionMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logical operation to perform using the two referenced PermissionMappers.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the left of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the PermissionMapper to use to the right of the operation.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalPermissionMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+                "and" assigns permissions which was assigned by both mappers
+                "or" assigns permissions which was assigned by at least one of mappers
+                "xor" assigns permissions which was assigned by exactly one of mappers
+                "unless" assigns permissions which was assigned by left mapper but not by right mapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="simplePermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple permission mapper that maps from defined principal and role names to predefined permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:sequence>
+                    <xs:element name="permission-mapping" minOccurs="0" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="principal" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the principal.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the role.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:annotation>
+                                            <xs:documentation>
+                                                Deprecated. Use a reference to a 'permission-set' instead.
+                                            </xs:documentation>
+                                        </xs:annotation>
+                                        <xs:attribute name="class-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The fully qualified class name of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="module" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The module to use to load the permission class.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="target-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The target-name to pass to the constructor of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="action" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The action to pass to the constructor of the permission.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                                <xs:element name="permission-set" type="permissionSetRefType" minOccurs="0" maxOccurs="unbounded" />
+                            </xs:sequence>
+                            <xs:attribute name="match-all" type="xs:boolean" default="false" />
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="mapping-mode" type="simpleMappingMode" default="first" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPermissionMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of permissions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="permissionMapperType">
+                <xs:choice maxOccurs="unbounded">
+                    <xs:element name="permission" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Deprecated. Use a reference to a 'permission-set' instead.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:attribute name="class-name" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The fully qualified class name of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="module" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The module to use to load the permission class.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="target-name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The target-name to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="action" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The action to pass to the constructor of the permission.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="permission-set" type="permissionSetRefType" maxOccurs="unbounded" />
+                </xs:choice>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:simpleType name="simpleMappingMode">
+        <xs:annotation>
+            <xs:documentation>
+                How multiple matching permission mappings will be combined.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+            <xs:enumeration value="unless" />
+            <xs:enumeration value="first" />
+        </xs:restriction>
+    </xs:simpleType>
+
+
+    <xs:complexType name="principalDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalDecoder, note names used for PrincipalDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalDecoder implementation.
+
+                                Note: If configuration is supplied the PrincipalDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually an aggregation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="concatenatingPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition that is actually a concatenation of other PrincipalDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:sequence>
+                    <xs:element name="principal-decoder" type="principalDecoderRefType" minOccurs="2" maxOccurs="unbounded"/>
+                </xs:sequence>
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The string to use to join the results of the other PrincipalDecoders.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalDecoder.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x500AttributePrincipalDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalDecoder definition based on a X500 attribute.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalDecoderType">
+                <xs:attribute name="oid" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="attribute-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The oid of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <!-- exactly one of [oid, attribute-name] must be defined -->
+                <!--<xs:assert test="(@oid and not(@attribute-name)) or (not(@oid) and @attribute-name)"/>--><!-- require XSD 1.1 -->
+                <xs:attribute name="joiner" type="xs:string" default=".">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The joining string.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="start-segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based starting occurrence of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="maximum-segments" type="xs:int" default="2147483647">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The maximum number of occurrences of the attribute to map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="reverse" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true, the attribute values will be processed and returned in reverse order.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="convert" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If the Principal is not already an X500Principal should conversion be attempted?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-oids" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The OIDs of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="required-attributes" type="stringListType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute names of the attributes that must be present in the principal.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all PrincipalTransformer definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the PrincipalTransformer, note names used for PrincipalTransformer must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="regexPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition using regular expressions and Matcher based
+                replacement.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Should all occurrences be replaced or just the first?
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexValidatingPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that instead of rewriting the name validates that it is
+                correct according to the supplied regular expression.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="pattern" type="xs:string"
+                              use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression to use for this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="match" type="xs:boolean"
+                              default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, the name must match the given pattern to make validation successful.
+                            If set to false, the name must not match the given pattern to make validation successful.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantPrincipalTransformer">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="constant" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this PrincipalTransformer.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom PrincipalTransformer implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the PrincipalTransformer implementation.
+
+                                Note: If configuration is supplied the PrincipalTransformer MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregatePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer aggregating more PrincipalTransformers - original principal is tried to be transformed
+                by individual transformers in given order until some of them return non-null principal - that is returned.
+
+                Typically can be used with chained principal transformers beginning with validating principal
+                transformer - to transform principals in different forms differently.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="chainedPrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer definition that is actually a chain of other PrincipalTransformers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:sequence>
+                    <xs:element name="principal-transformer" type="principalTransformerRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="casePrincipalTransformerType">
+        <xs:annotation>
+            <xs:documentation>
+                A PrincipalTransformer that adjusts a principal to upper or lower case.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="principalTransformerType">
+                <xs:attribute name="upper-case" type="xs:boolean" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If set to true, principal is adjusted to upper case. If set to false, principal is adjusted
+                            to lower case.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="principalTransformerRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a PrincipalTransformer.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="realmMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RealmMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RealmMapper, note names used for RealmMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RealmMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RealmMapper implementation.
+
+                                Note: If configuration is supplied the RealmMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper that always returns the same constant.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="realm-name" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The constant value that will always be returned by this RealmMapper.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple RealmMapper definition that attempts to extract the realm name using the capture group from the regular expression, if that does not provide a
+                match then the delegate RealmMapper is used instead.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRegexRealmMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RealmMapper implementation that first uses a regular expression to extract the realm name, this is then converted using the configured mapping of realm names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="realmMapperType">
+                <xs:sequence>
+                    <xs:element name="realm-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The realm name to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The regular expression which must contain at least one capture group to extract the realm from the name.
+                            If the regular expression matches more than one capture group, the first capture group is used.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="delegate-realm-mapper" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The RealmMapper to delegate to if the pattern does not match.  If no delegate is specified then the default realm on
+                            the domain will be used instead.
+                            If the username does not match the pattern and a delegate realm-mapper is present, the result of delegate-realm-mapper is mapped via the realm-map.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleDecoder, note names used for RoleDecoders must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleDecoder implementation.
+
+                                Note: If configuration is supplied the RoleDecoder MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="simpleRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps a single attribute to roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="attribute" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The attribute to take from the identity and map directly to roles.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sourceAddressRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that maps roles based on the IP address of a remote client.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:attribute name="source-address" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="pattern" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            A regular expression that specifies the IP address to match.
+
+                            Exactly one of 'source-address' and 'pattern' must be specified.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="roles" type="stringListType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The list of roles to assign if the IP address of the remote client matches.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleDecoder definition that is actually an aggregation of other RoleDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleDecoderType">
+                <xs:sequence>
+                    <xs:element name="role-decoder" type="roleDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleDecoder.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleDecoder.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all RoleMapper definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the RoleMapper, note names used for RoleMappers must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="addPrefixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified prefix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="prefix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The prefix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="addSuffixRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that adds a specified suffix to every role.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="suffix" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The suffix to add to each role.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that is actually an aggregation of other RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapper" type="roleMapperRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom RoleMapper implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the RoleMapper implementation.
+
+                                Note: If configuration is supplied the RoleMapper MUST implement initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="constantRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that always returns a pre-defined set of roles.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role" minOccurs="1" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="name" type="xs:string">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role to be returned by the RoleMapper.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="logicalRoleMappingsType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of logical operations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="and" />
+            <xs:enumeration value="minus" />
+            <xs:enumeration value="or" />
+            <xs:enumeration value="xor" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="logicalRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition for a RoleMapper that performs a logical operation using two refereced RoleMappers.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="logical-operation" type="logicalRoleMappingsType" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The logicial operation to perform using the two referenced RoleMappers.
+
+                            Allowed values: "and", "minus", "or", "xor".
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="left" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the left of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="right" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the RoleMapper to use to the right of the operation.
+
+                            If not set the identity role mapper will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="mappedRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper implementation that uses the configured mapping of role names.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:sequence>
+                    <xs:element name="role-mapping" maxOccurs="unbounded">
+                        <xs:complexType>
+                            <xs:attribute name="from" type="xs:string" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        The role name to map from.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                            <xs:attribute name="to" type="stringListType" use="required">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Space separated list of roles to map to.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:attribute>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="keep-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to 'true' the mapped roles will retain all roles, that have no defined mappings.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="regexRoleMapperType">
+        <xs:annotation>
+            <xs:documentation>
+                A RoleMapper definition that uses pattern to find matching roles and then replaces these roles with replacement pattern.
+                Role matches the pattern in given pattern can be found in any substring of the role name.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="roleMapperType">
+                <xs:attribute name="pattern" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The pattern used for matching. Can capture groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replacement" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The replacement string. Can make use of captured groups.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="keep-non-mapped" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, keep roles that did not match the provided pattern.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="replace-all" type="xs:boolean" use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            If true, replace all occurrences of pattern and not only the first one.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="roleMapperRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a RoleMapper
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the referenced RoleMapper.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="x500SubjectEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from the subject from
+                the first certificate in the certificate chain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="x509SubjectAltNameEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder that derives the principal associated with the given evidence from an X.509 subject
+                alternative name from the first certificate in the given evidence.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:attribute name="alt-name-type" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The subject alternative name type to decode from the given evidence.
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:simpleType>
+                        <xs:restriction base="xs:string">
+                            <xs:enumeration value="rfc822Name" />
+                            <xs:enumeration value="dNSName" />
+                            <xs:enumeration value="directoryName" />
+                            <xs:enumeration value="uniformResourceIdentifier" />
+                            <xs:enumeration value="iPAddress" />
+                            <xs:enumeration value="registeredID" />
+                        </xs:restriction>
+                    </xs:simpleType>
+                </xs:attribute>
+                <xs:attribute name="segment" type="xs:int" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The 0-based occurrence of the subject alternative name to map. This attribute is optional and only
+                            used when there is more than one subject alternative name of the given alt-name-type
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                An EvidenceDecoder definition that is an aggregation of other EvidenceDecoders.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="evidence-decoder" type="evidenceDecoderRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="customEvidenceDecoderType">
+        <xs:annotation>
+            <xs:documentation>
+                Generic definition for a custom EvidenceDecoder implementation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="evidenceDecoderType">
+                <xs:sequence>
+                    <xs:element name="configuration"
+                                type="customComponentConfiguration" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The configuration to apply to the EvidenceDecoder implementation.
+
+                                Note: If configuration is supplied the EvidenceDecoder MUST implement the initialize(Map&lt;String, String&gt;) method.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attributeGroup ref="customComponentAttributes" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to an EvidenceDecoder
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="evidenceDecoderType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all EvidenceDecoder definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the EvidenceDecoder, note names used for EvidenceDecoder must be unique
+                    across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Mechanism Configuration
+    -->
+
+    <xs:complexType name="mechanismConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                Wrapper type to contain the configuration of the authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism" type="mechanismType" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        An ordered list of mechanism configurations, at the time of authentication the mechanism name,
+                        host name, and protocol as specified by the mechanism will be compared against this list
+                        for a first match.
+
+                        To configure a default configuration provide a definition with no mechanism-name, host-name, or
+                        protocol and place it at the end of the list. Any definitions after a default definition will
+                        never match.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mechanismType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of configuration to be used by authentication mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-realm" type="mechanismRealmType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="mechanism-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply where a mechanism with the name specified is used.
+
+                    If this attribute is omitted then this will match any mechanism name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="host-name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the host name specified is provided by the mechanism.
+
+                    If this attribute is omitted then this will match any host name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocol" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    This configuration will only apply when the protocol specified is provided by the mechanism.
+
+                    If this attributed is omitted then this will match any protocol.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-security-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to the security factory to obtain the credential for this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="mechanismRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a realm name specific to the mechanism.
+
+                This is the realm name that a mechanism may present to the remote client being authenticated, if a mechanism
+                only supports a single realm then only the first will be used and the remainder ignored.
+
+                If a mechanism does not support realm names then the entire list will be ignored.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="realm-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the permission set definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission-set" type="permissionSetType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a permission set.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="class-name" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The fully qualified class name of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="module" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The module to use to load the permission class.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="target-name" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The target-name to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="action" type="xs:string">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The action to pass to the constructor of the permission.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the permission set, note names used for permission sets must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        HTTP Components
+     -->
+
+    <xs:complexType name="httpType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition to hold the various HTTP definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="http-authentication-factory" type="httpAuthenticationFactoryType" minOccurs="0"/>
+            <xs:element name="aggregate-http-server-mechanism-factory" type="aggregateHttpServerMechanismFactoryType" minOccurs="0" />
+            <xs:element name="configurable-http-server-mechanism-factory" type="configurableHttpServerMechanismFactoryType" minOccurs="0" />
+            <xs:element name="provider-http-server-mechanism-factory" type="providerHttpServerMechanismFactoryType" minOccurs="0" />
+            <xs:element name="service-loader-http-server-mechanism-factory" type="serviceLoaderHttpServerMechanismFactoryType" minOccurs="0" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="httpAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of the server side HTTP authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The http-server-mechanism-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all http server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the http server factory, note names used for http server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that is actually an aggregation of other HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:sequence>
+                    <xs:element name="http-server-mechanism-factory" type="httpServerMechanismFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that wraps another HTTP server factory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for HTTP mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="http-server-mechanism-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the HTTP server factory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="providerHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that searches an array of Provider instances for all available HTTP server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderHttpServerMechanismFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A HTTP server factory definition that uses a ServiceLoader to search for HTTP server factory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="httpServerMechanismFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="httpServerMechanismFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a HTTP server mechanism factory.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        SASL Components
+     -->
+
+    <xs:complexType name="saslType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type definition type to hold the various SASL definitions within the subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice maxOccurs="unbounded">
+            <xs:element name="sasl-authentication-factory" type="saslAuthenticationFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="aggregate-sasl-server-factory" type="aggregateSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="configurable-sasl-server-factory" type="configurableSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="mechanism-provider-filtering-sasl-server-factory" type="mechanismProviderFilteringSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="provider-sasl-server-factory" type="providerSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="service-loader-sasl-server-factory" type="serviceLoaderSaslServerFactoryType" minOccurs="0" maxOccurs="unbounded" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="saslAuthenticationFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL authentication policy for the server side.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="mechanism-configuration" minOccurs="0" type="mechanismConfigurationType"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="security-domain" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The security-domain referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The sasl-server-factory referenced by this resource.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryType" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                Base type for all sasl server factory definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name for the sasl server factory, note names used for sasl server factories must be unique across the whole context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="aggregateSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SASL server factory definition that is actually an aggregation of other SASL server factories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="sasl-server-factory" type="saslServerFactoryRefType" minOccurs="2" maxOccurs="unbounded" />
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="configurableSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and applies the specified configuration and filtering.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:all>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="enabling" type="xs:boolean" default="true">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to true all mechanisms are disabled unless enabled by matching one of the defined filters.
+                                                    When set to false all mechanisms are enabled unless disabled by matching one of the defined filters.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="pattern" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A regular expression filter that filters mechanism names using a regular expression pattern.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="predefined" type="xs:string" >
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    A predefined filter to filter mechanisms.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                    <xs:element name="properties" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Additional properties that should be passed to the factory for SASL mechanism detection and creation.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:all>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the protocol specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="server-name" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Override the server name specified when creating a SASL mechanism.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="predefinedFilterType">
+        <xs:annotation>
+            <xs:documentation>
+                The supported set of predefined filters.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="HASH_MD5" />
+            <xs:enumeration value="HASH_SHA" />
+            <xs:enumeration value="HASH_SHA_256" />
+            <xs:enumeration value="HASH_SHA_384" />
+            <xs:enumeration value="HASH_SHA_512" />
+            <xs:enumeration value="GS2" />
+            <xs:enumeration value="SCRAM" />
+            <xs:enumeration value="DIGEST" />
+            <xs:enumeration value="IEC_ISO_9798" />
+            <xs:enumeration value="EAP" />
+            <xs:enumeration value="MUTUAL" />
+            <xs:enumeration value="BINDING" />
+            <xs:enumeration value="RECOMMENDED" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="mechanismProviderFilteringSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that wraps another SaslServerFactory and enables filtering of mechanisms based on the mechanism name and Provider name and version.
+
+                Any mechanisms loaded by factories not located using a Provider will not be filtered by this definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:sequence>
+                    <xs:element name="filters" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Filters to be applied to the available mechanisms by name.
+                            </xs:documentation>
+                        </xs:annotation>
+                        <xs:complexType>
+                            <xs:sequence>
+                                <xs:element name="filter" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="mechanism-name" type="xs:string">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    This configuration will only apply where a mechanism with the name specified is used.
+
+                                                    If this attribute is omitted then this will match any mechanism name.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-name" type="xs:string" use="required">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    The name of the provider to match against.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="provider-version" type="xs:double">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    Version to compare against the version reported by the provider.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                        <xs:attribute name="version-comparison" type="inequalityType" default="less-than">
+                                            <xs:annotation>
+                                                <xs:documentation>
+                                                    When set to 'less-than' a Provider will match against the filter if the Provider's version is less-than the version specified here.
+
+                                                    Setting to 'greater-than' has the opposite effect.
+
+                                                    Has no effect if a provider-version has not been specified in the filter.
+                                                </xs:documentation>
+                                            </xs:annotation>
+                                        </xs:attribute>
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                        </xs:complexType>
+                    </xs:element>
+                </xs:sequence>
+                <xs:attribute name="sasl-server-factory" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SaslServerFactory to be wrapped by this configuration.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enabling" type="xs:boolean" default="true">
+                    <xs:annotation>
+                        <xs:documentation>
+                            When set to true all provider loaded mechanisms are disabled unless macthed by one of the filters defined here.
+
+                            When set to false all provider loaded mechanisms are enabled unless matched.
+
+                            Any mechanisms from a factory not loaded by a Provider are unaffected.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:simpleType name="inequalityType">
+        <xs:annotation>
+            <xs:documentation>
+                The type of equality check to use in a comparison.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="less-than" />
+            <xs:enumeration value="greater-than" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="providerSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that searches an array of Provider instances for all available SaslServerFactories.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="providers" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the Provider[] capability to obtain the array of Providers to use.
+
+                            If not specified the system registered Providers are used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="serviceLoaderSaslServerFactoryType">
+        <xs:annotation>
+            <xs:documentation>
+                A SaslServerFactory definition that uses a ServiceLoader to search for SaslServerFactory implementations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="saslServerFactoryType">
+                <xs:attribute name="module" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            The name of the module to use.
+
+                            If this is not specified the ClassLoader used to load the service will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="saslServerFactoryRefType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a SaslServerFactory
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <!--
+        TLS Components
+     -->
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the various components needed
+                for SSL, the end result being that these components can be combined together to
+                create a fully defined SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="key-stores" type="keyStoresType" minOccurs="0" />
+            <xs:element name="key-managers" type="keyManagersType" minOccurs="0" />
+            <xs:element name="trust-managers" type="trustManagersType" minOccurs="0"/>
+            <xs:element name="server-ssl-contexts" type="serverSSLContextsType" minOccurs="0" />
+            <xs:element name="client-ssl-contexts" type="clientSSLContextsType" minOccurs="0" />
+            <xs:element name="certificate-authorities" type="certificateAuthoritiesType" minOccurs="0" />
+            <xs:element name="certificate-authority-accounts" type="certificateAuthorityAccountsType" minOccurs="0" />
+            <xs:element name="server-ssl-sni-contexts" type="serverSSLSNIContextsType" minOccurs="0" />
+            <xs:element name="dynamic-client-ssl-contexts" type="dynamicClientSSLContextsType" minOccurs="0" />
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for KeyManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="key-manager" type="keyManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single KeyManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the underlying KeyManager when accessing the entries in the underlying KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the KeyManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the KeyManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore to choose key to use from keys in KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="generate-self-signed-certificate-host" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    If this attribute is set and if the file that backs the KeyStore does not exist, then
+                    a self-signed certificate will be generated on first use and it will be persisted to
+                    the file that backs the KeyStore. The value of this attribute will be used for the
+                    Common Name value in the self-signed certificate.
+
+                    The use of this attribute is intended for testing purposes only. This attribute is not
+                    intended for production use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagersType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for TrustManager definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="trust-manager" type="trustManagerType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="trustManagerType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single TrustManager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="certificate-revocation-lists" type="certificateRevocationListsType" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ocsp" type="ocspType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="algorithm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The algorithm name to use to initialise the TrustManagerFactory.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore to use with the TrustManager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases provided by KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the TrustManagerFactory, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required TrustManagerFactory type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path for OCSP and CRL checks. If neither OCSP and CRL is configured, this attribute has no effect.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="only-leaf-cert" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Check revocation status only of leaf certificates.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="soft-fail" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Accept certificate if revocation status is unknown.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables certificate revocation list checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the configuration to use to initialise the provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-cert-path" type="xs:int" use="optional" default="5">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of non-self-issued intermediate certificates that may exist in a certification path.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListsType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against multiple certificate revocation lists.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-revocation-list" type="certificateRevocationListNoMaxCertPathType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateRevocationListNoMaxCertPathType">
+        <xs:annotation>
+            <xs:documentation>
+                The presence of this element enables checking the peer's certificate against a certificate revocation list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Path to the certificate revocation list.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The base path of the certificate revocation list file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ocspType">
+        <xs:annotation>
+            <xs:documentation>
+                Enables online certificate status protocol checks to a trust manager.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="responder" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    OCSP responder URI to override those extracted from certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefer-crls" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Prefer certificate revocation list revocation over OCSP if certificate-revocation-list is defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-certificate" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias for OCSP Responder certificate. Keep undefined to use the issuer of certificate being validated.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="responder-keystore" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The keystore for responder-certificate. Keep undefined to use trust-manager keystore. Requires responder-certificate to be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SNI SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-sni-context" type="serverSSLSNIContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="sni-mapping" type="serverSSLSNIMappingType" minOccurs="0" maxOccurs="unbounded"  />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SNI SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if SNI is not in use
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLSNIMappingType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SNI SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+
+        <xs:attribute name="host" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The host name that this element matches. If it begins with a '*' it is considered a wildcard match.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The SSLContext to use if the name matches.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for Server SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-ssl-context" type="serverSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="serverSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single server side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this Server side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SecurityDomain to use for authentication during SSL session establishment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="want-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To request (but not to require) a client certificate on SSL handshake.
+                    If a security domain is referenced and supports X509 evidence, this will be set to true automatically.
+                    Ignored when need-client-auth is set.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="need-client-auth" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    To require a client certificate on SSL handshake.
+                    Connection without trusted client certificate (see trust-manager) will be rejected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-optional" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Rejecting of the client certificate by the security domain will not prevent the connection.
+                    Allows a fall through to use other authentication mechanisms (like form login) when the client certificate is rejected by security domain.
+                    Has an effect only when the security domain is set.
+                    This does not bypass the underlying trust manager check - see need-client-auth to allow connection without client certificate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-cipher-suites-order" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Configure the SSLContext to honor local cipher suites preference.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="maximum-session-cache-size" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of SSL sessions in the cache. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="session-timeout" type="xs:int" default="-1">
+            <xs:annotation>
+                <xs:documentation>
+                    The timeout for SSL sessions, in seconds. The default value -1 means use the JVM default value. Value zero means there is no limit.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="wrap" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Should the resulting SSLEngine, SSLSocketFactory, and SSLSocket instances returned by this SSLContext
+                    be wrapped to prevent further configuration changes.
+
+                    Note:  The WildFly HTTP2 support requires raw access to these objects so if HTTP2 is being used this
+                    should be set to false.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pre-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply before the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="post-realm-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A principal transformer to apply after the realm is selected.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="final-principal-transformer" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A final principal transformer to apply for this mechanism realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="realm-mapper" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to a RealmMapper to be used by this mechanism.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client SSLContext definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="client-ssl-context" type="clientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="clientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side SSLContext.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-filter" type="xs:string" use="optional" default="DEFAULT">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cipher-suite-names" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The filter to be applied to the TLSv1.3 cipher suites made available by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="protocols" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    List of protocols supported by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyManager to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="trust-manager" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the TrustManagers to be used by this SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use.
+                    If not specified, all providers from providers will be passed to the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers to obtain the Provider[] to use to load the SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for the KeyStore definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence maxOccurs="unbounded">
+            <xs:choice>
+                <xs:element name="key-store" type="keyStoreType" />
+                <xs:element name="ldap-key-store" type="ldapKeyStoreType" />
+                <xs:element name="filtering-key-store" type="filteringKeyStoreType" />
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="keyStoreImplementationType">
+        <xs:annotation>
+            <xs:documentation>
+                keystore implementation details
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The KeyStore type, e.g. jks, pkcs#12.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to
+                    instantiate the KeyStore, if the provider is not
+                    specified then the first provider found that can
+                    create an instance of the specified 'type' will be
+                    used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required KeyStore type.
+
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="keyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The credential reference to credential store or clear text (password)
+                        to use to initialize or load the KeyStore.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="implementation" type="keyStoreImplementationType" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Implementation details
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="file" type="fileType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The location of the file to use to initialise the KeyStore instance.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="alias-filter" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="ldapKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names LdapKeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="new-item-template" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration for item creation. Define how will look LDAP entry of newly created keystore item.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="attribute" minOccurs="0" maxOccurs="unbounded">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Attribute of newly created entry. At least objectClass attribute and required
+                                    attributes (which are not part of keystore item) should be defined here.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The LDAP attribute name.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                                <xs:attribute name="value" type="stringListType" use="required">
+                                    <xs:annotation>
+                                        <xs:documentation>
+                                            The default value(s) of LDAP attribute delimited by space.
+                                        </xs:documentation>
+                                    </xs:annotation>
+                                </xs:attribute>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="new-item-path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be newly created keystore items created.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="new-item-rdn" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute name, which will be part of new entry path.
+                                Into value of this attribute will be passed alias of the keystore item.
+                                (Can be independent on alias-attribute - alias is used here only as initial entry name,
+                                as it is only identification of item, which keystore has.)
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="search" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Search LDAP configuration
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="path" type="xs:string" use="required">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP path, where will be keystore items searched.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="recursive" type="xs:boolean" use="optional" default="true">
+                        <xs:annotation>
+                            <xs:documentation>
+                                If the search in search-path should be recursive.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="time-limit" type="xs:integer" use="optional" default="10000">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The time limit for LDAP search in milliseconds.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-alias" type="xs:string" use="optional" default="(alias_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by alias.
+                                The string "{0}" will be replaced by the searched alias and the "alias_attribute" value will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-certificate" type="xs:string" use="optional" default="(certificate_attribute={0})">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The string "{0}" will be replaced by searched encoded certificate and the "certificate_attribute" will be the value of the attribute "certificate-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="filter-iterate" type="xs:string" use="optional" default="(alias_attribute=*)">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP filter, which will be used to obtain keystore item by certificate.
+                                The "alias_attribute" will be the value of the attribute "alias-attribute".
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="attribute-mapping" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Mapping of keystore item parts to LDAP attributes.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:attribute name="alias-attribute" type="xs:string" use="optional" default="cn">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is item alias expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-attribute" type="xs:string" use="optional" default="usercertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-type" type="xs:string" use="optional" default="X.509">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of certificate. Used for decoding of byte array from certificate-attribute.
+                                For possible certificate types see Java documentation of CertificateFactory.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-attribute" type="xs:string" use="optional" default="userSMIMECertificate">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded certificate expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="certificate-chain-encoding" type="xs:string" use="optional" default="PKCS7">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The encoding of CertPath, which is used to store certificate chain into certificate-chain-attribute.
+                                For possible chain encodings see Java documentation of CertPath.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+
+                    <xs:attribute name="key-attribute" type="xs:string" use="optional" default="userPKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The LDAP attribute, where is encoded key expected.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="key-type" type="xs:string" use="optional" default="PKCS12">
+                        <xs:annotation>
+                            <xs:documentation>
+                                The type of key. Used for decoding of byte array from key-attribute.
+                                For possible KeyStore types see Java documentation of KeyStore.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of ldap-key-store used to referencing it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="dir-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of dir-context used to connect to the LDAP server.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="filteringKeyStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual names filtering KeyStore definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of key-store, which will be used as source of data.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias-filter" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    A filter to apply to the aliases made available by this KeyStore.
+
+                    Can either be a comma separated list of aliases to return or one of the following formats ALL:-alias1:-alias2, NONE:+alias1:+alias2
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority account definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority-account" type="certificateAuthorityAccountType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityAccountType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority account.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="account-key" type="accountKeyType" minOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="certificate-authority" type="xs:string" default="LetsEncrypt">
+            <xs:annotation>
+                <xs:documentation>
+                    The reference to certificate authority to use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="contact-urls" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of URLs that the certificate authority can contact about any issues related to this account.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthoritiesType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for certificate authority definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="certificate-authority" type="certificateAuthorityType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="certificateAuthorityType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single certificate authority.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="url" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="staging-url" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    URL of the certificate authority to use in pre-production.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="accountKeyType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a certificate authority account key.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used when accessing the certificate authority account key.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="key-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the KeyStore that contains the certificate authority account key.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the certificate authority account key in the KeyStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Credential Store Components
+     -->
+
+    <xs:complexType name="credentialStoresType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type to contain the definitions of the credential stores.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="credential-store" type="credentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="secret-key-credential-store" type="secretKeyCredentialStoreType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="credentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual credential store definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="implementation-properties" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Map of credentials store implementation specific properties.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by as protection parameter for the Credential Store.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The credential store type, e.g. KeyStoreCredentialStore.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="provider-name" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the provider to use to instantiate the CredentialStoreSpi.
+                    If the provider is not specified then the first provider found that can
+                    create an instance of the specified 'type' will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required CredentialStore type.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="other-providers" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the providers defined within the subsystem to obtain the Providers
+                    to search for the one that can create the required JCA objects within credential store.
+                    This is valid only for key-store based  CredentialStore.
+                    If this is not specified then the global list of Providers is used instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="location" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+
+                    Deprecated: Use "path" attribute instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    File name of credential store storage.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="modifiable" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store is modifiable.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="secretKeyCredentialStoreType">
+        <xs:annotation>
+            <xs:documentation>
+                A simple credential store which stores SecretKeyCredential instances in a properties file.
+
+                This credential store does not encrypt the stored keys, the purpose of this credential store is
+                to provide initial access to keys used to protect other configuration values.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this credential store definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The path to the credential store file.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="create" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Specifies whether credential store should create storage when it doesn't exist.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="populate" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    If an entry with the default-alias does not exist should one be dynamically added using the
+                    configured key-size?
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="key-size" type="keySizeType" default="256">
+            <xs:annotation>
+                <xs:documentation>
+                    The default key size when generating secret keys.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="default-alias" type="xs:string" default="key">
+            <xs:annotation>
+                <xs:documentation>
+                    The default alias to use if dynamically adding an entry.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+        Expression Resolver Types
+     -->
+
+    <xs:complexType name="expressionResolverType">
+        <xs:annotation>
+            <xs:documentation>
+                An expression resolver backed by a list of sub-expression resolvers which can be used to decrypt encrypted expressions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="resolver" type="resolverType" minOccurs="1" maxOccurs="unbounded" />
+        </xs:sequence>
+        <xs:attribute name="default-resolver" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The default resolver to use for expressions which do not specify the name of the resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="prefix" type="xs:string" default="ENC">
+            <xs:annotation>
+                <xs:documentation>
+                    The prefix for expressions that should be resolved using this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="resolverType">
+        <xs:annotation>
+            <xs:documentation>
+                Definition of a single expression resolver.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this expression resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="credential-store" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the credential store which contains the secret key to be used by this resolver.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secret-key" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The alias of the secret key contained within the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <!--
+       General Types
+    -->
+
+    <xs:complexType name="basicFileType">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="basicFileTypeOptional">
+        <xs:annotation>
+            <xs:documentation>
+                Minimal attributes required to specify the location to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="relative-to" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A reference to a previously defined path that the file name is
+                    relative to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The remaining path to the file referenced.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="fileType">
+        <xs:annotation>
+            <xs:documentation>
+                A reference to a file.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="basicFileType">
+                <xs:attribute name="required" type="xs:boolean"
+                              use="optional" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            It is possible that a KeyStore definition can be created to a
+                            non-existent file and the file be automatically created when the store is saved, however
+                            no error will be reported where the file does not exist to begin with.
+
+                            If the intent is that the store will always exist in advance set
+                            this to 'true' so that an error will be reported if the file is missing.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:attributeGroup name="customComponentAttributes">
+        <xs:annotation>
+            <xs:documentation>The attributes required for a custom component.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="module" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The module to use to load the custom component.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the custom component implementation to
+                    load.
+
+                    The specified class must have a public no-args constructor.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="customComponentConfiguration">
+        <xs:annotation>
+            <xs:documentation>
+                The optional configuration for a custom component.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:simpleType name="stringListType">
+        <xs:annotation>
+            <xs:documentation>A list of String.</xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="policyType">
+        <xs:annotation>
+            <xs:documentation>
+                A definition that sets up a policy provider.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="jacc-policy" type="jaccPolicyType" minOccurs="1" />
+            <xs:element name="custom-policy" type="customPolicyType" minOccurs="1" />
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the policy provider definition.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaccPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A policy provider definition that sets up JACC and related services.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="policy" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="configuration-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a javax.security.jacc.PolicyConfigurationFactory implementation referencing a policy configuration factory provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="customPolicyType">
+        <xs:annotation>
+            <xs:documentation>
+                A custom policy provider definition.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of a java.security.Policy implementation referencing a policy provider.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to load the provider from.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiType">
+        <xs:annotation>
+            <xs:documentation>
+                JASPI Configurations.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="jaspi-configuration" type="jaspiConfigurationType" maxOccurs="unbounded" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="jaspiConfigurationType">
+        <xs:annotation>
+            <xs:documentation>
+                An individual JASPI configuration.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="server-auth-modules">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="server-auth-module" type="serverAuthModuleType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="layer" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The layer this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all layers and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="application-context" type="xs:string" default="*">
+            <xs:annotation>
+                <xs:documentation>
+                    The application context this configuration should be associated with.
+
+                    If set to '*' this configuration will be associated with all application contexts and resolved according the the
+                    resolution rules defined within the JSR-196 specification.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="description" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Descrption for this JASPI configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="serverAuthModuleType">
+        <xs:sequence>
+            <xs:element name="options" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Configuration options to be passed into the ServerAuthModule during initialisation.
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="property" type="propertyType" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="class-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The fully qualified class name of the class implementing the ServerAuthModule interface.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="module" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the module to use to load the ServerAuthModule.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="flag" type="flagType" default="REQUIRED">
+            <xs:annotation>
+                <xs:documentation>
+                    The control flag to control how the response from this module is interpreted.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="flagType">
+        <xs:annotation>
+            <xs:documentation>
+                The control flag for JASPI modules.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="REQUIRED" />
+            <xs:enumeration value="REQUISITE" />
+            <xs:enumeration value="SUFFICIENT" />
+            <xs:enumeration value="OPTIONAL" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="keySizeType">
+        <xs:annotation>
+            <xs:documentation>
+                Allowed key sizes.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:int">
+            <xs:enumeration value="128" />
+            <xs:enumeration value="192" />
+            <xs:enumeration value="256" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="verificationPolicy">
+        <xs:annotation>
+            <xs:documentation>
+                A host name verification policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="ANY" />
+            <xs:enumeration value="DEFAULT" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="virtualSecurityDomainType">
+        <xs:annotation>
+            <xs:documentation>
+                Complex type for the definition of a single virtual security domain.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="outflow-anonymous" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Where automatic outflow to a security domain is configured, if outflowing
+                    the current identity is not authorized should the
+                    anonymous identity of that domain be used instead?
+
+                    Outflowing an identity replaces any previously
+                    established identity for the outflow domain for the
+                    ongoing call, outflowing anonymous has the effect of
+                    clearing the identity.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="outflow-security-domains" type="stringListType" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    A list of references to security domains that any identity established for this
+                    virtual domain should automatically outflow to.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-method" type="xs:string" default="OIDC" >
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication mechanism that will be used with the virtual security domain.
+                    Allowed values: 'OIDC', 'MP-JWT'.
+                    The default value is 'OIDC'.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="dynamicClientSSLContextsType">
+        <xs:annotation>
+            <xs:documentation>
+                Container for client dynamic SSL context definitions.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="dynamic-client-ssl-context" type="dynamicClientSSLContextType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="dynamicClientSSLContextType">
+        <xs:annotation>
+            <xs:documentation>
+                Definitions of a single client side dynamic SSL context. This context chooses SSL context based on peer's host and port information.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The unique name of this client side dynamic SSL context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-context" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication context that will be used to query for rules when deciding which ssl context to use when connecting to a peer.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-health_1_0.xsd b/wildfly/docs/schema/wildfly-health_1_0.xsd
new file mode 100644
index 0000000..7fd37e0
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-health_1_0.xsd
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:health:1.0"
+           xmlns="urn:wildfly:health:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true" />
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-http-client_1_0.xsd b/wildfly/docs/schema/wildfly-http-client_1_0.xsd
new file mode 100644
index 0000000..d50ca1c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-http-client_1_0.xsd
@@ -0,0 +1,101 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2017 Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~       http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly-http-client:1.0"
+            xmlns="urn:wildfly-http-client:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="http-client" type="http-client-type"/>
+
+    <xs:complexType name="http-client-type">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="configs" type="configs-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="defaults" type="defaults-type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="configs-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="config" type="config-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="config-type">
+        <xs:sequence>
+            <xs:element name="idle-timeout" minOccurs="0" maxOccurs="1" type="idle-timeout-type" />
+            <xs:element name="max-connections" minOccurs="0" maxOccurs="1" type="max-connections-type" />
+            <xs:element name="max-streams-per-connection" minOccurs="0" maxOccurs="1" type="max-streams-type"  />
+            <xs:element name="eagerly-acquire-session" minOccurs="0" maxOccurs="1" type="eager-session-type" />
+            <xs:element name="enable-http2" minOccurs="0" maxOccurs="1" type="enable-http2-type" />
+            <xs:element name="bind-address" type="bind-address-type" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="uri" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="defaults-type">
+        <xs:all>
+            <xs:element name="idle-timeout" minOccurs="0" maxOccurs="1" type="idle-timeout-type" />
+            <xs:element name="max-connections" minOccurs="0" maxOccurs="1" type="max-connections-type" />
+            <xs:element name="max-streams-per-connection" minOccurs="0" maxOccurs="1" type="max-streams-type"  />
+            <xs:element name="eagerly-acquire-session" minOccurs="0" maxOccurs="1" type="eager-session-type" />
+            <xs:element name="enable-http2" minOccurs="0" maxOccurs="1" type="enable-http2-type" />
+            <xs:element name="bind-address" type="bind-address-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="buffer-pool" type="buffer-pool-type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="buffer-pool-type">
+        <xs:attribute name="buffer-size" type="xs:int" use="required" />
+        <xs:attribute name="direct" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-local-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="bind-address-type">
+        <xs:attribute name="address" use="required" type="xs:string"/>
+        <xs:attribute name="port" use="optional" type="port-type"/>
+    </xs:complexType>
+
+    <xs:simpleType name="port-type">
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="0"/>
+            <xs:maxInclusive value="65535"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="idle-timeout-type">
+        <xs:attribute name="value" type="xs:long" use="required" /> 
+    </xs:complexType>
+    <xs:complexType name="max-connections-type">
+        <xs:attribute name="value" type="xs:int" use="required"/>
+    </xs:complexType>
+    <xs:complexType name="max-streams-type">
+        <xs:attribute name="value" type="xs:int" use="required"/>
+    </xs:complexType>
+    <xs:complexType name="eager-session-type">
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+    <xs:complexType name="enable-http2-type">
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-iiop-openjdk_2_0.xsd b/wildfly/docs/schema/wildfly-iiop-openjdk_2_0.xsd
new file mode 100644
index 0000000..e708807
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-iiop-openjdk_2_0.xsd
@@ -0,0 +1,353 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:iiop-openjdk:2.0"
+           xmlns="urn:jboss:domain:iiop-openjdk:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <!-- The iiop subsystem root element -->
+    <xs:element name="subsystem" type="iiopSubsystemType"/>
+
+    <xs:complexType name="iiopSubsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iiopSubsystemType specifies the elements that can be used to configure the various aspects of the
+                iiop subsystem.
+
+                * orb: holds the attributes used to configure the Object Request Broker (ORB).
+                * naming: holds the attributes used to configure the CORBA Naming Service.
+                * security: holds the attributes that control the ORB security features.
+                * properties: allows for the specification of generic name/value properties.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" minOccurs="0" maxOccurs="1" type="genericPropertiesType"/>
+            <xs:element name="orb" minOccurs="0" maxOccurs="1" type="orbConfigType"/>
+            <xs:element name="tcp" minOccurs="0" maxOccurs="1" type="tcpConfigType"/>
+            <xs:element name="initializers" minOccurs="0" maxOccurs="1" type="initializersConfigType"/>
+            <xs:element name="naming" minOccurs="0" maxOccurs="1" type="namingConfigType"/>
+            <xs:element name="security" minOccurs="0" maxOccurs="1" type="securityConfigType"/>
+            <xs:element name="interop" minOccurs="0" maxOccurs="1" type="interopConfigType"/>
+            <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="as-context" minOccurs="0" maxOccurs="1" type="iorASContextType"/>
+            <xs:element name="sas-context" minOccurs="0" maxOccurs="1" type="iorSASContextType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="orbConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                the orbConfigType specifies the elements and attributes that can be used to configure the behavior of the
+                Object Request Broker (ORB).
+                * giop-version-version: the GIOP version to be used.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="giop-version" type="xs:string" use="optional" default="1.2"/>
+        <xs:attribute name="socket-binding" type="xs:string" use="optional" default="iiop"/>
+        <xs:attribute name="ssl-socket-binding" type="xs:string" use="optional" default="iiop-ssl"/>
+        <xs:attribute name="persistent-server-id" type="xs:string" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="tcpConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The orbTCPConfigType specifies the attributes used to configure the TCP connections.
+
+                * high-water-mark: each time the number of connections exceeds this value ORB tries to reclaim connections. 
+                * number-to-reclaim: number of reclaimed connections is specified by this property.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="high-water-mark" type="xs:integer" use="optional"/>
+        <xs:attribute name="number-to-reclaim" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="initializersConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The initializersConfigType specifies the attributes used to configure the ORB initializers.
+
+                * security: indicates whether the security (SAS and CSIv2) initializers should be installed. There are four possibilities:
+                    identity - The server will just send the current username. The receiving server must trust this
+                               server.
+                    client   - The client interceptor will be installed. Remote calls from this server will propagate
+                               by sending the current username and password
+                    elytron  - The client-side interceptor uses Elytron authentication configurations that match the target
+                               URI to obtain the security identity (and associated password) that will be relayed to the
+                               server. It combines the previous two modes by checking the target security requirements in
+                               order to determine the type of security token that must be constructed.
+                    none      - Security interceptors are not installed
+                * authentication-context: when the security attribute is set to 'elytron', the authentication-context
+                    attribute must be defined to indicate the name of the Elytron authentication context that will be
+                    used to match the target URI in order to obtain an authentication configuration.
+                * transactions: indicates which transaction initializers should be installed. There are three possibilities:
+                    full   - This requires JTS to be enabled in the transactions subsystem config, and will enable full transaction
+                           interoperability with other JBoss AS instances.
+                    spec - This does not require JTS to be enabled, but will install the minimum set of transaction interceptors
+                           required for EJB spec compliance. These interceptors detect an incoming transaction and throw an
+                           exception if the invocation should be run in the incoming transaction context.
+                    none  - No transaction initializers will be installed.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security" type="securityEnabledType" use="optional" default="none"/>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional" default="none"/>
+        <xs:attribute name="transactions" type="transactionEnabledType" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:complexType name="namingConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The namingConfigType specifies the attributes used to configure the naming service.
+
+                * root-context: the naming service root context.
+                * export-corbaloc: indicates whether the root context should be exported as corbaloc::address:port/NameService
+                                   (true) or not (false).
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="root-context" type="xs:string" use="optional" default="NameService"/>
+        <xs:attribute name="export-corbaloc" type="trueFalseType" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="securityConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The securityConfigType specifies the attributes used to configure the ORB security features.
+
+                * support-ssl: indicates whether SSL is to be supported (true) or not (false). If set to true, then either
+                        the security-domain attribute must be set or the server-ssl-context and client-ssl-context pair
+                        must be set. The former tells the subsystem to use a legacy JSSE domain to build SSL contexts
+                        while the other two tell the subsystem to use the org.wildfly.security.ssl-context capability
+                        to obtain the server and client side SSL contexts.
+                * security-domain: the name of the legacy JSSE domain that holds the key and trust stores that will
+                        be used to create the SSL context when establishing SSL connections. if defined , then the
+                        server-ssl-context and client-ssl-contexts attributes must not be set.
+                * server-ssl-context: the dynamic name of the capability that provides the SSL context that will be used
+                        to create server side SSL sockets. If the defined, the client-ssl-context attribute must also be
+                        defined and the security-domain attribute must not be set.
+                * client-ssl-context: the dynamic name of the capability that provides the SSL context that will be used
+                        to create client side SSL sockets. If the defined, the server-ssl-context attribute must also be
+                        defined and the security-domain attribute must not be set.
+                * add-component-via-interceptor: indicates whether SSL components should be added by an IOR interceptor
+                        (true) or not (false).
+                * server-requires-ssl: indicates wheter IIOP connections to the server require SSL
+                * client-requires-ssl: indicates wheter IIOP connections from the server require SSL
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="support-ssl" type="trueFalseType" use="optional" default="false"/>
+        <xs:attribute name="security-domain" type="xs:string" use="optional"/>
+        <xs:attribute name="server-ssl-context" type="xs:string" use="optional"/>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional"/>
+        <xs:attribute name="add-component-via-interceptor" type="trueFalseType" use="optional" default="true"/>
+        <xs:attribute name="server-requires-ssl" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="client-requires-ssl" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="interopConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The interopConfigType specifies the attributes used to configure the ORB interoperability features.
+
+                * iona: indicates wheter interoperability with IONA's ASP is enabled.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="iona" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of generic properties.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="genericPropertyType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of generic name/value properties. It is useful to specify
+               configuration attributes that have not been covered in this schema.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="iorTransportEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for IOR transport config fields.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+            <xs:enumeration value="required"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorTransportConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorTransportconfigType specifies the attributes used to setup the IOR transport settings.
+
+                * integrity: indicates whether the transport must require integrity protection or not. Valid values are
+                             "none", "supported" and "required".
+                * confidentiality: indicates whether the transport must require confidentiality protection or not. Valid
+                             values are "none", "supported" and "required".
+                * trust-in-target: indicates if the transport must require trust in target to be established. Valid values
+                             are "none" and "supported".
+                * trust-in-client: indicates if the transport must require trust in client to be established. Valid values
+                             are "none", "supported" and "required".
+                * detect-replay: indicates whether the transport must require replay detection or not. Valid values are
+                             "none", "supported" and "required".
+                * detect-misordering: indicates whether the transport must require misordering detection or not. Valid
+                             values are "none", "supported" and "required".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="integrity" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="confidentiality" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-target" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-client" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-replay" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-misordering" type="iorTransportEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="authMethodEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for AS Context auth method.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="username_password"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorASContextType specifies the attributes used to setup the IOR Authentication Service settings.
+
+                * auth-method: the authentication method. Valid values are "none" and "username_password".
+                * realm: the Authentication Service realm name. If not provided it will be set to "Default".
+                * requires: indicates if authentication is required (true) or not (false).
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="auth-method" type="authMethodEnum" use="optional" default="username_password"/>
+        <xs:attribute name="realm" type="xs:string" use="optional"/>
+        <xs:attribute name="required" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:simpleType name="callerPropagationEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for SAS Context caller propagation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorSASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorSASContextType specifies the attributes used to setup the IOR Secure Attribute Service settings.
+
+                * caller-propagation: indicates whether the caller should be propagated in the SAS context or not. Valid
+                                      values are "none" and "supported".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="caller-propagation" type="callerPropagationEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="trueFalseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Enumeration of allowed values for the standard IIOP attributes.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="true"/>
+            <xs:enumeration value="false"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transactionEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the transaction interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="full"/>
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="spec"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="securityEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the security interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="identity"/>
+            <xs:enumeration value="client"/>
+            <xs:enumeration value="elytron"/>
+            <xs:enumeration value="none"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="sslConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the SSL config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="None"/>
+            <xs:enumeration value="ServerAuth"/>
+            <xs:enumeration value="ClientAuth"/>
+            <xs:enumeration value="MutualAuth"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-iiop-openjdk_2_1.xsd b/wildfly/docs/schema/wildfly-iiop-openjdk_2_1.xsd
new file mode 100644
index 0000000..99b9aac
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-iiop-openjdk_2_1.xsd
@@ -0,0 +1,353 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:iiop-openjdk:2.1"
+           xmlns="urn:jboss:domain:iiop-openjdk:2.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.1">
+
+    <!-- The iiop subsystem root element -->
+    <xs:element name="subsystem" type="iiopSubsystemType"/>
+
+    <xs:complexType name="iiopSubsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iiopSubsystemType specifies the elements that can be used to configure the various aspects of the
+                iiop subsystem.
+
+                * orb: holds the attributes used to configure the Object Request Broker (ORB).
+                * naming: holds the attributes used to configure the CORBA Naming Service.
+                * security: holds the attributes that control the ORB security features.
+                * properties: allows for the specification of generic name/value properties.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" minOccurs="0" maxOccurs="1" type="genericPropertiesType"/>
+            <xs:element name="orb" minOccurs="0" maxOccurs="1" type="orbConfigType"/>
+            <xs:element name="tcp" minOccurs="0" maxOccurs="1" type="tcpConfigType"/>
+            <xs:element name="initializers" minOccurs="0" maxOccurs="1" type="initializersConfigType"/>
+            <xs:element name="naming" minOccurs="0" maxOccurs="1" type="namingConfigType"/>
+            <xs:element name="security" minOccurs="0" maxOccurs="1" type="securityConfigType"/>
+            <xs:element name="interop" minOccurs="0" maxOccurs="1" type="interopConfigType"/>
+            <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="as-context" minOccurs="0" maxOccurs="1" type="iorASContextType"/>
+            <xs:element name="sas-context" minOccurs="0" maxOccurs="1" type="iorSASContextType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="orbConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                the orbConfigType specifies the elements and attributes that can be used to configure the behavior of the
+                Object Request Broker (ORB).
+                * giop-version-version: the GIOP version to be used.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="giop-version" type="xs:string" use="optional" default="1.2"/>
+        <xs:attribute name="socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="ssl-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="persistent-server-id" type="xs:string" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="tcpConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The orbTCPConfigType specifies the attributes used to configure the TCP connections.
+
+                * high-water-mark: each time the number of connections exceeds this value ORB tries to reclaim connections. 
+                * number-to-reclaim: number of reclaimed connections is specified by this property.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="high-water-mark" type="xs:integer" use="optional"/>
+        <xs:attribute name="number-to-reclaim" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="initializersConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The initializersConfigType specifies the attributes used to configure the ORB initializers.
+
+                * security: indicates whether the security (SAS and CSIv2) initializers should be installed. There are four possibilities:
+                    identity - The server will just send the current username. The receiving server must trust this
+                               server.
+                    client   - The client interceptor will be installed. Remote calls from this server will propagate
+                               by sending the current username and password
+                    elytron  - The client-side interceptor uses Elytron authentication configurations that match the target
+                               URI to obtain the security identity (and associated password) that will be relayed to the
+                               server. It combines the previous two modes by checking the target security requirements in
+                               order to determine the type of security token that must be constructed.
+                    none      - Security interceptors are not installed
+                * authentication-context: when the security attribute is set to 'elytron', the authentication-context
+                    attribute must be defined to indicate the name of the Elytron authentication context that will be
+                    used to match the target URI in order to obtain an authentication configuration.
+                * transactions: indicates which transaction initializers should be installed. There are three possibilities:
+                    full   - This requires JTS to be enabled in the transactions subsystem config, and will enable full transaction
+                           interoperability with other JBoss AS instances.
+                    spec - This does not require JTS to be enabled, but will install the minimum set of transaction interceptors
+                           required for EJB spec compliance. These interceptors detect an incoming transaction and throw an
+                           exception if the invocation should be run in the incoming transaction context.
+                    none  - No transaction initializers will be installed.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security" type="securityEnabledType" use="optional" default="none"/>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional" default="none"/>
+        <xs:attribute name="transactions" type="transactionEnabledType" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:complexType name="namingConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The namingConfigType specifies the attributes used to configure the naming service.
+
+                * root-context: the naming service root context.
+                * export-corbaloc: indicates whether the root context should be exported as corbaloc::address:port/NameService
+                                   (true) or not (false).
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="root-context" type="xs:string" use="optional" default="NameService"/>
+        <xs:attribute name="export-corbaloc" type="trueFalseType" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="securityConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The securityConfigType specifies the attributes used to configure the ORB security features.
+
+                * support-ssl: indicates whether SSL is to be supported (true) or not (false). If set to true, then either
+                        the security-domain attribute must be set or the server-ssl-context and client-ssl-context pair
+                        must be set. The former tells the subsystem to use a legacy JSSE domain to build SSL contexts
+                        while the other two tell the subsystem to use the org.wildfly.security.ssl-context capability
+                        to obtain the server and client side SSL contexts.
+                * security-domain: the name of the legacy JSSE domain that holds the key and trust stores that will
+                        be used to create the SSL context when establishing SSL connections. if defined , then the
+                        server-ssl-context and client-ssl-contexts attributes must not be set.
+                * server-ssl-context: the dynamic name of the capability that provides the SSL context that will be used
+                        to create server side SSL sockets. If the defined, the client-ssl-context attribute must also be
+                        defined and the security-domain attribute must not be set.
+                * client-ssl-context: the dynamic name of the capability that provides the SSL context that will be used
+                        to create client side SSL sockets. If the defined, the server-ssl-context attribute must also be
+                        defined and the security-domain attribute must not be set.
+                * add-component-via-interceptor: indicates whether SSL components should be added by an IOR interceptor
+                        (true) or not (false).
+                * server-requires-ssl: indicates wheter IIOP connections to the server require SSL
+                * client-requires-ssl: indicates wheter IIOP connections from the server require SSL
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="support-ssl" type="trueFalseType" use="optional" default="false"/>
+        <xs:attribute name="security-domain" type="xs:string" use="optional"/>
+        <xs:attribute name="server-ssl-context" type="xs:string" use="optional"/>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional"/>
+        <xs:attribute name="add-component-via-interceptor" type="trueFalseType" use="optional" default="true"/>
+        <xs:attribute name="server-requires-ssl" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="client-requires-ssl" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="interopConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The interopConfigType specifies the attributes used to configure the ORB interoperability features.
+
+                * iona: indicates wheter interoperability with IONA's ASP is enabled.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="iona" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of generic properties.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="genericPropertyType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of generic name/value properties. It is useful to specify
+               configuration attributes that have not been covered in this schema.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="iorTransportEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for IOR transport config fields.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+            <xs:enumeration value="required"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorTransportConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorTransportconfigType specifies the attributes used to setup the IOR transport settings.
+
+                * integrity: indicates whether the transport must require integrity protection or not. Valid values are
+                             "none", "supported" and "required".
+                * confidentiality: indicates whether the transport must require confidentiality protection or not. Valid
+                             values are "none", "supported" and "required".
+                * trust-in-target: indicates if the transport must require trust in target to be established. Valid values
+                             are "none" and "supported".
+                * trust-in-client: indicates if the transport must require trust in client to be established. Valid values
+                             are "none", "supported" and "required".
+                * detect-replay: indicates whether the transport must require replay detection or not. Valid values are
+                             "none", "supported" and "required".
+                * detect-misordering: indicates whether the transport must require misordering detection or not. Valid
+                             values are "none", "supported" and "required".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="integrity" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="confidentiality" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-target" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-client" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-replay" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-misordering" type="iorTransportEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="authMethodEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for AS Context auth method.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="username_password"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorASContextType specifies the attributes used to setup the IOR Authentication Service settings.
+
+                * auth-method: the authentication method. Valid values are "none" and "username_password".
+                * realm: the Authentication Service realm name. If not provided it will be set to "Default".
+                * requires: indicates if authentication is required (true) or not (false).
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="auth-method" type="authMethodEnum" use="optional" default="username_password"/>
+        <xs:attribute name="realm" type="xs:string" use="optional"/>
+        <xs:attribute name="required" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:simpleType name="callerPropagationEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for SAS Context caller propagation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorSASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorSASContextType specifies the attributes used to setup the IOR Secure Attribute Service settings.
+
+                * caller-propagation: indicates whether the caller should be propagated in the SAS context or not. Valid
+                                      values are "none" and "supported".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="caller-propagation" type="callerPropagationEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="trueFalseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Enumeration of allowed values for the standard IIOP attributes.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="true"/>
+            <xs:enumeration value="false"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transactionEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the transaction interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="full"/>
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="spec"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="securityEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the security interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="identity"/>
+            <xs:enumeration value="client"/>
+            <xs:enumeration value="elytron"/>
+            <xs:enumeration value="none"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="sslConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the SSL config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="None"/>
+            <xs:enumeration value="ServerAuth"/>
+            <xs:enumeration value="ClientAuth"/>
+            <xs:enumeration value="MutualAuth"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-iiop-openjdk_3_0.xsd b/wildfly/docs/schema/wildfly-iiop-openjdk_3_0.xsd
new file mode 100644
index 0000000..49d4a4a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-iiop-openjdk_3_0.xsd
@@ -0,0 +1,365 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:iiop-openjdk:3.0"
+           xmlns="urn:jboss:domain:iiop-openjdk:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <!-- The iiop subsystem root element -->
+    <xs:element name="subsystem" type="iiopSubsystemType"/>
+
+    <xs:complexType name="iiopSubsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iiopSubsystemType specifies the elements that can be used to configure the various aspects of the
+                iiop subsystem.
+
+                * orb: holds the attributes used to configure the Object Request Broker (ORB).
+                * naming: holds the attributes used to configure the CORBA Naming Service.
+                * security: holds the attributes that control the ORB security features.
+                * properties: allows for the specification of generic name/value properties.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="properties" minOccurs="0" maxOccurs="1" type="genericPropertiesType"/>
+            <xs:element name="orb" minOccurs="0" maxOccurs="1" type="orbConfigType"/>
+            <xs:element name="tcp" minOccurs="0" maxOccurs="1" type="tcpConfigType"/>
+            <xs:element name="initializers" minOccurs="0" maxOccurs="1" type="initializersConfigType"/>
+            <xs:element name="naming" minOccurs="0" maxOccurs="1" type="namingConfigType"/>
+            <xs:element name="security" minOccurs="0" maxOccurs="1" type="securityConfigType"/>
+            <xs:element name="interop" minOccurs="0" maxOccurs="1" type="interopConfigType"/>
+            <xs:element name="transport-config" type="iorTransportConfigType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="as-context" minOccurs="0" maxOccurs="1" type="iorASContextType"/>
+            <xs:element name="sas-context" minOccurs="0" maxOccurs="1" type="iorSASContextType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="orbConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                the orbConfigType specifies the elements and attributes that can be used to configure the behavior of the
+                Object Request Broker (ORB).
+                * giop-version-version: the GIOP version to be used.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="giop-version" type="xs:string" use="optional" default="1.2"/>
+        <xs:attribute name="socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="ssl-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="persistent-server-id" type="xs:string" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="tcpConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The orbTCPConfigType specifies the attributes used to configure the TCP connections.
+
+                * high-water-mark: each time the number of connections exceeds this value ORB tries to reclaim connections. 
+                * number-to-reclaim: number of reclaimed connections is specified by this property.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="high-water-mark" type="xs:integer" use="optional"/>
+        <xs:attribute name="number-to-reclaim" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="initializersConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The initializersConfigType specifies the attributes used to configure the ORB initializers.
+
+                * security: indicates whether the security (SAS and CSIv2) initializers should be installed. There are four possibilities:
+                    identity - The server will just send the current username. The receiving server must trust this
+                               server.
+                    client   - The client interceptor will be installed. Remote calls from this server will propagate
+                               by sending the current username and password
+                    elytron  - The client-side interceptor uses Elytron authentication configurations that match the target
+                               URI to obtain the security identity (and associated password) that will be relayed to the
+                               server. It combines the previous two modes by checking the target security requirements in
+                               order to determine the type of security token that must be constructed.
+                    none      - Security interceptors are not installed
+                * authentication-context: when the security attribute is set to 'elytron', the authentication-context
+                    attribute must be defined to indicate the name of the Elytron authentication context that will be
+                    used to match the target URI in order to obtain an authentication configuration.
+                * transactions: indicates which transaction initializers should be installed. There are three possibilities:
+                    full   - This requires JTS to be enabled in the transactions subsystem config, and will enable full transaction
+                           interoperability with other JBoss AS instances.
+                    spec - This does not require JTS to be enabled, but will install the minimum set of transaction interceptors
+                           required for EJB spec compliance. These interceptors detect an incoming transaction and throw an
+                           exception if the invocation should be run in the incoming transaction context.
+                    none  - No transaction initializers will be installed.
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="security" type="securityEnabledType" use="optional" default="none"/>
+        <xs:attribute name="authentication-context" type="xs:string" use="optional" default="none"/>
+        <xs:attribute name="transactions" type="transactionEnabledType" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:complexType name="namingConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The namingConfigType specifies the attributes used to configure the naming service.
+
+                * root-context: the naming service root context.
+                * export-corbaloc: indicates whether the root context should be exported as corbaloc::address:port/NameService
+                                   (true) or not (false).
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="root-context" type="xs:string" use="optional" default="NameService"/>
+        <xs:attribute name="export-corbaloc" type="trueFalseType" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="securityConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The securityConfigType specifies the attributes used to configure the ORB security features.
+
+                * support-ssl: indicates whether SSL is to be supported (true) or not (false). If set to true, then
+                        server-ssl-context and client-ssl-context pair must be set. The two tell the subsystem to use
+                        the org.wildfly.security.ssl-context capability to obtain the server and client side SSL
+                        contexts.
+                * security-domain: the name of the legacy JSSE domain that holds the key and trust stores that will
+                        be used to create the SSL context when establishing SSL connections. if defined , then the
+                        server-ssl-context and client-ssl-contexts attributes must not be set. Deprecated.
+                * server-ssl-context: the dynamic name of the capability that provides the SSL context that will be used
+                        to create server side SSL sockets. If defined, the client-ssl-context attribute must also be
+-                        defined.
+                * client-ssl-context: the dynamic name of the capability that provides the SSL context that will be used
+                        to create client side SSL sockets. If defined, the server-ssl-context attribute must also be
+-                        defined.
+                * add-component-via-interceptor: indicates whether SSL components should be added by an IOR interceptor
+                        (true) or not (false).
+                * server-requires-ssl: indicates wheter IIOP connections to the server require SSL
+                * client-requires-ssl: indicates wheter IIOP connections from the server require SSL
+                        ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="support-ssl" type="trueFalseType" use="optional" default="false"/>
+        <xs:attribute name="security-domain" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: References to security-domain should be updated to reference ssl-context resources as appropriate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-ssl-context" type="xs:string" use="optional"/>
+        <xs:attribute name="client-ssl-context" type="xs:string" use="optional"/>
+        <xs:attribute name="add-component-via-interceptor" type="trueFalseType" use="optional" default="true"/>
+        <xs:attribute name="server-requires-ssl" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="client-requires-ssl" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="interopConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The interopConfigType specifies the attributes used to configure the ORB interoperability features.
+
+                * iona: indicates wheter interoperability with IONA's ASP is enabled.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="iona" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               Enclosing element for a list of generic properties.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded" type="genericPropertyType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="genericPropertyType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+               The property element allows for the specification of generic name/value properties. It is useful to specify
+               configuration attributes that have not been covered in this schema.
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="iorTransportEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for IOR transport config fields.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+            <xs:enumeration value="required"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorTransportConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorTransportconfigType specifies the attributes used to setup the IOR transport settings.
+
+                * integrity: indicates whether the transport must require integrity protection or not. Valid values are
+                             "none", "supported" and "required".
+                * confidentiality: indicates whether the transport must require confidentiality protection or not. Valid
+                             values are "none", "supported" and "required".
+                * trust-in-target: indicates if the transport must require trust in target to be established. Valid values
+                             are "none" and "supported".
+                * trust-in-client: indicates if the transport must require trust in client to be established. Valid values
+                             are "none", "supported" and "required".
+                * detect-replay: indicates whether the transport must require replay detection or not. Valid values are
+                             "none", "supported" and "required".
+                * detect-misordering: indicates whether the transport must require misordering detection or not. Valid
+                             values are "none", "supported" and "required".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="integrity" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="confidentiality" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-target" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="trust-in-client" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-replay" type="iorTransportEnum" use="optional" default="none"/>
+        <xs:attribute name="detect-misordering" type="iorTransportEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="authMethodEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for AS Context auth method.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="username_password"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorASContextType specifies the attributes used to setup the IOR Authentication Service settings.
+
+                * auth-method: the authentication method. Valid values are "none" and "username_password".
+                * realm: the Authentication Service realm name. If not provided it will be set to "Default".
+                * requires: indicates if authentication is required (true) or not (false).
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="auth-method" type="authMethodEnum" use="optional" default="username_password"/>
+        <xs:attribute name="realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: References to security-realms should be updated to reference ssl-context resources
+                    as appropriate.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="required" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:simpleType name="callerPropagationEnum">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for SAS Context caller propagation.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="supported"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="iorSASContextType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The iorSASContextType specifies the attributes used to setup the IOR Secure Attribute Service settings.
+
+                * caller-propagation: indicates whether the caller should be propagated in the SAS context or not. Valid
+                                      values are "none" and "supported".
+             ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="caller-propagation" type="callerPropagationEnum" use="optional" default="none"/>
+    </xs:complexType>
+
+    <xs:simpleType name="trueFalseType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Enumeration of allowed values for the standard IIOP attributes.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="true"/>
+            <xs:enumeration value="false"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="transactionEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the transaction interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="full"/>
+            <xs:enumeration value="none"/>
+            <xs:enumeration value="spec"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="securityEnabledType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the security interceptor config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="identity"/>
+            <xs:enumeration value="client"/>
+            <xs:enumeration value="elytron"/>
+            <xs:enumeration value="none"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:simpleType name="sslConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                Enumeration of allowed values for the SSL config.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="None"/>
+            <xs:enumeration value="ServerAuth"/>
+            <xs:enumeration value="ClientAuth"/>
+            <xs:enumeration value="MutualAuth"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-io_1_0.xsd b/wildfly/docs/schema/wildfly-io_1_0.xsd
new file mode 100644
index 0000000..0b37837
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-io_1_0.xsd
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:io:1.0"
+           targetNamespace="urn:jboss:domain:io:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The io subsystem root element -->
+    <xs:element name="subsystem" type="io-subsystemType"/>
+    <xs:complexType name="io-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the io subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="worker" type="workerType"/>
+            <xs:element name="buffer-pool" type="bufferPoolType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="workerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="io-threads" type="xs:int" default="4"/>
+        <xs:attribute name="task-keepalive" type="xs:int" default="60"/>
+        <xs:attribute name="task-max-threads" type="xs:int" default="60"/>
+        <xs:attribute name="stack-size" type="xs:long" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="bufferPoolType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="buffers-per-slice" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="direct-buffers" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-io_1_1.xsd b/wildfly/docs/schema/wildfly-io_1_1.xsd
new file mode 100644
index 0000000..3401c43
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-io_1_1.xsd
@@ -0,0 +1,118 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:io:1.1"
+           targetNamespace="urn:jboss:domain:io:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The io subsystem root element -->
+    <xs:element name="subsystem" type="io-subsystemType"/>
+    <xs:complexType name="io-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the io subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="worker" type="workerType"/>
+            <xs:element name="buffer-pool" type="bufferPoolType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="workerType">
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of worker
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="io-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the number of I/O threads to create for the worker.
+                        If not specified, a default will be chosen, which is calculated by cpuCount * 2
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-keepalive" type="xs:int" default="60000">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       Specify the number of milliseconds to keep non-core task threads alive.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-max-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the maximum number of threads for the worker task thread pool.
+                        If not set, default value used which is calculated by formula cpuCount * 16,
+                        as long as MaxFileDescriptorCount jmx property allows that number,
+                        otherwise calculation takes max into account to adjust it accordingly.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack-size" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The stack size (in bytes) to attempt to use for worker threads.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="bufferPoolType">
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of buffer pool
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The size of each buffer slice in bytes, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffers-per-slice" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        How many buffers per slice, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="direct-buffers" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Does the buffer pool use direct buffers, some platforms don't support direct buffers
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-io_2_0.xsd b/wildfly/docs/schema/wildfly-io_2_0.xsd
new file mode 100644
index 0000000..fb7e98e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-io_2_0.xsd
@@ -0,0 +1,156 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:io:2.0"
+           targetNamespace="urn:jboss:domain:io:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The io subsystem root element -->
+    <xs:element name="subsystem" type="io-subsystemType"/>
+    <xs:complexType name="io-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the io subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="worker" type="workerType"/>
+            <xs:element name="buffer-pool" type="bufferPoolType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="workerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="outbound-bind-address" type="outboundBindAddressType"/>
+        </xs:choice>
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of worker
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="io-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the number of I/O threads to create for the worker.
+                        If not specified, a default will be chosen, which is calculated by cpuCount * 2
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-keepalive" type="xs:int" default="60000">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       Specify the number of milliseconds to keep non-core task threads alive.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-max-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the maximum number of threads for the worker task thread pool.
+                        If not set, default value used which is calculated by formula cpuCount * 16,
+                        as long as MaxFileDescriptorCount jmx property allows that number,
+                        otherwise calculation takes max into account to adjust it accordingly.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack-size" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The stack size (in bytes) to attempt to use for worker threads.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="bufferPoolType">
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of buffer pool
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The size of each buffer slice in bytes, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffers-per-slice" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        How many buffers per slice, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="direct-buffers" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Does the buffer pool use direct buffers, some platforms don't support direct buffers
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="outboundBindAddressType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A configuration of a single outbound bind address.
+            </documentation>
+        </annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the bind address sub-resource.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="match" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The CIDR address string which matches the destination when this rule applies.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="bind-address" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The bind address to use if the destination address matches.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="bind-port" type="xs:nonNegativeInteger" use="optional" default="0">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The port number to bind to if the destination address matches.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-io_3_0.xsd b/wildfly/docs/schema/wildfly-io_3_0.xsd
new file mode 100644
index 0000000..f417a2f
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-io_3_0.xsd
@@ -0,0 +1,165 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:io:3.0"
+           targetNamespace="urn:jboss:domain:io:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The io subsystem root element -->
+    <xs:element name="subsystem" type="io-subsystemType"/>
+    <xs:complexType name="io-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the io subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="worker" type="workerType"/>
+            <xs:element name="buffer-pool" type="bufferPoolType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="workerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="outbound-bind-address" type="outboundBindAddressType"/>
+        </xs:choice>
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of worker
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="io-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the number of I/O threads to create for the worker.
+                        If not specified, a default will be chosen, which is calculated by cpuCount * 2
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-keepalive" type="xs:int" default="60000">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       Specify the number of milliseconds to keep non-core task threads alive.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-core-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the starting number of threads for the worker task thread pool.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-max-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the maximum number of threads for the worker task thread pool.
+                        If not set, default value used which is calculated by formula cpuCount * 16,
+                        as long as MaxFileDescriptorCount jmx property allows that number,
+                        otherwise calculation takes max into account to adjust it accordingly.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack-size" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The stack size (in bytes) to attempt to use for worker threads.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="bufferPoolType">
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of buffer pool
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The size of each buffer slice in bytes, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffers-per-slice" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        How many buffers per slice, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="direct-buffers" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Does the buffer pool use direct buffers, some platforms don't support direct buffers
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="outboundBindAddressType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A configuration of a single outbound bind address.
+            </documentation>
+        </annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the bind address sub-resource.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="match" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The CIDR address string which matches the destination when this rule applies.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="bind-address" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The bind address to use if the destination address matches.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="bind-port" type="xs:nonNegativeInteger" use="optional" default="0">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The port number to bind to if the destination address matches.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-io_4_0.xsd b/wildfly/docs/schema/wildfly-io_4_0.xsd
new file mode 100644
index 0000000..0c7c131
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-io_4_0.xsd
@@ -0,0 +1,170 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:io:4.0"
+           targetNamespace="urn:jboss:domain:io:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The io subsystem root element -->
+    <xs:element name="subsystem" type="io-subsystemType"/>
+    <xs:complexType name="io-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the io subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="worker" type="workerType"/>
+            <xs:element name="buffer-pool" type="bufferPoolType"/>
+        </xs:choice>
+        <xs:attribute name="default-worker" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>Specifies the default I/O worker.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="workerType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="outbound-bind-address" type="outboundBindAddressType"/>
+        </xs:choice>
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of worker
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="io-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the number of I/O threads to create for the worker.
+                        If not specified, a default will be chosen, which is calculated by cpuCount * 2
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-keepalive" type="xs:int" default="60000">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                       Specify the number of milliseconds to keep non-core task threads alive.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-core-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the starting number of threads for the worker task thread pool.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="task-max-threads" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Specify the maximum number of threads for the worker task thread pool.
+                        If not set, default value used which is calculated by formula cpuCount * 16,
+                        as long as MaxFileDescriptorCount jmx property allows that number,
+                        otherwise calculation takes max into account to adjust it accordingly.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="stack-size" type="xs:long" default="0">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The stack size (in bytes) to attempt to use for worker threads.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="bufferPoolType">
+        <xs:attribute name="name" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Name of buffer pool
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The size of each buffer slice in bytes, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffers-per-slice" use="optional" type="xs:int">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        How many buffers per slice, if not set optimal value is calculated based on available RAM resources in your system.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="direct-buffers" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Does the buffer pool use direct buffers, some platforms don't support direct buffers
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="outboundBindAddressType">
+        <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+            <documentation>
+                A configuration of a single outbound bind address.
+            </documentation>
+        </annotation>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The name of the bind address sub-resource.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="match" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The CIDR address string which matches the destination when this rule applies.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="bind-address" type="xs:string" use="required">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The bind address to use if the destination address matches.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+        <xs:attribute name="bind-port" type="xs:nonNegativeInteger" use="optional" default="0">
+            <annotation xmlns="http://www.w3.org/2001/XMLSchema">
+                <documentation>
+                    The port number to bind to if the destination address matches.
+                </documentation>
+            </annotation>
+        </xs:attribute>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-jca_2_0.xsd b/wildfly/docs/schema/wildfly-jca_2_0.xsd
new file mode 100644
index 0000000..7f178e2
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-jca_2_0.xsd
@@ -0,0 +1,293 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jca:2.0"
+           xmlns="urn:jboss:domain:jca:2.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:sequence>
+            <xs:element name="archive-validation"
+                type="archive-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle archive validation for the deployment
+                        units. If it's not present it's considered true
+                        with default attributes.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bean-validation"
+                type="bean-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle bean validation (JSR-303) for the
+                        deployment units. If it's not present it's
+                        considered true
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="default-workmanager" type="workmanagerType" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The default work manager and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A custom work manager definition and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="distributed-workmanager" type="distributedWorkmanagerType" minOccurs="0"
+                        maxOccurs="unbounded">
+              <xs:annotation>
+                <xs:documentation>
+                  A distributed work manager definition and its thread pools
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bootstrap-contexts" type="bootstrap-contextsType" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  Definition of custom bootstrap contexts
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="cached-connection-manager" type="cached-connection-managerType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="archive-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether archive validation is enabled.  Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-error" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation error report fail the deployment. Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-warn" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation warning report fail the deployment. Default: false
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether bean validation is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1"></xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0"></xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager. Note, that custom work managers need
+                   to have a name defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+  <xs:complexType name="distributedWorkmanagerType">
+          <xs:all>
+              <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1"></xs:element>
+              <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0"></xs:element>
+              <xs:element name="policy" type="policyType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="selector" type="selectorType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="transport" type="transportType" maxOccurs="1" minOccurs="1" />
+
+          </xs:all>
+          <xs:attribute name="name" type="xs:token" use="required">
+              <xs:annotation>
+                  <xs:documentation>
+                     Specifies the name of the work manager. Note, that custom work managers need
+                     to have a name defined.
+                  </xs:documentation>
+              </xs:annotation>
+          </xs:attribute>
+      </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextsType">
+        <xs:sequence>
+            <xs:element name="bootstrap-context" type="bootstrap-contextType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the bootstrap context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="workmanager" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager to use for this context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cached-connection-managerType">
+        <xs:attribute name="debug" type="xs:boolean" use="optional"></xs:attribute>
+        <xs:attribute name="error" type="xs:boolean" use="optional"></xs:attribute>
+        <xs:attribute name="ignore-unknown-connections" type="xs:boolean" use="optional"></xs:attribute>
+    </xs:complexType>
+
+     <xs:complexType name="thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                See threads:blocking-bounded-queue-thread-pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="threads:countType"/>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:sequence>
+          <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        When to distribute the work instance
+                        Supported policies
+                        - NEVER
+                        Never distribute the Work instance to another node.
+                        - ALWAYS
+                        Always distribute the Work instance to another node.
+                        - WATERMARK
+                        Distribute the Work instance to another node based on how many free worker threads the current
+                        node has available.
+
+                        Default is WATERMARK with a watermark of 0
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="NEVER"/>
+                        <xs:enumeration value="ALWAYS"/>
+                        <xs:enumeration value="WATERMARK"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+
+
+      </xs:complexType>
+      <xs:complexType name="selectorType">
+          <xs:sequence>
+                  <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+          </xs:sequence>
+          <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        To which work manager instance should the Work instance be distributed to
+                        Supported selectors
+                        - FIRST_AVAILABLE
+                            Select the first available node in the list
+                        - PING_TIME
+                            Select the node with the lowest ping time
+                        - MAX_FREE_THREADS
+                            Select the node with highest number of free worker threads
+
+                        Default is PING_TIME
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="FIRST_AVAILABLE"/>
+                        <xs:enumeration value="PING_TIME"/>
+                        <xs:enumeration value="MAX_FREE_THREADS"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+        </xs:complexType>
+        <xs:complexType name="transportType">
+              <xs:attribute name="jgroups-stack" type="xs:token" use="optional">
+                  <xs:annotation>
+                      <xs:documentation>
+                        Define which JGroups stack will be used to distribute Work instances in the cluster.
+
+                        Default is udp
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="jgroups-cluster" type="xs:token" use="optional">
+                <xs:annotation>
+                  <xs:documentation>
+                    Define the JGroups channel name that will be used to distribute Work instances in the cluster.
+
+                    Default is jca
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="request-timeout" type="xs:nonNegativeInteger" use="optional">
+                <xs:annotation>
+                  <xs:documentation>
+                    Define the request timeout for Work distribution in the cluster. It is expressed in milliseconds.
+
+                    Default is 10000
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+
+        <xs:complexType name="optionType">
+              <xs:attribute name="name" use="required">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Name of the option to be set
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-jca_3_0.xsd b/wildfly/docs/schema/wildfly-jca_3_0.xsd
new file mode 100644
index 0000000..0df7c08
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-jca_3_0.xsd
@@ -0,0 +1,314 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jca:3.0"
+           xmlns="urn:jboss:domain:jca:3.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:sequence>
+            <xs:element name="archive-validation"
+                type="archive-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle archive validation for the deployment
+                        units. If it's not present it's considered true
+                        with default attributes.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bean-validation"
+                type="bean-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle bean validation (JSR-303) for the
+                        deployment units. If it's not present it's
+                        considered true
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="tracer"
+                        type="tracer-Type" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle Tracer for the
+                        deployment units. If it's not present it's
+                        considered false
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="default-workmanager" type="workmanagerType" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The default work manager and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A custom work manager definition and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="distributed-workmanager" type="distributedWorkmanagerType" minOccurs="0"
+                        maxOccurs="unbounded">
+              <xs:annotation>
+                <xs:documentation>
+                  A distributed work manager definition and its thread pools
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bootstrap-contexts" type="bootstrap-contextsType" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  Definition of custom bootstrap contexts
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="cached-connection-manager" type="cached-connection-managerType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="archive-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether archive validation is enabled.  Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-error" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation error report fail the deployment. Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-warn" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation warning report fail the deployment. Default: false
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether bean validation is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="tracer-Type">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether tracer is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1"></xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0"></xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager. Note, that custom work managers need
+                   to have a name defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+  <xs:complexType name="distributedWorkmanagerType">
+          <xs:all>
+              <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1"></xs:element>
+              <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0"></xs:element>
+              <xs:element name="policy" type="policyType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="selector" type="selectorType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="transport" type="transportType" maxOccurs="1" minOccurs="1" />
+
+          </xs:all>
+          <xs:attribute name="name" type="xs:token" use="required">
+              <xs:annotation>
+                  <xs:documentation>
+                     Specifies the name of the work manager. Note, that custom work managers need
+                     to have a name defined.
+                  </xs:documentation>
+              </xs:annotation>
+          </xs:attribute>
+      </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextsType">
+        <xs:sequence>
+            <xs:element name="bootstrap-context" type="bootstrap-contextType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextType">
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the bootstrap context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="workmanager" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager to use for this context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cached-connection-managerType">
+        <xs:attribute name="debug" type="xs:boolean" use="optional"></xs:attribute>
+        <xs:attribute name="error" type="xs:boolean" use="optional"></xs:attribute>
+        <xs:attribute name="ignore-unknown-connections" type="xs:boolean" use="optional"></xs:attribute>
+    </xs:complexType>
+
+     <xs:complexType name="thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                See threads:blocking-bounded-queue-thread-pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="threads:countType"/>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:sequence>
+          <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        When to distribute the work instance
+                        Supported policies
+                        - NEVER
+                        Never distribute the Work instance to another node.
+                        - ALWAYS
+                        Always distribute the Work instance to another node.
+                        - WATERMARK
+                        Distribute the Work instance to another node based on how many free worker threads the current
+                        node has available.
+
+                        Default is WATERMARK with a watermark of 0
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="NEVER"/>
+                        <xs:enumeration value="ALWAYS"/>
+                        <xs:enumeration value="WATERMARK"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+
+
+      </xs:complexType>
+      <xs:complexType name="selectorType">
+          <xs:sequence>
+                  <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+          </xs:sequence>
+          <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        To which work manager instance should the Work instance be distributed to
+                        Supported selectors
+                        - FIRST_AVAILABLE
+                            Select the first available node in the list
+                        - PING_TIME
+                            Select the node with the lowest ping time
+                        - MAX_FREE_THREADS
+                            Select the node with highest number of free worker threads
+
+                        Default is PING_TIME
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="FIRST_AVAILABLE"/>
+                        <xs:enumeration value="PING_TIME"/>
+                        <xs:enumeration value="MAX_FREE_THREADS"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+        </xs:complexType>
+        <xs:complexType name="transportType">
+              <xs:attribute name="jgroups-stack" type="xs:token" use="optional">
+                  <xs:annotation>
+                      <xs:documentation>
+                        Define which JGroups stack will be used to distribute Work instances in the cluster.
+
+                        Default is udp
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="jgroups-cluster" type="xs:token" use="optional">
+                <xs:annotation>
+                  <xs:documentation>
+                    Define the JGroups channel name that will be used to distribute Work instances in the cluster.
+
+                    Default is jca
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+              <xs:attribute name="request-timeout" type="xs:nonNegativeInteger" use="optional">
+                <xs:annotation>
+                  <xs:documentation>
+                    Define the request timeout for Work distribution in the cluster. It is expressed in milliseconds.
+
+                    Default is 10000
+                  </xs:documentation>
+                </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+
+        <xs:complexType name="optionType">
+              <xs:attribute name="name" use="required">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Name of the option to be set
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-jca_4_0.xsd b/wildfly/docs/schema/wildfly-jca_4_0.xsd
new file mode 100644
index 0000000..aa81288
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-jca_4_0.xsd
@@ -0,0 +1,355 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jca:4.0"
+           xmlns="urn:jboss:domain:jca:4.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:sequence>
+            <xs:element name="archive-validation"
+                type="archive-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle archive validation for the deployment
+                        units. If it's not present it's considered true
+                        with default attributes.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bean-validation"
+                type="bean-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle bean validation (JSR-303) for the
+                        deployment units. If it's not present it's
+                        considered true
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="tracer"
+                        type="tracer-Type" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle Tracer for the
+                        deployment units. If it's not present it's
+                        considered false
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="default-workmanager" type="defaultWorkmanagerType" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The default work manager and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A custom work manager definition and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="distributed-workmanager" type="distributedWorkmanagerType" minOccurs="0"
+                        maxOccurs="unbounded">
+              <xs:annotation>
+                <xs:documentation>
+                  A distributed work manager definition and its thread pools
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bootstrap-contexts" type="bootstrap-contextsType" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  Definition of custom bootstrap contexts
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="cached-connection-manager" type="cached-connection-managerType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="archive-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether archive validation is enabled.  Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-error" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation error report fail the deployment. Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-warn" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation warning report fail the deployment. Default: false
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether bean validation is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="tracer-Type">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether tracer is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="defaultWorkmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for short running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for long running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for short running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for long running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+  <xs:complexType name="distributedWorkmanagerType">
+          <xs:all>
+              <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Thread pool for short running jobs.
+                          Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+              <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Thread pool for long running jobs.
+                          Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+              <xs:element name="policy" type="policyType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="selector" type="selectorType" maxOccurs="1" minOccurs="0" />
+          </xs:all>
+          <xs:attribute name="name" type="xs:token" use="required">
+              <xs:annotation>
+                  <xs:documentation>
+                     Specifies the name of the work manager. Note, that custom work managers need
+                     to have a name defined.
+                  </xs:documentation>
+              </xs:annotation>
+          </xs:attribute>
+      </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextsType">
+        <xs:sequence>
+            <xs:element name="bootstrap-context" type="bootstrap-contextType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextType">
+        <xs:annotation>
+            <xs:documentation>
+                This provides a mechanism to pass a bootstrap context to a resource adapter instance when it is bootstrapped.
+                The bootstrap context contains references to useful facilities that could be used by the resource adapter instance.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the bootstrap context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="workmanager" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager to use for this context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cached-connection-managerType">
+        <xs:attribute name="debug" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable/disable debug information logging
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="error" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable/disable error information logging
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ignore-unknown-connections" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Do not cache unknown connections
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+     <xs:complexType name="thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                See threads:blocking-bounded-queue-thread-pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="threads:countType"/>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:sequence>
+          <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        When to distribute the work instance
+                        Supported policies
+                        - NEVER
+                        Never distribute the Work instance to another node.
+                        - ALWAYS
+                        Always distribute the Work instance to another node.
+                        - WATERMARK
+                        Distribute the Work instance to another node based on how many free worker threads the current
+                        node has available.
+
+                        Default is WATERMARK with a watermark of 0
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="NEVER"/>
+                        <xs:enumeration value="ALWAYS"/>
+                        <xs:enumeration value="WATERMARK"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+
+
+      </xs:complexType>
+      <xs:complexType name="selectorType">
+          <xs:sequence>
+                  <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+          </xs:sequence>
+          <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        To which work manager instance should the Work instance be distributed to
+                        Supported selectors
+                        - FIRST_AVAILABLE
+                            Select the first available node in the list
+                        - PING_TIME
+                            Select the node with the lowest ping time
+                        - MAX_FREE_THREADS
+                            Select the node with highest number of free worker threads
+
+                        Default is PING_TIME
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="FIRST_AVAILABLE"/>
+                        <xs:enumeration value="PING_TIME"/>
+                        <xs:enumeration value="MAX_FREE_THREADS"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+        </xs:complexType>
+
+        <xs:complexType name="optionType">
+              <xs:attribute name="name" use="required">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Name of the option to be set
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-jca_5_0.xsd b/wildfly/docs/schema/wildfly-jca_5_0.xsd
new file mode 100644
index 0000000..83bbda7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-jca_5_0.xsd
@@ -0,0 +1,382 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jca:5.0"
+           xmlns="urn:jboss:domain:jca:5.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:sequence>
+            <xs:element name="archive-validation"
+                type="archive-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle archive validation for the deployment
+                        units. If it's not present it's considered true
+                        with default attributes.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bean-validation"
+                type="bean-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle bean validation (JSR-303) for the
+                        deployment units. If it's not present it's
+                        considered true
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="tracer"
+                        type="tracer-Type" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle Tracer for the
+                        deployment units. If it's not present it's
+                        considered false
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="default-workmanager" type="defaultWorkmanagerType" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The default work manager and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A custom work manager definition and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="distributed-workmanager" type="distributedWorkmanagerType" minOccurs="0"
+                        maxOccurs="unbounded">
+              <xs:annotation>
+                <xs:documentation>
+                  A distributed work manager definition and its thread pools
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bootstrap-contexts" type="bootstrap-contextsType" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  Definition of custom bootstrap contexts
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="cached-connection-manager" type="cached-connection-managerType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="archive-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether archive validation is enabled.  Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-error" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation error report fail the deployment. Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-warn" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation warning report fail the deployment. Default: false
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether bean validation is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="tracer-Type">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether tracer is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="defaultWorkmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for short running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for long running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="elytron-enabled" type="xs:boolean" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Indicates that Elytron is responsible for security for this workmanager. Default is false
+                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for short running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for long running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="elytron-enabled" type="xs:boolean" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Indicates that Elytron is responsible for security for this workmanager. Default is false
+                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+  <xs:complexType name="distributedWorkmanagerType">
+          <xs:all>
+              <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Thread pool for short running jobs.
+                          Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+              <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Thread pool for long running jobs.
+                          Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+              <xs:element name="policy" type="policyType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="selector" type="selectorType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="elytron-enabled" type="xs:boolean" maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                      <xs:documentation>
+                          <![CDATA[[
+                Indicates that Elytron is responsible for security for this workmanager. Default is false
+                ]]>
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+          </xs:all>
+          <xs:attribute name="name" type="xs:token" use="required">
+              <xs:annotation>
+                  <xs:documentation>
+                     Specifies the name of the work manager. Note, that custom work managers need
+                     to have a name defined.
+                  </xs:documentation>
+              </xs:annotation>
+          </xs:attribute>
+      </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextsType">
+        <xs:sequence>
+            <xs:element name="bootstrap-context" type="bootstrap-contextType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextType">
+        <xs:annotation>
+            <xs:documentation>
+                This provides a mechanism to pass a bootstrap context to a resource adapter instance when it is bootstrapped.
+                The bootstrap context contains references to useful facilities that could be used by the resource adapter instance.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the bootstrap context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="workmanager" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager to use for this context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cached-connection-managerType">
+        <xs:attribute name="debug" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable/disable debug information logging
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="error" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable/disable error information logging
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ignore-unknown-connections" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Do not cache unknown connections
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+     <xs:complexType name="thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                See threads:blocking-bounded-queue-thread-pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="threads:countType"/>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:sequence>
+          <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        When to distribute the work instance
+                        Supported policies
+                        - NEVER
+                        Never distribute the Work instance to another node.
+                        - ALWAYS
+                        Always distribute the Work instance to another node.
+                        - WATERMARK
+                        Distribute the Work instance to another node based on how many free worker threads the current
+                        node has available.
+
+                        Default is WATERMARK with a watermark of 0
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="NEVER"/>
+                        <xs:enumeration value="ALWAYS"/>
+                        <xs:enumeration value="WATERMARK"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+
+
+      </xs:complexType>
+      <xs:complexType name="selectorType">
+          <xs:sequence>
+                  <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+          </xs:sequence>
+          <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        To which work manager instance should the Work instance be distributed to
+                        Supported selectors
+                        - FIRST_AVAILABLE
+                            Select the first available node in the list
+                        - PING_TIME
+                            Select the node with the lowest ping time
+                        - MAX_FREE_THREADS
+                            Select the node with highest number of free worker threads
+
+                        Default is PING_TIME
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="FIRST_AVAILABLE"/>
+                        <xs:enumeration value="PING_TIME"/>
+                        <xs:enumeration value="MAX_FREE_THREADS"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+        </xs:complexType>
+
+        <xs:complexType name="optionType">
+              <xs:attribute name="name" use="required">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Name of the option to be set
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-jca_6_0.xsd b/wildfly/docs/schema/wildfly-jca_6_0.xsd
new file mode 100644
index 0000000..a90eafc
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-jca_6_0.xsd
@@ -0,0 +1,382 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:jca:6.0"
+           xmlns="urn:jboss:domain:jca:6.0"
+           xmlns:threads="urn:jboss:domain:threads:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:import namespace="urn:jboss:domain:threads:1.1" schemaLocation="jboss-as-threads_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:sequence>
+            <xs:element name="archive-validation"
+                type="archive-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle archive validation for the deployment
+                        units. If it's not present it's considered true
+                        with default attributes.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bean-validation"
+                type="bean-validationType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle bean validation (JSR-303) for the
+                        deployment units. If it's not present it's
+                        considered true
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="tracer"
+                        type="tracer-Type" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Toggle Tracer for the
+                        deployment units. If it's not present it's
+                        considered false
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="default-workmanager" type="defaultWorkmanagerType" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        The default work manager and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        A custom work manager definition and its thread pools
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+
+            <xs:element name="distributed-workmanager" type="distributedWorkmanagerType" minOccurs="0"
+                        maxOccurs="unbounded">
+              <xs:annotation>
+                <xs:documentation>
+                  A distributed work manager definition and its thread pools
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="bootstrap-contexts" type="bootstrap-contextsType" minOccurs="0">
+              <xs:annotation>
+                <xs:documentation>
+                  Definition of custom bootstrap contexts
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+
+            <xs:element name="cached-connection-manager" type="cached-connection-managerType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="archive-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether archive validation is enabled.  Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-error" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation error report fail the deployment. Default: true
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="fail-on-warn" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Should an archive validation warning report fail the deployment. Default: false
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validationType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether bean validation is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="tracer-Type">
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify whether tracer is enabled.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="defaultWorkmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for short running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for long running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="elytron-enabled" type="xs:boolean" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Indicates that Elytron is responsible for security for this workmanager. Default is true
+                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:all>
+            <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for short running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Thread pool for long running jobs.
+                        Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="elytron-enabled" type="xs:boolean" maxOccurs="1" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Indicates that Elytron is responsible for security for this workmanager. Default is true
+                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+  <xs:complexType name="distributedWorkmanagerType">
+          <xs:all>
+              <xs:element name="short-running-threads" type="thread-pool" maxOccurs="1" minOccurs="1">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Thread pool for short running jobs.
+                          Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+              <xs:element name="long-running-threads" type="thread-pool" maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Thread pool for long running jobs.
+                          Long running jobs are identified by the HintsContext.LONGRUNNING_HINT with a value of true.
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+              <xs:element name="policy" type="policyType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="selector" type="selectorType" maxOccurs="1" minOccurs="0" />
+              <xs:element name="elytron-enabled" type="xs:boolean" maxOccurs="1" minOccurs="0">
+                  <xs:annotation>
+                      <xs:documentation>
+                          <![CDATA[[
+                Indicates that Elytron is responsible for security for this workmanager. Default is false
+                ]]>
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:element>
+          </xs:all>
+          <xs:attribute name="name" type="xs:token" use="required">
+              <xs:annotation>
+                  <xs:documentation>
+                     Specifies the name of the work manager. Note, that custom work managers need
+                     to have a name defined.
+                  </xs:documentation>
+              </xs:annotation>
+          </xs:attribute>
+      </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextsType">
+        <xs:sequence>
+            <xs:element name="bootstrap-context" type="bootstrap-contextType" maxOccurs="unbounded" minOccurs="1"></xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bootstrap-contextType">
+        <xs:annotation>
+            <xs:documentation>
+                This provides a mechanism to pass a bootstrap context to a resource adapter instance when it is bootstrapped.
+                The bootstrap context contains references to useful facilities that could be used by the resource adapter instance.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the bootstrap context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="workmanager" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                   Specifies the name of the work manager to use for this context.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="cached-connection-managerType">
+        <xs:attribute name="debug" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable/disable debug information logging
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="error" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable/disable error information logging
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ignore-unknown-connections" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Do not cache unknown connections
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+     <xs:complexType name="thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                See threads:blocking-bounded-queue-thread-pool.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="core-threads" type="threads:countType" minOccurs="0"/>
+            <xs:element name="queue-length" type="threads:countType"/>
+            <xs:element name="max-threads" type="threads:countType"/>
+            <xs:element name="keepalive-time" type="threads:time" minOccurs="0"/>
+            <xs:element name="thread-factory" type="threads:ref" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean"/>
+    </xs:complexType>
+
+    <xs:complexType name="policyType">
+        <xs:sequence>
+          <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        When to distribute the work instance
+                        Supported policies
+                        - NEVER
+                        Never distribute the Work instance to another node.
+                        - ALWAYS
+                        Always distribute the Work instance to another node.
+                        - WATERMARK
+                        Distribute the Work instance to another node based on how many free worker threads the current
+                        node has available.
+
+                        Default is WATERMARK with a watermark of 0
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="NEVER"/>
+                        <xs:enumeration value="ALWAYS"/>
+                        <xs:enumeration value="WATERMARK"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+
+
+      </xs:complexType>
+      <xs:complexType name="selectorType">
+          <xs:sequence>
+                  <xs:element name="option" type="optionType" maxOccurs="unbounded" minOccurs="0"/>
+          </xs:sequence>
+          <xs:attribute name="name" use="required">
+                <xs:annotation>
+                    <xs:documentation>
+                        To which work manager instance should the Work instance be distributed to
+                        Supported selectors
+                        - FIRST_AVAILABLE
+                            Select the first available node in the list
+                        - PING_TIME
+                            Select the node with the lowest ping time
+                        - MAX_FREE_THREADS
+                            Select the node with highest number of free worker threads
+
+                        Default is PING_TIME
+                    </xs:documentation>
+                </xs:annotation>
+                <xs:simpleType>
+                    <xs:restriction base="xs:token">
+                        <xs:enumeration value="FIRST_AVAILABLE"/>
+                        <xs:enumeration value="PING_TIME"/>
+                        <xs:enumeration value="MAX_FREE_THREADS"/>
+                    </xs:restriction>
+                </xs:simpleType>
+            </xs:attribute>
+        </xs:complexType>
+
+        <xs:complexType name="optionType">
+              <xs:attribute name="name" use="required">
+                  <xs:annotation>
+                      <xs:documentation>
+                          Name of the option to be set
+                      </xs:documentation>
+                  </xs:annotation>
+              </xs:attribute>
+          </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-keycloak_1_1.xsd b/wildfly/docs/schema/wildfly-keycloak_1_1.xsd
new file mode 100644
index 0000000..5f28211
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-keycloak_1_1.xsd
@@ -0,0 +1,134 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:keycloak:1.1"
+           xmlns="urn:jboss:domain:keycloak:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem-type"/>
+
+    <xs:complexType name="subsystem-type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The Keycloak adapter subsystem, used to register deployments managed by Keycloak
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="realm" maxOccurs="unbounded" minOccurs="0" type="realm-type"/>
+            <xs:element name="secure-deployment" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type"/>
+            <xs:element name="secure-server" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realm-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" />
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="auth-server-url-for-backend-requests" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the realm.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="secure-deployment-type">
+        <xs:all>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="use-resource-role-mappings" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="realm" type="xs:string" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resource" type="xs:string" minOccurs="0" maxOccurs="1" />
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="public-client" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" />
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" />
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="credential" type="credential-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="redirect-rewrite-rule" type="redirect-rewrite-rule-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="auth-server-url-for-backend-requests" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="enable-basic-auth" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="turn-off-change-session-id-on-login" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="token-minimum-time-to-live" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="min-time-between-jwks-requests" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="public-key-cache-ttl" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="adapter-state-cookie-path" type="xs:string" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the realm.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="credential-type" mixed="true">
+        <xs:sequence maxOccurs="unbounded" minOccurs="0">
+            <xs:any processContents="lax"></xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+     <xs:complexType name="redirect-rewrite-rule-type" mixed="true">
+        <xs:sequence maxOccurs="unbounded" minOccurs="0">
+            <xs:any processContents="lax"></xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-keycloak_1_2.xsd b/wildfly/docs/schema/wildfly-keycloak_1_2.xsd
new file mode 100644
index 0000000..3f58cc1
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-keycloak_1_2.xsd
@@ -0,0 +1,140 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:keycloak:1.2"
+           xmlns="urn:jboss:domain:keycloak:1.2"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem-type"/>
+
+    <xs:complexType name="subsystem-type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The Keycloak adapter subsystem, used to register deployments managed by Keycloak
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="realm" maxOccurs="unbounded" minOccurs="0" type="realm-type"/>
+            <xs:element name="secure-deployment" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type"/>
+            <xs:element name="secure-server" maxOccurs="unbounded" minOccurs="0" type="secure-deployment-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="realm-type">
+        <xs:all>
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" />
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="auth-server-url-for-backend-requests" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the realm.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="secure-deployment-type">
+        <xs:all>
+            <xs:element name="client-keystore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-keystore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="enable-cors" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="allow-any-hostname" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="use-resource-role-mappings" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-max-age" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="auth-server-url" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="realm" type="xs:string" minOccurs="1" maxOccurs="1"/>
+            <xs:element name="disable-trust-manager" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-allowed-methods" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="cors-allowed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="cors-exposed-headers" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="resource" type="xs:string" minOccurs="0" maxOccurs="1" />
+            <xs:element name="truststore" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="truststore-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="client-key-password" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="public-client" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-pool-size" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="socket-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-ttl-millis" type="xs:long" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="connection-timeout-millis" type="xs:long" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="expose-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ssl-required" type="xs:string" minOccurs="0" maxOccurs="1" />
+            <xs:element name="confidential-port" type="xs:integer" minOccurs="0" maxOccurs="1" />
+            <xs:element name="realm-public-key" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="credential" type="credential-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="redirect-rewrite-rule" type="redirect-rewrite-rule-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="auth-server-url-for-backend-requests" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="always-refresh-token" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-at-startup" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="register-node-period" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="token-store" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="principal-attribute" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="enable-basic-auth" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="turn-off-change-session-id-on-login" type="xs:boolean" minOccurs="0" maxOccurs="1" />
+            <xs:element name="token-minimum-time-to-live" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="min-time-between-jwks-requests" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="public-key-cache-ttl" type="xs:integer" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="autodetect-bearer-only" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="ignore-oauth-query-parameter" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="proxy-url" type="xs:string" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="verify-token-audience" type="xs:boolean" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="adapter-state-cookie-path" type="xs:string" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of the realm.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    
+    <xs:complexType name="credential-type" mixed="true">
+        <xs:sequence maxOccurs="unbounded" minOccurs="0">
+            <xs:any processContents="lax"></xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+     <xs:complexType name="redirect-rewrite-rule-type" mixed="true">
+        <xs:sequence maxOccurs="unbounded" minOccurs="0">
+            <xs:any processContents="lax"></xs:any>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-mail_2_0.xsd b/wildfly/docs/schema/wildfly-mail_2_0.xsd
new file mode 100644
index 0000000..6ec5125
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-mail_2_0.xsd
@@ -0,0 +1,134 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:mail:2.0"
+           targetNamespace="urn:jboss:domain:mail:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The mail subsystem root element -->
+    <xs:element name="subsystem" type="mail-subsystemType"/>
+    <xs:complexType name="mail-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the mail subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="mail-session" type="mail-sessionType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="mail-sessionType">
+        <xs:sequence>
+            <xs:element name="smtp-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="pop3-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="imap-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="custom-server" type="custom-server-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="jndi-name" use="required" type="xs:string"/>
+        <xs:attribute name="debug" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       enables debuging of mail session
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="from" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            sets mail.from attribute
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="server-type" mixed="true">
+        <xs:attribute name="outbound-socket-binding-ref" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional"/>
+        <xs:attribute name="password" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="property-type">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="custom-server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="property" type="property-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding-ref" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional"/>
+        <xs:attribute name="password" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-mail_3_0.xsd b/wildfly/docs/schema/wildfly-mail_3_0.xsd
new file mode 100644
index 0000000..e263a1f
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-mail_3_0.xsd
@@ -0,0 +1,154 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:mail:3.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:mail:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <!-- The mail subsystem root element -->
+    <xs:element name="subsystem" type="mail-subsystemType"/>
+    <xs:complexType name="mail-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the mail subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="mail-session" type="mail-sessionType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="mail-sessionType">
+        <xs:sequence>
+            <xs:element name="smtp-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="pop3-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="imap-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="custom-server" type="custom-server-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="jndi-name" use="required" type="xs:string"/>
+        <xs:attribute name="debug" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       enables debuging of mail session
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="from" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            sets mail.from attribute
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="outbound-socket-binding-ref" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional"/>
+        <xs:attribute name="password" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="property-type">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="custom-server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="property-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding-ref" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional"/>
+        <xs:attribute name="password" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-mail_4_0.xsd b/wildfly/docs/schema/wildfly-mail_4_0.xsd
new file mode 100644
index 0000000..5711e5f
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-mail_4_0.xsd
@@ -0,0 +1,154 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:mail:4.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:mail:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <!-- The mail subsystem root element -->
+    <xs:element name="subsystem" type="mail-subsystemType"/>
+    <xs:complexType name="mail-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the mail subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="1" maxOccurs="unbounded">
+            <xs:element name="mail-session" type="mail-sessionType"/>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="mail-sessionType">
+        <xs:sequence>
+            <xs:element name="smtp-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="pop3-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="imap-server" type="server-type" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="custom-server" type="custom-server-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="jndi-name" use="required" type="xs:string"/>
+        <xs:attribute name="debug" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                       enables debuging of mail session
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="from" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                            sets mail.from attribute
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="outbound-socket-binding-ref" use="required" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional"/>
+        <xs:attribute name="password" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="property-type">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="value" type="xs:string"/>
+    </xs:complexType>
+
+
+    <xs:complexType name="custom-server-type" mixed="true">
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="property" type="property-type" maxOccurs="unbounded" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding-ref" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    Reference to the outbound-socket-binding element in the socket-binding-group that should
+                    be used for configuring the client socket used to communicate with the mail server.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="ssl" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of ssl for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tls" use="optional" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    enables use of tls for this server configuration
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="username" type="xs:string" use="optional"/>
+        <xs:attribute name="password" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq-deployment_1_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq-deployment_1_0.xsd
new file mode 100644
index 0000000..c6bd793
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq-deployment_1_0.xsd
@@ -0,0 +1,105 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:messaging-activemq-deployment:1.0"
+           targetNamespace="urn:jboss:messaging-activemq-deployment:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="messaging-deployment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of a messaging deployment
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType"/>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of entries for a ActiveMQ server.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element maxOccurs="1" minOccurs="0" name="jms-destinations">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="jms-queue" maxOccurs="unbounded" minOccurs="0" type="jmsQueueType"/>
+                        <xs:element name="jms-topic" maxOccurs="unbounded" minOccurs="0" type="jmsTopicType"/>
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="optional" default="default">
+            <xs:annotation>
+                <xs:documentation>
+                    The name to use for this ActiveMQ Server. Must correspond to a ActiveMQ server installed in
+                    the main configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="entryType">
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+    <xs:complexType name="jmsQueueType">
+        <xs:sequence>
+            <xs:element name="entry" type="entryType" maxOccurs="unbounded" minOccurs="1"/>
+            <xs:element name="selector" maxOccurs="1" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="string" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="durable" type="xs:boolean" maxOccurs="1" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="jmsTopicType">
+        <xs:sequence>
+            <xs:element name="entry" type="entryType" maxOccurs="unbounded" minOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="transactionType">
+        <xs:attribute name="mode" use="required" type="modeType"/>
+    </xs:complexType>
+
+    <xs:simpleType name="modeType">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="xa">
+                <xs:annotation>
+                    <xs:documentation></xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="local">
+                <xs:annotation>
+                    <xs:documentation></xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="none">
+                <xs:annotation>
+                    <xs:documentation></xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_10_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_10_0.xsd
new file mode 100644
index 0000000..a448c1d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_10_0.xsd
@@ -0,0 +1,979 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:10.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:10.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="9.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_11_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_11_0.xsd
new file mode 100644
index 0000000..df91957
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_11_0.xsd
@@ -0,0 +1,1013 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:11.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:11.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="11.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_12_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_12_0.xsd
new file mode 100644
index 0000000..438e0fa
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_12_0.xsd
@@ -0,0 +1,1025 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:12.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:12.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="12.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:element maxOccurs="1" minOccurs="0" name="network-isolation">
+                <xs:complexType>
+                    <xs:attribute name="network-check-nic" type="xs:string" />
+                    <xs:attribute name="network-check-period" type="xs:long" />
+                    <xs:attribute name="network-check-timeout" type="xs:long" />
+                    <xs:attribute name="network-check-list" type="xs:string" />
+                    <xs:attribute name="network-check-url-list" type="xs:string" />
+                    <xs:attribute name="network-check-ping-command" type="xs:string" />
+                    <xs:attribute name="network-check-ping6-command" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_13_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_13_0.xsd
new file mode 100644
index 0000000..9912fff
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_13_0.xsd
@@ -0,0 +1,1044 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:13.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:13.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="13.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                    <xs:attribute name="max-attic-files" type="xs:int" default="10"/>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:element maxOccurs="1" minOccurs="0" name="network-isolation">
+                <xs:complexType>
+                    <xs:attribute name="network-check-nic" type="xs:string" />
+                    <xs:attribute name="network-check-period" type="xs:long" />
+                    <xs:attribute name="network-check-timeout" type="xs:long" />
+                    <xs:attribute name="network-check-list" type="xs:string" />
+                    <xs:attribute name="network-check-url-list" type="xs:string" />
+                    <xs:attribute name="network-check-ping-command" type="xs:string" />
+                    <xs:attribute name="network-check-ping6-command" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element maxOccurs="1" minOccurs="0" name="critical-analyzer">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                    <xs:attribute name="check-period" type="xs:long" default="0"/>
+                    <xs:attribute name="timeout" type="xs:long" default="120000"/>
+                    <xs:attribute name="policy" default="LOG">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="HALT"/>
+                                <xs:enumeration value="LOG"/>
+                                <xs:enumeration value="SHUTDOWN"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long"  use="optional" default="30000" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_13_1.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_13_1.xsd
new file mode 100644
index 0000000..392dca6
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_13_1.xsd
@@ -0,0 +1,1047 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:13.1"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:13.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="13.1">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                    <xs:attribute name="max-attic-files" type="xs:int" default="10"/>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:element maxOccurs="1" minOccurs="0" name="network-isolation">
+                <xs:complexType>
+                    <xs:attribute name="network-check-nic" type="xs:string" />
+                    <xs:attribute name="network-check-period" type="xs:long" />
+                    <xs:attribute name="network-check-timeout" type="xs:long" />
+                    <xs:attribute name="network-check-list" type="xs:string" />
+                    <xs:attribute name="network-check-url-list" type="xs:string" />
+                    <xs:attribute name="network-check-ping-command" type="xs:string" />
+                    <xs:attribute name="network-check-ping6-command" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element maxOccurs="1" minOccurs="0" name="critical-analyzer">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                    <xs:attribute name="check-period" type="xs:long" default="0"/>
+                    <xs:attribute name="timeout" type="xs:long" default="120000"/>
+                    <xs:attribute name="policy" default="LOG">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="HALT"/>
+                                <xs:enumeration value="LOG"/>
+                                <xs:enumeration value="SHUTDOWN"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long"  use="optional" default="30000" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="address-queue-scan-period" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_14_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_14_0.xsd
new file mode 100644
index 0000000..481724e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_14_0.xsd
@@ -0,0 +1,1056 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:14.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:14.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="14.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-allow-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-block-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                    <xs:attribute name="max-attic-files" type="xs:int" default="10"/>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:element maxOccurs="1" minOccurs="0" name="network-isolation">
+                <xs:complexType>
+                    <xs:attribute name="network-check-nic" type="xs:string" />
+                    <xs:attribute name="network-check-period" type="xs:long" />
+                    <xs:attribute name="network-check-timeout" type="xs:long" />
+                    <xs:attribute name="network-check-list" type="xs:string" />
+                    <xs:attribute name="network-check-url-list" type="xs:string" />
+                    <xs:attribute name="network-check-ping-command" type="xs:string" />
+                    <xs:attribute name="network-check-ping6-command" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element maxOccurs="1" minOccurs="0" name="critical-analyzer">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                    <xs:attribute name="check-period" type="xs:long" default="0"/>
+                    <xs:attribute name="timeout" type="xs:long" default="120000"/>
+                    <xs:attribute name="policy" default="LOG">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="HALT"/>
+                                <xs:enumeration value="LOG"/>
+                                <xs:enumeration value="SHUTDOWN"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-primary" minOccurs="0" maxOccurs="1" type="replication-primaryType" />
+                <xs:element name="replication-secondary" minOccurs="0" maxOccurs="1" type="replication-secondaryType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="primary" minOccurs="0" maxOccurs="1" type="replication-primaryType" />
+                            <xs:element name="secondary" minOccurs="0" maxOccurs="1" type="replication-secondaryType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-primary" minOccurs="0" maxOccurs="1" type="shared-store-primaryType" />
+                <xs:element name="shared-store-secondary" minOccurs="0" maxOccurs="1"  type="shared-store-secondaryType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="primary" minOccurs="0" maxOccurs="1" type="shared-store-primaryType" />
+                            <xs:element name="secondary" minOccurs="0" maxOccurs="1" type="shared-store-secondaryType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-created-queues" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long"  use="optional" default="30000" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="STRIP"/>
+                                <xs:enumeration value="PASS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="address-queue-scan-period" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-primaryType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-secondaryType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-primaryType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-secondaryType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-allow-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-block-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_15_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_15_0.xsd
new file mode 100644
index 0000000..ec07f36
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_15_0.xsd
@@ -0,0 +1,1061 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:15.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:15.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="15.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-allow-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-block-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                    <xs:attribute name="max-attic-files" type="xs:int" default="10"/>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:element maxOccurs="1" minOccurs="0" name="network-isolation">
+                <xs:complexType>
+                    <xs:attribute name="network-check-nic" type="xs:string" />
+                    <xs:attribute name="network-check-period" type="xs:long" />
+                    <xs:attribute name="network-check-timeout" type="xs:long" />
+                    <xs:attribute name="network-check-list" type="xs:string" />
+                    <xs:attribute name="network-check-url-list" type="xs:string" />
+                    <xs:attribute name="network-check-ping-command" type="xs:string" />
+                    <xs:attribute name="network-check-ping6-command" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element maxOccurs="1" minOccurs="0" name="critical-analyzer">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                    <xs:attribute name="check-period" type="xs:long" default="0"/>
+                    <xs:attribute name="timeout" type="xs:long" default="120000"/>
+                    <xs:attribute name="policy" default="LOG">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="HALT"/>
+                                <xs:enumeration value="LOG"/>
+                                <xs:enumeration value="SHUTDOWN"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-primary" minOccurs="0" maxOccurs="1" type="replication-primaryType" />
+                <xs:element name="replication-secondary" minOccurs="0" maxOccurs="1" type="replication-secondaryType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="primary" minOccurs="0" maxOccurs="1" type="replication-primaryType" />
+                            <xs:element name="secondary" minOccurs="0" maxOccurs="1" type="replication-secondaryType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-primary" minOccurs="0" maxOccurs="1" type="shared-store-primaryType" />
+                <xs:element name="shared-store-secondary" minOccurs="0" maxOccurs="1"  type="shared-store-secondaryType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="primary" minOccurs="0" maxOccurs="1" type="shared-store-primaryType" />
+                            <xs:element name="secondary" minOccurs="0" maxOccurs="1" type="shared-store-secondaryType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-created-queues" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                    <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                    <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long"  use="optional" default="30000" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="STRIP"/>
+                                <xs:enumeration value="PASS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="address-queue-scan-period" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-primaryType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-secondaryType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-primaryType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-secondaryType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-allow-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-block-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+        <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_16_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_16_0.xsd
new file mode 100644
index 0000000..a0b40e7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_16_0.xsd
@@ -0,0 +1,1062 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:16.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           targetNamespace="urn:jboss:domain:messaging-activemq:16.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="16.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+                        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                        <xs:attribute name="client-id" type="xs:string" use="optional" />
+                        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                        <xs:attribute name="group-id" type="xs:string" use="optional" />
+                        <xs:attribute name="deserialization-allow-list" type="stringList" use="optional" />
+                        <xs:attribute name="deserialization-block-list" type="stringList" use="optional" />
+                        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                    <xs:attribute name="max-attic-files" type="xs:int" default="10"/>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:element maxOccurs="1" minOccurs="0" name="network-isolation">
+                <xs:complexType>
+                    <xs:attribute name="network-check-nic" type="xs:string" />
+                    <xs:attribute name="network-check-period" type="xs:long" />
+                    <xs:attribute name="network-check-timeout" type="xs:long" />
+                    <xs:attribute name="network-check-list" type="xs:string" />
+                    <xs:attribute name="network-check-url-list" type="xs:string" />
+                    <xs:attribute name="network-check-ping-command" type="xs:string" />
+                    <xs:attribute name="network-check-ping6-command" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element maxOccurs="1" minOccurs="0" name="critical-analyzer">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                    <xs:attribute name="check-period" type="xs:long" default="0"/>
+                    <xs:attribute name="timeout" type="xs:long" default="120000"/>
+                    <xs:attribute name="policy" default="LOG">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="HALT"/>
+                                <xs:enumeration value="LOG"/>
+                                <xs:enumeration value="SHUTDOWN"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-primary" minOccurs="0" maxOccurs="1" type="replication-primaryType" />
+                <xs:element name="replication-secondary" minOccurs="0" maxOccurs="1" type="replication-secondaryType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="primary" minOccurs="0" maxOccurs="1" type="replication-primaryType" />
+                            <xs:element name="secondary" minOccurs="0" maxOccurs="1" type="replication-secondaryType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-primary" minOccurs="0" maxOccurs="1" type="shared-store-primaryType" />
+                <xs:element name="shared-store-secondary" minOccurs="0" maxOccurs="1"  type="shared-store-secondaryType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="primary" minOccurs="0" maxOccurs="1" type="shared-store-primaryType" />
+                            <xs:element name="secondary" minOccurs="0" maxOccurs="1" type="shared-store-secondaryType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-read-page-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-created-queues" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                    <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                    <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long"  use="optional" default="30000" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="STRIP"/>
+                                <xs:enumeration value="PASS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="address-queue-scan-period" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-primaryType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-secondaryType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-primaryType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-secondaryType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-allow-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-block-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+        <xs:attribute name="ssl-context" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_1_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_1_0.xsd
new file mode 100644
index 0000000..f5a735e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_1_0.xsd
@@ -0,0 +1,775 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:1.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean" use="optional" />
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="endpoint" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="refresh-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-wait-timeout" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="required" />
+        <xs:attribute name="max-retries" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-size" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-time" type="xs:long" use="required" />
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_2_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_2_0.xsd
new file mode 100644
index 0000000..25fbe43
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_2_0.xsd
@@ -0,0 +1,885 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:2.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean" use="optional" />
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="endpoint" type="xs:string" use="required" />
+                    <xs:attribute name="server-name" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="refresh-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-wait-timeout" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="required" />
+        <xs:attribute name="max-retries" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-size" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-time" type="xs:long" use="required" />
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_3_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_3_0.xsd
new file mode 100644
index 0000000..1ac412a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_3_0.xsd
@@ -0,0 +1,895 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:3.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean" use="optional" />
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="endpoint" type="xs:string" use="required" />
+                    <xs:attribute name="server-name" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="refresh-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-wait-timeout" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="required" />
+        <xs:attribute name="max-retries" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-size" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-time" type="xs:long" use="required" />
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_4_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_4_0.xsd
new file mode 100644
index 0000000..c4b371b
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_4_0.xsd
@@ -0,0 +1,989 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:4.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="4.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="discovery-group" type="discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded" type="discovery-groupType" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="required" />
+        <xs:attribute name="max-retries" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-size" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-time" type="xs:long" use="required" />
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_5_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_5_0.xsd
new file mode 100644
index 0000000..940fda2
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_5_0.xsd
@@ -0,0 +1,992 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:5.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="5.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="discovery-group" type="discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded" type="discovery-groupType" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="required">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="required" />
+        <xs:attribute name="max-retries" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-size" type="xs:int" use="required" />
+        <xs:attribute name="max-batch-time" type="xs:long" use="required" />
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_6_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_6_0.xsd
new file mode 100644
index 0000000..e3f9cd7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_6_0.xsd
@@ -0,0 +1,1000 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:6.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="discovery-group" type="discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded" type="discovery-groupType" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <!-- Credential Reference Types -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_7_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_7_0.xsd
new file mode 100644
index 0000000..20f8b65
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_7_0.xsd
@@ -0,0 +1,964 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:7.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:7.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="7.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="discovery-group" type="discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded" type="discovery-groupType" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_8_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_8_0.xsd
new file mode 100644
index 0000000..7b1d737
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_8_0.xsd
@@ -0,0 +1,964 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:8.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:8.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="8.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="discovery-group" type="discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="socket-binding" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="discovery-group" minOccurs="0" maxOccurs="unbounded" type="discovery-groupType" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-messaging-activemq_9_0.xsd b/wildfly/docs/schema/wildfly-messaging-activemq_9_0.xsd
new file mode 100644
index 0000000..920a4a0
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-messaging-activemq_9_0.xsd
@@ -0,0 +1,979 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:messaging-activemq:9.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           targetNamespace="urn:jboss:domain:messaging-activemq:9.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="9.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element maxOccurs="1" minOccurs="0" name="global-client">
+                    <xs:complexType>
+                        <xs:attribute name="thread-pool-max-size" type="xs:int" />
+                        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="http-connector" type="http-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="remote-connector" type="remote-connectorType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+                <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+                <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+                <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                        <xs:attribute name="factory-type" type="connectionFactoryType" use="optional"/>
+                        <xs:attribute name="discovery-group" type="xs:string" use="optional"/>
+                        <xs:attribute name="connectors" type="xs:string" use="optional"/>
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                    <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                    <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                    <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Credential to be used by the configuration.
+                                    </xs:documentation>
+                                </xs:annotation>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+
+                        <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                        <xs:attribute name="transaction" use="optional">
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="xa"/>
+                                    <xs:enumeration value="local"/>
+                                    <xs:enumeration value="none"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="user" type="xs:string" use="optional" />
+                        <xs:attribute name="password" type="xs:string" use="optional" />
+                        <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                        <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                        <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                        <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                        <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                        <xs:attribute name="enable-amq1-prefix" type="xs:boolean" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-queue" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="external-jms-topic" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                        <xs:attribute name="entries" type="stringList" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="server" type="serverType" />
+                <xs:element maxOccurs="unbounded" minOccurs="0" name="jms-bridge" type="jms-bridgeType" />
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="serverType">
+        <xs:sequence>
+
+            <xs:element name="incoming-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="outgoing-interceptors" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="class" type="classType" minOccurs="1" maxOccurs="unbounded" />
+                    </xs:sequence>
+                </xs:complexType>
+            </xs:element>
+
+            <!-- server attribute groups -->
+            <xs:element name="security" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="domain" type="xs:string" />
+                    <xs:attribute name="elytron-domain" type="xs:string"/>
+                    <xs:attribute name="invalidation-interval" type="xs:long" />
+                    <xs:attribute name="override-in-vm-security" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="cluster" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="user" type="xs:string" />
+                    <xs:attribute name="password" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="management" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="address" type="xs:string" />
+                    <xs:attribute name="notification-address" type="xs:string" />
+                    <xs:attribute name="jmx-enabled" type="xs:boolean" />
+                    <xs:attribute name="jmx-domain" type="xs:string" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="journal" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="type">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="ASYNCIO"/>
+                                <xs:enumeration value="NIO"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="buffer-timeout" type="xs:long" />
+                    <xs:attribute name="buffer-size" type="xs:long" />
+                    <xs:attribute name="sync-transactional" type="xs:boolean" />
+                    <xs:attribute name="sync-non-transactional" type="xs:boolean" />
+                    <xs:attribute name="log-write-rate" type="xs:boolean" />
+                    <xs:attribute name="file-size" type="xs:long" />
+                    <xs:attribute name="min-files" type="xs:int" />
+                    <xs:attribute name="pool-files" type="xs:int" />
+                    <xs:attribute name="file-open-timeout" type="xs:int" />
+                    <xs:attribute name="compact-percentage" type="xs:int" />
+                    <xs:attribute name="compact-min-files" type="xs:int" />
+                    <xs:attribute name="max-io" type="xs:int" />
+                    <xs:attribute name="create-bindings-dir" type="xs:boolean" />
+                    <xs:attribute name="create-journal-dir" type="xs:boolean" />
+                    <xs:attribute name="datasource" type="xs:string" />
+                    <xs:attribute name="database" type="xs:string" />
+                    <xs:attribute name="messages-table" type="xs:string" />
+                    <xs:attribute name="bindings-table" type="xs:string" />
+                    <xs:attribute name="jms-bindings-table" type="xs:string" />
+                    <xs:attribute name="large-messages-table" type="xs:string" />
+                    <xs:attribute name="node-manager-store-table" type="xs:string" />
+                    <xs:attribute name="page-store-table" type="xs:string" />
+                    <xs:attribute name="jdbc-lock-expiration" type="xs:int" />
+                    <xs:attribute name="jdbc-lock-renew-period" type="xs:int" />
+                    <xs:attribute name="jdbc-network-timeout" type="xs:int" />
+                    <xs:attribute name="global-max-memory-size" type="xs:long" />
+                    <xs:attribute name="global-max-disk-usage" type="xs:int" />
+                    <xs:attribute name="disk-scan-period" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="statistics" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="enabled" type="xs:boolean" />
+                    <xs:attribute name="message-counter-sample-period" type="xs:long" />
+                    <xs:attribute name="message-counter-max-day-history" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="transaction" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="timeout" type="xs:long" />
+                    <xs:attribute name="scan-period" type="xs:long" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="message-expiry" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="scan-period" type="xs:long" />
+                    <xs:attribute name="thread-priority" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="debug" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:attribute name="perf-blast-pages" type="xs:int" />
+                    <xs:attribute name="run-sync-speed-test" type="xs:boolean" />
+                    <xs:attribute name="server-dump-interval" type="xs:long" />
+                    <xs:attribute name="memory-measure-interval" type="xs:long" />
+                    <xs:attribute name="memory-warning-threshold" type="xs:int" />
+                </xs:complexType>
+            </xs:element>
+            <!-- end of server attribute groups -->
+
+            <xs:choice>
+                <xs:element name="live-only" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+                        </xs:sequence>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="replication-master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                <xs:element name="replication-slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                <xs:element name="replication-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="replication-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="replication-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                        <xs:attribute name="excluded-connectors" type="xs:string" use="optional" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="shared-store-master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                <xs:element name="shared-store-slave" minOccurs="0" maxOccurs="1"  type="shared-store-slaveType" />
+                <xs:element name="shared-store-colocated" minOccurs="0" maxOccurs="1">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="master" minOccurs="0" maxOccurs="1" type="shared-store-masterType" />
+                            <xs:element name="slave" minOccurs="0" maxOccurs="1" type="shared-store-slaveType" />
+                        </xs:sequence>
+
+                        <xs:attributeGroup ref="ha-policy-colocated-attributeGroup" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:choice>
+
+            <xs:element name="bindings-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="journal-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="large-messages-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+            <xs:element name="paging-directory" maxOccurs="1" minOccurs="0" type="directoryType" />
+
+            <xs:element name="queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="address" type="xs:string" use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:boolean" use="optional" />
+                    <xs:attribute name="routing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="MULTICAST"/>
+                                <xs:enumeration value="ANYCAST"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="security-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="role" minOccurs="0" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="name" type="xs:string" use="required" />
+
+                                <xs:attribute name="send" type="xs:string" use="optional" />
+                                <xs:attribute name="consume" type="xs:string" use="optional" />
+                                <xs:attribute name="create-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="create-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="delete-non-durable-queue" type="xs:string" use="optional" />
+                                <xs:attribute name="manage" type="xs:string" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="address-setting" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+
+                    <xs:attribute name="dead-letter-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-address" type="xs:string" use="optional" />
+                    <xs:attribute name="expiry-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="redelivery-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-delivery-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="max-redelivery-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="max-size-bytes" type="xs:long" use="optional" />
+                    <xs:attribute name="page-size-bytes" type="xs:int" use="optional" />
+                    <xs:attribute name="page-max-cache-size" type="xs:int" use="optional" />
+                    <xs:attribute name="address-full-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="DROP"/>
+                                <xs:enumeration value="PAGE"/>
+                                <xs:enumeration value="BLOCK"/>
+                                <xs:enumeration value="FAIL"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="message-counter-history-day-limit" type="xs:int" use="optional" />
+                    <xs:attribute name="last-value-queue" type="xs:boolean" use="optional" />
+                    <xs:attribute name="redistribution-delay" type="xs:long" use="optional" />
+                    <xs:attribute name="send-to-dla-on-no-route" type="xs:boolean" use="optional" />
+                    <xs:attribute name="slow-consumer-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="slow-consumer-policy" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="KILL"/>
+                                <xs:enumeration value="NOTIFY"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="slow-consumer-threshold" type="xs:long" use="optional" />
+                    <xs:attribute name="auto-create-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-create-queues and auto-create-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-delete-jms-queues" type="xs:boolean">
+                        <xs:annotation>
+                            <xs:documentation>
+                                Deprecated. Use auto-delete-queues and auto-delete-addresses instead.
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="auto-create-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-queues" type="xs:boolean" />
+                    <xs:attribute name="auto-create-addresses" type="xs:boolean" />
+                    <xs:attribute name="auto-delete-addresses" type="xs:boolean" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="http-connector" minOccurs="0" maxOccurs="unbounded" type="http-connectorType" />
+
+            <xs:element name="remote-connector" minOccurs="0" maxOccurs="unbounded" type="remote-connectorType" />
+
+            <xs:element name="in-vm-connector" minOccurs="0" maxOccurs="unbounded" type="in-vm-connectorType" />
+
+            <xs:element name="connector" minOccurs="0" maxOccurs="unbounded" type="connectorType" />
+
+            <xs:element name="http-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="upgrade-legacy" type="xs:boolean" use="optional" />
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="http-listener" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="remote-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="in-vm-acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="server-id" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="acceptor" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+
+            <xs:element name="jgroups-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="jgroups-stack" type="xs:string" use="optional">
+                        <xs:annotation>
+                            <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+                        </xs:annotation>
+                    </xs:attribute>
+                    <xs:attribute name="jgroups-channel" type="xs:string" use="optional" />
+                    <xs:attribute name="jgroups-cluster" type="xs:string" use="optional" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="socket-broadcast-group" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="socket-binding" type="xs:string" use="required" />
+                    <xs:attribute name="broadcast-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="jgroups-discovery-group" type="jgroups-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="socket-discovery-group" type="socket-discovery-groupType" minOccurs="0" maxOccurs="unbounded" />
+            <xs:element name="cluster-connection" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="connector-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="message-load-balancing-type" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="OFF"/>
+                                <xs:enumeration value="STRICT"/>
+                                <xs:enumeration value="ON_DEMAND"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="max-hops" type="xs:int" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="notification-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList" use="optional" />
+                    <xs:attribute name="allow-direct-connections-only" type="xs:boolean" use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="grouping-handler" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="type" use="required">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="LOCAL"/>
+                                <xs:enumeration value="REMOTE"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="address" type="xs:string" use="required" />
+
+                    <xs:attribute name="timeout" type="xs:int" use="optional" />
+                    <xs:attribute name="group-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="reaper-period" type="xs:long" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="divert" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="address" type="xs:string" use="required" />
+                    <xs:attribute name="forwarding-address" type="xs:string" use="required" />
+
+                    <xs:attribute name="routing-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string" use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="exclusive" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="bridge" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="queue-name" type="xs:string" use="required" />
+
+                    <xs:attribute name="forwarding-address" type="xs:string" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="filter" type="xs:string"  use="optional" />
+                    <xs:attribute name="transformer-class-name" type="xs:string"  use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="check-period" type="xs:long"  use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double"  use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long"  use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int"  use="optional" />
+                    <xs:attribute name="reconnect-attempts-on-same-node" type="xs:int"  use="optional" />
+                    <xs:attribute name="use-duplicate-detection" type="xs:boolean"  use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int"  use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="user" type="xs:string"  use="optional" />
+                    <xs:attribute name="password" type="xs:string"  use="optional" />
+                    <xs:attribute name="static-connectors" type="stringList"  use="optional" />
+                    <xs:attribute name="discovery-group" type="xs:string"  use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connector-service" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="factory-class" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-queue" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="selector" type="xs:string" use="optional" />
+                    <xs:attribute name="durable" type="xs:string" use="optional" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="jms-topic" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+                    <xs:attribute name="legacy-entries" type="stringList" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="legacy-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+                    <xs:attribute name="connectors" type="stringList" use="optional" />
+
+                    <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+                    <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+                    <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+                    <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+                    <xs:attribute name="client-id" type="xs:string" use="optional" />
+                    <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+                    <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+                    <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+                    <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="factory-type" type="connectionFactoryType" use="optional" />
+                    <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+                    <xs:attribute name="group-id" type="xs:string" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+                    <xs:attribute name="ha" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+                    <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+                    <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+                    <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+                    <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+                    <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+                    <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+                    <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+
+            <xs:element name="pooled-connection-factory" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="inbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="use-jndi" type="xs:boolean" use="optional" />
+                                <xs:attribute name="jndi-params" type="xs:string" use="optional" />
+                                <xs:attribute name="rebalance-connections" type="xs:boolean" use="optional" />
+                                <xs:attribute name="use-local-tx" type="xs:boolean" use="optional" />
+                                <xs:attribute name="setup-attempts" type="xs:int" use="optional" />
+                                <xs:attribute name="setup-interval" type="xs:long" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="outbound-config" minOccurs="0" maxOccurs="1">
+                            <xs:complexType>
+                                <xs:attribute name="allow-local-transactions" type="xs:boolean" use="optional" />
+                            </xs:complexType>
+                        </xs:element>
+                        <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="entries" type="stringList" use="required" />
+
+                    <xs:attributeGroup ref="common-connection-factory-attributeGroup" />
+                    <xs:attribute name="transaction" use="optional">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:string">
+                                <xs:enumeration value="xa"/>
+                                <xs:enumeration value="local"/>
+                                <xs:enumeration value="none"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                    <xs:attribute name="min-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="use-auto-recovery" type="xs:boolean" use="optional" />
+                    <xs:attribute name="max-pool-size" type="xs:int" use="optional" />
+                    <xs:attribute name="managed-connection-pool" type="xs:string" use="optional" />
+                    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional" />
+                    <xs:attribute name="initial-connect-attempts" type="xs:int" use="optional" />
+                    <xs:attribute name="statistics-enabled" type="xs:boolean" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+
+        <xs:attribute name="persistence-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-id-cache" type="xs:boolean" use="optional" />
+        <xs:attribute name="persist-delivery-count-before-delivery" type="xs:boolean" use="optional" />
+        <xs:attribute name="id-cache-size" type="xs:int" use="optional" />
+        <xs:attribute name="page-max-concurrent-io" type="xs:int" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="wild-card-routing-enabled" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-ttl-override" type="xs:long" use="optional" />
+        <xs:attribute name="async-connection-execution-enabled" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:restriction base="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ A list of string separated by whitespaces. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="scale-downType">
+        <xs:attribute name="enabled" type="xs:boolean" use="required" />
+        <xs:attribute name="cluster-name" type="xs:string" use="required" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-masterType">
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="check-for-live-server" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="replication-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="cluster-name" type="xs:string" use="optional" />
+        <xs:attribute name="group-name" type="xs:string" use="optional" />
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="initial-replication-sync-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="max-saved-replicated-journal-size" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-masterType">
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="shared-store-slaveType">
+        <xs:sequence>
+            <xs:element name="scale-down" minOccurs="0" maxOccurs="1" type="scale-downType" />
+        </xs:sequence>
+
+        <xs:attribute name="allow-failback" type="xs:boolean" use="optional" />
+        <xs:attribute name="failover-on-server-shutdown" type="xs:boolean" use="optional" />
+        <xs:attribute name="restart-backup" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="ha-policy-colocated-attributeGroup">
+        <xs:attribute name="request-backup" type="xs:boolean" use="optional" />
+        <xs:attribute name="backup-request-retries" type="xs:int" use="optional" />
+        <xs:attribute name="backup-request-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="max-backups" type="xs:int" use="optional" />
+        <xs:attribute name="backup-port-offset" type="xs:int" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:complexType name="directoryType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A directory location configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem pathname where the directory should be
+                located.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" />
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="value" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:attributeGroup name="common-connection-factory-attributeGroup">
+        <xs:attribute name="discovery-group" type="xs:string" use="optional" />
+        <xs:attribute name="connectors" type="xs:string" use="optional" />
+        <xs:attribute name="ha" type="xs:boolean" use="optional" />
+        <xs:attribute name="client-failure-check-period" type="xs:long" use="optional" />
+        <xs:attribute name="connection-ttl" type="xs:long" use="optional" />
+        <xs:attribute name="call-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="call-failover-timeout" type="xs:long" use="optional" />
+        <xs:attribute name="consumer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="consumer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="confirmation-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="producer-max-rate" type="xs:int" use="optional" />
+        <xs:attribute name="protocol-manager-factory" type="xs:string" use="optional" />
+        <xs:attribute name="compress-large-messages" type="xs:boolean" use="optional" />
+        <xs:attribute name="cache-large-message-client" type="xs:boolean" use="optional" />
+        <xs:attribute name="min-large-message-size" type="xs:int" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="dups-ok-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="transaction-batch-size" type="xs:int" use="optional" />
+        <xs:attribute name="block-on-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-non-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="block-on-durable-send" type="xs:boolean" use="optional" />
+        <xs:attribute name="auto-group" type="xs:boolean" use="optional" />
+        <xs:attribute name="pre-acknowledge" type="xs:boolean" use="optional" />
+        <xs:attribute name="retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="retry-interval-multiplier" type="xs:double" use="optional" />
+        <xs:attribute name="max-retry-interval" type="xs:long" use="optional" />
+        <xs:attribute name="reconnect-attempts" type="xs:int" use="optional" />
+        <xs:attribute name="failover-on-initial-connection" type="xs:boolean" use="optional" />
+        <xs:attribute name="connection-load-balancing-policy-class-name" type="xs:string" use="optional" />
+        <xs:attribute name="use-global-pools" type="xs:boolean" use="optional" />
+        <xs:attribute name="scheduled-thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="thread-pool-max-size" type="xs:int" use="optional" />
+        <xs:attribute name="group-id" type="xs:string" use="optional" />
+        <xs:attribute name="deserialization-white-list" type="stringList" use="optional" />
+        <xs:attribute name="deserialization-black-list" type="stringList" use="optional" />
+        <xs:attribute name="initial-message-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="use-topology-for-load-balancing" type="xs:boolean" use="optional" />
+    </xs:attributeGroup>
+
+    <xs:simpleType name="connectionFactoryType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="GENERIC"/>
+            <xs:enumeration value="TOPIC"/>
+            <xs:enumeration value="QUEUE"/>
+            <xs:enumeration value="XA_GENERIC"/>
+            <xs:enumeration value="XA_QUEUE"/>
+            <xs:enumeration value="XA_TOPIC"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="socket-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string"  use="required" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="jgroups-discovery-groupType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="jgroups-stack" type="xs:string" >
+            <xs:annotation>
+                <xs:documentation>Deprecated. Use jgroups-channel instead.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jgroups-channel" type="xs:string" />
+        <xs:attribute name="jgroups-cluster" type="xs:string" />
+        <xs:attribute name="refresh-timeout" type="xs:long" />
+        <xs:attribute name="initial-wait-timeout" type="xs:long" />
+    </xs:complexType>
+
+    <xs:complexType name="remote-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="http-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="socket-binding" type="xs:string" use="required" />
+        <xs:attribute name="endpoint" type="xs:string" use="required" />
+        <xs:attribute name="server-name" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="in-vm-connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="server-id" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="connectorType">
+        <xs:sequence>
+            <xs:element name="param" minOccurs="0" maxOccurs="unbounded" type="paramType" />
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="factory-class" type="xs:string" use="required" />
+    </xs:complexType>
+
+    <xs:complexType name="jms-bridgeType">
+        <xs:sequence>
+            <xs:element name="source" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="source-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="source-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the source destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="target" minOccurs="0" maxOccurs="1">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="target-context" type="contextType" minOccurs="0" maxOccurs="1" />
+                        <xs:element name="target-credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0" maxOccurs="1">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    Credential to be used by the configuration to connect to the target destination.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="connection-factory" type="xs:string" use="required" />
+                    <xs:attribute name="destination" type="xs:string" use="required" />
+                    <xs:attribute name="user" type="xs:string" use="optional" />
+                    <xs:attribute name="password" type="xs:string" use="optional" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+
+        <xs:attribute name="quality-of-service" use="optional" default="AT_MOST_ONCE">
+            <xs:simpleType>
+                <xs:restriction base="xs:string">
+                    <xs:enumeration value="AT_MOST_ONCE"/>
+                    <xs:enumeration value="DUPLICATES_OK"/>
+                    <xs:enumeration value="ONCE_AND_ONLY_ONCE"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:attribute>
+        <xs:attribute name="failure-retry-interval" type="xs:long" use="optional" default="5000" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="-1"/>
+        <xs:attribute name="max-batch-size" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="max-batch-time" type="xs:long" use="optional" default="-1"/>
+        <xs:attribute name="selector" type="xs:string" use="optional" />
+        <xs:attribute name="subscription-name" type="xs:string" use="optional" />
+        <xs:attribute name="client-id" type="xs:string" use="optional" />
+        <xs:attribute name="add-messageID-in-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="contextType">
+        <xs:sequence>
+            <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required" />
+                    <xs:attribute name="value" type="xs:string" use="required" />
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-metrics_1_0.xsd b/wildfly/docs/schema/wildfly-metrics_1_0.xsd
new file mode 100644
index 0000000..333e3c1
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-metrics_1_0.xsd
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:metrics:1.0"
+           xmlns="urn:wildfly:metrics:1.0"
+           elementFormDefault="qualified"
+           version="1.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true">
+                <xs:annotation>
+                    <xs:documentation>
+                        True if authentication is required to access the HTTP endpoint on the HTTP management interface.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="exposed-subsystems" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        The names of the subsystems (separated by spaces) that exposes their metrics in the vendor scope (or '*' to expose any subsystem metrics).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="prefix" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        Prefix prepended to the name of the WildFly metrics exposed by the HTTP endpoints.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-micrometer_1_0.xsd b/wildfly/docs/schema/wildfly-micrometer_1_0.xsd
new file mode 100644
index 0000000..ddacb6d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-micrometer_1_0.xsd
@@ -0,0 +1,44 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:micrometer:1.0"
+           xmlns="urn:wildfly:micrometer:1.0"
+           elementFormDefault="qualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="otlp-registry" minOccurs="1">
+                    <xs:complexType>
+                        <xs:attribute name="endpoint" type="xs:string">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The URL of the OTLP collector to which metrics will be published.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="step" type="xs:int" default="60">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The step size (reporting frequency) to use in seconds.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+            <xs:attribute name="exposed-subsystems" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        The names of the WildFly subsystems that exposes their metrics (or '*' to expose any subsystem
+                        metrics).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-micrometer_1_1.xsd b/wildfly/docs/schema/wildfly-micrometer_1_1.xsd
new file mode 100644
index 0000000..dc4d388
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-micrometer_1_1.xsd
@@ -0,0 +1,44 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:micrometer:1.1"
+           xmlns="urn:wildfly:micrometer:1.1"
+           elementFormDefault="qualified"
+           version="1.1">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="otlp-registry" minOccurs="0">
+                    <xs:complexType>
+                        <xs:attribute name="endpoint" type="xs:string">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The URL of the OTLP collector to which metrics will be published.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute name="step" type="xs:int" default="60">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The step size (reporting frequency) to use in seconds.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+            <xs:attribute name="exposed-subsystems" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        The names of the WildFly subsystems that exposes their metrics (or '*' to expose any subsystem
+                        metrics).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-config-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-config-smallrye_1_0.xsd
new file mode 100644
index 0000000..8ac412b
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-config-smallrye_1_0.xsd
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:microprofile-config-smallrye:1.0"
+            xmlns="urn:wildfly:microprofile-config-smallrye:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="config-source" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:choice>
+                            <xs:sequence>
+                                <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required" />
+                                        <xs:attribute name="value" type="xs:string" use="required" />
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                            <xs:element name="class" type="classType" minOccurs="0" maxOccurs="1" />
+                            <xs:element name="dir" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="path" type="xs:string" use="required" />
+                                    <xs:attribute name="relative-to" type="xs:string" />
+                                </xs:complexType>
+                            </xs:element>
+                        </xs:choice>
+                        <xs:attribute name="ordinal" type="xs:nonNegativeInteger" use="optional" />
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="config-source-provider" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="class" type="classType" minOccurs="0" maxOccurs="1" />
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                    </xs:complexType>
+
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-config-smallrye_2_0.xsd b/wildfly/docs/schema/wildfly-microprofile-config-smallrye_2_0.xsd
new file mode 100644
index 0000000..e0817f6
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-config-smallrye_2_0.xsd
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:microprofile-config-smallrye:2.0"
+            xmlns="urn:wildfly:microprofile-config-smallrye:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="config-source" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:choice>
+                            <xs:sequence>
+                                <xs:element name="property" minOccurs="0" maxOccurs="unbounded">
+                                    <xs:complexType>
+                                        <xs:attribute name="name" type="xs:string" use="required" />
+                                        <xs:attribute name="value" type="xs:string" use="required" />
+                                    </xs:complexType>
+                                </xs:element>
+                            </xs:sequence>
+                            <xs:element name="class" type="classType" minOccurs="0" maxOccurs="1" />
+                            <xs:element name="dir" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="path" type="xs:string" use="required" />
+                                    <xs:attribute name="relative-to" type="xs:string" />
+                                    <xs:attribute name="root" type="xs:boolean" default="false"/>
+                                </xs:complexType>
+                            </xs:element>
+                        </xs:choice>
+                        <xs:attribute name="ordinal" type="xs:nonNegativeInteger" use="optional" />
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="config-source-provider" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="class" type="classType" minOccurs="0" maxOccurs="1" />
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required" />
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:complexType name="classType">
+        <xs:attribute name="name" type="xs:string" use="required" />
+        <xs:attribute name="module" type="xs:string" use="required" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-fault-tolerance-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-fault-tolerance-smallrye_1_0.xsd
new file mode 100644
index 0000000..e97d8ba
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-fault-tolerance-smallrye_1_0.xsd
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-fault-tolerance-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-fault-tolerance-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <xs:element name="subsystem"/>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-health-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-health-smallrye_1_0.xsd
new file mode 100644
index 0000000..b014370
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-health-smallrye_1_0.xsd
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-health-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-health-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        True if authentication is required to access the HTTP endpoints on the
+                        HTTP management interface.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-health-smallrye_2_0.xsd b/wildfly/docs/schema/wildfly-microprofile-health-smallrye_2_0.xsd
new file mode 100644
index 0000000..873d3e5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-health-smallrye_2_0.xsd
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-health-smallrye:2.0"
+           xmlns="urn:wildfly:microprofile-health-smallrye:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        True if authentication is required to access the HTTP endpoints on the
+                        HTTP management interface.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="empty-liveness-checks-status" default="UP" type="check-statusType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        Defines the global status returned by the Health checks endpoints if no
+                        liveness probes have been defined in deployments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="empty-readiness-checks-status" default="UP" type="check-statusType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        Defines the global status returned by the Health checks endpoints if no
+                        readiness probes have been defined in deployments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:simpleType name="check-statusType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="UP"/>
+            <xs:enumeration value="DOWN"/>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-health-smallrye_3_0.xsd b/wildfly/docs/schema/wildfly-microprofile-health-smallrye_3_0.xsd
new file mode 100644
index 0000000..af68455
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-health-smallrye_3_0.xsd
@@ -0,0 +1,67 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-health-smallrye:3.0"
+           xmlns="urn:wildfly:microprofile-health-smallrye:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        True if authentication is required to access the HTTP endpoints on the
+                        HTTP management interface.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="empty-liveness-checks-status" default="UP" type="check-statusType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        Defines the global status returned by the Health checks endpoints if no
+                        liveness probes have been defined in deployments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="empty-readiness-checks-status" default="UP" type="check-statusType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        Defines the global status returned by the Health checks endpoints if no
+                        readiness probes have been defined in deployments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="empty-startup-checks-status" default="UP" type="check-statusType">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                        Defines the global status returned by the Health checks endpoints if no
+                        startup probes have been defined in deployments.
+                        ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+
+    <xs:simpleType name="check-statusType">
+        <xs:restriction base="xs:string">
+            <xs:enumeration value="UP"/>
+            <xs:enumeration value="DOWN"/>
+        </xs:restriction>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-jwt-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-jwt-smallrye_1_0.xsd
new file mode 100644
index 0000000..2ea441d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-jwt-smallrye_1_0.xsd
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:microprofile-jwt-smallrye:1.0"
+            xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-lra-coordinator_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-lra-coordinator_1_0.xsd
new file mode 100644
index 0000000..30efd5a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-lra-coordinator_1_0.xsd
@@ -0,0 +1,29 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-lra-coordinator:1.0"
+           xmlns="urn:wildfly:microprofile-lra-coordinator:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+  <!-- The lra-coordinator subsystem root element -->
+  <xs:element name="subsystem" type="lraCoordinatorSubsystemType"/>
+
+  <xs:complexType name="lraCoordinatorSubsystemType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[
+                The configuration of the LRA Coordinator subsystem.
+                The "server" attribute defines the Undertow subsystem 'server' resource the coordinator is started at.
+                The "host" attribute defines the Undertow subsystem 'host' resource the coordinator is started at.
+            ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:attribute name="server" type="xs:string" use="optional" default="default-server"/>
+    <xs:attribute name="host" type="xs:string" use="optional" default="default-host"/>
+  </xs:complexType>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-lra-participant_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-lra-participant_1_0.xsd
new file mode 100644
index 0000000..d75ef8d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-lra-participant_1_0.xsd
@@ -0,0 +1,31 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-lra-participant:1.0"
+           xmlns="urn:wildfly:microprofile-lra-participant:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+  <!-- The lra-participant subsystem root element -->
+  <xs:element name="subsystem">
+    <xs:complexType>
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[
+            The configuration of the LRA Participant subsystem.
+            The "url" configures lra.coordinator.url System Property which should be used by the LRA Participant Subsystem.
+            The "proxy-server" attribute defines the Undertow subsystem 'server' resource the LRA Participant proxy starts at.
+            The "proxy-host" attribute defines the Undertow subsystem 'host' resource the LRA Participant proxy starts at.
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="lra-coordinator-url" type="xs:string" default="http://localhost:8080/lra-coordinator/lra-coordinator"/>
+      <xs:attribute name="proxy-server" type="xs:string" use="optional" default="default-server"/>
+      <xs:attribute name="proxy-host" type="xs:string" use="optional" default="default-host"/>
+    </xs:complexType>
+  </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-metrics-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-metrics-smallrye_1_0.xsd
new file mode 100644
index 0000000..8427ad7
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-metrics-smallrye_1_0.xsd
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-metrics-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-metrics-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true">
+                <xs:annotation>
+                    <xs:documentation>
+                        True if authentication is required to access the HTTP endpoint on the HTTP management interface.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="exposed-subsystems" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        The names of the subsystems (separated by spaces) that exposes their metrics in the vendor scope (or '*' to expose any subsystem metrics).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-metrics-smallrye_2_0.xsd b/wildfly/docs/schema/wildfly-microprofile-metrics-smallrye_2_0.xsd
new file mode 100644
index 0000000..9eb3ac2
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-metrics-smallrye_2_0.xsd
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-metrics-smallrye:2.0"
+           xmlns="urn:wildfly:microprofile-metrics-smallrye:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:attribute name="security-enabled" type="xs:boolean" default="true">
+                <xs:annotation>
+                    <xs:documentation>
+                        True if authentication is required to access the HTTP endpoint on the HTTP management interface.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="exposed-subsystems" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        The names of the WildFly subsystems (separated by spaces) that exposes their metrics (or '*' to expose any subsystem metrics).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+            <xs:attribute name="prefix" type="xs:string">
+                <xs:annotation>
+                    <xs:documentation>
+                        Prefix prepended to the name of the WildFly metrics exposed by the HTTP endpoints.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-openapi-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-openapi-smallrye_1_0.xsd
new file mode 100644
index 0000000..317bbdd
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-openapi-smallrye_1_0.xsd
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-openapi-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-openapi-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+        <xs:complexType />
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-opentracing_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-opentracing_1_0.xsd
new file mode 100644
index 0000000..f32ea6e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-opentracing_1_0.xsd
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-opentracing-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-opentracing-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem"/>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-opentracing_2_0.xsd b/wildfly/docs/schema/wildfly-microprofile-opentracing_2_0.xsd
new file mode 100644
index 0000000..99c34eb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-opentracing_2_0.xsd
@@ -0,0 +1,105 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-opentracing-smallrye:2.0"
+           xmlns="urn:wildfly:microprofile-opentracing-smallrye:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="2.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="jaeger-tracer" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="tags" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Map of credentials store implementation specific properties.
+                                    </xs:documentation>
+                                </xs:annotation>
+                                <xs:complexType>
+                                    <xs:sequence>
+                                        <xs:element name="property" maxOccurs="unbounded">
+                                            <xs:complexType>
+                                                <xs:attribute name="name" type="xs:string" use="required">
+                                                    <xs:annotation>
+                                                        <xs:documentation>
+                                                            The key for this tag.
+                                                        </xs:documentation>
+                                                    </xs:annotation>
+                                                </xs:attribute>
+                                                <xs:attribute name="value" type="xs:string" use="required">
+                                                    <xs:annotation>
+                                                        <xs:documentation>
+                                                            The value for this tag.
+                                                        </xs:documentation>
+                                                    </xs:annotation>
+                                                </xs:attribute>
+                                            </xs:complexType>
+                                        </xs:element>
+                                    </xs:sequence>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="codec-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="propagation" use="optional">
+                                        <xs:simpleType>
+                                            <xs:restriction base="xs:string">
+                                                <xs:enumeration value="B3"/>
+                                                <xs:enumeration value="JAEGER"/>
+                                            </xs:restriction>
+                                        </xs:simpleType>
+                                    </xs:attribute>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="sampler-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="sampler-type" use="optional">
+                                        <xs:simpleType>
+                                            <xs:restriction base="xs:string">
+                                                <xs:enumeration value="const"/>
+                                                <xs:enumeration value="probabilistic"/>
+                                                <xs:enumeration value="ratelimiting"/>
+                                                <xs:enumeration value="remote"/>
+                                            </xs:restriction>
+                                        </xs:simpleType>
+                                    </xs:attribute>
+                                    <xs:attribute name="sampler-param" use="optional" type="xs:double"/>
+                                    <xs:attribute name="sampler-manager-host-port" type="xs:string"/>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="sender-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="sender-agent-host" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-agent-port" use="optional" type="xs:int"/>
+                                    <xs:attribute name="sender-endpoint" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-auth-token" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-auth-user" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-auth-password" use="optional" type="xs:string"/>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="reporter-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="reporter-log-spans" use="optional" type="xs:boolean"/>
+                                    <xs:attribute name="reporter-flush-interval" use="optional" type="xs:int"/>
+                                    <xs:attribute name="reporter-max-queue-size" use="optional" type="xs:int"/>
+                                </xs:complexType>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required"/>
+                        <xs:attribute name="traceid-128bit" type="xs:boolean" use="optional"/>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+            <xs:attribute name="default-tracer" type="xs:string" use="optional"/>
+        </xs:complexType>
+    </xs:element>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-opentracing_3_0.xsd b/wildfly/docs/schema/wildfly-microprofile-opentracing_3_0.xsd
new file mode 100644
index 0000000..990ec96
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-opentracing_3_0.xsd
@@ -0,0 +1,105 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-opentracing-smallrye:3.0"
+           xmlns="urn:wildfly:microprofile-opentracing-smallrye:3.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="jaeger-tracer" minOccurs="0" maxOccurs="unbounded">
+                    <xs:complexType>
+                        <xs:sequence>
+                            <xs:element name="tags" minOccurs="0" maxOccurs="1">
+                                <xs:annotation>
+                                    <xs:documentation>
+                                        Map of credentials store implementation specific properties.
+                                    </xs:documentation>
+                                </xs:annotation>
+                                <xs:complexType>
+                                    <xs:sequence>
+                                        <xs:element name="property" maxOccurs="unbounded">
+                                            <xs:complexType>
+                                                <xs:attribute name="name" type="xs:string" use="required">
+                                                    <xs:annotation>
+                                                        <xs:documentation>
+                                                            The key for this tag.
+                                                        </xs:documentation>
+                                                    </xs:annotation>
+                                                </xs:attribute>
+                                                <xs:attribute name="value" type="xs:string" use="required">
+                                                    <xs:annotation>
+                                                        <xs:documentation>
+                                                            The value for this tag.
+                                                        </xs:documentation>
+                                                    </xs:annotation>
+                                                </xs:attribute>
+                                            </xs:complexType>
+                                        </xs:element>
+                                    </xs:sequence>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="codec-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="propagation" use="optional">
+                                        <xs:simpleType>
+                                            <xs:restriction base="xs:string">
+                                                <xs:enumeration value="B3"/>
+                                                <xs:enumeration value="JAEGER"/>
+                                            </xs:restriction>
+                                        </xs:simpleType>
+                                    </xs:attribute>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="sampler-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="sampler-type" use="optional">
+                                        <xs:simpleType>
+                                            <xs:restriction base="xs:string">
+                                                <xs:enumeration value="const"/>
+                                                <xs:enumeration value="probabilistic"/>
+                                                <xs:enumeration value="ratelimiting"/>
+                                                <xs:enumeration value="remote"/>
+                                            </xs:restriction>
+                                        </xs:simpleType>
+                                    </xs:attribute>
+                                    <xs:attribute name="sampler-param" use="optional" type="xs:double"/>
+                                    <xs:attribute name="sampler-manager-host-port" type="xs:string"/>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="sender-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="sender-agent-host" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-agent-port" use="optional" type="xs:int"/>
+                                    <xs:attribute name="sender-endpoint" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-auth-token" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-auth-user" use="optional" type="xs:string"/>
+                                    <xs:attribute name="sender-auth-password" use="optional" type="xs:string"/>
+                                </xs:complexType>
+                            </xs:element>
+                            <xs:element name="reporter-configuration" minOccurs="0" maxOccurs="1">
+                                <xs:complexType>
+                                    <xs:attribute name="reporter-log-spans" use="optional" type="xs:boolean"/>
+                                    <xs:attribute name="reporter-flush-interval" use="optional" type="xs:int"/>
+                                    <xs:attribute name="reporter-max-queue-size" use="optional" type="xs:int"/>
+                                </xs:complexType>
+                            </xs:element>
+                        </xs:sequence>
+                        <xs:attribute name="name" type="xs:string" use="required"/>
+                        <xs:attribute name="traceid-128bit" type="xs:boolean" use="optional"/>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+            <xs:attribute name="default-tracer" type="xs:string" use="optional"/>
+        </xs:complexType>
+    </xs:element>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-microprofile-reactive-messaging-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-reactive-messaging-smallrye_1_0.xsd
new file mode 100644
index 0000000..1e57211
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-reactive-messaging-smallrye_1_0.xsd
@@ -0,0 +1,16 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-reactive-messaging-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-reactive-messaging-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+    </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-reactive-streams-operators-smallrye_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-reactive-streams-operators-smallrye_1_0.xsd
new file mode 100644
index 0000000..027c9ed
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-reactive-streams-operators-smallrye_1_0.xsd
@@ -0,0 +1,16 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-reactive-streams-operators-smallrye:1.0"
+           xmlns="urn:wildfly:microprofile-reactive-streams-operators-smallrye:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem">
+    </xs:element>
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-microprofile-telemetry_1_0.xsd b/wildfly/docs/schema/wildfly-microprofile-telemetry_1_0.xsd
new file mode 100644
index 0000000..8f2eeaf
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-microprofile-telemetry_1_0.xsd
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:microprofile-telemetry:1.0"
+           xmlns="urn:wildfly:microprofile-telemetry:1.0"
+           elementFormDefault="unqualified"
+           version="1.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType></xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-mvc-krazo_preview_1_1.xsd b/wildfly/docs/schema/wildfly-mvc-krazo_preview_1_1.xsd
new file mode 100644
index 0000000..19f9f0e
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-mvc-krazo_preview_1_1.xsd
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:wildfly:mvc-krazo:preview:1.1"
+            xmlns="urn:wildfly:mvc-krazo:preview:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-opentelemetry_1_0.xsd b/wildfly/docs/schema/wildfly-opentelemetry_1_0.xsd
new file mode 100644
index 0000000..3723c60
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-opentelemetry_1_0.xsd
@@ -0,0 +1,132 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:opentelemetry:1.0"
+           xmlns="urn:wildfly:opentelemetry:1.0"
+           elementFormDefault="qualified"
+           version="1.0">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="exporter" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configures the exporter used to export traces
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="type" default="jaeger">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The type of exporter to use. Can be either 'jaeger' or 'otlp'.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="jaeger"/>
+                                    <xs:enumeration value="otlp"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="endpoint" type="xs:string">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The endpoint to which traces are exported. Value will be exporter-type-dependent.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="span-processor" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This configures the processor for the spans in the trace
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="type" default="batch">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The type of processor to use. Valid values are 'simple' and 'batch'.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="batch"/>
+                                    <xs:enumeration value="simple"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="batch-delay" default="5000">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The interval, in milliseconds, between two consecutive exports. Default is 5000.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="max-queue-size" default="2048">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The maximum number of traces in the queue before they are exported.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="max-export-batch-size" default="512">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The maximum number of traces to be exported in a given batch.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="export-timeout" default="30000">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The interval, in milliseconds, between two consecutive exports. Default is 5000.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="sampler" minOccurs="0">
+                    <xs:complexType>
+                        <xs:attribute name="type">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The sampling strategy to use.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="on"/>
+                                    <xs:enumeration value="off"/>
+                                    <xs:enumeration value="ratio"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute type="xs:float" name="ratio">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    For the ratio-based sampler, this configures the percentage of traces to sample.
+                                    Must be between 0.0 and 1.0.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+            <xs:attribute type="xs:string" name="service-name">
+                <xs:annotation>
+                    <xs:documentation>
+                        The service name reported to the trace collector
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-opentelemetry_1_1.xsd b/wildfly/docs/schema/wildfly-opentelemetry_1_1.xsd
new file mode 100644
index 0000000..80e23a2
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-opentelemetry_1_1.xsd
@@ -0,0 +1,131 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:wildfly:opentelemetry:1.1"
+           xmlns="urn:wildfly:opentelemetry:1.1"
+           elementFormDefault="qualified"
+           version="1.1">
+
+    <xs:element name="subsystem">
+        <xs:complexType>
+            <xs:sequence>
+                <xs:element name="exporter" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Configures the exporter used to export traces
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="type" default="otlp">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The type of exporter to use. Currently, the only supported value is 'otlp'.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="otlp"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute name="endpoint" type="xs:string">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The endpoint to which traces are exported. Value will be exporter-type-dependent.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="span-processor" minOccurs="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            This configures the processor for the spans in the trace
+                        </xs:documentation>
+                    </xs:annotation>
+                    <xs:complexType>
+                        <xs:attribute name="type" default="batch">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The type of processor to use. Valid values are 'simple' and 'batch'.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="batch"/>
+                                    <xs:enumeration value="simple"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="batch-delay" default="5000">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The interval, in milliseconds, between two consecutive exports. Default is 5000.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="max-queue-size" default="2048">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The maximum number of traces in the queue before they are exported.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="max-export-batch-size" default="512">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The maximum number of traces to be exported in a given batch.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                        <xs:attribute type="xs:integer" name="export-timeout" default="30000">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The interval, in milliseconds, between two consecutive exports. Default is 5000.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+                <xs:element name="sampler" minOccurs="0">
+                    <xs:complexType>
+                        <xs:attribute name="type">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    The sampling strategy to use.
+                                </xs:documentation>
+                            </xs:annotation>
+                            <xs:simpleType>
+                                <xs:restriction base="xs:string">
+                                    <xs:enumeration value="on"/>
+                                    <xs:enumeration value="off"/>
+                                    <xs:enumeration value="ratio"/>
+                                </xs:restriction>
+                            </xs:simpleType>
+                        </xs:attribute>
+                        <xs:attribute type="xs:float" name="ratio">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    For the ratio-based sampler, this configures the percentage of traces to sample.
+                                    Must be between 0.0 and 1.0.
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:attribute>
+                    </xs:complexType>
+                </xs:element>
+            </xs:sequence>
+            <xs:attribute type="xs:string" name="service-name">
+                <xs:annotation>
+                    <xs:documentation>
+                        The service name reported to the trace collector
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:attribute>
+        </xs:complexType>
+    </xs:element>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-picketlink-federation_1_0.xsd b/wildfly/docs/schema/wildfly-picketlink-federation_1_0.xsd
new file mode 100644
index 0000000..7d991ac
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-picketlink-federation_1_0.xsd
@@ -0,0 +1,334 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:picketlink-federation:1.0"
+            xmlns="urn:jboss:domain:picketlink-federation:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The picketlink federation subsystem root element -->
+    <xsd:element name="subsystem" type="subsystemType"/>
+
+    <xsd:complexType name="subsystemType">
+      <xsd:sequence>
+         <xsd:element name="federation" type="federationType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="federationType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Federation type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="saml" type="samlType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-store" type="keyStoreType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="identity-provider" type="identityProviderType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="service-providers" type="serviceProvidersType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The federation name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="samlType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the SAML type. This type defines all configurations about how SAML assertions are processed and created.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="clock-skew" type="xsd:int" use="optional" default="0">
+            <xsd:annotation>
+                <xsd:documentation>Defines the clock skew for SAML assertions. The value must be specified in milliseconds.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="token-timeout" type="xsd:int" use="optional" default="5000">
+            <xsd:annotation>
+                <xsd:documentation>Defines the timeout for SAML assertions. The value must be specified in milliseconds.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="roleGeneratorType">
+        <xsd:annotation>
+            <xsd:documentation>The RoleGenerator implementation that will be used to load roles and push them to SAML assertions.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The FQN of the RoleGenerator type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributeManagerType">
+        <xsd:annotation>
+            <xsd:documentation>The AttributeManager implementation that will be used to load roles and push them to SAML assertions.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The FQN of the AttributeManager type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="keyStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the KeyStore type. This type defines how key stores are configured.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the password for the key store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="sign-key-alias" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the alias to be used when signing documents.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="sign-key-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the password for the sign-key-alias.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="file" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the file location.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="relative-to" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                One of the system-provided named paths (such as jboss.home.dir,
+                user.home, user.dir) relative to which the absolute path
+                will be calculated for the path specified in the file attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityProviderType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Identity Provider type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="trust" type="trustType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="role-generator" type="roleGeneratorType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attribute-manager" type="attributeManagerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="handlers" type="handlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>A unique name for the Identity Provider. The name must be the deployment unit name. Eg.: idp.war.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="url" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>URL for this Identity Provider.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-signatures" type="xsd:boolean" default="false" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if signature is supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="encrypt" type="xsd:boolean" default="false" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if encryption is supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-domain" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a security-domain that will be used to authenticate and authorize users.
+                    This attribute is required if the IdP is not external. See the 'external' attribute for more details.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="strict-post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the the IDP should always respond using HTTP POST binding.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="external" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the configuration is a reference to a external IdP.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-metadata" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Enable/Disable SAML Metadata Support.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="ssl-authentication" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the identity provider should also support HTTP CLIENT_CERT authentication.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="serviceProvidersType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Service Provider types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="service-provider" type="serviceProviderType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="serviceProviderType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Service Provider type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handlers" type="handlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this instance. This name must be the deployment unit name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="url" type="xsd:string" use="required">
+          <xsd:annotation>
+              <xsd:documentation>URL for this Service Provider.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates which SAML Binding to use. If is true
+                    HTTP POST binding will be used. Othwerwise HTTP REDIRECT binding
+                    will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="strict-post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates which SAML Binding to use. If is true
+                HTTP POST binding will be used. Othwerwise HTTP REDIRECT binding
+                will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-signatures" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if signature is supported.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-metadata" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Enable/Disable SAML Metadata Support.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-domain" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Security Domain name used to authenticate users.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="error-page" type="xsd:string" use="optional" default="/error.jsp">
+            <xsd:annotation>
+                <xsd:documentation>Defines a custom error page location.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="logout-page" type="xsd:string" use="optional" default="/logout.jsp">
+            <xsd:annotation>
+                <xsd:documentation>Defines a custom logout page location.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trustType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Trusted Domain Types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="trust-domain" type="trustedDomainType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="trustedDomainType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Truted Domain Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the domain name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cert-alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the certificate alias for this domain.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlersType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Handler Types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handler" type="handlerType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlerType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Handler Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+        <xsd:element name="handler-parameter" type="handlerParameterType" minOccurs="0" maxOccurs="unbounded"
+                     nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the handler class name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlerParameterType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Handler Parameter Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the parameter name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the parameter value.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-picketlink-federation_1_1.xsd b/wildfly/docs/schema/wildfly-picketlink-federation_1_1.xsd
new file mode 100644
index 0000000..c425966
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-picketlink-federation_1_1.xsd
@@ -0,0 +1,377 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:picketlink-federation:1.1"
+            xmlns="urn:jboss:domain:picketlink-federation:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The picketlink federation subsystem root element -->
+    <xsd:element name="subsystem" type="subsystemType"/>
+
+    <xsd:complexType name="subsystemType">
+        <xsd:sequence>
+            <xsd:element name="federation" type="federationType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="federationType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Federation type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="saml" type="samlType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-store" type="keyStoreType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="identity-provider" type="identityProviderType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="service-providers" type="serviceProvidersType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The federation name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="samlType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the SAML type. This type defines all configurations about how SAML assertions are processed and created.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="clock-skew" type="xsd:int" use="optional" default="0">
+            <xsd:annotation>
+                <xsd:documentation>Defines the clock skew for SAML assertions. The value must be specified in milliseconds.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="token-timeout" type="xsd:int" use="optional" default="5000">
+            <xsd:annotation>
+                <xsd:documentation>Defines the timeout for SAML assertions. The value must be specified in milliseconds.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="roleGeneratorType">
+        <xsd:annotation>
+            <xsd:documentation>The RoleGenerator implementation that will be used to load roles and push them to SAML assertions.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the role generator name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The FQN of the RoleGenerator type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributeManagerType">
+        <xsd:annotation>
+            <xsd:documentation>The AttributeManager implementation that will be used to load roles and push them to SAML assertions.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the attribute manager name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The FQN of the AttributeManager type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="keyStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the KeyStore type. This type defines how key stores are configured.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="keys" type="keysType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the password for the key store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="sign-key-alias" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the alias to be used when signing documents.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="sign-key-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the password for the sign-key-alias.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="file" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the file location.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="relative-to" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    One of the system-provided named paths (such as jboss.home.dir,
+                    user.home, user.dir) relative to which the absolute path
+                    will be calculated for the path specified in the file attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="keysType">
+        <xsd:annotation>
+            <xsd:documentation>Keys Configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="key" type="keyType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="keyType">
+        <xsd:annotation>
+            <xsd:documentation>Defines a Key.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the name or alias of a key in a given key store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="host" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>A single or a comma separated list of strings representing the host names validated by the given key.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityProviderType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Identity Provider type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="trust" type="trustType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="role-generator" type="roleGeneratorType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attribute-manager" type="attributeManagerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="handlers" type="handlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>A unique name for the Identity Provider. The name must be the deployment unit name. Eg.: idp.war.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="url" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>URL for this Identity Provider.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-signatures" type="xsd:boolean" default="false" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if signature is supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="encrypt" type="xsd:boolean" default="false" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if encryption is supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-domain" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a security-domain that will be used to authenticate and authorize users.
+                    This attribute is required if the IdP is not external. See the 'external' attribute for more details.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="strict-post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the the IDP should always respond using HTTP POST binding.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="external" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the configuration is a reference to a external IdP.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-metadata" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Enable/Disable SAML Metadata Support.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="ssl-authentication" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the identity provider should also support HTTP CLIENT_CERT authentication.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="serviceProvidersType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Service Provider types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="service-provider" type="serviceProviderType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="serviceProviderType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Service Provider type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handlers" type="handlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this instance. This name must be the deployment unit name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="url" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>URL for this Service Provider.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates which SAML Binding to use. If is true
+                    HTTP POST binding will be used. Othwerwise HTTP REDIRECT binding
+                    will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="strict-post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates which SAML Binding to use. If is true
+                    HTTP POST binding will be used. Othwerwise HTTP REDIRECT binding
+                    will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-signatures" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if signature is supported.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-metadata" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Enable/Disable SAML Metadata Support.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-domain" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Security Domain name used to authenticate users.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="error-page" type="xsd:string" use="optional" default="/error.jsp">
+            <xsd:annotation>
+                <xsd:documentation>Defines a custom error page location.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="logout-page" type="xsd:string" use="optional" default="/logout.jsp">
+            <xsd:annotation>
+                <xsd:documentation>Defines a custom logout page location.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trustType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Trusted Domain Types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="trust-domain" type="trustedDomainType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="trustedDomainType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Truted Domain Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the domain name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cert-alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the certificate alias for this domain.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlersType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Handler Types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handler" type="handlerType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlerType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Handler Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handler-parameter" type="handlerParameterType" minOccurs="0" maxOccurs="unbounded"
+                         nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the handler name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the handler class name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlerParameterType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Handler Parameter Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the parameter name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the parameter value.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-picketlink-federation_2_0.xsd b/wildfly/docs/schema/wildfly-picketlink-federation_2_0.xsd
new file mode 100644
index 0000000..394205d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-picketlink-federation_2_0.xsd
@@ -0,0 +1,377 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:picketlink-federation:2.0"
+            xmlns="urn:jboss:domain:picketlink-federation:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The picketlink federation subsystem root element -->
+    <xsd:element name="subsystem" type="subsystemType"/>
+
+    <xsd:complexType name="subsystemType">
+      <xsd:sequence>
+         <xsd:element name="federation" type="federationType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="federationType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Federation type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="saml" type="samlType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="key-store" type="keyStoreType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="identity-provider" type="identityProviderType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="service-providers" type="serviceProvidersType" minOccurs="0" maxOccurs="1"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The federation name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="samlType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the SAML type. This type defines all configurations about how SAML assertions are processed and created.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="clock-skew" type="xsd:int" use="optional" default="0">
+            <xsd:annotation>
+                <xsd:documentation>Defines the clock skew for SAML assertions. The value must be specified in milliseconds.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="token-timeout" type="xsd:int" use="optional" default="5000">
+            <xsd:annotation>
+                <xsd:documentation>Defines the timeout for SAML assertions. The value must be specified in milliseconds.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="roleGeneratorType">
+        <xsd:annotation>
+            <xsd:documentation>The RoleGenerator implementation that will be used to load roles and push them to SAML assertions.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the role generator name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The FQN of the RoleGenerator type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributeManagerType">
+        <xsd:annotation>
+            <xsd:documentation>The AttributeManager implementation that will be used to load roles and push them to SAML assertions.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the attribute manager name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The FQN of the AttributeManager type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="keyStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the KeyStore type. This type defines how key stores are configured.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="keys" type="keysType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the password for the key store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="sign-key-alias" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the alias to be used when signing documents.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="sign-key-password" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the password for the sign-key-alias.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="file" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the file location.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="relative-to" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                One of the system-provided named paths (such as jboss.home.dir,
+                user.home, user.dir) relative to which the absolute path
+                will be calculated for the path specified in the file attribute.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="keysType">
+        <xsd:annotation>
+            <xsd:documentation>Keys Configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="key" type="keyType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="keyType">
+        <xsd:annotation>
+            <xsd:documentation>Defines a Key.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the name or alias of a key in a given key store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="host" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>A single or a comma separated list of strings representing the host names validated by the given key.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityProviderType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Identity Provider type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="trust" type="trustType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="role-generator" type="roleGeneratorType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="attribute-manager" type="attributeManagerType" minOccurs="0" maxOccurs="1"/>
+            <xsd:element name="handlers" type="handlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>A unique name for the Identity Provider. The name must be the deployment unit name. Eg.: idp.war.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="url" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>URL for this Identity Provider.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-signatures" type="xsd:boolean" default="false" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if signature is supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="encrypt" type="xsd:boolean" default="false" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if encryption is supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-domain" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>
+                    The name of a security-domain that will be used to authenticate and authorize users.
+                    This attribute is required if the IdP is not external. See the 'external' attribute for more details.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="strict-post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the the IDP should always respond using HTTP POST binding.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="external" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the configuration is a reference to a external IdP.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-metadata" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Enable/Disable SAML Metadata Support.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="ssl-authentication" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the identity provider should also support HTTP CLIENT_CERT authentication.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="serviceProvidersType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Service Provider types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="service-provider" type="serviceProviderType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="serviceProviderType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Service Provider type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handlers" type="handlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this instance. This name must be the deployment unit name.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="url" type="xsd:string" use="required">
+          <xsd:annotation>
+              <xsd:documentation>URL for this Service Provider.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates which SAML Binding to use. If is true
+                    HTTP POST binding will be used. Othwerwise HTTP REDIRECT binding
+                    will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="strict-post-binding" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates which SAML Binding to use. If is true
+                HTTP POST binding will be used. Othwerwise HTTP REDIRECT binding
+                will be used.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-signatures" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if signature is supported.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-metadata" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Enable/Disable SAML Metadata Support.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="security-domain" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Security Domain name used to authenticate users.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="error-page" type="xsd:string" use="optional" default="/error.jsp">
+            <xsd:annotation>
+                <xsd:documentation>Defines a custom error page location.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="logout-page" type="xsd:string" use="optional" default="/logout.jsp">
+            <xsd:annotation>
+                <xsd:documentation>Defines a custom logout page location.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="trustType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Trusted Domain Types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="trust-domain" type="trustedDomainType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="trustedDomainType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Truted Domain Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the domain name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="cert-alias" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the certificate alias for this domain.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlersType">
+        <xsd:annotation>
+            <xsd:documentation>Groups Handler Types.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="handler" type="handlerType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlerType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Handler Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+        <xsd:element name="handler-parameter" type="handlerParameterType" minOccurs="0" maxOccurs="unbounded"
+                     nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the handler name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the handler class name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="handlerParameterType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Handler Parameter Type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the parameter name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="value" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the parameter value.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-picketlink-idm_1_0.xsd b/wildfly/docs/schema/wildfly-picketlink-idm_1_0.xsd
new file mode 100644
index 0000000..d67a6b9
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-picketlink-idm_1_0.xsd
@@ -0,0 +1,329 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:picketlink-identity-management:1.0"
+            xmlns="urn:jboss:domain:picketlink-identity-management:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <!-- The picketlink identity management subsystem root element -->
+    <xsd:element name="subsystem" type="subsystemType"/>
+
+    <xsd:complexType name="subsystemType">
+      <xsd:sequence>
+         <xsd:element name="partition-manager" type="partitionManagerType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="partitionManagerType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Partition Manager type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+          <xsd:element name="identity-configuration" type="identityConfigurationType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+          <xsd:annotation>
+            <xsd:documentation>Name for this instance.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="jndi-name" type="xsd:string" use="required">
+          <xsd:annotation>
+            <xsd:documentation>JNDI name to bind this instance.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityConfigurationType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the configuration for a Partition Manager type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="unbounded">
+            <xsd:element name="jpa-store" type="jpaIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="file-store" type="fileIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="ldap-store" type="ldapIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this configuration.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityStoreType" abstract="true">
+        <xsd:annotation>
+            <xsd:documentation>Base schema for identity store elements.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="supported-types" type="supportedTypesType" minOccurs="1" maxOccurs="1" nillable="false"/>
+            <xsd:element name="credential-handlers" type="credentialHandlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="support-credential" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the store should support credentials management.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-attribute" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the store should support attributes management.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="supportedTypesType">
+        <xsd:annotation>
+            <xsd:documentation>The supported-types element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="supported-type" type="supportedType" minOccurs="0" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="supports-all" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Defines if all types and configurations are supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="supportedType">
+        <xsd:annotation>
+            <xsd:documentation>The supported-type element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a type that should be supported by a identity store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentialHandlersType">
+        <xsd:annotation>
+            <xsd:documentation>The credential-handlers element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-handler" type="credentialHandlerType" minOccurs="0" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentialHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>The credential-handler element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a credential handler type that should be supported by a identity store.
+                </xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="jpaIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the JPA identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:attribute name="entity-manager-factory" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The JNDI url of the EntityManagerFactory that should be used, instead of the default
+                        factory.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="data-source" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The JNDI url of data source that should be used to create the default
+                        EntityManagerFactory.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="entity-module" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of the module where the JPA entities are located. Those entities will be used to
+                        initialize the JPA store.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="entity-module-unit-name" type="xsd:string" use="optional" default="identity">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of the persistence unit name, if the entity-module attribute is present.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="fileIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the File identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:attribute name="working-dir" type="xsd:string" use="optional" default="picketlink/idm">
+                    <xsd:annotation>
+                        <xsd:documentation>The working directory where data is located. If relative-to is specified, the working-dir is relative to its value.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="relative-to" type="xsd:string" use="optional" default="jboss.server.data.dir">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                        One of the system-provided named paths (such as jboss.home.dir,
+                        user.home, user.dir) relative to which the absolute path
+                        will be calculated for the path specified in the file attribute.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="always-create-files" type="xsd:boolean" use="optional" default="true">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if data should be always re-created between initializations.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="async-write" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if asynchronous write is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="async-write-thread-pool" type="xsd:int" use="optional" default="5">
+                    <xsd:annotation>
+                        <xsd:documentation>The size of the thread pool if asynchronous writing is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="ldapIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the LDAP identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:sequence>
+                    <xsd:element name="mappings" type="mappingsType" minOccurs="1" maxOccurs="1" nillable="false"/>
+                </xsd:sequence>
+                <xsd:attribute name="url" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>The working directory where data is located.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="bind-dn" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if data should be always re-created between initializations.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="bind-credential" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if asynchronous write is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="base-dn-suffix" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>The size of the thread pool if asynchronous writing is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="mappingsType">
+        <xsd:annotation>
+            <xsd:documentation>The mappings element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="mapping" type="mappingType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="mappingType">
+        <xsd:annotation>
+            <xsd:documentation>The mapping element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="attribute" type="attributeType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a type that should be supported by a identity store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="base-dn-suffix" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a base DN suffix where entries are located.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="object-classes" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>A comma separated list of object classes for entries.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="relates-to" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Tells that this mapping is related with another mapped type. Useful for relationship mappings.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="parent-membership-attribute-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The name of the LDAP attribute used to map parent-child relationships of the same type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributeType">
+        <xsd:annotation>
+            <xsd:documentation>The attribute element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The name of the property of the type mapped to a LDAP attribute.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="ldap-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The name of the LDAP attribute mapped to a type's property.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="is-identifier" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if this attribute is an identifier.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="read-only" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Marks an attribute as read only.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-picketlink-idm_1_1.xsd b/wildfly/docs/schema/wildfly-picketlink-idm_1_1.xsd
new file mode 100644
index 0000000..00443f3
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-picketlink-idm_1_1.xsd
@@ -0,0 +1,354 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:picketlink-identity-management:1.1"
+            xmlns="urn:jboss:domain:picketlink-identity-management:1.1"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.1">
+
+    <!-- The picketlink identity management subsystem root element -->
+    <xsd:element name="subsystem" type="subsystemType"/>
+
+    <xsd:complexType name="subsystemType">
+        <xsd:sequence>
+            <xsd:element name="partition-manager" type="partitionManagerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="partitionManagerType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Partition Manager type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="identity-configuration" type="identityConfigurationType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this instance.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="jndi-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>JNDI name to bind this instance.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityConfigurationType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the configuration for a Partition Manager type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="unbounded">
+            <xsd:element name="jpa-store" type="jpaIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="file-store" type="fileIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="ldap-store" type="ldapIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this configuration.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityStoreType" abstract="true">
+        <xsd:annotation>
+            <xsd:documentation>Base schema for identity store elements.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="supported-types" type="supportedTypesType" minOccurs="1" maxOccurs="1" nillable="false"/>
+            <xsd:element name="credential-handlers" type="credentialHandlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="support-credential" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the store should support credentials management.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-attribute" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the store should support attributes management.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="supportedTypesType">
+        <xsd:annotation>
+            <xsd:documentation>The supported-types element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="supported-type" type="supportedType" minOccurs="0" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="supports-all" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Defines if all types and configurations are supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="supportedType">
+        <xsd:annotation>
+            <xsd:documentation>The supported-type element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the supported type name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a type that should be supported by a identity store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentialHandlersType">
+        <xsd:annotation>
+            <xsd:documentation>The credential-handlers element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-handler" type="credentialHandlerType" minOccurs="0" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentialHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>The credential-handler element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the credential handler name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a credential handler type that should be supported by a identity store.
+                </xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="jpaIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the JPA identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:attribute name="entity-manager-factory" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The JNDI url of the EntityManagerFactory that should be used, instead of the default
+                            factory.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="data-source" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The JNDI url of data source that should be used to create the default
+                            EntityManagerFactory.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="entity-module" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of the module where the JPA entities are located. Those entities will be used to
+                            initialize the JPA store.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="entity-module-unit-name" type="xsd:string" use="optional" default="identity">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of the persistence unit name, if the entity-module attribute is present.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="fileIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the File identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:attribute name="working-dir" type="xsd:string" use="optional" default="picketlink/idm">
+                    <xsd:annotation>
+                        <xsd:documentation>The working directory where data is located. If relative-to is specified, the working-dir is relative to its value.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="relative-to" type="xsd:string" use="optional" default="jboss.server.data.dir">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                            One of the system-provided named paths (such as jboss.home.dir,
+                            user.home, user.dir) relative to which the absolute path
+                            will be calculated for the path specified in the file attribute.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="always-create-files" type="xsd:boolean" use="optional" default="true">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if data should be always re-created between initializations.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="async-write" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if asynchronous write is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="async-write-thread-pool" type="xsd:int" use="optional" default="5">
+                    <xsd:annotation>
+                        <xsd:documentation>The size of the thread pool if asynchronous writing is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="ldapIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the LDAP identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:sequence>
+                    <xsd:element name="mappings" type="mappingsType" minOccurs="1" maxOccurs="1" nillable="false"/>
+                </xsd:sequence>
+                <xsd:attribute name="url" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>The working directory where data is located.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="bind-dn" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if data should be always re-created between initializations.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="bind-credential" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if asynchronous write is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="base-dn-suffix" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>The size of the thread pool if asynchronous writing is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="active-directory" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>Indicates if the LDAP server is a MSAD.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="unique-id-attribute-name" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of a LDAP attribute that unique identifies entries.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="mappingsType">
+        <xsd:annotation>
+            <xsd:documentation>The mappings element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="mapping" type="mappingType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="mappingType">
+        <xsd:annotation>
+            <xsd:documentation>The mapping element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="attribute" type="attributeType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the mapping type name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a type that should be supported by a identity store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="base-dn-suffix" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a base DN suffix where entries are located.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="object-classes" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>A comma separated list of object classes for entries.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="relates-to" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Tells that this mapping is related with another mapped type. Useful for relationship mappings.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="parent-membership-attribute-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The name of the LDAP attribute used to map parent-child relationships of the same type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributeType">
+        <xsd:annotation>
+            <xsd:documentation>The attribute element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The name of the property of the type mapped to a LDAP attribute.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="ldap-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The name of the LDAP attribute mapped to a type's property.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="is-identifier" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if this attribute is an identifier.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="read-only" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Marks an attribute as read only.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-picketlink-idm_2_0.xsd b/wildfly/docs/schema/wildfly-picketlink-idm_2_0.xsd
new file mode 100644
index 0000000..b6dba62
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-picketlink-idm_2_0.xsd
@@ -0,0 +1,354 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<xsd:schema xmlns:xsd="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:picketlink-identity-management:2.0"
+            xmlns="urn:jboss:domain:picketlink-identity-management:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The picketlink identity management subsystem root element -->
+    <xsd:element name="subsystem" type="subsystemType"/>
+
+    <xsd:complexType name="subsystemType">
+      <xsd:sequence>
+         <xsd:element name="partition-manager" type="partitionManagerType" minOccurs="0" maxOccurs="unbounded"/>
+      </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="partitionManagerType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the Partition Manager type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+          <xsd:element name="identity-configuration" type="identityConfigurationType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+          <xsd:annotation>
+            <xsd:documentation>Name for this instance.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="jndi-name" type="xsd:string" use="required">
+          <xsd:annotation>
+            <xsd:documentation>JNDI name to bind this instance.</xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityConfigurationType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the configuration for a Partition Manager type.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence minOccurs="1" maxOccurs="unbounded">
+            <xsd:element name="jpa-store" type="jpaIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="file-store" type="fileIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+            <xsd:element name="ldap-store" type="ldapIdentityStoreType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Name for this configuration.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="identityStoreType" abstract="true">
+        <xsd:annotation>
+            <xsd:documentation>Base schema for identity store elements.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="supported-types" type="supportedTypesType" minOccurs="1" maxOccurs="1" nillable="false"/>
+            <xsd:element name="credential-handlers" type="credentialHandlersType" minOccurs="0" maxOccurs="1" nillable="true"/>
+        </xsd:sequence>
+        <xsd:attribute name="support-credential" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the store should support credentials management.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="support-attribute" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if the store should support attributes management.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="supportedTypesType">
+        <xsd:annotation>
+            <xsd:documentation>The supported-types element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="supported-type" type="supportedType" minOccurs="0" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="supports-all" type="xsd:boolean" use="optional" default="true">
+            <xsd:annotation>
+                <xsd:documentation>Defines if all types and configurations are supported.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="supportedType">
+        <xsd:annotation>
+            <xsd:documentation>The supported-type element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the supported type name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a type that should be supported by a identity store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentialHandlersType">
+        <xsd:annotation>
+            <xsd:documentation>The credential-handlers element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="credential-handler" type="credentialHandlerType" minOccurs="0" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="credentialHandlerType">
+        <xsd:annotation>
+            <xsd:documentation>The credential-handler element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the credential handler name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a credential handler type that should be supported by a identity store.
+                </xsd:documentation>
+          </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="jpaIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the JPA identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:attribute name="entity-manager-factory" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The JNDI url of the EntityManagerFactory that should be used, instead of the default
+                        factory.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="data-source" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The JNDI url of data source that should be used to create the default
+                        EntityManagerFactory.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="entity-module" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of the module where the JPA entities are located. Those entities will be used to
+                        initialize the JPA store.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="entity-module-unit-name" type="xsd:string" use="optional" default="identity">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of the persistence unit name, if the entity-module attribute is present.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="fileIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the File identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:attribute name="working-dir" type="xsd:string" use="optional" default="picketlink/idm">
+                    <xsd:annotation>
+                        <xsd:documentation>The working directory where data is located. If relative-to is specified, the working-dir is relative to its value.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="relative-to" type="xsd:string" use="optional" default="jboss.server.data.dir">
+                    <xsd:annotation>
+                        <xsd:documentation>
+                        One of the system-provided named paths (such as jboss.home.dir,
+                        user.home, user.dir) relative to which the absolute path
+                        will be calculated for the path specified in the file attribute.
+                        </xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="always-create-files" type="xsd:boolean" use="optional" default="true">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if data should be always re-created between initializations.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="async-write" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if asynchronous write is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="async-write-thread-pool" type="xsd:int" use="optional" default="5">
+                    <xsd:annotation>
+                        <xsd:documentation>The size of the thread pool if asynchronous writing is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="ldapIdentityStoreType">
+        <xsd:annotation>
+            <xsd:documentation>Defines the schema for the LDAP identity store configuration.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:complexContent>
+            <xsd:extension base="identityStoreType">
+                <xsd:sequence>
+                    <xsd:element name="mappings" type="mappingsType" minOccurs="1" maxOccurs="1" nillable="false"/>
+                </xsd:sequence>
+                <xsd:attribute name="url" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>The working directory where data is located.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="bind-dn" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if data should be always re-created between initializations.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="bind-credential" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>Defines if asynchronous write is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="base-dn-suffix" type="xsd:string" use="required">
+                    <xsd:annotation>
+                        <xsd:documentation>The size of the thread pool if asynchronous writing is enabled.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="active-directory" type="xsd:boolean" use="optional" default="false">
+                    <xsd:annotation>
+                        <xsd:documentation>Indicates if the LDAP server is a MSAD.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+                <xsd:attribute name="unique-id-attribute-name" type="xsd:string" use="optional">
+                    <xsd:annotation>
+                        <xsd:documentation>The name of a LDAP attribute that unique identifies entries.</xsd:documentation>
+                    </xsd:annotation>
+                </xsd:attribute>
+            </xsd:extension>
+        </xsd:complexContent>
+    </xsd:complexType>
+
+    <xsd:complexType name="mappingsType">
+        <xsd:annotation>
+            <xsd:documentation>The mappings element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="mapping" type="mappingType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+    </xsd:complexType>
+
+    <xsd:complexType name="mappingType">
+        <xsd:annotation>
+            <xsd:documentation>The mapping element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:sequence>
+            <xsd:element name="attribute" type="attributeType" minOccurs="1" maxOccurs="unbounded" nillable="false"/>
+        </xsd:sequence>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>Defines the mapping type name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="class-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a type that should be supported by a identity store.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="code" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines an alias which maps to a built-in type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="module" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines the module to be used when loading class-name.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="base-dn-suffix" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Defines a base DN suffix where entries are located.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="object-classes" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>A comma separated list of object classes for entries.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="relates-to" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>Tells that this mapping is related with another mapped type. Useful for relationship mappings.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="parent-membership-attribute-name" type="xsd:string" use="optional">
+            <xsd:annotation>
+                <xsd:documentation>The name of the LDAP attribute used to map parent-child relationships of the same type.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+
+    <xsd:complexType name="attributeType">
+        <xsd:annotation>
+            <xsd:documentation>The attribute element schema.</xsd:documentation>
+        </xsd:annotation>
+        <xsd:attribute name="name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The name of the property of the type mapped to a LDAP attribute.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="ldap-name" type="xsd:string" use="required">
+            <xsd:annotation>
+                <xsd:documentation>The name of the LDAP attribute mapped to a type's property.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="is-identifier" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Indicates if this attribute is an identifier.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+        <xsd:attribute name="read-only" type="xsd:boolean" use="optional" default="false">
+            <xsd:annotation>
+                <xsd:documentation>Marks an attribute as read only.</xsd:documentation>
+            </xsd:annotation>
+        </xsd:attribute>
+    </xsd:complexType>
+</xsd:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-remoting_2_0.xsd b/wildfly/docs/schema/wildfly-remoting_2_0.xsd
new file mode 100644
index 0000000..d485866
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-remoting_2_0.xsd
@@ -0,0 +1,522 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:2.0"
+            xmlns="urn:jboss:domain:remoting:2.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="2.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="worker-thread-pool" type="workerThreadsType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                   Deprecated and replaced with the 'endpoint' configuration that can reference a worker from the IO subsystem.
+                   This is only supported for use in managed domain profiles whose servers are all running on
+                   previous versions that do not support the 'endpoint' configuration. Use in a server
+                   running a version after the introduction of the 'endpoint' configuration will result
+                   in an error.
+               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="endpoint" type="endpointType"></xs:element>
+            </xs:choice>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workerThreadsType">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[
+                   Deprecated configuration of the worker thread pool.
+
+                   Only supported for legacy servers in a managed domain.
+               ]]>
+               </xs:documentation>
+           </xs:annotation>
+           <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+       </xs:complexType>
+
+
+    <xs:complexType name="endpointType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Configures the remoting endpoint.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="worker" type="xs:string" default="default">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                The name of the IO subsystem worker the endpoint should use.
+            ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+        <xs:attribute name="authorize-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The SASL authorization ID.  Used as authentication user name to use if no authentication {@code CallbackHandler} is specified
+                                    and the selected SASL mechanism demands a user name.
+                       ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The authentication realm to use if no authentication {@code CallbackHandler} is specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" default="http-remoting">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum outbound message size to send.  No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-region-size" type="xs:positiveInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of allocated buffer regions.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will accept over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Specify the number of times a client is allowed to retry authentication before closing the connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the transmit direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of outbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will transmit over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of inbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the receive direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The interval to use for connection heartbeat, in milliseconds.  If the connection is idle in the outbound direction\
+                    for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum inbound message size to be allowed.  Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent outbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent inbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The "socket-binding" attribute specifies the name (or names) of the socket binding(s) to attach to.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="socket-binding" type="name-list" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting HTTP upgrade based connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The "connector-ref" specifies the name of the Undertow http connector to use.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="connector-ref" type="name-list" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:simpleType name="strength">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+                <xs:attribute name="protocol" type="xs:string" use="optional"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-remoting_3_0.xsd b/wildfly/docs/schema/wildfly-remoting_3_0.xsd
new file mode 100644
index 0000000..ac5a89c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-remoting_3_0.xsd
@@ -0,0 +1,544 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:3.0"
+            xmlns="urn:jboss:domain:remoting:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="worker-thread-pool" type="workerThreadsType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                   Deprecated and replaced with the 'endpoint' configuration that can reference a worker from the IO subsystem.
+                   This is only supported for use in managed domain profiles whose servers are all running on
+                   previous versions that do not support the 'endpoint' configuration. Use in a server
+                   running a version after the introduction of the 'endpoint' configuration will result
+                   in an error.
+               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="endpoint" type="endpointType"></xs:element>
+            </xs:choice>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workerThreadsType">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[
+                   Deprecated configuration of the worker thread pool.
+
+                   Only supported for legacy servers in a managed domain.
+               ]]>
+               </xs:documentation>
+           </xs:annotation>
+           <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+       </xs:complexType>
+
+
+    <xs:complexType name="endpointType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Configures the remoting endpoint.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="worker" type="xs:string" default="default">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                The name of the IO subsystem worker the endpoint should use.
+            ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+        <xs:attribute name="authorize-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The SASL authorization ID.  Used as authentication user name to use if no authentication {@code CallbackHandler} is specified
+                                    and the selected SASL mechanism demands a user name.
+                       ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The authentication realm to use if no authentication {@code CallbackHandler} is specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" default="http-remoting">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum outbound message size to send.  No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-region-size" type="xs:positiveInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of allocated buffer regions.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will accept over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Specify the number of times a client is allowed to retry authentication before closing the connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the transmit direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of outbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will transmit over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of inbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the receive direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The interval to use for connection heartbeat, in milliseconds.  If the connection is idle in the outbound direction\
+                    for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum inbound message size to be allowed.  Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent outbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent inbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstractConnector" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The base configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+                
+                The optional server-name attribute specifies the server name that should be used in the initial exchange with
+                the client and within the SASL mechanisms used for authentication.
+
+                The optional sasl-protocol attribute specifies the protocol that should be used within the SASL mechanisms. 
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+        <xs:attribute name="server-name" type="xs:string" use="optional" />
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote" />
+    </xs:complexType>
+    
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "socket-binding" attribute specifies the name (or names) of the socket binding(s) to attach to.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="socket-binding" type="name-list" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting HTTP upgrade based connector.
+
+                The "connector-ref" specifies the name of the Undertow http connector to use.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="connector-ref" type="name-list" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength-listType" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="strength-listType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                An element specifying a strength list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="strength-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="strength-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+                <xs:attribute name="protocol" type="xs:string" use="optional"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-remoting_4_0.xsd b/wildfly/docs/schema/wildfly-remoting_4_0.xsd
new file mode 100644
index 0000000..20a80c6
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-remoting_4_0.xsd
@@ -0,0 +1,559 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:4.0"
+            xmlns="urn:jboss:domain:remoting:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="worker-thread-pool" type="workerThreadsType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                   Deprecated and replaced with the 'endpoint' configuration that can reference a worker from the IO subsystem.
+                   This is only supported for use in managed domain profiles whose servers are all running on
+                   previous versions that do not support the 'endpoint' configuration. Use in a server
+                   running a version after the introduction of the 'endpoint' configuration will result
+                   in an error.
+               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="endpoint" type="endpointType"></xs:element>
+            </xs:choice>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workerThreadsType">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[
+                   Deprecated configuration of the worker thread pool.
+
+                   Only supported for legacy servers in a managed domain.
+               ]]>
+               </xs:documentation>
+           </xs:annotation>
+           <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+       </xs:complexType>
+
+
+    <xs:complexType name="endpointType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Configures the remoting endpoint.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="worker" type="xs:string" default="default">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                The name of the IO subsystem worker the endpoint should use.
+            ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+        <xs:attribute name="authorize-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The SASL authorization ID.  Used as authentication user name to use if no authentication {@code CallbackHandler} is specified
+                                    and the selected SASL mechanism demands a user name.
+                       ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The authentication realm to use if no authentication {@code CallbackHandler} is specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote+http">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum outbound message size to send.  No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-region-size" type="xs:positiveInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of allocated buffer regions.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will accept over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Specify the number of times a client is allowed to retry authentication before closing the connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the transmit direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent outbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will transmit over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent inbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the receive direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The interval to use for connection heartbeat, in milliseconds.  If the connection is idle in the outbound direction\
+                    for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum inbound message size to be allowed.  Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of outbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of inbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstractConnector" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The base configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+
+                The optional server-name attribute specifies the server name that should be used in the initial exchange with
+                the client and within the SASL mechanisms used for authentication.
+
+                The optional sasl-protocol attribute specifies the protocol that should be used within the SASL mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+        <xs:attribute name="server-name" type="xs:string" use="optional" />
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote" />
+        <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SASL authentication factory to use for authenticating requests to this connector.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "socket-binding" attribute specifies the name of the socket binding to attach to.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext to use for this connector.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting HTTP upgrade based connector.
+
+                The "connector-ref" specifies the name of the Undertow http connector to use.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="connector-ref" type="name-list" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength-listType" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="strength-listType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                An element specifying a strength list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="strength-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="strength-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+                <xs:attribute name="protocol" type="xs:string" use="optional"/>
+                <xs:attribute name="authentication-context" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-remoting_5_0.xsd b/wildfly/docs/schema/wildfly-remoting_5_0.xsd
new file mode 100644
index 0000000..2e6703a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-remoting_5_0.xsd
@@ -0,0 +1,573 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:5.0"
+            xmlns="urn:jboss:domain:remoting:5.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="5.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="worker-thread-pool" type="workerThreadsType">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                   Deprecated and replaced with the 'endpoint' configuration that can reference a worker from the IO subsystem.
+                   This is only supported for use in managed domain profiles whose servers are all running on
+                   previous versions that do not support the 'endpoint' configuration. Use in a server
+                   running a version after the introduction of the 'endpoint' configuration will result
+                   in an error.
+               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="endpoint" type="endpointType"></xs:element>
+            </xs:choice>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workerThreadsType">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[
+                   Deprecated configuration of the worker thread pool.
+
+                   Only supported for legacy servers in a managed domain.
+               ]]>
+               </xs:documentation>
+           </xs:annotation>
+           <xs:attribute name="read-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="write-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-core-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-max-threads" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-keepalive" type="xs:integer" use="optional"/>
+           <xs:attribute name="task-limit" type="xs:integer" use="optional"/>
+       </xs:complexType>
+
+
+    <xs:complexType name="endpointType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Configures the remoting endpoint.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="worker" type="xs:string" default="default">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                The name of the IO subsystem worker the endpoint should use.
+            ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+        <xs:attribute name="authorize-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        The SASL authorization ID.  Used as authentication user name to use if no authentication {@code CallbackHandler} is specified
+                                    and the selected SASL mechanism demands a user name.
+                       ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The authentication realm to use if no authentication {@code CallbackHandler} is specified.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote+http">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum outbound message size to send.  No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-region-size" type="xs:positiveInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of allocated buffer regions.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will accept over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[Specify the number of times a client is allowed to retry authentication before closing the connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the transmit direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent outbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The size of the largest buffer that this endpoint will transmit over a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of concurrent inbound messages on a channel.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum window size of the receive direction for connection channels, in bytes.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The interval to use for connection heartbeat, in milliseconds.  If the connection is idle in the outbound direction\
+                    for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum inbound message size to be allowed.  Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of outbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The maximum number of inbound channels to support for a connection.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstractConnector" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The base configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+
+                The optional server-name attribute specifies the server name that should be used in the initial exchange with
+                the client and within the SASL mechanisms used for authentication.
+
+                The optional sasl-protocol attribute specifies the protocol that should be used within the SASL mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="authentication-provider" type="ref" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: Security configuration for connectors should be specified using a sasl-authentication-factory and/or
+                    ssl-context reference instead of using a security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional" />
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote" />
+        <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SASL authentication factory to use for authenticating requests to this connector.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting connector.
+
+                The "socket-binding" attribute specifies the name of the socket binding to attach to.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext to use for this connector.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-connector">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of a Remoting HTTP upgrade based connector.
+
+                The "connector-ref" specifies the name of the Undertow http connector to use.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="connector-ref" type="name-list" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="include-mechanisms" type="name-listType" minOccurs="0"/>
+            <xs:element name="qop" type="qop-listType" minOccurs="0"/>
+            <xs:element name="strength" type="strength-listType" minOccurs="0"/>
+            <xs:element name="reuse-session" type="boolean-element" minOccurs="0"/>
+            <xs:element name="server-auth" type="boolean-element" minOccurs="0"/>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="forward-secrecy" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-active" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-anonymous" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-dictionary" type="boolean-element" minOccurs="0"/>
+            <xs:element name="no-plain-text" type="boolean-element" minOccurs="0"/>
+            <xs:element name="pass-credentials" type="boolean-element" minOccurs="0"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-element">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a boolean value.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a string list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of string items.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="qop-listType">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                An element specifying a qop list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="qop-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL quality-of-protection value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="strength-listType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                An element specifying a strength list.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="strength-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="strength-list">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The SASL strength value list.  See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH
+                for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A set of free-form properties.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A free-form property.  The name is required; the value is optional.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="ref">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                A reference to another named service.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Deprecated: Outbound connection definitions should migrate to use an authentication-context
+                            instead of the security-realm reference.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string" use="optional"/>
+                <xs:attribute name="authentication-context" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-remoting_6_0.xsd b/wildfly/docs/schema/wildfly-remoting_6_0.xsd
new file mode 100644
index 0000000..0798f45
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-remoting_6_0.xsd
@@ -0,0 +1,446 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:6.0"
+            xmlns="urn:jboss:domain:remoting:6.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="6.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="endpoint" type="endpointType"/>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="endpointType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures the remoting endpoint.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="worker" type="xs:string" default="default">
+            <xs:annotation>
+                <xs:documentation>
+	                The name of the IO subsystem worker the endpoint should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+        <xs:attribute name="authorize-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL authorization ID.  Used as authentication user name to use if no authentication CallbackHandler is specified and the selected SASL mechanism demands a user name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication realm to use if no authentication CallbackHandler is specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote+http">
+            <xs:annotation>
+                <xs:documentation>
+                    Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum outbound message size to send.  No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-region-size" type="xs:positiveInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    The size of allocated buffer regions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    The size of the largest buffer that this endpoint will accept over a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify the number of times a client is allowed to retry authentication before closing the connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum window size of the transmit direction for connection channels, in bytes.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of concurrent outbound messages on a channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    The size of the largest buffer that this endpoint will transmit over a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of concurrent inbound messages on a channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum window size of the receive direction for connection channels, in bytes.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
+            <xs:annotation>
+                <xs:documentation>
+                    The interval to use for connection heartbeat, in milliseconds.
+                    If the connection is idle in the outbound direction for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum inbound message size to be allowed.
+                    Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of outbound channels to support for a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of inbound channels to support for a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name">
+            <xs:annotation>
+                <xs:documentation>
+                    The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstractConnector" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+
+                The optional server-name attribute specifies the server name that should be used in the initial exchange with
+                the client and within the SASL mechanisms used for authentication.
+
+                The optional sasl-protocol attribute specifies the protocol that should be used within the SASL mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="authentication-provider" type="xs:string"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: Security configuration for connectors should be specified using a sasl-authentication-factory and/or
+                    ssl-context reference instead of using a security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional" />
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote" />
+        <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SASL authentication factory to use for authenticating requests to this connector.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of a Remoting connector.
+
+                The "socket-binding" attribute specifies the name of the socket binding to attach to.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext to use for this connector.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-connector">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of a Remoting HTTP upgrade based connector.
+
+                The "connector-ref" specifies the name of the Undertow http connector to use.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="connector-ref" type="name-list" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="include-mechanisms" type="name-list"/>
+        <xs:attribute name="qop" type="qop-list"/>
+        <xs:attribute name="strength" type="strength-list"/>
+        <xs:attribute name="reuse-session" type="xs:boolean" default="false"/>
+        <xs:attribute name="server-auth" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="forward-secrecy" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-active" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-anonymous" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-dictionary" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-plain-text" type="xs:boolean" default="true"/>
+        <xs:attribute name="pass-credentials" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+                An element specifying a string list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+                A set of string items.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL quality-of-protection value list.
+                See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP for more information.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:simpleType name="strength-list">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL strength value list.
+                See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH for more information.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+                A set of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+                A free-form property.  The name is required; the value is optional.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Deprecated: Outbound connection definitions should migrate to use an authentication-context
+                            instead of the security-realm reference.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string" use="optional"/>
+                <xs:attribute name="authentication-context" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-remoting_7_0.xsd b/wildfly/docs/schema/wildfly-remoting_7_0.xsd
new file mode 100644
index 0000000..6e589ce
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-remoting_7_0.xsd
@@ -0,0 +1,446 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:remoting:7.0"
+            xmlns="urn:jboss:domain:remoting:7.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="7.0">
+
+    <!-- The remoting subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of the Remoting subsystem.
+
+                The 'worker-thread-pool' element configures the worker thread pool.
+                The nested "connector" element(s) define connectors for this subsystem.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="endpoint" type="endpointType"/>
+            <xs:element name="connector" type="connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-connector" type="http-connector" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="outbound-connections" minOccurs="0" type="outbound-connectionsType" />
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="endpointType">
+        <xs:annotation>
+            <xs:documentation>
+                Configures the remoting endpoint.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="worker" type="xs:string" default="default">
+            <xs:annotation>
+                <xs:documentation>
+	                The name of the IO subsystem worker the endpoint should use.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+
+        <xs:attribute name="authorize-id" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The SASL authorization ID.  Used as authentication user name to use if no authentication CallbackHandler is specified and the selected SASL mechanism demands a user name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="auth-realm" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The authentication realm to use if no authentication CallbackHandler is specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote+http">
+            <xs:annotation>
+                <xs:documentation>
+                    Where a SaslServer or SaslClient are created by default the protocol specified it 'remoting', this can be used to override this.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum outbound message size to send.  No messages larger than this well be transmitted; attempting to do so will cause an exception on the writing side.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="buffer-region-size" type="xs:positiveInteger">
+            <xs:annotation>
+                <xs:documentation>
+                    The size of allocated buffer regions.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    The size of the largest buffer that this endpoint will accept over a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="authentication-retries" type="xs:positiveInteger" default="3">
+            <xs:annotation>
+                <xs:documentation>
+                    Specify the number of times a client is allowed to retry authentication before closing the connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="transmit-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum window size of the transmit direction for connection channels, in bytes.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-messages" type="xs:positiveInteger" default="65535">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of concurrent outbound messages on a channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="send-buffer-size" type="xs:positiveInteger" default="8192">
+            <xs:annotation>
+                <xs:documentation>
+                    The size of the largest buffer that this endpoint will transmit over a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-messages" type="xs:positiveInteger" default="80">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of concurrent inbound messages on a channel.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="receive-window-size" type="xs:positiveInteger" default="131072">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum window size of the receive direction for connection channels, in bytes.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="heartbeat-interval" type="xs:positiveInteger" default="2147483647">
+            <xs:annotation>
+                <xs:documentation>
+                    The interval to use for connection heartbeat, in milliseconds.
+                    If the connection is idle in the outbound direction for this amount of time, a ping message will be sent, which will trigger a corresponding reply message.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-message-size" type="xs:long" default="9223372036854775807">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum inbound message size to be allowed.
+                    Messages exceeding this size will cause an exception to be thrown on the reading side as well as the writing side.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-outbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of outbound channels to support for a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="max-inbound-channels" type="xs:positiveInteger" default="40">
+            <xs:annotation>
+                <xs:documentation>
+                    The maximum number of inbound channels to support for a connection.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name">
+            <xs:annotation>
+                <xs:documentation>
+                    The server side of the connection passes it's name to the client in the initial greeting, by default the name is automatically discovered from the local address of the connection or it can be overridden using this.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="abstractConnector" abstract="true">
+        <xs:annotation>
+            <xs:documentation>
+                The base configuration of a Remoting connector.
+
+                The "name" attribute specifies the unique name of this connector.
+
+                The optional nested "sasl" element contains the SASL authentication configuration for this connector.
+
+                The optional nested "authentication-provider" element contains the name of the authentication provider to
+                use for incoming connections.
+
+                The optional server-name attribute specifies the server name that should be used in the initial exchange with
+                the client and within the SASL mechanisms used for authentication.
+
+                The optional sasl-protocol attribute specifies the protocol that should be used within the SASL mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="sasl" type="sasl" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="authentication-provider" type="xs:string"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: Security configuration for connectors should be specified using a sasl-authentication-factory and/or
+                    ssl-context reference instead of using a security-realm.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="server-name" type="xs:string" use="optional" />
+        <xs:attribute name="sasl-protocol" type="xs:string" default="remote" />
+        <xs:attribute name="sasl-authentication-factory" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the SASL authentication factory to use for authenticating requests to this connector.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="connector">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of a Remoting connector.
+
+                The "socket-binding" attribute specifies the name of the socket binding to attach to.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext to use for this connector.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-connector">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of a Remoting HTTP upgrade based connector.
+
+                The "connector-ref" specifies the name of the Undertow http connector to use.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:complexContent>
+            <xs:extension base="abstractConnector">
+                <xs:attribute name="connector-ref" type="name-list" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="sasl">
+        <xs:annotation>
+            <xs:documentation>
+                The configuration of the SASL authentication layer for this server.
+
+                The optional nested "include-mechanisms" element contains a whitelist of allowed SASL mechanism names.
+                No mechanisms will be allowed which are not present in this list.
+
+                The optional nested "qop" element contains a list of quality-of-protection values, in decreasing order
+                of preference.
+
+                The optional nested "strength" element contains a list of cipher strength values, in decreasing order
+                of preference.
+
+                The optional nested "reuse-session" boolean element specifies whether or not the server should attempt
+                to reuse previously authenticated session information.  The mechanism may or may not support such reuse,
+                and other factors may also prevent it.
+
+                The optional nested "server-auth" boolean element specifies whether the server should authenticate to the
+                client.  Not all mechanisms may support this setting.
+
+                The optional nested "policy" boolean element specifies a policy to use to narrow down the available set
+                of mechanisms.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="policy" type="policy" minOccurs="0"/>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="include-mechanisms" type="name-list"/>
+        <xs:attribute name="qop" type="qop-list"/>
+        <xs:attribute name="strength" type="strength-list"/>
+        <xs:attribute name="reuse-session" type="xs:boolean" default="false"/>
+        <xs:attribute name="server-auth" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="policy">
+        <xs:annotation>
+            <xs:documentation>
+                Policy criteria items to use in order to choose a SASL mechanism.
+
+                The optional nested "forward-secrecy" element contains a boolean value which specifies whether mechanisms
+                that implement forward secrecy between sessions are required. Forward secrecy means that breaking into
+                one session will not automatically provide information for breaking into future sessions.
+
+                The optional nested "no-active" element contains a boolean value which specifies whether mechanisms
+                susceptible to active (non-dictionary) attacks are not permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-anonymous" element contains a boolean value which specifies whether mechanisms
+                that accept anonymous login are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-dictionary" element contains a boolean value which specifies whether mechanisms
+                susceptible to passive dictionary attacks are permitted.  "false" to permit, "true" to deny.
+
+                The optional nested "no-plain-text" element contains a boolean value which specifies whether mechanisms
+                susceptible to simple plain passive attacks (e.g., "PLAIN") are not permitted.    "false" to permit, "true" to deny.
+
+                The optional nested "pass-credentials" element contains a boolean value which specifies whether
+                mechanisms that pass client credentials are required.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="forward-secrecy" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-active" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-anonymous" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-dictionary" type="xs:boolean" default="true"/>
+        <xs:attribute name="no-plain-text" type="xs:boolean" default="true"/>
+        <xs:attribute name="pass-credentials" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="name-listType">
+        <xs:annotation>
+            <xs:documentation>
+                An element specifying a string list.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="value" type="name-list" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="name-list">
+        <xs:annotation>
+            <xs:documentation>
+                A set of string items.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:simpleType name="qop-list">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL quality-of-protection value list.
+                See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#QOP for more information.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="auth"/>
+                    <xs:enumeration value="auth-int"/>
+                    <xs:enumeration value="auth-conf"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:simpleType name="strength-list">
+        <xs:annotation>
+            <xs:documentation>
+                The SASL strength value list.
+                See http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/api/javax/security/sasl/Sasl.html#STRENGTH for more information.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:list>
+            <xs:simpleType>
+                <xs:restriction base="xs:token">
+                    <xs:enumeration value="low"/>
+                    <xs:enumeration value="medium"/>
+                    <xs:enumeration value="high"/>
+                </xs:restriction>
+            </xs:simpleType>
+        </xs:list>
+    </xs:simpleType>
+
+    <xs:complexType name="properties">
+        <xs:annotation>
+            <xs:documentation>
+                A set of free-form properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property" type="property"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="property">
+        <xs:annotation>
+            <xs:documentation>
+                A free-form property.  The name is required; the value is optional.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="value" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionsType">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="local-outbound-connection" type="local-outbound-connectionType" />
+            <xs:element name="remote-outbound-connection" type="remote-outbound-connectionType" />
+            <xs:element name="outbound-connection" type="outbound-connectionType" />
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="base-outbound-connectionType">
+        <xs:all>
+            <xs:element name="properties" type="properties" minOccurs="0"/>
+        </xs:all>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="uri" type="xs:anyURI" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="local-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="remote-outbound-connectionType">
+        <xs:complexContent>
+            <xs:extension base="base-outbound-connectionType">
+                <xs:attribute name="outbound-socket-binding-ref" type="xs:string" use="required"/>
+                <xs:attribute name="username" type="xs:string" use="optional"/>
+                <xs:attribute name="security-realm" type="xs:string" use="optional">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Deprecated: Outbound connection definitions should migrate to use an authentication-context
+                            instead of the security-realm reference.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="protocol" type="xs:string" use="optional"/>
+                <xs:attribute name="authentication-context" type="xs:string" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-request-controller_1_0.xsd b/wildfly/docs/schema/wildfly-request-controller_1_0.xsd
new file mode 100644
index 0000000..220c3c1
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-request-controller_1_0.xsd
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:request-controller:1.0" xmlns:ex="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:request-controller:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The request controller subsystem root element -->
+    <xs:element name="subsystem" type="request-controller-subsystemType"/>
+    <xs:complexType name="request-controller-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the request controller subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="max-requests" type="xs:int" default="-1" />
+        <xs:attribute name="track-individual-endpoints" type="xs:boolean" default="false" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_2_0.xsd b/wildfly/docs/schema/wildfly-resource-adapters_2_0.xsd
new file mode 100644
index 0000000..36b715c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_2_0.xsd
@@ -0,0 +1,934 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:2.0" xmlns="urn:jboss:domain:resource-adapters:2.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+  <xs:complexType name="workmanagerType">
+    <xs:sequence>
+      <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityType">
+    <xs:sequence>
+      <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="domain" type="xs:token" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityGroupsType">
+    <xs:sequence>
+      <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The name of the group
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsType">
+    <xs:sequence>
+      <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the users
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsUsersType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A user mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A group mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingType">
+    <xs:sequence>
+    </xs:sequence>
+    <xs:attribute name="from" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the original value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="to" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the mapped value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_3_0.xsd b/wildfly/docs/schema/wildfly-resource-adapters_3_0.xsd
new file mode 100644
index 0000000..f66c3e5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_3_0.xsd
@@ -0,0 +1,973 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:3.0" xmlns="urn:jboss:domain:resource-adapters:3.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+            </xs:documentation>
+          </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential are not specified the security credential are used for recover too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+  <xs:complexType name="workmanagerType">
+    <xs:sequence>
+      <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityType">
+    <xs:sequence>
+      <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="domain" type="xs:token" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityGroupsType">
+    <xs:sequence>
+      <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The name of the group
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsType">
+    <xs:sequence>
+      <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the users
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsUsersType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A user mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A group mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingType">
+    <xs:sequence>
+    </xs:sequence>
+    <xs:attribute name="from" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the original value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="to" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the mapped value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_4_0.xsd b/wildfly/docs/schema/wildfly-resource-adapters_4_0.xsd
new file mode 100644
index 0000000..c0414b9
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_4_0.xsd
@@ -0,0 +1,1001 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:4.0" xmlns="urn:jboss:domain:resource-adapters:4.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+            </xs:documentation>
+          </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential is not specified the security credential is used for recovery too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+              <security-domain>HsqlDbRealm</security-domain>
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+  <xs:complexType name="workmanagerType">
+    <xs:sequence>
+      <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityType">
+    <xs:sequence>
+      <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="domain" type="xs:token" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityGroupsType">
+    <xs:sequence>
+      <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The name of the group
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsType">
+    <xs:sequence>
+      <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the users
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsUsersType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A user mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A group mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingType">
+    <xs:sequence>
+    </xs:sequence>
+    <xs:attribute name="from" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the original value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="to" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the mapped value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_5_0.xsd b/wildfly/docs/schema/wildfly-resource-adapters_5_0.xsd
new file mode 100644
index 0000000..7566417
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_5_0.xsd
@@ -0,0 +1,1106 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:5.0" xmlns="urn:jboss:domain:resource-adapters:5.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+            </xs:documentation>
+          </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0" maxOccurs="1">
+          <xs:element name="elytron-enabled" type="boolean-presenceType" minOccurs="1">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via either authentication-context or authentication-context-and-application),
+                Elytron will use that specified context for authenticating. Else, Elytron will use the
+                current authentication context of the caller that is retrieving the connection.
+                Ex:
+                <elytron-enabled/>
+              ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:choice minOccurs="0" maxOccurs="1">
+            <xs:element name="authentication-context" type="xs:token">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                  Indicates the Elytron context that will be used for authenticating connections during
+                  container-managed sign-on.
+                  The resulting Subject will be used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    <elytron-enabled/>
+                    <authentication-context>HsqlDbContext</authentication-context>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="authentication-context-and-application" type="xs:token">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                  Indicates that either app supplied parameters (such as from
+                  getConnection(user, pw)) or an authenticated Subject (resulting of container-managed sign-on
+                  authentication) are used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    </elytron-enabled/>
+                    <authentication-context-and-application>HsqlDbContext</authentication-context-and-application>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+          </xs:choice>
+        </xs:sequence>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential is not specified the security credential is used for recovery too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            Credential to be used by the configuration.
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice minOccurs="0">
+        <xs:element name="security-domain" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence>
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use that specified context for authenticating.
+                Else, Elytron will use the current authentication context of the caller that is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                <elytron-enabled/>
+                <authentication-context>HsqlDbContext</authentication-context>
+            ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+  <xs:complexType name="workmanagerType">
+    <xs:sequence>
+      <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityType">
+    <xs:sequence>
+      <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="elytron-security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Indicates that Elytron is responsible for WorkManager security. It defines the name of the Elytron
+                  security domain that should be used
+                  Ex:
+                    <elytron-security-domain>ApplicationDomain</elytron-security-domain>
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityGroupsType">
+    <xs:sequence>
+      <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The name of the group
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsType">
+    <xs:sequence>
+      <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the users
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsUsersType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A user mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A group mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingType">
+    <xs:sequence>
+    </xs:sequence>
+    <xs:attribute name="from" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the original value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="to" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the mapped value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_6_0.xsd b/wildfly/docs/schema/wildfly-resource-adapters_6_0.xsd
new file mode 100644
index 0000000..45f79bb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_6_0.xsd
@@ -0,0 +1,1106 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:6.0" xmlns="urn:jboss:domain:resource-adapters:6.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+            </xs:documentation>
+          </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0" maxOccurs="1">
+          <xs:element name="elytron-enabled" type="boolean-presenceType" minOccurs="1">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via either authentication-context or authentication-context-and-application),
+                Elytron will use that specified context for authenticating. Else, Elytron will use the
+                current authentication context of the caller that is retrieving the connection.
+                Ex:
+                <elytron-enabled/>
+              ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:choice minOccurs="0" maxOccurs="1">
+            <xs:element name="authentication-context" type="xs:token">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                  Indicates the Elytron context that will be used for authenticating connections during
+                  container-managed sign-on.
+                  The resulting Subject will be used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    <elytron-enabled/>
+                    <authentication-context>HsqlDbContext</authentication-context>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="authentication-context-and-application" type="xs:token">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                  Indicates that either app supplied parameters (such as from
+                  getConnection(user, pw)) or an authenticated Subject (resulting of container-managed sign-on
+                  authentication) are used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    </elytron-enabled/>
+                    <authentication-context-and-application>HsqlDbContext</authentication-context-and-application>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+          </xs:choice>
+        </xs:sequence>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential is not specified the security credential is used for recovery too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            Credential to be used by the configuration.
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice minOccurs="0">
+        <xs:element name="security-domain" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence>
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use that specified context for authenticating.
+                Else, Elytron will use the current authentication context of the caller that is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                <elytron-enabled/>
+                <authentication-context>HsqlDbContext</authentication-context>
+            ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+  <xs:complexType name="workmanagerType">
+    <xs:sequence>
+      <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityType">
+    <xs:sequence>
+      <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="elytron-security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Indicates that Elytron is responsible for WorkManager security. It defines the name of the Elytron
+                  security domain that should be used
+                  Ex:
+                    <elytron-security-domain>ApplicationDomain</elytron-security-domain>
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityGroupsType">
+    <xs:sequence>
+      <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The name of the group
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsType">
+    <xs:sequence>
+      <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the users
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsUsersType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A user mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A group mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingType">
+    <xs:sequence>
+    </xs:sequence>
+    <xs:attribute name="from" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the original value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="to" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the mapped value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_6_1.xsd b/wildfly/docs/schema/wildfly-resource-adapters_6_1.xsd
new file mode 100644
index 0000000..c0ea86c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_6_1.xsd
@@ -0,0 +1,1111 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:6.1" xmlns="urn:jboss:domain:resource-adapters:6.1"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+  <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+  <xs:element name="subsystem" type="subsystemType"/>
+
+  <xs:complexType name="subsystemType">
+    <xs:all>
+      <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+      <xs:element name="report-directory" type="report-directoryType" minOccurs="0" maxOccurs="1"/>
+    </xs:all>
+  </xs:complexType>
+
+  <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+  <xs:complexType name="config-propertyType" mixed="true">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:simpleContent>
+      <xs:extension base="xs:token">
+        <xs:attribute use="required" name="name" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+      </xs:extension>
+    </xs:simpleContent>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adapterType">
+    <xs:sequence>
+      <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+        <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:element>
+        <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the administration objects
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="id" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+          </xs:documentation>
+        </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+            </xs:documentation>
+          </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:simpleType name="transaction-supportType">
+    <xs:annotation>
+      <xs:documentation>
+        <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+      </xs:documentation>
+    </xs:annotation>
+    <xs:restriction base="xs:token">
+      <xs:enumeration value="NoTransaction" />
+      <xs:enumeration value="LocalTransaction" />
+      <xs:enumeration value="XATransaction" />
+    </xs:restriction>
+  </xs:simpleType>
+
+  <xs:attributeGroup name="common-attribute">
+    <xs:attribute name="class-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="jndi-name" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Should the object in question be activated
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="pool-name" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:attributeGroup>
+
+  <xs:complexType name="admin-objectType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="timeoutType">
+    <xs:sequence>
+      <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="validationType">
+    <xs:sequence>
+      <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="resource-adaptersType">
+    <xs:sequence>
+      <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-definitionsType">
+    <xs:sequence>
+      <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies a connection definition
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="connection-defintionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice>
+        <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+      </xs:choice>
+      <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies security settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies timeout settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies validation settings
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Enable cached connection manager
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute default="false" name="connectable" type="xs:boolean">
+      <xs:annotation>
+        <xs:documentation>
+            <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="tracking" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="mcp" type="xs:token" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+  </xs:complexType>
+
+  <xs:complexType name="poolType">
+    <xs:sequence>
+      <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="fair" type="xs:boolean" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="xa-poolType">
+    <xs:complexContent>
+      <xs:extension base="poolType">
+        <xs:sequence>
+          <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:extension>
+    </xs:complexContent>
+  </xs:complexType>
+
+  <xs:complexType name="securityType">
+    <xs:sequence>
+      <xs:choice>
+        <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence minOccurs="0" maxOccurs="1">
+          <xs:element name="elytron-enabled" type="xs:boolean" minOccurs="1">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via either authentication-context or authentication-context-and-application),
+                Elytron will use that specified context for authenticating. Else, Elytron will use the
+                current authentication context of the caller that is retrieving the connection.
+                Ex:
+                <elytron-enabled/>
+              ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:choice minOccurs="0" maxOccurs="1">
+            <xs:element name="authentication-context" type="xs:token">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                  Indicates the Elytron context that will be used for authenticating connections during
+                  container-managed sign-on.
+                  The resulting Subject will be used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    <elytron-enabled/>
+                    <authentication-context>HsqlDbContext</authentication-context>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+            <xs:element name="authentication-context-and-application" type="xs:token">
+              <xs:annotation>
+                <xs:documentation>
+                  <![CDATA[[
+                  Indicates that either app supplied parameters (such as from
+                  getConnection(user, pw)) or an authenticated Subject (resulting of container-managed sign-on
+                  authentication) are used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    </elytron-enabled/>
+                    <authentication-context-and-application>HsqlDbContext</authentication-context-and-application>
+                  ]]>
+                </xs:documentation>
+              </xs:annotation>
+            </xs:element>
+          </xs:choice>
+        </xs:sequence>
+      </xs:choice>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="admin-objectsType">
+    <xs:sequence>
+      <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="bean-validation-groupsType">
+    <xs:sequence>
+      <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+  <xs:complexType name="recoverType">
+    <xs:sequence>
+      <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential is not specified the security credential is used for recovery too
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+    <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="extensionType">
+    <xs:sequence>
+      <xs:element name="config-property" type="config-propertyType"></xs:element>
+    </xs:sequence>
+    <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+  <xs:complexType name="credentialType">
+    <xs:sequence>
+      <xs:element name="user-name" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="password" type="xs:token" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+              <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            Credential to be used by the configuration.
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:choice minOccurs="0">
+        <xs:element name="security-domain" type="xs:token">
+          <xs:annotation>
+            <xs:documentation>
+              <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+            </xs:documentation>
+          </xs:annotation>
+        </xs:element>
+        <xs:sequence>
+          <xs:element name="elytron-enabled" type="boolean-presenceType">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use that specified context for authenticating.
+                Else, Elytron will use the current authentication context of the caller that is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+          <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+            <xs:annotation>
+              <xs:documentation>
+                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                <elytron-enabled/>
+                <authentication-context>HsqlDbContext</authentication-context>
+            ]]>
+              </xs:documentation>
+            </xs:annotation>
+          </xs:element>
+        </xs:sequence>
+      </xs:choice>
+    </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="moduleType">
+       <xs:attribute name="id" type="xs:token" use="required">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[[
+                   The module id
+                               ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+       <xs:attribute name="slot" type="xs:token" use="optional">
+             <xs:annotation>
+               <xs:documentation>
+                 <![CDATA[[
+                   The module slot
+                               ]]>
+                 </xs:documentation>
+               </xs:annotation>
+           </xs:attribute>
+   </xs:complexType>
+
+  <xs:complexType name="workmanagerType">
+    <xs:sequence>
+      <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityType">
+    <xs:sequence>
+      <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="domain" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="elytron-security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Indicates that Elytron is responsible for WorkManager security. It defines the name of the Elytron
+                  security domain that should be used
+                  Ex:
+                    <elytron-security-domain>ApplicationDomain</elytron-security-domain>
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityGroupsType">
+    <xs:sequence>
+      <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The name of the group
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsType">
+    <xs:sequence>
+      <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the users
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsUsersType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A user mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+    <xs:sequence>
+      <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  A group mapping
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="workmanagerSecurityMappingType">
+    <xs:sequence>
+    </xs:sequence>
+    <xs:attribute name="from" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the original value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+    <xs:attribute name="to" type="xs:token" use="required">
+      <xs:annotation>
+        <xs:documentation>
+          <![CDATA[[
+                Specify the mapped value
+               ]]>
+        </xs:documentation>
+      </xs:annotation>
+    </xs:attribute>
+  </xs:complexType>
+
+  <xs:complexType name="capacityType">
+    <xs:sequence>
+      <xs:element name="incrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+      <xs:element name="decrementer" type="extensionType" minOccurs="0">
+        <xs:annotation>
+          <xs:documentation>
+            <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+          </xs:documentation>
+        </xs:annotation>
+      </xs:element>
+    </xs:sequence>
+  </xs:complexType>
+
+  <xs:complexType name="report-directoryType">
+    <xs:attribute name="path" type="xs:token" use="required"></xs:attribute>
+  </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_7_0.xsd b/wildfly/docs/schema/wildfly-resource-adapters_7_0.xsd
new file mode 100644
index 0000000..404f042
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_7_0.xsd
@@ -0,0 +1,1120 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:7.0" xmlns="urn:jboss:domain:resource-adapters:7.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="report-directory" type="report-directoryType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+    <xs:complexType name="config-propertyType" mixed="true">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:simpleContent>
+            <xs:extension base="xs:token">
+                <xs:attribute use="required" name="name" type="xs:token">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapterType">
+        <xs:sequence>
+            <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the administration objects
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="id" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="transaction-supportType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NoTransaction" />
+            <xs:enumeration value="LocalTransaction" />
+            <xs:enumeration value="XATransaction" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:attributeGroup name="common-attribute">
+        <xs:attribute name="class-name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Should the object in question be activated
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pool-name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="admin-objectType">
+        <xs:sequence>
+            <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+    </xs:complexType>
+
+    <xs:complexType name="timeoutType">
+        <xs:sequence>
+            <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="validationType">
+        <xs:sequence>
+            <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adaptersType">
+        <xs:sequence>
+            <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="connection-definitionsType">
+        <xs:sequence>
+            <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies a connection definition
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="connection-defintionType">
+        <xs:sequence>
+            <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice>
+                <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies security settings
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies timeout settings
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies validation settings
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+        <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Enable cached connection manager
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="false" name="connectable" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tracking" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mcp" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+    </xs:complexType>
+
+    <xs:complexType name="poolType">
+        <xs:sequence>
+            <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="fair" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="xa-poolType">
+        <xs:complexContent>
+            <xs:extension base="poolType">
+                <xs:sequence>
+                    <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityType">
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:sequence minOccurs="0" maxOccurs="1">
+                    <xs:element name="elytron-enabled" type="xs:boolean" minOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via either authentication-context or authentication-context-and-application),
+                Elytron will use that specified context for authenticating. Else, Elytron will use the
+                current authentication context of the caller that is retrieving the connection.
+                Ex:
+                <elytron-enabled/>
+              ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:choice minOccurs="0" maxOccurs="1">
+                        <xs:element name="authentication-context" type="xs:token">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    <![CDATA[[
+                  Indicates the Elytron context that will be used for authenticating connections during
+                  container-managed sign-on.
+                  The resulting Subject will be used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    <elytron-enabled/>
+                    <authentication-context>HsqlDbContext</authentication-context>
+                  ]]>
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="authentication-context-and-application" type="xs:token">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    <![CDATA[[
+                  Indicates that either app supplied parameters (such as from
+                  getConnection(user, pw)) or an authenticated Subject (resulting of container-managed sign-on
+                  authentication) are used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    </elytron-enabled/>
+                    <authentication-context-and-application>HsqlDbContext</authentication-context-and-application>
+                  ]]>
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="admin-objectsType">
+        <xs:sequence>
+            <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validation-groupsType">
+        <xs:sequence>
+            <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="recoverType">
+        <xs:sequence>
+            <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential is not specified the security credential is used for recovery too
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="extensionType">
+        <xs:sequence>
+            <xs:element name="config-property" type="config-propertyType"></xs:element>
+        </xs:sequence>
+        <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="credentialType">
+        <xs:sequence>
+            <xs:element name="user-name" type="xs:token" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="password" type="xs:token" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="security-domain" type="xs:token">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:sequence>
+                    <xs:element name="elytron-enabled" type="boolean-presenceType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use that specified context for authenticating.
+                Else, Elytron will use the current authentication context of the caller that is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                <elytron-enabled/>
+                <authentication-context>HsqlDbContext</authentication-context>
+            ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="id" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                   The module id
+                               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="slot" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                   The module slot
+                               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:sequence>
+            <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityType">
+        <xs:sequence>
+            <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="domain" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="elytron-security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Indicates that Elytron is responsible for WorkManager security. It defines the name of the Elytron
+                  security domain that should be used
+                  Ex:
+                    <elytron-security-domain>ApplicationDomain</elytron-security-domain>
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                  Indicates whether the security for WorkManager is enabled
+                 ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityGroupsType">
+        <xs:sequence>
+            <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  The name of the group
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingsType">
+        <xs:sequence>
+            <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  The mappings for the users
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingsUsersType">
+        <xs:sequence>
+            <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  A user mapping
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+        <xs:sequence>
+            <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  A group mapping
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingType">
+        <xs:sequence>
+        </xs:sequence>
+        <xs:attribute name="from" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Specify the original value
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Specify the mapped value
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="capacityType">
+        <xs:sequence>
+            <xs:element name="incrementer" type="extensionType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="decrementer" type="extensionType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="report-directoryType">
+        <xs:attribute name="path" type="xs:token" use="required"></xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-resource-adapters_7_1.xsd b/wildfly/docs/schema/wildfly-resource-adapters_7_1.xsd
new file mode 100644
index 0000000..e0a0b5a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-resource-adapters_7_1.xsd
@@ -0,0 +1,1120 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:resource-adapters:7.1" xmlns="urn:jboss:domain:resource-adapters:7.1"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified" attributeFormDefault="unqualified">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+
+    <xs:element name="subsystem" type="subsystemType"/>
+
+    <xs:complexType name="subsystemType">
+        <xs:all>
+            <xs:element name="resource-adapters" type="resource-adaptersType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="report-directory" type="report-directoryType" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="boolean-presenceType"></xs:complexType>
+
+    <xs:complexType name="config-propertyType" mixed="true">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+          Specifies an override for a config-property element in ra.xml or a @ConfigProperty
+         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:simpleContent>
+            <xs:extension base="xs:token">
+                <xs:attribute use="required" name="name" type="xs:token">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Specifies the name of the config-property
+               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:simpleContent>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adapterType">
+        <xs:sequence>
+            <xs:element name="archive" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the resource adapter archive to be activated
+              E.g. <archive>myra.rar</archive>
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="module" type="moduleType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                      Specifies the resource adapter module to be activated
+                      E.g. <archive>org.jboss.ironjacamar.ra16out</archive>
+                     ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bean-validation-groups" type="bean-validation-groupsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies bean validation group that should be used
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="bootstrap-context" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the unique name of the bootstrap context that should be used
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+               The config-property specifies resource adapter configuration properties.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="transaction-support" type="transaction-supportType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the transaction support level of the resource adapter
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="workmanager" type="workmanagerType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                    Specifies the settings for the WorkManager used by this resource adapter
+                   ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="connection-definitions" type="connection-definitionsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the connection definitions
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="admin-objects" type="admin-objectsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the administration objects
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="id" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            An unique identifier for the resource adapter
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="false" name="statistics-enabled" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                      Enable statistics for this resource-adapter
+                     ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:simpleType name="transaction-supportType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[[
+          Define the type of transaction supported by this resource adapter.
+          Valid values are: NoTransaction, LocalTransaction, XATransaction
+         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="NoTransaction" />
+            <xs:enumeration value="LocalTransaction" />
+            <xs:enumeration value="XATransaction" />
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:attributeGroup name="common-attribute">
+        <xs:attribute name="class-name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies the the fully qualified class name of a managed connection factory
+            or admin object
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="jndi-name" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies the JNDI name
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enabled" type="xs:boolean" default="true" form="unqualified" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Should the object in question be activated
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="true" name="use-java-context" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies if a java:/ JNDI context should be used
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="pool-name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specifies the pool name for the object
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+
+    <xs:complexType name="admin-objectType">
+        <xs:sequence>
+            <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The config-property specifies administration object configuration properties.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+    </xs:complexType>
+
+    <xs:complexType name="timeoutType">
+        <xs:sequence>
+            <xs:element name="blocking-timeout-millis" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                The blocking-timeout-millis element indicates the maximum time in
+                milliseconds to block while waiting for a connection before throwing an exception.
+                Note that this blocks only while waiting for a permit for a connection, and
+                will never throw an exception if creating a new connection takes an inordinately
+                long time. The default is 30000 (30 seconds).
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="idle-timeout-minutes" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The idle-timeout-minutes elements indicates the maximum time in minutes
+              a connection may be idle before being closed. The actual maximum time depends
+              also on the IdleRemover scan time, which is 1/2 the smallest idle-timeout-minutes
+              of any pool.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allocation-retry" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The allocation retry element indicates the number of times that allocating
+              a connection should be tried before throwing an exception. The default is
+              0.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="allocation-retry-wait-millis" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The allocation retry wait millis element indicates the time in milliseconds
+              to wait between retrying to allocate a connection. The default is 5000 (5
+              seconds).
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="xa-resource-timeout" type="xs:nonNegativeInteger" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Passed to XAResource.setTransactionTimeout(). Default is zero which does not invoke the setter.
+              Specified in seconds - e.g. 5 minutes
+              <xa-resource-timeout>300</xa-resource-timeout>
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="validationType">
+        <xs:sequence>
+            <xs:element name="validate-on-match" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The validate-on-match element indicates whether or not connection
+              level validation should be done when a connection factory attempts to match
+              a managed connection for a given set. This is typically exclusive to the
+              use of background validation
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="background-validation" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              An element to specify that connections should be validated on a background
+              thread versus being validated prior to use
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="background-validation-millis" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+               The background-validation-millis element specifies the amount of
+               time, in millis, that background validation will run.
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-fast-fail" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                Whether fail a connection allocation on the first connection if it
+                is invalid (true) or keep trying until the pool is exhausted of all potential
+                connections (false) default false. e.g. <use-fast-fail>true</use-fast-fail>
+              ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="resource-adaptersType">
+        <xs:sequence>
+            <xs:element name="resource-adapter" type="resource-adapterType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies activation of a resource adapter
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="connection-definitionsType">
+        <xs:sequence>
+            <xs:element name="connection-definition" type="connection-defintionType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies a connection definition
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="connection-defintionType">
+        <xs:sequence>
+            <xs:element name="config-property" type="config-propertyType" minOccurs="0" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+             The config-property specifies managed connection factory configuration properties.
+            ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice>
+                <xs:element name="pool" type="poolType" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                  Specifies pooling settings
+                 ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="xa-pool" type="xa-poolType" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                  Specifies xa-pooling settings
+                 ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+            </xs:choice>
+            <xs:element name="security" type="securityType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies security settings
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="timeout" type="timeoutType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies timeout settings
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="validation" type="validationType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies validation settings
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="recovery" type="recoverType" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+        <xs:attribute name="use-ccm" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Enable cached connection manager
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="sharable" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Defines the connections as sharable which allows lazy association to be enabled
+                if supported
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enlistment" type="xs:boolean" default="true" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Defines if lazy enlistment should be used if supported by the resource adapter
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute default="false" name="connectable" type="xs:boolean">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                 Enable CMR functionality on this connection
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="tracking" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Defines if IronJacamar should track connection handles across transaction boundaries
+          ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="mcp" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Defines the ManagedConnectionPool implementation, f.ex. org.jboss.jca.core.connectionmanager.pool.mcp.SemaphoreArrayListManagedConnectionPool
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enlistment-trace" type="xs:boolean" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Defines if WildFly/IronJacamar should record enlistment traces
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attributeGroup ref="common-attribute"></xs:attributeGroup>
+    </xs:complexType>
+
+    <xs:complexType name="poolType">
+        <xs:sequence>
+            <xs:element name="min-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The min-pool-size element indicates the minimum number of connections
+              a pool should hold. These are not created until a Subject is known from a
+              request for a connection. This default to 0. Ex: <min-pool-size>1</min-pool-size>
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="initial-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                    The initial-pool-size element indicates the initial number of connections
+                    a pool should hold. This default to 0. Ex: <initial-pool-size>1</initial-pool-size>
+                   ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="max-pool-size" type="xs:nonNegativeInteger" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              The max-pool-size element indicates the maximum number of connections
+              for a pool. No more than max-pool-size connections will be created in each sub-pool.
+              This defaults to 20.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="prefill" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Whether to attempt to prefill the connection pool. Default is false.
+              e.g. <prefill>false</prefill>.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="fair" type="xs:boolean" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Defines if pool use should be fair
+              Default true
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="use-strict-min" type="xs:boolean" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Define if the min-pool-size should be considered strict.
+              Default false
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="flush-strategy" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies how the pool should be flush in case of an error.
+              Valid values are: FailingConnectionOnly (default), InvalidIdleConnections, IdleConnections, Gracefully, EntirePool,
+                                              AllInvalidIdleConnections, AllIdleConnections, AllGracefully, AllConnections
+                           ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="capacity" type="capacityType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                            Specifies the capacity policies for the pool
+                           ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="xa-poolType">
+        <xs:complexContent>
+            <xs:extension base="poolType">
+                <xs:sequence>
+                    <xs:element name="is-same-rm-override" type="xs:boolean" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                  The is-same-rm-override element allows one to unconditionally
+                  set whether the javax.transaction.xa.XAResource.isSameRM(XAResource) returns
+                  true or false. Ex: <is-same-rm-override>true</is-same-rm-override>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="interleaving" type="boolean-presenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                  An element to enable interleaving for XA connection factories
+                  Ex: <interleaving/>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="no-tx-separate-pools" type="boolean-presenceType" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                  Oracle does not like XA connections getting used both inside and outside a JTA transaction.
+                  To workaround the problem you can create separate sub-pools for the different contexts
+                  using <no-tx-separate-pools/>
+                  Ex: <no-tx-separate-pools/>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="pad-xid" type="xs:boolean" default="false" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                   Should the Xid be padded
+                   Ex: <pad-xid>true</pad-xid>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="wrap-xa-resource" type="xs:boolean" default="true" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                   Should the XAResource instances be wrapped in an org.jboss.tm.XAResourceWrapper
+                   instance
+                   Ex: <wrap-xa-resource>true</wrap-xa-resource>
+                 ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="securityType">
+        <xs:sequence>
+            <xs:choice>
+                <xs:element name="application" type="boolean-presenceType" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Indicates that app supplied parameters (such as from getConnection(user, pw))
+                are used to distinguish connections in the pool.
+                Ex:
+                <application/>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="security-domain" type="xs:token" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Indicates Subject (from security domain) are used to distinguish connections in the pool.
+                The content of the security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+                Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:element name="security-domain-and-application" type="xs:token" minOccurs="0" maxOccurs="1">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+                Indicates that either app supplied parameters (such as from
+                getConnection(user, pw)) or Subject (from security domain) are used to
+                distinguish connections in the pool. The content of the
+                security-domain is the name of the JAAS security manager that will handle
+                authentication. This name correlates to the JAAS login-config.xml descriptor
+                application-policy/name attribute.
+
+                Ex:
+                <security-domain-and-application>HsqlDbRealm</security-domain-and-application>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:sequence minOccurs="0" maxOccurs="1">
+                    <xs:element name="elytron-enabled" type="xs:boolean" minOccurs="1">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via either authentication-context or authentication-context-and-application),
+                Elytron will use that specified context for authenticating. Else, Elytron will use the
+                current authentication context of the caller that is retrieving the connection.
+                Ex:
+                <elytron-enabled/>
+              ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:choice minOccurs="0" maxOccurs="1">
+                        <xs:element name="authentication-context" type="xs:token">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    <![CDATA[[
+                  Indicates the Elytron context that will be used for authenticating connections during
+                  container-managed sign-on.
+                  The resulting Subject will be used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    <elytron-enabled/>
+                    <authentication-context>HsqlDbContext</authentication-context>
+                  ]]>
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                        <xs:element name="authentication-context-and-application" type="xs:token">
+                            <xs:annotation>
+                                <xs:documentation>
+                                    <![CDATA[[
+                  Indicates that either app supplied parameters (such as from
+                  getConnection(user, pw)) or an authenticated Subject (resulting of container-managed sign-on
+                  authentication) are used to distinguish connections in the pool.
+                  The authentication-context name correlates to the authentication context defined in
+                  the Elytron subsystem.
+                  Ex:
+                    </elytron-enabled/>
+                    <authentication-context-and-application>HsqlDbContext</authentication-context-and-application>
+                  ]]>
+                                </xs:documentation>
+                            </xs:annotation>
+                        </xs:element>
+                    </xs:choice>
+                </xs:sequence>
+            </xs:choice>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="admin-objectsType">
+        <xs:sequence>
+            <xs:element name="admin-object" type="admin-objectType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the setup for an admin object
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="bean-validation-groupsType">
+        <xs:sequence>
+            <xs:element name="bean-validation-group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the fully qualified class name for a bean validation group that
+              should be used for validation
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+    <xs:complexType name="recoverType">
+        <xs:sequence>
+            <xs:element name="recover-credential" type="credentialType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the security options used when creating a connection during recovery.
+              Note: if this credential is not specified the security credential is used for recovery too
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="recover-plugin" type="extensionType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+              Specifies the extension plugin used in spi (core.spi.xa)
+              which can be implemented by various plugins to provide better feedback to the XA recovery system.
+             ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="no-recovery" type="xs:boolean" default="false" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+            Specify if the xa-datasource should be excluded from recovery.
+            Default false.
+           ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="extensionType">
+        <xs:sequence>
+            <xs:element name="config-property" type="config-propertyType"></xs:element>
+        </xs:sequence>
+        <xs:attribute name="class-name" type="xs:token" use="required"></xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="credentialType">
+        <xs:sequence>
+            <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        Credential to be used by the configuration.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:choice minOccurs="0">
+                <xs:element name="security-domain" type="xs:token">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[[
+              Indicates Subject (from security domain) are used to distinguish connections in the pool.
+              The content of the security-domain is the name of the JAAS security manager that will handle
+              authentication. This name correlates to the JAAS login-config.xml descriptor
+              application-policy/name attribute.
+              Ex:
+                <security-domain>HsqlDbRealm</security-domain>
+              ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:element>
+                <xs:sequence>
+                    <xs:element name="elytron-enabled" type="boolean-presenceType">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                Indicates that Elytron is responsible for authenticating connections. If authentication-context
+                is configured (via authentication-context), Elytron will use that specified context for authenticating.
+                Else, Elytron will use the current authentication context of the caller that is retrieving the connection.
+                Ex:
+                  <elytron-enabled/>
+                ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                    <xs:element name="authentication-context" type="xs:token" minOccurs="0">
+                        <xs:annotation>
+                            <xs:documentation>
+                                <![CDATA[[
+                Indicates the Elytron context that will be used for authenticating connections during
+                container-managed sign-on.
+                The resulting Subject will be used to distinguish connections in the pool.
+                The authentication-context name correlates to the authentication context defined in
+                the Elytron subsystem.
+                Ex:
+                <elytron-enabled/>
+                <authentication-context>HsqlDbContext</authentication-context>
+            ]]>
+                            </xs:documentation>
+                        </xs:annotation>
+                    </xs:element>
+                </xs:sequence>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="user-name" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Specify the username used when creating a new connection.
+                Ex: <user-name>sa</user-name>
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="password" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Specify the password used when creating a new connection.
+                Ex: <password>sa-pass</password>
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="moduleType">
+        <xs:attribute name="id" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                   The module id
+                               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="slot" type="xs:token" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                   The module slot
+                               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerType">
+        <xs:sequence>
+            <xs:element name="security" type="workmanagerSecurityType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the security model used by the WorkManager instance
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityType">
+        <xs:sequence>
+            <xs:element name="mapping-required" type="xs:boolean" minOccurs="1" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines if a mapping is required for security credentials. A value of false means
+                  "Case 1" as defined in section 16.4.3, and a value of true means "Case 2" as
+                  defined in section 16.4.4.
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="domain" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the name of the security domain that should be used
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="elytron-security-domain" type="xs:string" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Indicates that Elytron is responsible for WorkManager security. It defines the name of the Elytron
+                  security domain that should be used
+                  Ex:
+                    <elytron-security-domain>ApplicationDomain</elytron-security-domain>
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-principal" type="xs:token" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines a default principal name that should be added to the used Subject instance
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="default-groups" type="workmanagerSecurityGroupsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines a default groups that should be added to the used Subject instance
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="mappings" type="workmanagerSecurityMappingsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the mappings that should be applied for Case 2
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="enabled" type="xs:boolean" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                  Indicates whether the security for WorkManager is enabled
+                 ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityGroupsType">
+        <xs:sequence>
+            <xs:element name="group" type="xs:token" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  The name of the group
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingsType">
+        <xs:sequence>
+            <xs:element name="users" type="workmanagerSecurityMappingsUsersType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  The mappings for the users
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="groups" type="workmanagerSecurityMappingsGroupsType" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  The mappings for the groups
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingsUsersType">
+        <xs:sequence>
+            <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  A user mapping
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingsGroupsType">
+        <xs:sequence>
+            <xs:element name="map" type="workmanagerSecurityMappingType" minOccurs="1" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  A group mapping
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="workmanagerSecurityMappingType">
+        <xs:sequence>
+        </xs:sequence>
+        <xs:attribute name="from" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Specify the original value
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="to" type="xs:token" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[[
+                Specify the mapped value
+               ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="capacityType">
+        <xs:sequence>
+            <xs:element name="incrementer" type="extensionType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the policy for incrementing connections in the pool
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="decrementer" type="extensionType" minOccurs="0">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[[
+                  Defines the policy for decrementing connections in the pool
+                 ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="report-directoryType">
+        <xs:attribute name="path" type="xs:token" use="required"></xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-rts_1_0.xsd b/wildfly/docs/schema/wildfly-rts_1_0.xsd
new file mode 100644
index 0000000..8127761
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-rts_1_0.xsd
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:rts:1.0"
+           xmlns="urn:jboss:domain:rts:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:all>
+            <xs:element name="servlet" type="servlet" minOccurs="1" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="servlet">
+        <xs:attribute name="server" type="xs:string" use="required"/>
+        <xs:attribute name="host" type="xs:string" use="required"/>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-security-manager_1_0.xsd b/wildfly/docs/schema/wildfly-security-manager_1_0.xsd
new file mode 100644
index 0000000..19ada38
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-security-manager_1_0.xsd
@@ -0,0 +1,96 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security-manager:1.0"
+           xmlns="urn:jboss:domain:security-manager:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The security manager subsystem root element -->
+    <xs:element name="subsystem" type="securityManagerSubsystemType"/>
+
+    <xs:complexType name="securityManagerSubsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                 The security manager subsystem configuration.
+                         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="deployment-permissions" minOccurs="0" maxOccurs="1" type="deploymentPermissionsConfigType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="deploymentPermissionsConfigType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                 The deploymentPermissionConfigType specifies the elements and attributes that can be used to configure
+                 the minimum and maximum set of permissions for deployments.
+
+                 - minimum-set: this element allows for the configuration of the minimum set of permissions that are to
+                 be granted to all deployments. If this element is not specified or if the element is empty in the
+                 subsystem configuration, an empty minimum permission set will be created. The effect in this case is that
+                 deployment will not get any permissions other than the ones configured in the deployment itself.
+                 - maximum-set: this element allows for the configuration of the maximum set of permissions that a deployment
+                 can have. This set defines the maximum scope of permissions that can be granted to a deployment and acts
+                 as a validation mechanism that prevents deployments from acquiring undesirable permissions. If this element
+                 is not specified, a default maximum set with a single java.security.AllPermission is created (and it thus
+                 implies all permissions specified in the minimum set or in the deployment). If this element is empty, the
+                 maximum set will be assigned an empty set of permissions and will thus reject any permissions specified
+                 in the minimum set or in the deployment. In this case, the empty set can be used to enforce a policy
+                 where deployments cannot be assigned any permissions.
+
+                 NOTE: the behavior regarding empty maximum sets has changed in version 3.0. In previous versions of the
+                 subsystem an empty maximum set was handled the same way as an undefined set and that caused caused the
+                 maximum set to resolve to a set containing java.security.AllPermission.
+                         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="minimum-set" minOccurs="0" maxOccurs="1" type="permissionSetType"/>
+            <xs:element name="maximum-set" minOccurs="0" maxOccurs="1" type="permissionSetType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionSetType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                 The permissionSetConfigType defines a sequence of permission elements that can be used to specify the
+                 permissions that are to be granted to deployments or external jars.
+                         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="permission" minOccurs="0" maxOccurs="unbounded" type="permissionType"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="permissionType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                 The permission specifies the attributes used to declare a security permission.
+
+                 * class: the permission fully-qualified class name (e.g. java.util.PropertyPermission).
+                 * name: the name  of permission target (e.g. java.* for a PropertyPermission).
+                 * actions: the permission actions (e.g. read, write)
+                 * module: the name of the module that contains the permission class.
+                         ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="class" type="xs:string" use="required"/>
+        <xs:attribute name="name" type="xs:string" use="optional"/>
+        <xs:attribute name="actions" type="xs:string" use="optional"/>
+        <xs:attribute name="module" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-security_2_0.xsd b/wildfly/docs/schema/wildfly-security_2_0.xsd
new file mode 100644
index 0000000..befdcd0
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-security_2_0.xsd
@@ -0,0 +1,535 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:security:2.0"
+           xmlns="urn:jboss:domain:security:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="3.0">
+
+   <!-- The security subsystem root element -->
+   <xs:element name="subsystem" type="security-containerType" />
+
+   <!-- The security container configuration -->
+   <xs:complexType name="security-containerType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The security subsystem, used to configure authentication and authorization.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:all>
+         <xs:element name="security-management" type="securityManagementType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="security-domains" type="securityDomainsType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="vault" type="vaultType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="elytron-integration" type="elytronIntegrationType" minOccurs="0" maxOccurs="1"/>
+      </xs:all>
+   </xs:complexType>
+
+   <!-- The security management element -->
+   <xs:complexType name="securityManagementType">
+      <xs:annotation>
+         <xs:documentation>
+                <![CDATA[
+                    The optional "deep-copy-subject-mode" attribute sets the copy mode of subjects done by the security
+                    managers to be deep copies that makes copies of the subject principals and credentials if they are
+                    cloneable. It should be set to true if subject include mutable content that can be corrupted when
+                    multiple threads have the same identity and cache flushes/logout clearing the subject in one thread
+                    results in subject references affecting other threads. Default value is "false".
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:attribute name="deep-copy-subject-mode" type="xs:boolean" use="optional"/>
+       <xs:attribute name="initialize-jacc" type="xs:boolean" use="optional" default="true">
+           <xs:annotation>
+               <xs:documentation>
+                   <![CDATA[
+                       Indicates if this subsystem should be in charge of initializing JACC related services. This attribute can be used
+                       to turn of JACC initialization from this subsystem in case Elytron is being used in parallel. In this case, JACC initialization
+                       will only be performed by this subsystem. If you are using only Elytron subsystem, you can set this attribute to "false" and specify
+                       a similar attribute in Elytron subsystem to enable JACC. Default value is "true".
+                   ]]>
+               </xs:documentation>
+           </xs:annotation>
+       </xs:attribute>
+   </xs:complexType>
+
+   <!-- Configuration for security domains -->
+   <xs:complexType name="securityDomainsType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Configures security domains for applications.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="security-domain" type="securityDomainType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityDomainType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Definition of a security domain.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:choice>
+            <xs:element name="authentication" type="authenticationType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="authentication-jaspi" type="authenticationJaspiType" minOccurs="0" maxOccurs="1"/>
+         </xs:choice>
+         <xs:element name="authorization" type="authorizationType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="acl" type="aclType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="mapping" type="mappingType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="audit" type="auditType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="identity-trust" type="identityTrustType" minOccurs="0" maxOccurs="1"/>
+         <xs:element name="jsse" type="jsseType" minOccurs="0" maxOccurs="1"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="cache-type" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authenticationJaspiType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JASPI authentication configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="login-module-stack" type="loginModuleStackType" maxOccurs="unbounded"/>
+         <xs:element name="auth-module" type="authModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="authorizationType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="policy-module" type="policyModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="aclType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="acl-module" type="aclModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="mappingType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="mapping-module" type="mappingModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="auditType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="provider-module" type="providerModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="identityTrustType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="trust-module" type="trustModuleType" maxOccurs="unbounded"/>
+      </xs:sequence>
+   </xs:complexType>
+
+   <xs:simpleType name="module-option-flag">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    The flag attribute controls how a login module
+                    participates in the overall procedure.
+                    Required - The LoginModule is required to succeed. If it
+                    succeeds or fails, authentication still continues to proceed
+                    down the LoginModule list.
+
+                    Requisite - The LoginModule is required to succeed. If it succeeds,
+                    authentication continues down the LoginModule list. If it fails,
+                    control immediately returns to the application (authentication does not proceed
+                    down the LoginModule list).
+
+                    Sufficient - The LoginModule is  not required to succeed. If it does
+                    succeed, control immediately returns to the application (authentication
+                    does not proceed down the LoginModule list). If it fails,
+                    authentication continues down the LoginModule list.
+
+                    Optional - The LoginModule is not required to succeed. If it succeeds or
+                    fails, authentication still continues to proceed down the
+                    LoginModule list.
+
+                    The overall authentication succeeds only if
+                    all required and requisite LoginModules succeed. If a
+                    sufficient LoginModule is configured and succeeds, then only
+                    the required and requisite LoginModules prior to that
+                    sufficient LoginModule need to have succeeded for the overall
+                    authentication to succeed. If no required or requisite
+                    LoginModules are configured for an application, then at least
+                    one sufficient or optional LoginModule must succeed.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:restriction base="xs:token">
+         <xs:enumeration value="required"/>
+         <xs:enumeration value="requisite"/>
+         <xs:enumeration value="sufficient"/>
+         <xs:enumeration value="optional"/>
+      </xs:restriction>
+   </xs:simpleType>
+
+   <xs:complexType name="loginModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="propertyType">
+      <xs:attribute name="name" type="xs:string" use="required"/>
+      <xs:attribute name="value" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="loginModuleStackType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Login module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="login-module" type="loginModuleType" minOccurs="1" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="required"/>
+   </xs:complexType>
+
+   <xs:complexType name="authModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authentication module configuration for JASPI.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="optional"/>
+      <xs:attribute name="login-module-stack-ref" type="xs:string" use="optional"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="policyModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Authorization module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="aclModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    ACL module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+         <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="mappingModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Mapping module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="type" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="providerModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Audit module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="trustModuleType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Identity trust module configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="module-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="name" type="xs:string" use="optional"/>
+      <xs:attribute name="code" type="xs:string" use="required"/>
+      <xs:attribute name="flag" type="module-option-flag" use="required"/>
+      <xs:attribute name="module" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="jsseType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    JSSE configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+        <xs:element name="property" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="keystore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="keystore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="key-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-password" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-type" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-url" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="truststore-provider-argument" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-algorithm" type="xs:string" use="optional"/>
+      <xs:attribute name="trust-manager-factory-provider" type="xs:string" use="optional"/>
+      <xs:attribute name="client-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="server-alias" type="xs:string" use="optional"/>
+      <xs:attribute name="service-auth-token" type="xs:string" use="optional"/>
+      <xs:attribute name="client-auth" type="xs:boolean" use="optional"/>
+      <xs:attribute name="cipher-suites" type="xs:string" use="optional"/>
+      <xs:attribute name="protocols" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <xs:complexType name="vaultType">
+      <xs:annotation>
+         <xs:documentation>
+               <![CDATA[
+                    Vault Configuration.
+                ]]>
+         </xs:documentation>
+      </xs:annotation>
+      <xs:sequence>
+          <xs:element name="vault-option" type="propertyType" minOccurs="0" maxOccurs="unbounded"/>
+      </xs:sequence>
+      <xs:attribute name="code" type="xs:string" use="optional"/>
+   </xs:complexType>
+
+   <!-- ELYTRON INTEGRATION SCHEMA -->
+   <xs:complexType name="elytronIntegrationType">
+       <xs:annotation>
+           <xs:documentation>
+               <![CDATA[
+                    This type specifies the elements and attributes used to configure the integration of the legacy
+                    security subsystem with the new security framework provided by the Elytron project.
+                ]]>
+           </xs:documentation>
+       </xs:annotation>
+       <xs:sequence>
+           <xs:element name="security-realms" type="securityRealmsType" minOccurs="0" maxOccurs="1"/>
+           <xs:element name="tls" type="tlsType" minOccurs="0" maxOccurs="1"/>
+       </xs:sequence>
+   </xs:complexType>
+
+   <xs:complexType name="securityRealmsType">
+       <xs:annotation>
+           <xs:documentation>
+               <![CDATA[
+                   This type specifies the elements and attributes used to configure the Elytron compatible realms that
+                   are to be exported by the legacy subsystem. Each realm delegates the authentication decision to a
+                   legacy JAAS-based security domain.
+               ]]>
+           </xs:documentation>
+       </xs:annotation>
+       <xs:sequence>
+           <xs:element name="elytron-realm" type="elytronRealmType" minOccurs="0" maxOccurs="unbounded"/>
+       </xs:sequence>
+   </xs:complexType>
+
+    <xs:complexType name="elytronRealmType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The elytron-realm element allows for the configuration of Elytron-compatible realms that delegate
+                    the authentication process to legacy security domains exposed by the legacy security subsystem. These
+                    realms provide a bridge between the new Elytron security domains and the legacy JAAS-based security
+                    domains and are meant to ease the migration process to Elytron by allowing users to start using Elytron
+                    without having to immediately switch their JAAS-based login modules to the new Elytron realms.
+
+                    The realms are exported as capabilities and can be consumed in the Elytron subsystem without requiring
+                    any extra wiring between the subsystems (i.e. no dependencies to the legacy subsystem), which promotes
+                    a separation that will ease the removal of the legacy subsystem in the future.
+
+                    The export-realm element contains the following attributes:
+
+                     * name - the name of the realm that will be exported. It must be unique and must not match any of
+                     the realms already declared in the Elytron subsystem.
+
+                     * legacy-jaas-config - the name of the legacy security domain to which the exported realm will delegate
+                     the authentication decision.
+
+                     * apply-role-mappers - if true the realm will apply any role-mappers specified in the legacy JAAS
+                     security domain to the roles extracted from the authenticated Subject when creating an authorization
+                     identity. If not specified this attribute defaults to true.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="legacy-jaas-config" type="xs:string" use="required"/>
+        <xs:attribute name="apply-role-mappers" type="xs:boolean" use="optional" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="tlsType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    This type specifies the elements used to configure the Elytron-compatible TLS entities that are to
+                    be exported by the legacy subsystem. A legacy security domain can be used to export TLS entities such
+                    as key/trust stores and key/trust managers when it has a JSSE configuration that enables the legacy
+                    domain to produce these entities.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="elytron-key-store" type="tlsEntityType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="elytron-trust-store" type="tlsEntityType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="elytron-key-manager" type="tlsEntityType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="elytron-trust-manager" type="tlsEntityType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="tlsEntityType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    This type contains the attributes used to export Elytron-compatible TLS entities (key/trust stores
+                    and key/trust managers).
+
+                    The entities are exported as capabilities and can be consumed in the Elytron subsystem without requiring
+                    any extra wiring between the subsystems (i.e. no dependencies to the legacy subsystem), which promotes
+                    a separation that will ease the removal of the legacy subsystem in the future.
+
+                    This type contains the following attributes:
+
+                    * name - the name of the entity being exported. It must be unique and must not match any of the entities
+                    of the same type already declared in the Elytron subsystem.
+
+                    NOTE: the Elytron subsystem uses the same key-store element to refer to both key stores and trust stores
+                    and they are both exported as the same kind of capability. So care must be taken when exporting legacy
+                    key stores and trust stores as the name used must be unique across all exported key stores and trust stores.
+
+                    * legacy-jsse-config - the name of the legacy security domain that contains a JSSE configuration that
+                    is capable of producing the entity being exported. For example, if a key store is being exported then the
+                    legacy-jsse-config attribute must point to a legacy domain that contains a JSSE section that configures
+                    a key store.
+
+
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="legacy-jsse-config" type="xs:string" use="required"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-singleton_1_0.xsd b/wildfly/docs/schema/wildfly-singleton_1_0.xsd
new file mode 100644
index 0000000..c94ffd0
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-singleton_1_0.xsd
@@ -0,0 +1,119 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema targetNamespace="urn:jboss:domain:singleton:1.0"
+            xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            xmlns:tns="urn:jboss:domain:singleton:1.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="subsystem" type="tns:subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:sequence>
+            <xs:element name="singleton-policies" type="tns:singleton-policies">
+                <xs:annotation>
+                    <xs:documentation>Enumerates the singleton policies supported by this subsystem.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-policies">
+        <xs:sequence>
+            <xs:element name="singleton-policy" type="tns:singleton-policy" maxOccurs="unbounded">
+                <xs:annotation>
+                    <xs:documentation>Defines a singleton policy</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:sequence>
+        <xs:attribute name="default" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the default singleton deployment policy of the server.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="singleton-policy">
+        <xs:choice>
+            <xs:element name="random-election-policy" type="tns:random-election-policy">
+                <xs:annotation>
+                    <xs:documentation>Defines a election policy that chooses a random member on which a given application will be deployed.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="simple-election-policy" type="tns:simple-election-policy">
+                <xs:annotation>
+                    <xs:documentation>Defines a election policy that chooses a specific member (indicated by position) on which a given application will be deployed.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>The name of this singleton policy.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache-container" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>Identifies the cache-container used to back the singleton deployment policy.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cache" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Identifies the cache within the given cache container used to back the singleton deployment policy.
+                    If undefined, the default-cache of the specified cache container will be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="quorum" type="xs:integer" default="1">
+            <xs:annotation>
+                <xs:documentation>Defines the minimum number of group members required before a singleton election will run.</xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="simple-election-policy">
+        <xs:complexContent>
+            <xs:extension base="tns:election-policy">
+                <xs:attribute name="position" type="xs:integer" default="0">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Indicates the index of the node to be elected from a list of candidates sorted by descending age.
+                            0 would indicate the oldest node, 1 the second oldest, etc.  Whereas -1 indicates the youngest node, -2 the second youngest, etc.
+                            If the specified position exceeds the number of candidates, a modulus operation is applied.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="random-election-policy">
+        <xs:complexContent>
+            <xs:extension base="tns:election-policy"/>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="election-policy" abstract="true">
+        <xs:choice minOccurs="0">
+            <xs:element name="name-preferences" type="tns:list">
+                <xs:annotation>
+                    <xs:documentation>Defines an order list of nodes, identified by name, to which to prefer when electing a new singleton provider.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="socket-binding-preferences" type="tns:list">
+                <xs:annotation>
+                    <xs:documentation>Defines an order list of nodes, identified by outbound socket binding, to which to prefer when electing a new singleton provider.</xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:simpleType name="list">
+        <xs:list itemType="xs:token"/>
+    </xs:simpleType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-threads_2_0.xsd b/wildfly/docs/schema/wildfly-threads_2_0.xsd
new file mode 100644
index 0000000..1fb5a9a
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-threads_2_0.xsd
@@ -0,0 +1,278 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:threads:2.0"
+           xmlns="urn:jboss:domain:threads:2.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <!-- The threads subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    The threading subsystem, used to declare manageable thread pools and resources.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="thread-factory" type="thread-factory"/>
+            <xs:element name="unbounded-queue-thread-pool" type="unbounded-queue-thread-pool"/>
+            <xs:element name="bounded-queue-thread-pool" type="bounded-queue-thread-pool"/>
+            <xs:element name="blocking-bounded-queue-thread-pool" type="blocking-bounded-queue-thread-pool"/>
+            <xs:element name="queueless-thread-pool" type="queueless-thread-pool"/>
+            <xs:element name="blocking-queueless-thread-pool" type="blocking-queueless-thread-pool"/>
+            <xs:element name="scheduled-thread-pool" type="scheduled-thread-pool"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="thread-factory">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread factory (implementing java.util.concurrent.ThreadFactory).  The "name" attribute is
+                the bean name of the created thread factory.  The optional "priority" attribute may be used to specify
+                the thread priority of created threads.  The optional "group-name" attribute specifies the name of a the
+                thread group to create for this thread factory.
+
+                The "thread-name-pattern" is the template used to create names for threads.  The following patterns
+                may be used:
+
+                 %% - emit a percent sign
+                 %t - emit the per-factory thread sequence number
+                 %g - emit the global thread sequence number
+                 %f - emit the factory sequence number
+                 %i - emit the thread ID
+                 %G - emit the thread group name
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:string" use="required"/>
+        <xs:attribute name="group-name" type="xs:string" use="optional"/>
+        <xs:attribute name="thread-name-pattern" type="xs:string" use="optional"/>
+        <xs:attribute name="priority" type="priority" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="unbounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with an unbounded queue.  Such a thread pool has a core size and a queue with no
+                upper bound.  When a task is submitted, if the number of running threads is less than the core size,
+                a new thread is created.  Otherwise, the task is placed in queue.  If too many tasks are allowed to be
+                submitted to this type of executor, an out of memory condition may occur.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The "max-threads" attribute must be used to specify the thread pool size.  The nested
+                "keepalive-time" element may used to specify the amount of time that pool threads should
+                be kept running when idle; if not specified, threads will run until the executor is shut down.
+                The "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="keepalive-time" type="time" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-threads" type="xs:int"/>
+        <xs:attribute name="thread-factory" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="bounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with a bounded queue, where threads attempting to submit tasks will not block.
+                Such a thread pool has a core and maximum size and a specified queue length.  When a task is submitted,
+                if the number of running threads is less than the core size, a new thread is created.  Otherwise, if
+                there is room in the queue, the task is enqueued. Otherwise, if the number of running threads is less
+                than the maximum size, a new thread is created. Otherwise, the task is handed off to the designated
+                handoff executor, if one is specified.  Otherwise, the task is discarded.
+
+                The "name" attribute is the bean name of the created executor.  The "allow-core-timeout" attribute
+                specifies whether core threads may time out; if false, only threads above the core size will time out.
+
+                The optional "core-threads" element may be used to specify the core thread pool size which is smaller
+                than the maximum pool size.  The required "max-threads" element specifies the maximum thread pool size.
+                The required "queue-length" element specifies the queue length.  The optional "keepalive-time" element may
+                used to specify the amount of time that threads beyond the core pool size should be kept running when idle.
+                The optional "thread-factory" element specifies the bean name of a specific thread factory to use to
+                create worker threads.  The optional "handoff-executor" element specifies an executor to delegate tasks
+                to in the event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="keepalive-time" type="time" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="blocking" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="max-threads" type="xs:int"/>
+        <xs:attribute name="core-threads" type="xs:int"/>
+        <xs:attribute name="queue-length" type="xs:int"/>
+        <xs:attribute name="thread-factory" type="xs:string"/>
+        <xs:attribute name="handoff-executor" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="blocking-bounded-queue-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with a bounded queue, where threads attempting to submit tasks may block.
+                Such a thread pool has a core and maximum size and a specified queue length.  When a task is submitted,
+                if the number of running threads is less than the core size, a new thread is created.  Otherwise, if
+                there is room in the queue, the task is enqueued. Otherwise, if the number of running threads is less
+                than the maximum size, a new thread is created.Otherwise, the caller blocks until room becomes available
+                in the queue.
+
+                The "name" attribute is the bean name of the created executor.  The "allow-core-timeout" attribute
+                specifies whether core threads may time out; if false, only threads above the core size will time out.
+
+                The optional "core-threads" element may be used to specify the core thread pool size which is smaller
+                than the maximum pool size.  The required "max-threads" element specifies the maximum thread pool size.
+                The required "queue-length" element specifies the queue length.  The optional "keepalive-time" element may
+                used to specify the amount of time that threads beyond the core pool size should be kept running when idle.
+                The optional "thread-factory" element specifies the bean name of a specific thread factory to use to
+                create worker threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="keepalive-time" type="time" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-core-timeout" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="core-threads" type="xs:int"/>
+        <xs:attribute name="queue-length" type="xs:int"/>
+        <xs:attribute name="max-threads" type="xs:int"/>
+        <xs:attribute name="thread-factory" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="queueless-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with no queue, where threads attempting to submit tasks will not block.
+                When a task is submitted, if the number of running threads is less than the maximum size, a new thread
+                is created. Otherwise, the task is handed off to the designated handoff executor, if one is specified.
+                Otherwise, the task is discarded.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The "max-threads" attribute specifies the number of threads to use for this executor before
+                tasks cannot be accepted anymore.  The optional "keepalive-time" is used to specify the amount of time
+                that threads should be kept running when idle; by default threads run indefinitely.  The optional
+                "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.  The optional "handoff-executor" element specifies an executor to delegate tasks to in the
+                event that a task cannot be accepted.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="keepalive-time" type="time" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-threads" type="xs:int"/>
+        <xs:attribute name="thread-factory" type="xs:string"/>
+        <xs:attribute name="handoff-executor" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="blocking-queueless-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A thread pool executor with no queue, where threads attempting to submit tasks may block.
+                When a task is submitted, if the number of running threads is less than the maximum size, a new thread
+                is created.  Otherwise, the caller blocks until another thread completes its task and accepts the new one.
+
+                The "name" attribute is the bean name of the created executor.
+
+                The "max-threads" attribute specifies the number of threads to use for this executor before
+                tasks cannot be accepted anymore.  The optional "keepalive-time" is used to specify the amount of time
+                that threads should be kept running when idle; by default threads run indefinitely.  The optional
+                "thread-factory" element specifies the bean name of a specific thread factory to use to create worker
+                threads.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="keepalive-time" type="time" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-threads" type="xs:int"/>
+        <xs:attribute name="thread-factory" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="scheduled-thread-pool">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A scheduled thread pool executor.  The "name" attribute is the bean name of the created executor.  The
+                "thread-factory" attribute specifies the bean name of the thread factory to use to create worker
+                threads.  The nested "max-threads" attribute may be used to specify the thread pool size.  The nested
+                "keepalive-time" element is used to specify the amount of time that threads should be kept running when idle.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="keepalive-time" type="time" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-threads" type="xs:int"/>
+        <xs:attribute name="thread-factory" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:simpleType name="priority">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                A priority which can range from 1 to 10 (inclusive).  See http://java.sun.com/javase/6/docs/api/java/lang/Thread.html#setPriority(int) for more information.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:integer">
+            <xs:minInclusive value="1"/>
+            <xs:maxInclusive value="10"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="time">
+        <xs:annotation>
+            <xs:documentation>
+                An amount of time. Comprised of a time value and a unit value.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="time" type="xs:long" use="required"/>
+        <xs:attribute name="unit" type="time-unit-name" use="required"/>
+    </xs:complexType>
+
+    <xs:simpleType name="time-unit-name">
+        <xs:annotation>
+            <xs:documentation>
+                The name of a unit of time.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="seconds"/>
+            <xs:enumeration value="minutes"/>
+            <xs:enumeration value="milliseconds"/>
+            <xs:enumeration value="nanoseconds"/>
+            <xs:enumeration value="hours"/>
+            <xs:enumeration value="days"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-txn_3_0.xsd b/wildfly/docs/schema/wildfly-txn_3_0.xsd
new file mode 100644
index 0000000..bb234e5
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-txn_3_0.xsd
@@ -0,0 +1,319 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:3.0"
+            xmlns="urn:jboss:domain:transactions:3.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="3.0">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-journal-store" type="use-journal-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+            <xs:element name="commit-markable-resources" type="cmr-resources-Type" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                statistics-enabled - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Deprecated. Use statistics-enabled. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string" default="jboss.server.data.dir" />
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-journal-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable the journal transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the journal transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for jdbc store
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+        <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resources-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of non XA aware datasources that can reliably participate in an XA transaction.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="commit-markable-resource" type="cmr-resource-Type" minOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resource-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for a single commit markable resource.
+					Each datasource must be defined in the datasources subsystem configuration and
+					each one must be marked with the connectable="true" attribute.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="xid-location" type="cmr-table-Type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="jndi-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-table-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Storage settings for a single commit markable resource. For datasource resources
+					this will specifiy the table name where the xid of the commit-markable-resource
+					is stored
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="optional" default="xids">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					A name for the storage location
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        <xs:attribute name="immediate-cleanup" type="xs:boolean" use="optional" default="true">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					Indicates whether the entry should be removed as soon as the transaction has
+					completed
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        <xs:attribute name="batch-size" type="xs:integer" use="optional" default="100">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					If deletion of entries are deferred to the recovery module (ie immediate-cleanup
+					is set to false) then the batch size specifies how many xids to remove per DML
+					statement. Tuning the batch size is resource manager specific.
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-txn_4_0.xsd b/wildfly/docs/schema/wildfly-txn_4_0.xsd
new file mode 100644
index 0000000..e8a933c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-txn_4_0.xsd
@@ -0,0 +1,319 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:jboss:domain:transactions:4.0"
+            xmlns="urn:jboss:domain:transactions:4.0"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="4.0">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-journal-store" type="use-journal-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+            <xs:element name="commit-markable-resources" type="cmr-resources-Type" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The coordinator environment configuration.
+                statistics-enabled - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Deprecated. Use statistics-enabled. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-journal-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+            <![CDATA[
+                The flag to enable the journal transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the journal transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for jdbc store
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+        <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resources-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of non XA aware datasources that can reliably participate in an XA transaction.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="commit-markable-resource" type="cmr-resource-Type" minOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resource-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for a single commit markable resource.
+					Each datasource must be defined in the datasources subsystem configuration and
+					each one must be marked with the connectable="true" attribute.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="xid-location" type="cmr-table-Type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="jndi-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-table-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Storage settings for a single commit markable resource. For datasource resources
+					this will specifiy the table name where the xid of the commit-markable-resource
+					is stored
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="optional" default="xids">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					A name for the storage location
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        <xs:attribute name="immediate-cleanup" type="xs:boolean" use="optional" default="true">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					Indicates whether the entry should be removed as soon as the transaction has
+					completed
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+        <xs:attribute name="batch-size" type="xs:integer" use="optional" default="100">
+		    <xs:annotation>
+			    <xs:documentation>
+				    <![CDATA[
+					If deletion of entries are deferred to the recovery module (ie immediate-cleanup
+					is set to false) then the batch size specifies how many xids to remove per DML
+					statement. Tuning the batch size is resource manager specific.
+					]]>
+				</xs:documentation>
+			</xs:annotation>
+		</xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-txn_5_0.xsd b/wildfly/docs/schema/wildfly-txn_5_0.xsd
new file mode 100644
index 0000000..fb30265
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-txn_5_0.xsd
@@ -0,0 +1,321 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:transactions:5.0"
+           xmlns="urn:jboss:domain:transactions:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="5.0">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-journal-store" type="use-journal-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+            <xs:element name="commit-markable-resources" type="cmr-resources-Type" minOccurs="0" maxOccurs="1"></xs:element>
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The coordinator environment configuration.
+                statistics-enabled - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+                maximum-timeout - the maximum transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Deprecated. Use statistics-enabled. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+        <xs:attribute name="maximum-timeout" type="xs:int" default="31536000" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-journal-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The flag to enable the journal transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the journal transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for jdbc store
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+        <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resources-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of non XA aware datasources that can reliably participate in an XA transaction.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="commit-markable-resource" type="cmr-resource-Type" minOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resource-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for a single commit markable resource.
+					Each datasource must be defined in the datasources subsystem configuration and
+					each one must be marked with the connectable="true" attribute.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="xid-location" type="cmr-table-Type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="jndi-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-table-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Storage settings for a single commit markable resource. For datasource resources
+					this will specifiy the table name where the xid of the commit-markable-resource
+					is stored
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="optional" default="xids">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+					A name for the storage location
+					]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="immediate-cleanup" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+					Indicates whether the entry should be removed as soon as the transaction has
+					completed
+					]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:integer" use="optional" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+					If deletion of entries are deferred to the recovery module (ie immediate-cleanup
+					is set to false) then the batch size specifies how many xids to remove per DML
+					statement. Tuning the batch size is resource manager specific.
+					]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/wildfly-txn_6_0.xsd b/wildfly/docs/schema/wildfly-txn_6_0.xsd
new file mode 100644
index 0000000..1ef101d
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-txn_6_0.xsd
@@ -0,0 +1,335 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           targetNamespace="urn:jboss:domain:transactions:6.0"
+           xmlns="urn:jboss:domain:transactions:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="6.0">
+
+    <!-- The transaction subsystem root element -->
+    <xs:element name="subsystem" type="subsystem"/>
+
+    <xs:complexType name="subsystem">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the transactions subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="core-environment" type="core-environment" maxOccurs="1"/>
+            <xs:element name="recovery-environment" type="recovery-environment" maxOccurs="1"/>
+            <xs:element name="coordinator-environment" type="coordinator-environment" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="object-store" type="object-store" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="jts" type="jts-Type" minOccurs="0" maxOccurs="1"/>
+            <xs:choice minOccurs="0" maxOccurs="1">
+                <xs:element name="use-journal-store" type="use-journal-store-Type" minOccurs="0" maxOccurs="1"/>
+                <xs:element name="jdbc-store" type="jdbc-store-Type" minOccurs="0" maxOccurs="1"/>
+            </xs:choice>
+            <xs:element name="commit-markable-resources" type="cmr-resources-Type" minOccurs="0" maxOccurs="1"></xs:element>
+            <xs:element name="client" type="client" minOccurs="0" maxOccurs="1"/>
+
+        </xs:sequence>
+
+
+    </xs:complexType>
+
+    <xs:complexType name="recovery-environment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The recovery environment configuration.
+
+                The "socket-binding" attribute is used to reference the correct socket binding to use for the
+                recovery environment.
+                The "status-socket-binding" attribute is used to reference the correct socket binding to use for the
+                transaction status manager.
+                The "recovery-listener" attribute sets if recovery system should listen on a network socket or not.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" />
+        <xs:attribute name="status-socket-binding" type="xs:string" />
+        <xs:attribute name="recovery-listener" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="core-environment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The core environment configuration.
+
+                The process-id element specifies the process id implemention.
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="process-id" type="process-id" />
+        </xs:all>
+        <xs:attribute name="node-identifier" type="xs:string" default="1"/>
+    </xs:complexType>
+    <xs:complexType name="process-id">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The process identifer implementation
+                The "node-identifier" attribute is used to set the node identifier on the core environment.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice>
+            <xs:element name="uuid" type="uuid" />
+            <xs:element name="socket" type="socket-id" />
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="uuid">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The UUID based process identifer implementation
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+    <xs:complexType name="socket-id">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The socket based process identifer implementation
+                The "socket-binding" attribute is used to specify the port to bind to.
+                The "socket-process-id-max-ports" attribute is used to set the max ports on the core environment.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+    </xs:complexType>
+
+    <xs:attribute name="socket-process-id-max-ports" type="xs:int" default="10" />
+
+    <xs:complexType name="coordinator-environment">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The coordinator environment configuration.
+                statistics-enabled - if recording of transaction statistics is enabled, false otherwise.
+                enable-tsm-status - if the transaction status manager (TSM) service, needed for out of process recovery, should be provided or not.
+                default-timeout - the default transaction lifetime, in seconds.
+                maximum-timeout - the maximum transaction lifetime, in seconds.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false"/>
+        <xs:attribute name="enable-statistics" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[ Deprecated. Use statistics-enabled. ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-tsm-status" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-timeout" type="xs:int" default="300" />
+        <xs:attribute name="maximum-timeout" type="xs:int" default="31536000" />
+    </xs:complexType>
+
+    <xs:complexType name="object-store">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The object store configuration.
+
+                The "path" attribute denotes a relative or absolute filesystem path denoting where the transaction
+                manager object store should store data.
+
+                The "relative-to" attribute references a global path configuration in the domain model, defaulting
+                to the JBoss Application Server data directory (jboss.server.data.dir). If the value of the "path" attribute
+                does not specify an absolute pathname, it will treated as relative to this path.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="path" type="xs:string" default="tx-object-store"/>
+        <xs:attribute name="relative-to" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="jts-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The flag to enable JTS.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+    </xs:complexType>
+
+    <xs:complexType name="use-journal-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The flag to enable the journal transaction log store.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="enable-async-io" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Enable AsyncIO for the journal transaction log store.
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                        The presence of this tag enable the jdbc transaction log store.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="action" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                             Configure jdbc store for default action store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="communication" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                            Configure jdbc store for communication store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="state" type="jdbc-store-settings-Type" minOccurs="0" maxOccurs="1">
+                <xs:annotation>
+                    <xs:documentation>
+                        <![CDATA[
+                           Configure jdbc store for state store. If not present defaults are used.
+                                ]]>
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:all>
+        <xs:attribute name="datasource-jndi-name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                        Configure datasource jndi used to connect for jdbc store
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="jdbc-store-settings-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for jdbc store
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="table-prefix" type="xs:string" use="optional" />
+        <xs:attribute name="drop-table" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resources-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    A list of non XA aware datasources that can reliably participate in an XA transaction.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="commit-markable-resource" type="cmr-resource-Type" minOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-resource-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Settings for a single commit markable resource.
+					Each datasource must be defined in the datasources subsystem configuration and
+					each one must be marked with the connectable="true" attribute.
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:all>
+            <xs:element name="xid-location" type="cmr-table-Type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+        <xs:attribute name="jndi-name" type="xs:token" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="cmr-table-Type">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                    Storage settings for a single commit markable resource. For datasource resources
+					this will specifiy the table name where the xid of the commit-markable-resource
+					is stored
+                    ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" type="xs:token" use="optional" default="xids">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+					A name for the storage location
+					]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="immediate-cleanup" type="xs:boolean" use="optional" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+					Indicates whether the entry should be removed as soon as the transaction has
+					completed
+					]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="batch-size" type="xs:integer" use="optional" default="100">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+					If deletion of entries are deferred to the recovery module (ie immediate-cleanup
+					is set to false) then the batch size specifies how many xids to remove per DML
+					statement. Tuning the batch size is resource manager specific.
+					]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="client">
+        <xs:attribute name="stale-transaction-time" type="xs:int" default="600">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                    The time after which completed transactions that contain remote enlistments are removed from the memory.
+                    ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_10_0.xsd b/wildfly/docs/schema/wildfly-undertow_10_0.xsd
new file mode 100644
index 0000000..6d1469c
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_10_0.xsd
@@ -0,0 +1,1105 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:10.0"
+           targetNamespace="urn:jboss:domain:undertow:10.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+        <xs:attribute name="preserve-path-on-forward" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:sequence minOccurs="0">
+            <xs:choice>
+                <xs:group ref="affinity"/>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will not have an affinity for any particular server, routing information will be ignored.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="single-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ranked-affinity" type="ranked-affinity">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will have an affinity for the first available node in a list typically comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The delimiter used to separate ranked routes within the session ID.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_11_0.xsd b/wildfly/docs/schema/wildfly-undertow_11_0.xsd
new file mode 100644
index 0000000..bfab605
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_11_0.xsd
@@ -0,0 +1,1066 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:11.0"
+           targetNamespace="urn:jboss:domain:undertow:11.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+        <xs:attribute name="preserve-path-on-forward" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer" default="40"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string" default="JSESSIONID"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer" default="30"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer" default="-1"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer" default="10"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer" default="5"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer" default="60000"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:sequence minOccurs="0">
+            <xs:choice>
+                <xs:group ref="affinity"/>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will not have an affinity for any particular server, routing information will be ignored.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="single-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ranked-affinity" type="ranked-affinity">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will have an affinity for the first available node in a list typically comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The delimiter used to separate ranked routes within the session ID.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_12_0.xsd b/wildfly/docs/schema/wildfly-undertow_12_0.xsd
new file mode 100644
index 0000000..a9071e3
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_12_0.xsd
@@ -0,0 +1,1066 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:12.0"
+           targetNamespace="urn:jboss:domain:undertow:12.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="obfuscate-session-route" type="xs:boolean" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+        <xs:attribute name="preserve-path-on-forward" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer" default="40"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string" default="JSESSIONID"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer" default="30"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer" default="-1"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer" default="10"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer" default="5"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer" default="60000"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:sequence minOccurs="0">
+            <xs:choice>
+                <xs:group ref="affinity"/>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will not have an affinity for any particular server, routing information will be ignored.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="single-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ranked-affinity" type="ranked-affinity">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will have an affinity for the first available node in a list typically comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The delimiter used to separate ranked routes within the session ID.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_13_0.xsd b/wildfly/docs/schema/wildfly-undertow_13_0.xsd
new file mode 100644
index 0000000..9393779
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_13_0.xsd
@@ -0,0 +1,1082 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:13.0"
+           targetNamespace="urn:jboss:domain:undertow:13.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="obfuscate-session-route" type="xs:boolean" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Deprecated:  ssl-context should be set instead to reference a defined SSLContext.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+        <xs:attribute name="preserve-path-on-forward" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The http-authentication-factory attribute should be used to configure authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer" default="40"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string" default="JSESSIONID"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer" default="30"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer" default="-1"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer" default="10"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer" default="5"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer" default="60000"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The ssl-context attribute should be used to reference a defined SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:sequence minOccurs="0">
+            <xs:choice>
+                <xs:group ref="affinity"/>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The ssl-context attribute should be used to reference a defined SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will not have an affinity for any particular server, routing information will be ignored.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="single-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ranked-affinity" type="ranked-affinity">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will have an affinity for the first available node in a list typically comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The delimiter used to separate ranked routes within the session ID.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_14_0.xsd b/wildfly/docs/schema/wildfly-undertow_14_0.xsd
new file mode 100644
index 0000000..8207e17
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_14_0.xsd
@@ -0,0 +1,1099 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:14.0"
+           targetNamespace="urn:jboss:domain:undertow:14.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="obfuscate-session-route" type="xs:boolean" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long" default="90000"/>
+        <xs:attribute name="write-timeout" type="xs:long" default="90000"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Deprecated:  ssl-context should be set instead to reference a defined SSLContext.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="affinity-cookie" type="affinityCookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="sessionCookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+        <xs:attribute name="preserve-path-on-forward" type="xs:boolean" default="false"/>
+        <xs:attribute name="allow-orphan-session" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The http-authentication-factory attribute should be used to configure authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="sessionCookieType">
+        <xs:complexContent>
+            <xs:extension base="commonCookieType">
+                <xs:attribute name="name" type="xs:string" use="optional"/>
+                <xs:attribute name="comment" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="affinityCookieType">
+        <xs:complexContent>
+            <xs:extension base="commonCookieType">
+                <xs:attribute name="name" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="commonCookieType" abstract="true">
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer" default="40"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string" default="JSESSIONID"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer" default="30"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer" default="-1"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer" default="10"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer" default="5"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer" default="60000"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="1"/>
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The ssl-context attribute should be used to reference a defined SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:sequence minOccurs="0">
+            <xs:choice>
+                <xs:group ref="affinity"/>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The ssl-context attribute should be used to reference a defined SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will not have an affinity for any particular server, routing information will be ignored.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="single-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ranked-affinity" type="ranked-affinity">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will have an affinity for the first available node in a list typically comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The delimiter used to separate ranked routes within the session ID.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_3_1.xsd b/wildfly/docs/schema/wildfly-undertow_3_1.xsd
new file mode 100644
index 0000000..120bf48
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_3_1.xsd
@@ -0,0 +1,549 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:3.1"
+           targetNamespace="urn:jboss:domain:undertow:3.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="security-realm" use="required" type="xs:string"/>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="basic-authType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="security-domain" use="required" type="xs:string"/>
+
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_4_0.xsd b/wildfly/docs/schema/wildfly-undertow_4_0.xsd
new file mode 100644
index 0000000..4d62bbb
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_4_0.xsd
@@ -0,0 +1,751 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:4.0"
+           targetNamespace="urn:jboss:domain:undertow:4.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                            
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="basic-authType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="security-domain" use="required" type="xs:string"/>
+
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_5_0.xsd b/wildfly/docs/schema/wildfly-undertow_5_0.xsd
new file mode 100644
index 0000000..2679219
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_5_0.xsd
@@ -0,0 +1,754 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:5.0"
+           targetNamespace="urn:jboss:domain:undertow:5.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                            
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="basic-authType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="security-domain" use="required" type="xs:string"/>
+
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_6_0.xsd b/wildfly/docs/schema/wildfly-undertow_6_0.xsd
new file mode 100644
index 0000000..de06ed6
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_6_0.xsd
@@ -0,0 +1,770 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:6.0"
+           targetNamespace="urn:jboss:domain:undertow:6.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                            
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_7_0.xsd b/wildfly/docs/schema/wildfly-undertow_7_0.xsd
new file mode 100644
index 0000000..a158ec4
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_7_0.xsd
@@ -0,0 +1,786 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:7.0"
+           targetNamespace="urn:jboss:domain:undertow:7.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                            
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a 
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API. 
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_8_0.xsd b/wildfly/docs/schema/wildfly-undertow_8_0.xsd
new file mode 100644
index 0000000..4ee7fed
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_8_0.xsd
@@ -0,0 +1,803 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:8.0"
+           targetNamespace="urn:jboss:domain:undertow:8.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                            
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a 
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API. 
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if 
+                    this is switched off AdHoc identities will be created instead. 
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <!-- Copied from elytron subsystem schema -->
+    <xs:attributeGroup name="credentialReferenceStoreBased">
+        <xs:annotation>
+            <xs:documentation>
+                Group of attributes used when referencing credential through credential store.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="store" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential store name used to fetch credential with given 'alias' from.
+                    Credential store name has to be defined elsewhere.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="alias" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Alias of credential in the credential store.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="type" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Type of credential to be fetched from credential store.
+                    It is usually fully qualified class name.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:attributeGroup>
+    <xs:complexType name="credentialReferenceType">
+        <xs:attributeGroup ref="credentialReferenceStoreBased"/>
+        <xs:attribute name="clear-text" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Credential/password in clear text. Use just for testing purpose.
+                    Otherwise use credential store to mask the actual credential from your configuration.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_9_0.xsd b/wildfly/docs/schema/wildfly-undertow_9_0.xsd
new file mode 100644
index 0000000..0b7e035
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_9_0.xsd
@@ -0,0 +1,1018 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:9.0"
+           targetNamespace="urn:jboss:domain:undertow:9.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.0"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+
+    <xs:import namespace="urn:wildfly:credential-reference:1.0" schemaLocation="wildfly-credential-reference_1_0.xsd"/>
+
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long"/>
+        <xs:attribute name="write-timeout" type="xs:long"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the legacy security realm to use to obtain an SSLContext.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="session-cookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="session-cookieType">
+        <xs:attribute name="name" type="xs:string"/>
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="comment" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional" />
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/wildfly-undertow_preview_14_0.xsd b/wildfly/docs/schema/wildfly-undertow_preview_14_0.xsd
new file mode 100644
index 0000000..56d8a57
--- /dev/null
+++ b/wildfly/docs/schema/wildfly-undertow_preview_14_0.xsd
@@ -0,0 +1,1109 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+           xmlns="urn:jboss:domain:undertow:preview:14.0"
+           targetNamespace="urn:jboss:domain:undertow:preview:14.0"
+           xmlns:credential-reference="urn:wildfly:credential-reference:1.1"
+           elementFormDefault="qualified"
+           attributeFormDefault="unqualified"
+           version="1.0">
+    <xs:import namespace="urn:wildfly:credential-reference:1.1" schemaLocation="wildfly-credential-reference_1_1.xsd"/>
+    <!-- The undertow subsystem root element -->
+    <xs:element name="subsystem" type="undertow-subsystemType"/>
+
+    <xs:complexType name="undertow-subsystemType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The configuration of the undertow subsystem.
+            ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="byte-buffer-pool" type="byte-buffer-poolType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="buffer-cache" type="buffer-cacheType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="server" type="serverType" minOccurs="1" maxOccurs="unbounded"/>
+            <xs:element name="servlet-container" type="servletContainerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="handlers" type="handlerType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="filters" type="filterType" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="application-security-domains" type="applicationSecurityDomainsType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="default-server" type="xs:string" default="default-server"/>
+        <xs:attribute name="default-virtual-host" type="xs:string" default="default-host"/>
+        <xs:attribute name="default-servlet-container" type="xs:string" default="default"/>
+        <xs:attribute name="instance-id" type="xs:string" use="optional"/>
+        <xs:attribute name="obfuscate-session-route" type="xs:boolean" use="optional"/>
+        <xs:attribute name="default-security-domain" type="xs:string" use="optional" default="other"/>
+        <xs:attribute name="statistics-enabled" type="xs:boolean" default="false">
+          <xs:annotation>
+            <xs:documentation>Whether statistics are to be gathered for undertow subsystem.</xs:documentation>
+          </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+    <xs:complexType name="serverType">
+        <xs:sequence>
+            <xs:element name="ajp-listener" type="ajp-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="http-listener" type="http-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="https-listener" type="https-listener-type" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="host" type="hostType" minOccurs="1" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="default-host" use="optional" type="xs:string" default="default-host"/>
+        <xs:attribute name="servlet-container" use="optional" type="xs:string" default="default"/>
+    </xs:complexType>
+
+    <xs:complexType name="socket-options-type">
+        <xs:attribute name="receive-buffer" type="xs:int"/>
+        <xs:attribute name="send-buffer" type="xs:int"/>
+        <xs:attribute name="tcp-backlog" type="xs:int" default="10000"/>
+        <xs:attribute name="tcp-keep-alive" type="xs:boolean"/>
+        <xs:attribute name="read-timeout" type="xs:long" default="90000"/>
+        <xs:attribute name="write-timeout" type="xs:long" default="90000"/>
+        <xs:attribute name="max-connections" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="listener-type">
+        <xs:complexContent>
+            <xs:extension base="socket-options-type">
+                <xs:attribute name="name" use="required" type="xs:string"/>
+                <xs:attribute name="socket-binding" use="required" type="xs:string"/>
+                <xs:attribute name="worker" type="xs:string" default="default"/>
+                <xs:attribute name="buffer-pool" type="xs:string" default="default"/>
+                <xs:attribute name="enabled" type="xs:boolean" default="true"/>
+                <xs:attribute name="resolve-peer-address" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-post-size" type="xs:long" default="10485760"/>
+                <xs:attribute name="buffer-pipelined-data" type="xs:boolean" default="false"/>
+                <xs:attribute name="max-header-size" type="xs:long" default="1048576"/>
+                <xs:attribute name="max-parameters" type="xs:long" default="1000"/>
+                <xs:attribute name="max-headers" type="xs:long" default="200"/>
+                <xs:attribute name="max-cookies" type="xs:long" default="200"/>
+                <xs:attribute name="allow-encoded-slash" type="xs:boolean" default="false"/>
+                <xs:attribute name="decode-url" type="xs:boolean" default="true"/>
+                <xs:attribute name="url-charset" type="xs:string" default="UTF-8"/>
+                <xs:attribute name="always-set-keep-alive" type="xs:boolean" default="true"/>
+                <xs:attribute name="max-buffered-request-size" type="xs:long" default="16384"/>
+                <xs:attribute name="record-request-start-time" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-equals-in-cookie-value" type="xs:boolean" default="false"/>
+                <xs:attribute name="no-request-timeout" type="xs:int" default="60000"/>
+                <xs:attribute name="request-parse-timeout" type="xs:int"/>
+                <xs:attribute name="disallowed-methods" type="stringList" default="TRACE"/>
+                <xs:attribute name="secure" type="xs:boolean" default="false"/>
+                <xs:attribute name="rfc6265-cookie-validation" type="xs:boolean" default="false"/>
+                <xs:attribute name="allow-unescaped-characters-in-url" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="http-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+               <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                undertow will automatically redirect the request to the socket binding port specified here.
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                              Enables HTTP2 upgrade and prior knowledge connections
+                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="https-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Reference to the SSLContext that should be used by this listener.
+
+                            If neither ssl-context or security-realm are set the JVM wide default SSLContext will be used instead.
+
+                            If this attribute is defined, the attributes 'verify-client', 'enabled-cipher-suites', 'enabled-protocols',
+                            'ssl-session-cache-size', and 'ssl-session-timeout' must not be set.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="certificate-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If certificate forwarding should be enabled. If this is enabled then the listener will take the certificate from the SSL_CLIENT_CERT
+                                                attribute. This should only be enabled if behind a proxy, and the proxy is configured to always set these headers.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="proxy-address-forwarding" use="optional" type="xs:string" default="false">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                              enables x-forwarded-host and similar headers and set a remote ip address and hostname
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="security-realm" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            Deprecated:  ssl-context should be set instead to reference a defined SSLContext.
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="verify-client" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-cipher-suites" use="optional" type="xs:string"/>
+                <xs:attribute name="enabled-protocols" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-http2" use="optional" type="xs:string"/>
+                <xs:attribute name="enable-spdy" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-cache-size" use="optional" type="xs:string"/>
+                <xs:attribute name="ssl-session-timeout" use="optional" type="xs:string"/>
+                <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+                <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+                <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+                <xs:attribute name="require-host-http11" type="xs:boolean" use="optional" default="false"/>
+                <xs:attribute name="proxy-protocol" type="xs:boolean" default="false"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="ajp-listener-type">
+        <xs:complexContent>
+            <xs:extension base="listener-type">
+                <xs:attribute name="scheme" type="xs:string"/>
+                <xs:attribute name="redirect-socket" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                                If this listener is supporting non-SSL requests, and a request is received for which a matching <security-constraint> requires SSL transport,
+                                                undertow will automatically redirect the request to the socket binding port specified here.
+                                               ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="max-ajp-packet-size" type="xs:int"/>
+                <xs:attribute name="allowed-request-attributes-pattern" use="optional" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>
+                            <![CDATA[
+                                Pattern which will be used to match AJP attributes that should be supported as part of request. Value is simple java regex.
+                            ]]>
+                        </xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="servletContainerType">
+        <xs:sequence>
+            <xs:element name="jsp-config" type="jsp-configurationType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="affinity-cookie" type="affinityCookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="session-cookie" type="sessionCookieType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="persistent-sessions" type="persistent-sessionsType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="websockets" type="websocketsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="mime-mappings" type="mime-mappingsType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="welcome-files" type="welcome-filesType" maxOccurs="1" minOccurs="0" />
+            <xs:element name="crawler-session-management" type="crawler-session-managementType" maxOccurs="1" minOccurs="0" />
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="allow-non-standard-wrappers" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="default-buffer-cache" use="optional" type="xs:string"/>
+        <xs:attribute name="stack-trace-on-error" use="optional" default="local-only"/>
+        <xs:attribute name="default-encoding" type="xs:string" use="optional"/>
+        <xs:attribute name="use-listener-encoding" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="ignore-flush" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="eager-filter-initialization" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="default-session-timeout" type="xs:integer" use="optional" default="30"/>
+        <xs:attribute name="disable-caching-for-secured-pages" type="xs:boolean" use="optional" default="true"/>
+        <xs:attribute name="directory-listing" type="xs:boolean" use="optional" />
+        <xs:attribute name="proactive-authentication" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="session-id-length" type="xs:int" use="optional" default="30" />
+        <xs:attribute name="max-sessions" type="xs:int" use="optional" />
+        <xs:attribute name="disable-file-watch-service" type="xs:boolean" use="optional" />
+        <xs:attribute name="disable-session-id-reuse" type="xs:boolean" use="optional" />
+        <xs:attribute name="file-cache-max-file-size" type="xs:integer" use="optional" default="10485760"/>
+        <xs:attribute name="file-cache-metadata-size" type="xs:integer" use="optional" default="100"/>
+        <xs:attribute name="file-cache-time-to-live" type="xs:integer" use="optional"/>
+        <xs:attribute name="default-cookie-version" type="xs:integer"  use="optional"/>
+        <xs:attribute name="preserve-path-on-forward" type="xs:boolean" default="false"/>
+        <xs:attribute name="allow-orphan-session" type="xs:boolean" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingsType">
+        <xs:sequence>
+            <xs:element name="mime-mapping" type="mime-mappingType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="mime-mappingType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-filesType">
+        <xs:sequence>
+            <xs:element name="welcome-file" type="welcome-fileType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="welcome-fileType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="hostType">
+        <xs:sequence>
+            <xs:element name="location" type="locationType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="access-log" type="accessLogType" maxOccurs="1" minOccurs="0"/>
+            <xs:element name="console-access-log" type="consoleAccessLogType" minOccurs="0"/>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="single-sign-on" minOccurs="0" maxOccurs="1" type="singleSignOnType"/>
+            <xs:element name="http-invoker" minOccurs="0" maxOccurs="1" type="http-invokerType"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="alias" use="optional" type="xs:string"/>
+        <xs:attribute name="default-web-module" use="optional" type="xs:string" default="ROOT.war"/>
+        <xs:attribute name="default-response-code" use="optional" type="xs:int" default="404">
+            <xs:annotation>
+                <xs:documentation>Default response code should be set in case server should respond with nonstandard code( other than 404 ) for unavailable resource.
+                    For instance, server behind load balancer might want to respond with 5xx code to avoid being dropped by it.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="disable-console-redirect" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="queue-requests-on-start" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:complexType name="http-invokerType">
+        <xs:attribute name="path" use="optional" type="xs:string" default="wildfly-services"/>
+        <xs:attribute name="http-authentication-factory" type="xs:string" use="optional"/>
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The http-authentication-factory attribute should be used to configure authentication.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="websocketsType">
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="buffer-pool" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="dispatch-to-worker" use="optional" type="xs:boolean" default="true"/>
+        <xs:attribute name="per-message-deflate" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="deflater-level" use="optional" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="crawler-session-managementType">
+        <xs:attribute name="user-agents" use="optional" type="xs:string"/>
+        <xs:attribute name="session-timeout" use="optional" type="xs:integer"/>
+    </xs:complexType>
+
+    <xs:complexType name="jsp-configurationType">
+        <xs:attribute name="disabled" default="false" type="xs:boolean"/>
+        <xs:attribute name="development" default="false" type="xs:boolean"/>
+        <xs:attribute name="keep-generated" default="true" type="xs:boolean"/>
+        <xs:attribute name="trim-spaces" default="false" type="xs:boolean"/>
+        <xs:attribute name="tag-pooling" default="true" type="xs:boolean"/>
+        <xs:attribute name="mapped-file" default="true" type="xs:boolean"/>
+        <xs:attribute name="check-interval" default="0" type="xs:int"/>
+        <xs:attribute name="modification-test-interval" default="4" type="xs:int"/>
+        <xs:attribute name="recompile-on-fail" default="false" type="xs:boolean"/>
+        <xs:attribute name="smap" default="true" type="xs:boolean"/>
+        <xs:attribute name="dump-smap" default="false" type="xs:boolean"/>
+        <xs:attribute name="generate-strings-as-char-arrays" default="false" type="xs:boolean"/>
+        <xs:attribute name="error-on-use-bean-invalid-class-attribute" default="false" type="xs:boolean"/>
+        <xs:attribute name="scratch-dir" type="xs:string"/>
+        <xs:attribute name="source-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="target-vm" default="1.8" type="xs:string"/>
+        <xs:attribute name="java-encoding" default="UTF8" type="xs:string"/>
+        <xs:attribute name="x-powered-by" default="true" type="xs:boolean"/>
+        <xs:attribute name="display-source-fragment" default="true" type="xs:boolean"/>
+        <xs:attribute name="optimize-scriptlets" default="false" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="sessionCookieType">
+        <xs:complexContent>
+            <xs:extension base="commonCookieType">
+                <xs:attribute name="name" type="xs:string" use="optional"/>
+                <xs:attribute name="comment" type="xs:string"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="affinityCookieType">
+        <xs:complexContent>
+            <xs:extension base="commonCookieType">
+                <xs:attribute name="name" type="xs:string" use="required"/>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+    <xs:complexType name="commonCookieType" abstract="true">
+        <xs:attribute name="domain" type="xs:string"/>
+        <xs:attribute name="http-only" type="xs:boolean"/>
+        <xs:attribute name="secure" type="xs:boolean"/>
+        <xs:attribute name="max-age" type="xs:int"/>
+    </xs:complexType>
+
+    <xs:complexType name="persistent-sessionsType">
+        <xs:attribute name="path" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                  The path to store the session data. If not specified the data will just be stored in memory only.
+                ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="relative-to" type="xs:string" use="optional"/>
+    </xs:complexType>
+
+    <xs:complexType name="handlerType">
+        <xs:sequence>
+            <xs:element name="file" type="file-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="reverse-proxy" type="reverse-proxy-handlerType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+
+    <xs:complexType name="filterType">
+        <xs:sequence>
+            <xs:element name="request-limit" type="request-limitType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="response-header" type="response-headerType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="gzip" type="gzipType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="error-page" type="errorPageType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="mod-cluster" type="modClusterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="filter" type="customFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="expression-filter" type="expressionFilterType" minOccurs="0" maxOccurs="unbounded"/>
+            <xs:element name="rewrite" type="rewriteFilterType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="locationType">
+        <xs:sequence>
+            <xs:element name="filter-ref" type="filter-refType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="handler" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="accessLogType">
+        <xs:attribute name="pattern" use="optional" type="xs:string" default="common"/>
+        <xs:attribute name="worker" use="optional" type="xs:string" default="default"/>
+        <xs:attribute name="directory" use="optional" type="xs:string" default="${jboss.server.log.dir}"/>
+        <xs:attribute name="relative-to" use="optional" type="xs:string" />
+        <xs:attribute name="prefix" use="optional" type="xs:string" default="access_log."/>
+        <xs:attribute name="suffix" use="optional" type="xs:string" default="log"/>
+        <xs:attribute name="rotate" use="optional" type="xs:string" default="true"/>
+        <xs:attribute name="use-server-log" use="optional" type="xs:string" default="false"/>
+        <xs:attribute name="extended" use="optional" type="xs:string" default="false" />
+        <xs:attribute name="predicate" use="optional" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="consoleAccessLogType">
+        <xs:sequence minOccurs="0">
+            <xs:element name="attributes" type="attributesType" minOccurs="0"/>
+            <xs:element name="metadata" type="propertiesType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="include-host-name" type="xs:boolean" default="true"/>
+        <xs:attribute name="worker" type="xs:string" default="default"/>
+        <xs:attribute name="predicate" type="xs:string" />
+    </xs:complexType>
+    <xs:complexType name="propertiesType">
+        <xs:annotation>
+            <xs:documentation>
+                A collection of free-form meta-data properties.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="property">
+                <xs:complexType>
+                    <xs:attribute name="name" type="xs:string" use="required"/>
+                    <xs:attribute name="value" type="xs:string" use="required"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:choice>
+    </xs:complexType>
+    <xs:complexType name="attributesType">
+        <xs:annotation>
+            <xs:documentation>
+                The available attributes to be included in the structured access log output.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="authentication-type" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="bytes-sent" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="date-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="date-format" type="xs:string"/>
+                    <xs:attribute name="time-zone" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="host-and-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-port" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="local-server-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="path-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="predicate" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-parameter" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="query-string" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="include-question-mark" type="xs:boolean" default="false"/>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="relative-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-host" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-ip" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="obfuscated" type="xs:boolean" default="false"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="remote-user" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-line" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-method" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-scheme" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="request-url" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="resolved-path" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-code" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-header" minOccurs="0">
+                <xs:complexType>
+                    <xs:sequence>
+                        <xs:element name="name" maxOccurs="unbounded">
+                            <xs:complexType>
+                                <xs:attribute name="value" use="required"/>
+                            </xs:complexType>
+                        </xs:element>
+                    </xs:sequence>
+                    <xs:attribute name="key-prefix"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-reason-phrase" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="response-time" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                    <xs:attribute name="time-unit" default="MILLISECONDS">
+                        <xs:simpleType>
+                            <xs:restriction base="xs:token">
+                                <xs:enumeration value="NANOSECONDS"/>
+                                <xs:enumeration value="MICROSECONDS"/>
+                                <xs:enumeration value="MILLISECONDS"/>
+                                <xs:enumeration value="SECONDS"/>
+                            </xs:restriction>
+                        </xs:simpleType>
+                    </xs:attribute>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="secure-exchange" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-cipher" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-client-cert" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="ssl-session-id" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="stored-response" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="thread-name" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+            <xs:element name="transport-protocol" minOccurs="0">
+                <xs:complexType>
+                    <xs:attribute name="key" type="xs:string"/>
+                </xs:complexType>
+            </xs:element>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="errorPageType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="code" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="paramType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+
+
+    <xs:complexType name="customFilterType">
+        <xs:sequence>
+            <xs:element name="param" type="paramType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="class-name" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="required" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="expressionFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="expression" use="required" type="xs:string"/>
+        <xs:attribute name="module" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="rewriteFilterType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="target" use="required" type="xs:string"/>
+        <xs:attribute name="redirect" use="optional" type="xs:string"/>
+    </xs:complexType>
+    <xs:complexType name="file-handlerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="path" use="required" type="xs:string"/>
+        <xs:attribute name="cache-buffer-size" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="cache-buffers" use="optional" type="xs:int" default="1024"/>
+        <xs:attribute name="directory-listing" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="follow-symlink" use="optional" type="xs:boolean" default="false"/>
+        <xs:attribute name="safe-symlink-paths" use="optional" type="stringList"/>
+        <xs:attribute name="case-sensitive" use="optional" type="xs:boolean" default="true"/>
+    </xs:complexType>
+
+    <xs:simpleType name="stringList">
+        <xs:list itemType="xs:string"/>
+    </xs:simpleType>
+
+    <xs:complexType name="reverse-proxy-handlerType">
+        <xs:sequence>
+            <xs:element name="host" type="reverse-proxy-hostType" minOccurs="0" maxOccurs="unbounded"/>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="connections-per-thread" use="optional" type="xs:integer" default="40"/>
+        <xs:attribute name="session-cookie-names" use="optional" type="xs:string" default="JSESSIONID"/>
+        <xs:attribute name="problem-server-retry" use="optional" type="xs:integer" default="30"/>
+        <xs:attribute name="max-request-time" use="optional" type="xs:integer" default="-1"/>
+        <xs:attribute name="request-queue-size" use="optional" type="xs:integer" default="10"/>
+        <xs:attribute name="cached-connections-per-thread" use="optional" type="xs:integer" default="5"/>
+        <xs:attribute name="connection-idle-timeout" use="optional" type="xs:integer" default="60000"/>
+        <xs:attribute name="max-retries" type="xs:int" use="optional" default="1"/>
+        <xs:attribute name="reuse-x-forwarded-header" type="xs:boolean" use="optional" default="false"/>
+        <xs:attribute name="rewrite-host-header" type="xs:boolean" use="optional" default="false"/>
+    </xs:complexType>
+
+    <xs:complexType name="reverse-proxy-hostType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="outbound-socket-binding" use="required" type="xs:string"/>
+        <xs:attribute name="scheme" use="optional" type="xs:string" default="http"/>
+        <xs:attribute name="path" use="optional" type="xs:string" default=""/>
+        <xs:attribute name="instance-id" use="optional" type="xs:string"/>
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The ssl-context attribute should be used to reference a defined SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-http2" type="xs:boolean" use="optional" default="false" />
+    </xs:complexType>
+
+    <xs:complexType name="filter-refType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="predicate" use="optional" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                          Predicates provide a simple way of making a true/false decision  based on an exchange. Many handlers have a requirement that they be applied conditionally, and predicates provide a general way to specify a condition. Predicates can be created programatically (they are just java classes that implement the Predicate interface), however there is also a simple language for specifying a predicate. Some examples below:
+                          regex['/resources/*.\.css'] - regular expression match of the relative URL
+                          regex[pattern='text/.*', value='%{i,Content-Type}, full-match=true] - Matches requests with a text/.* content type
+                          equals[{'%{i,Content-Type}', 'text/xml'}] - Matches if the content type header is text/xml
+                          contains[search='MSIE', value='%{i,User-Agent}'] and path-suffix['.js'] - User agent contains MSIE and request URL ends with .js
+                          regex['/resources/(*.)\.css'] and equals[{'$1', 'myCssFile'}] - regex match, with a reference to match group 1 later in the expression
+                        ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="priority" use="optional" type="xs:string" />
+    </xs:complexType>
+
+    <xs:complexType name="singleSignOnType">
+        <xs:attribute name="domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie domain to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="path" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie path to use.
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-only" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie httpOnly attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="secure" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cookie secure attribute
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="cookie-name" type="xs:string" default="JSESSIONIDSSO">
+            <xs:annotation>
+                <xs:documentation>
+                    <![CDATA[
+                              Cooke name
+                              ]]>
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+
+    <xs:complexType name="buffer-cacheType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                  A buffer cache. I cache consists of 1 or more regions, that are split up into smaller buffers.
+                  The total cache size is the buffer size * the buffers per region * the number of regions.
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:string"/>
+        <xs:attribute name="buffers-per-region" use="optional" type="xs:string"/>
+        <xs:attribute name="max-regions" use="optional" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="byte-buffer-poolType">
+        <xs:annotation>
+            <xs:documentation>
+                <![CDATA[
+                The buffer pool used for IO operations
+                ]]>
+            </xs:documentation>
+        </xs:annotation>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="buffer-size" use="optional" type="xs:int"/>
+        <xs:attribute name="direct" use="optional" type="xs:boolean"/>
+        <xs:attribute name="thread-local-cache-size" use="optional" type="xs:int"/>
+        <xs:attribute name="max-pool-size" use="optional" type="xs:int"/>
+        <xs:attribute name="leak-detection-percent" use="optional" type="xs:int"/>
+    </xs:complexType>
+    <xs:complexType name="request-limitType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="max-concurrent-requests" use="required" type="xs:integer"/>
+        <xs:attribute name="queue-size" use="optional" type="xs:integer" default="0"/>
+    </xs:complexType>
+    <xs:complexType name="response-headerType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="header-name" use="required" type="xs:string"/>
+        <xs:attribute name="header-value" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="gzipType">
+        <xs:attribute name="name" use="required" type="xs:string"/>
+    </xs:complexType>
+
+    <xs:complexType name="modClusterType">
+        <xs:sequence minOccurs="0">
+            <xs:choice>
+                <xs:group ref="affinity"/>
+            </xs:choice>
+        </xs:sequence>
+        <xs:attribute name="name" use="required" type="xs:string"/>
+        <xs:attribute name="management-socket-binding" type="xs:string" use="required"/>
+        <xs:attribute name="advertise-socket-binding" type="xs:string" use="optional"/>
+        <xs:attribute name="security-key" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-protocol" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-path" type="xs:string" use="optional"/>
+        <xs:attribute name="advertise-frequency" type="xs:int" use="optional"/>
+        <xs:attribute name="failover-strategy" type="failoverStrategy" default="LOAD_BALANCED" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Determines how a failover node is chosen, in the event that the node to which a session has affinity is not available.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="health-check-interval" type="xs:int" use="optional"/>
+        <xs:attribute name="broken-node-timeout" type="xs:int" use="optional"/>
+        <xs:attribute name="worker" type="xs:string" use="optional" />
+        <xs:attribute name="max-request-time" type="xs:int" use="optional"/>
+        <xs:attribute name="management-access-predicate" type="xs:string" use="optional"/>
+        <xs:attribute name="connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="cached-connections-per-thread" type="xs:int" use="optional" />
+        <xs:attribute name="connection-idle-timeout" type="xs:int" use="optional" />
+        <xs:attribute name="request-queue-size" type="xs:int" use="optional" />
+        <xs:attribute name="ssl-context" type="xs:string" />
+        <xs:attribute name="security-realm" type="xs:string" use="optional">
+            <xs:annotation>
+                <xs:documentation>
+                    Deprecated: The ssl-context attribute should be used to reference a defined SSLContext.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="use-alias" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="enable-http2" type="xs:string" use="optional" default="false" />
+        <xs:attribute name="max-ajp-packet-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-enable-push" type="xs:boolean" use="optional" />
+        <xs:attribute name="http2-header-table-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-initial-window-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-concurrent-streams" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-frame-size" type="xs:int" use="optional" />
+        <xs:attribute name="http2-max-header-list-size" type="xs:int" use="optional" />
+        <xs:attribute name="max-retries" type="xs:int" use="optional" />
+    </xs:complexType>
+
+    <xs:group name="affinity">
+        <xs:choice>
+            <xs:element name="no-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will not have an affinity for any particular server, routing information will be ignored.
+                        Intended for use cases where web session state is not maintained within the application server.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="single-affinity" type="empty">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests have an affinity for the member that last handled a given session.
+                        This option corresponds to traditional sticky session behavior.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+            <xs:element name="ranked-affinity" type="ranked-affinity">
+                <xs:annotation>
+                    <xs:documentation>
+                        Web requests will have an affinity for the first available node in a list typically comprised of: primary owner, backup nodes, local node (if not a primary nor backup owner).
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:element>
+        </xs:choice>
+    </xs:group>
+
+    <xs:complexType name="ranked-affinity">
+        <xs:attribute name="delimiter" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    The delimiter used to separate ranked routes within the session ID.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="empty">
+        <xs:sequence/>
+    </xs:complexType>
+
+    <xs:simpleType name="failoverStrategy">
+        <xs:restriction base="xs:token">
+            <xs:enumeration value="LOAD_BALANCED">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen via load balancing mechanism.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+            <xs:enumeration value="DETERMINISTIC">
+                <xs:annotation>
+                    <xs:documentation>
+                        Failover target chosen deterministically from the associated session identifier.
+                    </xs:documentation>
+                </xs:annotation>
+            </xs:enumeration>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="applicationSecurityDomainsType">
+        <xs:annotation>
+            <xs:documentation>
+                Listing of security domains from applications that should be mapped to an Elytron
+                backed authentication policy.
+            </xs:documentation>
+        </xs:annotation>
+        <xs:sequence>
+            <xs:element name="application-security-domain" type="applicationSecurityDomainType" maxOccurs="unbounded"/>
+        </xs:sequence>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainType">
+        <xs:sequence>
+            <xs:element name="single-sign-on" type="applicationSecurityDomainSingleSignOnType" minOccurs="0"/>
+        </xs:sequence>
+        <xs:attribute name="name" type="xs:string" use="required">
+            <xs:annotation>
+                <xs:documentation>
+                    The name of the security domain as specified in deployments.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="http-authentication-factory" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the HttpAuthenticationFactory that should be used.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="override-deployment-config" type="xs:boolean" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    The references HttpServerAuthenticationMechanismFactory contains it's own policy configuration
+                    to control the authentication mechanisms it supports, if this attribute is set to 'true'
+                    that policy will override the methods specified within the deployment.
+
+                    This attribute can only be specified if a http-authentication-factory is also specified.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="security-domain" type="xs:string">
+            <xs:annotation>
+                <xs:documentation>
+                    Reference to the security-domain that should be associated with the deployment, where a
+                    security-domain is referenced instead of a http-authentication-factory the authentication mechanisms
+                    BASIC, DIGEST, FORM and CLIENT_CERT will be availble for the deployment to use - additionally the deployment
+                    can make use of the programatic login API.
+
+                    Exactly one of http-authentication-factory or security-domain must be defined.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jacc" type="xs:boolean" use="optional" default="false">
+            <xs:annotation>
+                <xs:documentation>
+                    Enable authorization using JACC.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="enable-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    Should deployments matching against this 'application-security-domain' have
+                    JASPI enabled, by setting to false JASPI will be completely disabled for the deployment.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+        <xs:attribute name="integrated-jaspi" type="xs:boolean" default="true">
+            <xs:annotation>
+                <xs:documentation>
+                    When integrated-jaspi is enabled during JASPI authentication the resulting
+                    identity will be loaded from the SecurityDomain referenced by the deployment, if
+                    this is switched off AdHoc identities will be created instead.
+                </xs:documentation>
+            </xs:annotation>
+        </xs:attribute>
+    </xs:complexType>
+
+    <xs:complexType name="applicationSecurityDomainSingleSignOnType">
+        <xs:complexContent>
+            <xs:extension base="singleSignOnType">
+                <xs:sequence>
+                    <xs:element name="credential-reference" type="credential-reference:credentialReferenceType" minOccurs="0"/>
+                </xs:sequence>
+                <xs:attribute name="key-store" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>References key store containing the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="key-alias" type="xs:string" use="required">
+                    <xs:annotation>
+                        <xs:documentation>The alias of the key used to sign and verify logout requests.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+                <xs:attribute name="client-ssl-context" type="xs:string">
+                    <xs:annotation>
+                        <xs:documentation>The ssl context used to secure back-channel logout connections.</xs:documentation>
+                    </xs:annotation>
+                </xs:attribute>
+            </xs:extension>
+        </xs:complexContent>
+    </xs:complexType>
+
+</xs:schema>
diff --git a/wildfly/docs/schema/xml.xsd b/wildfly/docs/schema/xml.xsd
new file mode 100644
index 0000000..8380c07
--- /dev/null
+++ b/wildfly/docs/schema/xml.xsd
@@ -0,0 +1,86 @@
+<?xml version='1.0'?>
+<xs:schema targetNamespace="http://www.w3.org/XML/1998/namespace" xmlns:xs="http://www.w3.org/2001/XMLSchema" xml:lang="en">
+  
+  <xs:annotation>
+    <xs:documentation> See http://www.w3.org/XML/1998/namespace.html and http://www.w3.org/TR/REC-xml for information about this namespace. This schema document describes the XML
+      namespace, in a form suitable for import by other schema documents. Note that local names in this namespace are intended to be defined only by the World Wide Web Consortium or its subgroups. The
+      following names are currently defined in this namespace and should not be used with conflicting semantics by any Working Group, specification, or document instance: base (as an attribute
+      name): denotes an attribute whose value provides a URI to be used as the base for interpreting any relative URIs in the scope of the element on which it appears; its value is inherited. This name is
+      reserved by virtue of its definition in the XML Base specification. id (as an attribute name): denotes an attribute whose value should be interpreted as if declared to be of type ID. The xml:id
+      specification is not yet a W3C Recommendation, but this attribute is included here to facilitate experimentation with the mechanisms it proposes. Note that it is _not_ included in the
+      specialAttrs attribute group. lang (as an attribute name): denotes an attribute whose value is a language code for the natural language of the content of any element; its value is inherited.
+      This name is reserved by virtue of its definition in the XML specification. space (as an attribute name): denotes an attribute whose value is a keyword indicating what whitespace processing
+      discipline is intended for the content of the element; its value is inherited. This name is reserved by virtue of its definition in the XML specification. Father (in any context at all): denotes
+      Jon Bosak, the chair of the original XML Working Group. This name is reserved by the following decision of the W3C XML Plenary and XML Coordination groups: In appreciation for his vision,
+      leadership and dedication the W3C XML Plenary on this 10th day of February, 2000 reserves for Jon Bosak in perpetuity the XML name xml:Father </xs:documentation>
+  </xs:annotation>
+  
+  <xs:annotation>
+    <xs:documentation>This schema defines attributes and an attribute group suitable for use by schemas wishing to allow xml:base, xml:lang, xml:space or xml:id attributes on elements they
+      define. To enable this, such a schema must import this schema for the XML namespace, e.g. as follows:
+      &lt;schema . . .> . . .
+      &lt;import namespace="http://www.w3.org/XML/1998/namespace" schemaLocation="http://www.w3.org/2001/xml.xsd"/> Subsequently, qualified reference to any of the attributes or
+      the group defined below will have the desired effect, e.g.
+      
+      &lt;type . . .> . . .
+      &lt;attributeGroup ref="xml:specialAttrs"/> will define a type which will schema-validate an instance element with any of those attributes</xs:documentation>
+    
+  </xs:annotation>
+  
+  <xs:annotation>
+    <xs:documentation>In keeping with the XML Schema WG's standard versioning policy, this schema document will persist at http://www.w3.org/2005/08/xml.xsd. At the date of issue it can also be
+      found at http://www.w3.org/2001/xml.xsd. The schema document at that URI may however change in the future, in order to remain compatible with the latest version of XML Schema itself, or with
+      the XML namespace itself. In other words, if the XML Schema or XML namespaces change, the version of this document at http://www.w3.org/2001/xml.xsd will change accordingly; the version at
+      http://www.w3.org/2005/08/xml.xsd will not change. </xs:documentation>
+  </xs:annotation>
+  
+  <xs:attribute name="lang">
+    <xs:annotation>
+      <xs:documentation>Attempting to install the relevant ISO 2- and 3-letter codes as the enumerated possible values is probably never going to be a realistic possibility. See RFC 3066 at
+        http://www.ietf.org/rfc/rfc3066.txt and the IANA registry at http://www.iana.org/assignments/lang-tag-apps.htm for further information. The union allows for the
+        'un-declaration' of xml:lang with the empty string.</xs:documentation>
+      
+    </xs:annotation>
+    <xs:simpleType>
+      <xs:union memberTypes="xs:language">
+        <xs:simpleType>
+          <xs:restriction base="xs:string">
+            <xs:enumeration value=""/>
+          </xs:restriction>
+        </xs:simpleType>
+      </xs:union>
+      
+    </xs:simpleType>
+  </xs:attribute>
+  
+  <xs:attribute name="space">
+    <xs:simpleType>
+      <xs:restriction base="xs:NCName">
+        <xs:enumeration value="default"/>
+        <xs:enumeration value="preserve"/>
+      </xs:restriction>
+      
+    </xs:simpleType>
+  </xs:attribute>
+  
+  <xs:attribute name="base" type="xs:anyURI">
+    <xs:annotation>
+      <xs:documentation>See http://www.w3.org/TR/xmlbase/ for information about this attribute.</xs:documentation>
+    </xs:annotation>
+  </xs:attribute>
+  
+  <xs:attribute name="id" type="xs:ID">
+    
+    <xs:annotation>
+      <xs:documentation>See http://www.w3.org/TR/xml-id/ for information about this attribute.</xs:documentation>
+    </xs:annotation>
+  </xs:attribute>
+  
+  <xs:attributeGroup name="specialAttrs">
+    <xs:attribute ref="xml:base"/>
+    <xs:attribute ref="xml:lang"/>
+    <xs:attribute ref="xml:space"/>
+    
+  </xs:attributeGroup>
+  
+</xs:schema>
\ No newline at end of file
diff --git a/wildfly/docs/schema/xnio_3_5.xsd b/wildfly/docs/schema/xnio_3_5.xsd
new file mode 100644
index 0000000..84e663f
--- /dev/null
+++ b/wildfly/docs/schema/xnio_3_5.xsd
@@ -0,0 +1,75 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<!--
+  ~ JBoss, Home of Professional Open Source
+  ~
+  ~ Copyright 2017 Red Hat, Inc. and/or its affiliates.
+  ~
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
+  ~
+  ~     http://www.apache.org/licenses/LICENSE-2.0
+  ~
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
+  -->
+
+<xs:schema xmlns:xs="http://www.w3.org/2001/XMLSchema"
+            targetNamespace="urn:xnio:3.5"
+            xmlns="urn:xnio:3.5"
+            elementFormDefault="qualified"
+            attributeFormDefault="unqualified"
+            version="1.0">
+
+    <xs:element name="worker" type="worker-type"/>
+
+    <xs:complexType name="worker-type">
+        <xs:all minOccurs="0" maxOccurs="1">
+            <xs:element name="daemon-threads" type="boolean-value-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="worker-name" type="string-value-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="pool-size" type="pool-size-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="task-keepalive" type="positive-value-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="io-threads" type="positive-value-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="stack-size" type="positive-value-type" minOccurs="0" maxOccurs="1"/>
+            <xs:element name="outbound-bind-addresses" type="bind-addresses-type" minOccurs="0" maxOccurs="1"/>
+        </xs:all>
+    </xs:complexType>
+
+    <xs:simpleType name="non-empty-string-type">
+        <xs:restriction base="xs:string">
+            <xs:minLength value="1"/>
+        </xs:restriction>
+    </xs:simpleType>
+
+    <xs:complexType name="boolean-value-type">
+        <xs:attribute name="value" type="xs:boolean" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="string-value-type">
+        <xs:attribute name="value" type="non-empty-string-type" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="pool-size-type">
+        <xs:attribute name="max-threads" type="xs:positiveInteger" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="positive-value-type">
+        <xs:attribute name="value" type="xs:positiveInteger" use="required"/>
+    </xs:complexType>
+
+    <xs:complexType name="bind-addresses-type">
+        <xs:choice minOccurs="0" maxOccurs="unbounded">
+            <xs:element name="bind-address" type="bind-address-type"/>
+        </xs:choice>
+    </xs:complexType>
+
+    <xs:complexType name="bind-address-type">
+        <xs:attribute name="match" type="xs:string"/>
+        <xs:attribute name="bind-address" type="xs:string"/>
+        <xs:attribute name="bind-port" type="xs:nonNegativeInteger"/>
+    </xs:complexType>
+</xs:schema>
diff --git a/wildfly/domain/configuration/application-roles.properties b/wildfly/domain/configuration/application-roles.properties
new file mode 100644
index 0000000..ace5eaa
--- /dev/null
+++ b/wildfly/domain/configuration/application-roles.properties
@@ -0,0 +1,23 @@
+#
+# Properties declaration of users roles for the realm 'ApplicationRealm' which is the default realm
+# for application services on new installations.
+#
+# This includes the following protocols: remote ejb, remote jndi, web, remote jms
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# The format of this file is as follows: -
+# username=role1,role2,role3
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+# The following illustrates how an admin user could be defined.
+#
+#admin=PowerUser,BillingAdmin,
+#guest=guest
diff --git a/wildfly/domain/configuration/application-users.properties b/wildfly/domain/configuration/application-users.properties
new file mode 100644
index 0000000..9d8301f
--- /dev/null
+++ b/wildfly/domain/configuration/application-users.properties
@@ -0,0 +1,25 @@
+#
+# Properties declaration of users for the realm 'ApplicationRealm' which is the default realm
+# for application services on new installations.
+#
+# This includes the following protocols: remote ejb, remote jndi, web, remote jms
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# The format of this realm is as follows: -
+# username=HEX( MD5( username ':' realm ':' password))
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+#$REALM_NAME=ApplicationRealm$ This line is used by the add-user utility to identify the realm name already used in this file.
+#
+# The following illustrates how an admin user could be defined, this
+# is for illustration only and does not correspond to a usable password.
+#
+#admin=2a0923285184943425d1f53ddd58ec7a
diff --git a/wildfly/domain/configuration/default-server-logging.properties b/wildfly/domain/configuration/default-server-logging.properties
new file mode 100644
index 0000000..1ec91e2
--- /dev/null
+++ b/wildfly/domain/configuration/default-server-logging.properties
@@ -0,0 +1,33 @@
+#
+# Copyright The WildFly Authors
+# SPDX-License-Identifier: Apache-2.0
+#
+
+# Additional loggers to configure (the root logger is always configured)
+loggers=com.arjuna,org.jboss.as.config,sun.rmi
+
+logger.level=INFO
+logger.handlers=FILE
+
+logger.com.arjuna.level=WARN
+logger.com.arjuna.useParentHandlers=true
+
+logger.org.jboss.as.config.level=DEBUG
+logger.org.jboss.as.config.useParentHandlers=true
+
+logger.sun.rmi.level=WARN
+logger.sun.rmi.useParentHandlers=true
+
+handler.FILE=org.jboss.logmanager.handlers.PeriodicRotatingFileHandler
+handler.FILE.level=ALL
+handler.FILE.formatter=PATTERN
+handler.FILE.properties=autoFlush,append,fileName,suffix
+handler.FILE.constructorProperties=fileName,append
+handler.FILE.autoFlush=true
+handler.FILE.append=true
+handler.FILE.fileName=${org.jboss.boot.log.file:server.log}
+handler.FILE.suffix=.yyyy-MM-dd
+
+formatter.PATTERN=org.jboss.logmanager.formatters.PatternFormatter
+formatter.PATTERN.properties=pattern
+formatter.PATTERN.pattern=%d{yyyy-MM-dd HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%e%n
diff --git a/wildfly/domain/configuration/domain.xml b/wildfly/domain/configuration/domain.xml
new file mode 100644
index 0000000..f0a6529
--- /dev/null
+++ b/wildfly/domain/configuration/domain.xml
@@ -0,0 +1,2100 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<domain xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <system-properties>
+        <property name="java.net.preferIPv4Stack" value="true"/>
+    </system-properties>
+    <management>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profiles>
+        <profile name="default">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+                <local-client-mappings-registry/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <local-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <local-routing/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store preload="true"/>
+                    </local-cache>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="sso">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.singleton.server">
+                    <local-cache name="default">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <local-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+            <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="ha">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+                <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <primary-owner-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <infinispan-routing cache-container="web" cache="routing"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                    <replicated-cache name="client-mappings">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                    <distributed-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="default">
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="sso">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <replicated-cache name="routing">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                    <invalidation-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </invalidation-cache>
+                    <replicated-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+                <channels default="ee">
+                    <channel name="ee" stack="udp" cluster="ejb"/>
+                </channels>
+                <stacks>
+                    <stack name="udp">
+                        <transport type="UDP" socket-binding="jgroups-udp"/>
+                        <protocol type="RED"/>
+                        <protocol type="PING"/>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                    <stack name="tcp">
+                        <transport type="TCP" socket-binding="jgroups-tcp"/>
+                        <protocol type="RED"/>
+                        <socket-protocol type="MPING" socket-binding="jgroups-mping"/>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                </stacks>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+            <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+                <proxy name="default" advertise-socket="modcluster" listener="ajp">
+                    <dynamic-load-provider>
+                        <load-metric type="cpu"/>
+                    </dynamic-load-provider>
+                </proxy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+                <singleton-policies default="default">
+                    <singleton-policy name="default" cache-container="server">
+                        <simple-election-policy/>
+                    </singleton-policy>
+                </singleton-policies>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <ajp-listener name="ajp" socket-binding="ajp"/>
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="full">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+                <local-client-mappings-registry/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <local-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <local-routing/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <mdb>
+                    <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                    <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+                </mdb>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <iiop enable-by-default="false" use-qualified-name="false"/>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+                <orb socket-binding="iiop"/>
+                <initializers security="elytron" transactions="spec"/>
+                <security server-requires-ssl="false" client-requires-ssl="false"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store preload="true"/>
+                    </local-cache>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                    <local-cache name="passivation">
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </local-cache>
+                    <local-cache name="sso">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.singleton.server">
+                    <local-cache name="default">
+                        <expiration interval="0"/>
+                    </local-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <local-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+                <server name="default">
+                    <security elytron-domain="ApplicationDomain"/>
+                    <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <security-setting name="#">
+                        <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                    </security-setting>
+                    <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10"/>
+                    <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                    <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                        <param name="batch-delay" value="50"/>
+                    </http-connector>
+                    <in-vm-connector name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-connector>
+                    <http-acceptor name="http-acceptor" http-listener="default"/>
+                    <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                        <param name="batch-delay" value="50"/>
+                        <param name="direct-deliver" value="false"/>
+                    </http-acceptor>
+                    <in-vm-acceptor name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-acceptor>
+                    <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                    <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                    <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                    <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector"/>
+                    <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+                </server>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+            <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="full-ha">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+                <default-job-repository name="in-memory"/>
+                <default-thread-pool name="batch"/>
+                <job-repository name="in-memory">
+                    <in-memory/>
+                </job-repository>
+                <thread-pool name="batch">
+                    <max-threads count="10"/>
+                    <keepalive-time time="30" unit="seconds"/>
+                </thread-pool>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+                <datasources>
+                    <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                        <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                        <driver>h2</driver>
+                        <security user-name="sa" password="sa"/>
+                    </datasource>
+                    <drivers>
+                        <driver name="h2" module="com.h2database.h2">
+                            <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                        </driver>
+                    </drivers>
+                </datasources>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+                <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+                <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+                <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+                <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+                <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                    <primary-owner-affinity/>
+                </infinispan-session-management>
+                <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+                <infinispan-routing cache-container="web" cache="routing"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee:6.0">
+                <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+                <concurrent>
+                    <context-services>
+                        <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                    </context-services>
+                    <managed-thread-factories>
+                        <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                    </managed-thread-factories>
+                    <managed-executor-services>
+                        <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                    </managed-executor-services>
+                    <managed-scheduled-executor-services>
+                        <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                    </managed-scheduled-executor-services>
+                </concurrent>
+                <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+                <session-bean>
+                    <stateless>
+                        <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                    </stateless>
+                    <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                    <singleton default-access-timeout="5000"/>
+                </session-bean>
+                <mdb>
+                    <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                    <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+                </mdb>
+                <pools>
+                    <bean-instance-pools>
+                        <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                        <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    </bean-instance-pools>
+                </pools>
+                <caches>
+                    <simple-cache name="simple"/>
+                    <distributable-cache name="distributable"/>
+                </caches>
+                <async thread-pool-name="default"/>
+                <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                    <data-stores>
+                        <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                    </data-stores>
+                </timer-service>
+                <remote connectors="http-remoting-connector" thread-pool-name="default">
+                    <channel-creation-options>
+                        <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                    </channel-creation-options>
+                </remote>
+                <thread-pools>
+                    <thread-pool name="default">
+                        <max-threads count="10"/>
+                        <keepalive-time time="60" unit="seconds"/>
+                    </thread-pool>
+                </thread-pools>
+                <iiop enable-by-default="false" use-qualified-name="false"/>
+                <default-security-domain value="other"/>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+                <default-missing-method-permissions-deny-access value="true"/>
+                <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <log-system-exceptions value="true"/>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+                <providers>
+                    <aggregate-providers name="combined-providers">
+                        <providers name="elytron"/>
+                        <providers name="openssl"/>
+                    </aggregate-providers>
+                    <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                    <provider-loader name="openssl" module="org.wildfly.openssl"/>
+                </providers>
+                <audit-logging>
+                    <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+                </audit-logging>
+                <security-domains>
+                    <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                        <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    </security-domain>
+                </security-domains>
+                <security-realms>
+                    <identity-realm name="local" identity="$local"/>
+                    <properties-realm name="ApplicationRealm">
+                        <users-properties path="application-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ApplicationRealm"/>
+                        <groups-properties path="application-roles.properties" relative-to="jboss.domain.config.dir"/>
+                    </properties-realm>
+                </security-realms>
+                <mappers>
+                    <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                        <permission-mapping>
+                            <principal name="anonymous"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                        <permission-mapping match-all="true">
+                            <permission-set name="login-permission"/>
+                            <permission-set name="default-permissions"/>
+                        </permission-mapping>
+                    </simple-permission-mapper>
+                    <constant-realm-mapper name="local" realm-name="local"/>
+                    <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                    <constant-role-mapper name="super-user-mapper">
+                        <role name="SuperUser"/>
+                    </constant-role-mapper>
+                </mappers>
+                <permission-sets>
+                    <permission-set name="login-permission">
+                        <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                    </permission-set>
+                    <permission-set name="default-permissions">
+                        <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                        <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                        <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    </permission-set>
+                </permission-sets>
+                <http>
+                    <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="BASIC">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </http-authentication-factory>
+                    <provider-http-server-mechanism-factory name="global"/>
+                </http>
+                <sasl>
+                    <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                        <mechanism-configuration>
+                            <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                            <mechanism mechanism-name="DIGEST-MD5">
+                                <mechanism-realm realm-name="ApplicationRealm"/>
+                            </mechanism>
+                        </mechanism-configuration>
+                    </sasl-authentication-factory>
+                    <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                        <properties>
+                            <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                            <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                        </properties>
+                    </configurable-sasl-server-factory>
+                    <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                        <filters>
+                            <filter provider-name="WildFlyElytron"/>
+                        </filters>
+                    </mechanism-provider-filtering-sasl-server-factory>
+                    <provider-sasl-server-factory name="global"/>
+                </sasl>
+                <tls>
+                    <key-stores>
+                        <key-store name="applicationKS">
+                            <credential-reference clear-text="password"/>
+                            <implementation type="JKS"/>
+                            <file path="application.keystore" relative-to="jboss.domain.config.dir"/>
+                        </key-store>
+                    </key-stores>
+                    <key-managers>
+                        <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                            <credential-reference clear-text="password"/>
+                        </key-manager>
+                    </key-managers>
+                    <server-ssl-contexts>
+                        <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                    </server-ssl-contexts>
+                </tls>
+                <policy name="jacc">
+                    <jacc-policy/>
+                </policy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+                <orb socket-binding="iiop"/>
+                <initializers security="elytron" transactions="spec"/>
+                <security server-requires-ssl="false" client-requires-ssl="false"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+                <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="transient">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </local-cache>
+                    <replicated-cache name="client-mappings">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                    <distributed-cache name="persistent">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="default">
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+                <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                    <transport lock-timeout="60000"/>
+                    <replicated-cache name="sso">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <replicated-cache name="routing">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                    <distributed-cache name="dist">
+                        <locking isolation="REPEATABLE_READ"/>
+                        <transaction mode="BATCH"/>
+                        <expiration interval="0"/>
+                        <file-store passivation="true" purge="true"/>
+                    </distributed-cache>
+                </cache-container>
+                <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                    <transport lock-timeout="60000"/>
+                    <local-cache name="local-query">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </local-cache>
+                    <local-cache name="pending-puts">
+                        <expiration max-idle="60000"/>
+                    </local-cache>
+                    <invalidation-cache name="entity">
+                        <heap-memory size="10000"/>
+                        <expiration max-idle="100000"/>
+                    </invalidation-cache>
+                    <replicated-cache name="timestamps">
+                        <expiration interval="0"/>
+                    </replicated-cache>
+                </cache-container>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+            <subsystem xmlns="urn:jboss:domain:jca:6.0">
+                <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+                <bean-validation enabled="true"/>
+                <default-workmanager>
+                    <short-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </short-running-threads>
+                    <long-running-threads>
+                        <core-threads count="50"/>
+                        <queue-length count="50"/>
+                        <max-threads count="50"/>
+                        <keepalive-time time="10" unit="seconds"/>
+                    </long-running-threads>
+                </default-workmanager>
+                <cached-connection-manager/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+                <channels default="ee">
+                    <channel name="ee" stack="udp" cluster="ejb"/>
+                </channels>
+                <stacks>
+                    <stack name="udp">
+                        <transport type="UDP" socket-binding="jgroups-udp"/>
+                        <protocol type="RED"/>
+                        <protocol type="PING"/>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                    <stack name="tcp">
+                        <transport type="TCP" socket-binding="jgroups-tcp"/>
+                        <protocol type="RED"/>
+                        <socket-protocol type="MPING" socket-binding="jgroups-mping"/>
+                        <protocol type="MERGE3"/>
+                        <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                        <protocol type="FD_ALL3"/>
+                        <protocol type="VERIFY_SUSPECT2"/>
+                        <protocol type="pbcast.NAKACK2"/>
+                        <protocol type="UNICAST3"/>
+                        <protocol type="pbcast.STABLE"/>
+                        <protocol type="pbcast.GMS"/>
+                        <protocol type="UFC"/>
+                        <protocol type="MFC"/>
+                        <protocol type="FRAG4"/>
+                    </stack>
+                </stacks>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+                <expose-resolved-model/>
+                <expose-expression-model/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+                <jpa default-extended-persistence-inheritance="DEEP"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+            <subsystem xmlns="urn:jboss:domain:mail:4.0">
+                <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                    <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+                </mail-session>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+                <server name="default">
+                    <security elytron-domain="ApplicationDomain"/>
+                    <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                    <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                    <security-setting name="#">
+                        <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                    </security-setting>
+                    <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10" redistribution-delay="1000"/>
+                    <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                    <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                        <param name="batch-delay" value="50"/>
+                    </http-connector>
+                    <in-vm-connector name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-connector>
+                    <http-acceptor name="http-acceptor" http-listener="default"/>
+                    <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                        <param name="batch-delay" value="50"/>
+                        <param name="direct-deliver" value="false"/>
+                    </http-acceptor>
+                    <in-vm-acceptor name="in-vm" server-id="0">
+                        <param name="buffer-pooling" value="false"/>
+                    </in-vm-acceptor>
+                    <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                    <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                    <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                    <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                    <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                    <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                    <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector" ha="true" block-on-acknowledge="true" reconnect-attempts="-1"/>
+                    <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+                </server>
+            </subsystem>
+            <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+            <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+                <proxy name="default" advertise-socket="modcluster" listener="ajp">
+                    <dynamic-load-provider>
+                        <load-metric type="cpu"/>
+                    </dynamic-load-provider>
+                </proxy>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:naming:2.0">
+                <remote-naming/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+                <endpoint worker="default"/>
+                <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+            <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+            <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+                <deployment-permissions>
+                    <maximum-set>
+                        <permission class="java.security.AllPermission"/>
+                    </maximum-set>
+                </deployment-permissions>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+                <singleton-policies default="default">
+                    <singleton-policy name="default" cache-container="server">
+                        <simple-election-policy/>
+                    </singleton-policy>
+                </singleton-policies>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+                <core-environment node-identifier="${jboss.tx.node.id:1}">
+                    <process-id>
+                        <uuid/>
+                    </process-id>
+                </core-environment>
+                <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+                <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <ajp-listener name="ajp" socket-binding="ajp"/>
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <location name="/" handler="welcome-content"/>
+                        <http-invoker http-authentication-factory="application-http-authentication"/>
+                    </host>
+                </server>
+                <servlet-container name="default">
+                    <jsp-config/>
+                    <websockets/>
+                </servlet-container>
+                <handlers>
+                    <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+                </handlers>
+                <application-security-domains>
+                    <application-security-domain name="other" security-domain="ApplicationDomain"/>
+                </application-security-domains>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+                <endpoint-config name="Standard-Endpoint-Config"/>
+                <endpoint-config name="Recording-Endpoint-Config">
+                    <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                        <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                    </pre-handler-chain>
+                </endpoint-config>
+                <client-config name="Standard-Client-Config"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+        </profile>
+        <profile name="load-balancer">
+            <subsystem xmlns="urn:jboss:domain:logging:8.0">
+                <periodic-rotating-file-handler name="FILE" autoflush="true">
+                    <formatter>
+                        <named-formatter name="PATTERN"/>
+                    </formatter>
+                    <file relative-to="jboss.server.log.dir" path="server.log"/>
+                    <suffix value=".yyyy-MM-dd"/>
+                    <append value="true"/>
+                </periodic-rotating-file-handler>
+                <logger category="com.arjuna">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="com.networknt.schema">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="io.jaegertracing.Configuration">
+                    <level name="WARN"/>
+                </logger>
+                <logger category="org.jboss.as.config">
+                    <level name="DEBUG"/>
+                </logger>
+                <logger category="sun.rmi">
+                    <level name="WARN"/>
+                </logger>
+                <root-logger>
+                    <level name="INFO"/>
+                    <handlers>
+                        <handler name="FILE"/>
+                    </handlers>
+                </root-logger>
+                <formatter name="PATTERN">
+                    <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+                <formatter name="COLOR-PATTERN">
+                    <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+                </formatter>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+                <worker name="default"/>
+            </subsystem>
+            <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                <byte-buffer-pool name="default"/>
+                <buffer-cache name="default"/>
+                <server name="default-server">
+                    <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                    <http-listener name="management" socket-binding="mcmp-management" enable-http2="true"/>
+                    <host name="default-host" alias="localhost">
+                        <filter-ref name="load-balancer"/>
+                    </host>
+                </server>
+                <servlet-container name="default"/>
+                <filters>
+                    <mod-cluster name="load-balancer" management-socket-binding="mcmp-management" advertise-socket-binding="modcluster" enable-http2="true" max-retries="3">
+                        <single-affinity/>
+                    </mod-cluster>
+                </filters>
+            </subsystem>
+        </profile>
+    </profiles>
+    <interfaces>
+        <interface name="management"/>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public"/>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-groups>
+        <socket-binding-group name="standard-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="ha-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+            <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+            <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+            <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+            <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+            <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="full-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="iiop" interface="unsecure" port="3528"/>
+            <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="full-ha-sockets" default-interface="public">
+            <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="iiop" interface="unsecure" port="3528"/>
+            <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+            <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+            <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+            <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+            <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+            <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+            <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+            <socket-binding name="txn-recovery-environment" port="4712"/>
+            <socket-binding name="txn-status-manager" port="4713"/>
+            <outbound-socket-binding name="mail-smtp">
+                <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+            </outbound-socket-binding>
+        </socket-binding-group>
+        <socket-binding-group name="load-balancer-sockets" default-interface="public">
+            <socket-binding name="http" port="${jboss.http.port:8080}"/>
+            <socket-binding name="https" port="${jboss.https.port:8443}"/>
+            <socket-binding name="mcmp-management" interface="private" port="${jboss.mcmp.port:8090}"/>
+            <socket-binding name="modcluster" interface="private" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        </socket-binding-group>
+    </socket-binding-groups>
+    <server-groups>
+        <server-group name="main-server-group" profile="full">
+            <jvm name="default">
+                <heap size="64m" max-size="512m"/>
+            </jvm>
+            <socket-binding-group ref="full-sockets"/>
+        </server-group>
+        <server-group name="other-server-group" profile="full-ha">
+            <jvm name="default">
+                <heap size="64m" max-size="512m"/>
+            </jvm>
+            <socket-binding-group ref="full-ha-sockets"/>
+        </server-group>
+    </server-groups>
+    <host-excludes>
+        <host-exclude name="WildFly23.0">
+            <host-release id="WildFly23.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.elytron-oidc-client"/>
+                <extension module="org.wildfly.extension.opentelemetry"/>
+                <extension module="org.wildfly.extension.micrometer"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly24.0">
+            <host-release id="WildFly24.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.elytron-oidc-client"/>
+                <extension module="org.wildfly.extension.opentelemetry"/>
+                <extension module="org.wildfly.extension.micrometer"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly25.0">
+            <host-release id="WildFly25.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.micrometer"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly26.0">
+            <host-release id="WildFly26.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.clustering.ejb"/>
+                <extension module="org.wildfly.extension.micrometer"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly27.0">
+            <host-release id="WildFly27.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.micrometer"/>
+                <extension module="org.wildfly.extension.microprofile.lra-participant"/>
+                <extension module="org.wildfly.extension.microprofile.lra-coordinator"/>
+                <extension module="org.wildfly.extension.microprofile.telemetry"/>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly28.0">
+            <host-release id="WildFly28.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly29.0">
+            <host-release id="WildFly29.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly30.0">
+            <host-release id="WildFly30.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+        <host-exclude name="WildFly31.0">
+            <host-release id="WildFly31.0"/>
+            <excluded-extensions>
+                <extension module="org.wildfly.extension.mvc-krazo"/>
+            </excluded-extensions>
+        </host-exclude>
+    </host-excludes>
+</domain>
\ No newline at end of file
diff --git a/wildfly/domain/configuration/host-primary.xml b/wildfly/domain/configuration/host-primary.xml
new file mode 100644
index 0000000..67e752d
--- /dev/null
+++ b/wildfly/domain/configuration/host-primary.xml
@@ -0,0 +1,143 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<host xmlns="urn:jboss:domain:community:20.0" name="primary">
+    <extensions>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.elytron"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="host-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.domain.data.dir"/>
+                <file-handler name="server-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="host-file"/>
+                </handlers>
+            </logger>
+            <server-logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="server-file"/>
+                </handlers>
+            </server-logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket interface="management" port="${jboss.management.http.port:9990}"/>
+            </http-interface>
+        </management-interfaces>
+    </management>
+    <domain-controller>
+        <local/>
+    </domain-controller>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <jvms>
+        <jvm name="default">
+            <heap size="64m" max-size="256m"/>
+            <jvm-options>
+                <option value="-server"/>
+                <option value="-XX:MetaspaceSize=96m"/>
+                <option value="-XX:MaxMetaspaceSize=256m"/>
+            </jvm-options>
+        </jvm>
+    </jvms>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto" register-jaspi-factory="false">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.domain.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.domain.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.domain.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+    </profile>
+</host>
\ No newline at end of file
diff --git a/wildfly/domain/configuration/host-secondary.xml b/wildfly/domain/configuration/host-secondary.xml
new file mode 100644
index 0000000..84820cd
--- /dev/null
+++ b/wildfly/domain/configuration/host-secondary.xml
@@ -0,0 +1,156 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<host xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.elytron"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="host-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.domain.data.dir"/>
+                <file-handler name="server-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="host-file"/>
+                </handlers>
+            </logger>
+            <server-logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="server-file"/>
+                </handlers>
+            </server-logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket interface="management" port="${jboss.management.http.port:9990}"/>
+            </http-interface>
+        </management-interfaces>
+    </management>
+    <domain-controller>
+        <remote>
+            <discovery-options>
+                <static-discovery name="primary" protocol="${jboss.domain.primary.protocol:remote+http}" host="${jboss.domain.primary.address}" port="${jboss.domain.primary.port:9990}"/>
+            </discovery-options>
+        </remote>
+    </domain-controller>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <jvms>
+        <jvm name="default">
+            <heap size="64m" max-size="256m"/>
+            <jvm-options>
+                <option value="-server"/>
+                <option value="-XX:MetaspaceSize=96m"/>
+                <option value="-XX:MaxMetaspaceSize=256m"/>
+            </jvm-options>
+        </jvm>
+    </jvms>
+    <servers>
+        <server name="server-one" group="main-server-group"/>
+        <server name="server-two" group="other-server-group">
+            <socket-bindings port-offset="150"/>
+        </server>
+    </servers>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto" register-jaspi-factory="false">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.domain.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.domain.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.domain.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+    </profile>
+</host>
\ No newline at end of file
diff --git a/wildfly/domain/configuration/host.xml b/wildfly/domain/configuration/host.xml
new file mode 100644
index 0000000..d978e2d
--- /dev/null
+++ b/wildfly/domain/configuration/host.xml
@@ -0,0 +1,157 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<host xmlns="urn:jboss:domain:community:20.0" name="primary">
+    <extensions>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.elytron"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="host-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.domain.data.dir"/>
+                <file-handler name="server-file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="host-file"/>
+                </handlers>
+            </logger>
+            <server-logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="server-file"/>
+                </handlers>
+            </server-logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket interface="management" port="${jboss.management.http.port:9990}"/>
+            </http-interface>
+        </management-interfaces>
+    </management>
+    <domain-controller>
+        <local/>
+    </domain-controller>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <jvms>
+        <jvm name="default">
+            <heap size="64m" max-size="256m"/>
+            <jvm-options>
+                <option value="-server"/>
+                <option value="-XX:MetaspaceSize=96m"/>
+                <option value="-XX:MaxMetaspaceSize=256m"/>
+            </jvm-options>
+        </jvm>
+    </jvms>
+    <servers>
+        <server name="server-one" group="main-server-group"/>
+        <server name="server-two" group="main-server-group" auto-start="true">
+            <jvm name="default"/>
+            <socket-bindings port-offset="150"/>
+        </server>
+        <server name="server-three" group="other-server-group" auto-start="false">
+            <jvm name="default"/>
+            <socket-bindings port-offset="250"/>
+        </server>
+    </servers>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto" register-jaspi-factory="false">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.domain.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.domain.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.domain.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.domain.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+    </profile>
+</host>
\ No newline at end of file
diff --git a/wildfly/domain/configuration/logging.properties b/wildfly/domain/configuration/logging.properties
new file mode 100644
index 0000000..ad61613
--- /dev/null
+++ b/wildfly/domain/configuration/logging.properties
@@ -0,0 +1,41 @@
+#
+# Copyright The WildFly Authors
+# SPDX-License-Identifier: Apache-2.0
+#
+
+# Additional logger names to configure (root logger is always configured)
+loggers=org.wildfly.prospero
+
+# Root logger level
+logger.level=${jboss.boot.server.log.level:INFO}
+# Root logger handlers
+logger.handlers=BOOT_FILE,CONSOLE
+
+# Console handler configuration
+handler.CONSOLE=org.jboss.logmanager.handlers.ConsoleHandler
+handler.CONSOLE.properties=autoFlush,target
+handler.CONSOLE.level=${jboss.boot.server.log.console.level:INFO}
+handler.CONSOLE.autoFlush=true
+handler.CONSOLE.formatter=COLOR-PATTERN
+handler.CONSOLE.target=SYSTEM_OUT
+
+# File handler configuration
+handler.BOOT_FILE=org.jboss.logmanager.handlers.PeriodicRotatingFileHandler
+handler.BOOT_FILE.level=DEBUG
+handler.BOOT_FILE.properties=autoFlush,append,fileName,suffix
+handler.BOOT_FILE.constructorProperties=fileName,append
+handler.BOOT_FILE.autoFlush=true
+handler.BOOT_FILE.append=true
+handler.BOOT_FILE.fileName=${org.jboss.boot.log.file:domain.log}
+handler.BOOT_FILE.formatter=PATTERN
+handler.BOOT_FILE.suffix=.yyyy-MM-dd
+
+# Color formatter pattern configuration
+formatter.COLOR-PATTERN=org.jboss.logmanager.formatters.PatternFormatter
+formatter.COLOR-PATTERN.properties=pattern
+formatter.COLOR-PATTERN.pattern=%K{level}%d{HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%e%n
+
+# Formatter pattern configuration
+formatter.PATTERN=org.jboss.logmanager.formatters.PatternFormatter
+formatter.PATTERN.properties=pattern
+formatter.PATTERN.pattern=%d{yyyy-MM-dd HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%e%n
diff --git a/wildfly/domain/configuration/mgmt-groups.properties b/wildfly/domain/configuration/mgmt-groups.properties
new file mode 100644
index 0000000..c5ced8b
--- /dev/null
+++ b/wildfly/domain/configuration/mgmt-groups.properties
@@ -0,0 +1,22 @@
+#
+# Properties declaration of users groups for the realm 'ManagementRealm'.
+#
+# This is used for domain management, users groups membership information is used to assign the user
+# specific management roles.
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# The format of this file is as follows: -
+# username=role1,role2,role3
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+# The following illustrates how an admin user could be defined.
+#
+admin=
diff --git a/wildfly/domain/configuration/mgmt-users.properties b/wildfly/domain/configuration/mgmt-users.properties
new file mode 100644
index 0000000..9bbe9fe
--- /dev/null
+++ b/wildfly/domain/configuration/mgmt-users.properties
@@ -0,0 +1,27 @@
+#
+# Properties declaration of users for the realm 'ManagementRealm' which is the default realm
+# for new installations. Further authentication mechanism can be configured
+# as part of the <management /> in host.xml.
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# By default the properties realm expects the entries to be in the format: -
+# username=HEX( MD5( username ':' realm ':' password))
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+#$REALM_NAME=ManagementRealm$ This line is used by the add-user utility to identify the realm name already used in this file.
+#
+# On start-up the server will also automatically add a user $local - this user is specifically
+# for local tools running against this AS installation.
+#
+# The following illustrates how an admin user could be defined, this
+# is for illustration only and does not correspond to a usable password.
+#
+admin=c22052286cd5d72239a90fe193737253
diff --git a/wildfly/jboss-modules.jar b/wildfly/jboss-modules.jar
new file mode 100644
index 0000000..524909d
Binary files /dev/null and b/wildfly/jboss-modules.jar differ
diff --git a/wildfly/modules/system/layers/base/asm/asm/main/asm-9.7.jar b/wildfly/modules/system/layers/base/asm/asm/main/asm-9.7.jar
new file mode 100644
index 0000000..fee9b02
Binary files /dev/null and b/wildfly/modules/system/layers/base/asm/asm/main/asm-9.7.jar differ
diff --git a/wildfly/modules/system/layers/base/asm/asm/main/asm-util-9.7.jar b/wildfly/modules/system/layers/base/asm/asm/main/asm-util-9.7.jar
new file mode 100644
index 0000000..61bf86d
Binary files /dev/null and b/wildfly/modules/system/layers/base/asm/asm/main/asm-util-9.7.jar differ
diff --git a/wildfly/modules/system/layers/base/asm/asm/main/module.xml b/wildfly/modules/system/layers/base/asm/asm/main/module.xml
new file mode 100644
index 0000000..2a6a999
--- /dev/null
+++ b/wildfly/modules/system/layers/base/asm/asm/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="asm.asm" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="asm-9.7.jar"/>
+        <resource-root path="asm-util-9.7.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/carrotsearch/hppc/main/hppc-0.8.1.jar b/wildfly/modules/system/layers/base/com/carrotsearch/hppc/main/hppc-0.8.1.jar
new file mode 100644
index 0000000..39a7c24
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/carrotsearch/hppc/main/hppc-0.8.1.jar differ
diff --git a/wildfly/modules/system/layers/base/com/carrotsearch/hppc/main/module.xml b/wildfly/modules/system/layers/base/com/carrotsearch/hppc/main/module.xml
new file mode 100644
index 0000000..3139bb1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/carrotsearch/hppc/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.carrotsearch.hppc" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="hppc-0.8.1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/classmate/main/classmate-1.5.1.jar b/wildfly/modules/system/layers/base/com/fasterxml/classmate/main/classmate-1.5.1.jar
new file mode 100644
index 0000000..819f5ea
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/classmate/main/classmate-1.5.1.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/classmate/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/classmate/main/module.xml
new file mode 100644
index 0000000..9aef73a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/classmate/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.classmate" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="classmate-1.5.1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/jackson-annotations-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/jackson-annotations-2.17.0.jar
new file mode 100644
index 0000000..fea230d
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/jackson-annotations-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/module.xml
new file mode 100644
index 0000000..81c51b5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-annotations/main/module.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.core.jackson-annotations" xmlns="urn:jboss:module:1.9">
+     <resources>
+        <resource-root path="jackson-annotations-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/jackson-core-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/jackson-core-2.17.0.jar
new file mode 100644
index 0000000..00921a3
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/jackson-core-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/module.xml
new file mode 100644
index 0000000..440ab62
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-core/main/module.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.core.jackson-core" xmlns="urn:jboss:module:1.9">
+     <resources>
+        <resource-root path="jackson-core-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/jackson-databind-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/jackson-databind-2.17.0.jar
new file mode 100644
index 0000000..01bb740
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/jackson-databind-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/module.xml
new file mode 100644
index 0000000..f0d9a4b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/core/jackson-databind/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.core.jackson-databind" xmlns="urn:jboss:module:1.9">
+
+     <resources>
+        <resource-root path="jackson-databind-2.17.0.jar"/>
+    </resources>
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/jackson-dataformat-yaml-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/jackson-dataformat-yaml-2.17.0.jar
new file mode 100644
index 0000000..270349a
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/jackson-dataformat-yaml-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/module.xml
new file mode 100644
index 0000000..ff4fb83
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/dataformat/jackson-dataformat-yaml/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.dataformat.jackson-dataformat-yaml" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+     <resources>
+        <resource-root path="jackson-dataformat-yaml-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="org.yaml.snakeyaml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/jackson-datatype-jdk8-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/jackson-datatype-jdk8-2.17.0.jar
new file mode 100644
index 0000000..0a2abf3
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/jackson-datatype-jdk8-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/module.xml
new file mode 100644
index 0000000..3a5baeb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.datatype.jackson-datatype-jdk8" xmlns="urn:jboss:module:1.9">
+     <resources>
+        <resource-root path="jackson-datatype-jdk8-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/jackson-datatype-jsr310-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/jackson-datatype-jsr310-2.17.0.jar
new file mode 100644
index 0000000..ec121e0
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/jackson-datatype-jsr310-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/module.xml
new file mode 100644
index 0000000..47e0260
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.datatype.jackson-datatype-jsr310" xmlns="urn:jboss:module:1.9">
+     <resources>
+        <resource-root path="jackson-datatype-jsr310-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-base-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-base-2.17.0.jar
new file mode 100644
index 0000000..a10a16c
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-base-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-json-provider-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-json-provider-2.17.0.jar
new file mode 100644
index 0000000..55a152d
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-jakarta-rs-json-provider-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-module-jakarta-xmlbind-annotations-2.17.0.jar b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-module-jakarta-xmlbind-annotations-2.17.0.jar
new file mode 100644
index 0000000..b05c340
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/jackson-module-jakarta-xmlbind-annotations-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/module.xml
new file mode 100644
index 0000000..d89a005
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jakarta/jackson-jakarta-json-provider/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.fasterxml.jackson.jakarta.jackson-jakarta-json-provider" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="jackson-jakarta-rs-json-provider-2.17.0.jar"/>
+        <resource-root path="jackson-jakarta-rs-base-2.17.0.jar"/>
+        <resource-root path="jackson-module-jakarta-xmlbind-annotations-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="jakarta.xml.bind.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/main/module.xml b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/main/module.xml
new file mode 100644
index 0000000..40a24df
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Deprecated module alias.
+
+    This module is an alias for the module specified in the 'target-name' attribute,
+    provided for compatibility purposes.
+    Uses of this module should be updated to use the target module.
+    This alias is deprecated and will be removed in a future release.
+-->
+<module-alias name="com.fasterxml.jackson.jaxrs.jackson-jaxrs-json-provider" target-name="com.fasterxml.jackson.jakarta.jackson-jakarta-json-provider" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/com/github/ben-manes/caffeine/main/caffeine-3.1.8.jar b/wildfly/modules/system/layers/base/com/github/ben-manes/caffeine/main/caffeine-3.1.8.jar
new file mode 100644
index 0000000..e00640c
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/github/ben-manes/caffeine/main/caffeine-3.1.8.jar differ
diff --git a/wildfly/modules/system/layers/base/com/github/ben-manes/caffeine/main/module.xml b/wildfly/modules/system/layers/base/com/github/ben-manes/caffeine/main/module.xml
new file mode 100644
index 0000000..ea1ed5d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/github/ben-manes/caffeine/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.github.ben-manes.caffeine" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="caffeine-3.1.8.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/com/github/fge/btf/main/btf-1.2.jar b/wildfly/modules/system/layers/base/com/github/fge/btf/main/btf-1.2.jar
new file mode 100644
index 0000000..bbeee88
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/github/fge/btf/main/btf-1.2.jar differ
diff --git a/wildfly/modules/system/layers/base/com/github/fge/btf/main/module.xml b/wildfly/modules/system/layers/base/com/github/fge/btf/main/module.xml
new file mode 100644
index 0000000..261e1b0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/github/fge/btf/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.github.fge.btf" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="btf-1.2.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/github/fge/jackson-coreutils/main/jackson-coreutils-1.8.jar b/wildfly/modules/system/layers/base/com/github/fge/jackson-coreutils/main/jackson-coreutils-1.8.jar
new file mode 100644
index 0000000..9c399bb
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/github/fge/jackson-coreutils/main/jackson-coreutils-1.8.jar differ
diff --git a/wildfly/modules/system/layers/base/com/github/fge/jackson-coreutils/main/module.xml b/wildfly/modules/system/layers/base/com/github/fge/jackson-coreutils/main/module.xml
new file mode 100644
index 0000000..496b61a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/github/fge/jackson-coreutils/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.github.fge.jackson-coreutils" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jackson-coreutils-1.8.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.github.fge.msg-simple" export="true"/>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="com.google.guava"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/github/fge/json-patch/main/json-patch-1.9.jar b/wildfly/modules/system/layers/base/com/github/fge/json-patch/main/json-patch-1.9.jar
new file mode 100644
index 0000000..36569b6
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/github/fge/json-patch/main/json-patch-1.9.jar differ
diff --git a/wildfly/modules/system/layers/base/com/github/fge/json-patch/main/module.xml b/wildfly/modules/system/layers/base/com/github/fge/json-patch/main/module.xml
new file mode 100644
index 0000000..9ba85ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/github/fge/json-patch/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.github.fge.json-patch" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="json-patch-1.9.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.github.fge.jackson-coreutils"/>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="com.google.guava"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/github/fge/msg-simple/main/module.xml b/wildfly/modules/system/layers/base/com/github/fge/msg-simple/main/module.xml
new file mode 100644
index 0000000..bc03cc2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/github/fge/msg-simple/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.github.fge.msg-simple" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="msg-simple-1.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.github.fge.btf" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/github/fge/msg-simple/main/msg-simple-1.1.jar b/wildfly/modules/system/layers/base/com/github/fge/msg-simple/main/msg-simple-1.1.jar
new file mode 100644
index 0000000..db74210
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/github/fge/msg-simple/main/msg-simple-1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/com/github/luben/zstd-jni/main/module.xml b/wildfly/modules/system/layers/base/com/github/luben/zstd-jni/main/module.xml
new file mode 100644
index 0000000..9104ec9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/github/luben/zstd-jni/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.github.luben.zstd-jni" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="zstd-jni-1.5.6-5.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/github/luben/zstd-jni/main/zstd-jni-1.5.6-5.jar b/wildfly/modules/system/layers/base/com/github/luben/zstd-jni/main/zstd-jni-1.5.6-5.jar
new file mode 100644
index 0000000..383de4a
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/github/luben/zstd-jni/main/zstd-jni-1.5.6-5.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/code/gson/main/gson-2.8.9.jar b/wildfly/modules/system/layers/base/com/google/code/gson/main/gson-2.8.9.jar
new file mode 100644
index 0000000..3351867
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/code/gson/main/gson-2.8.9.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/code/gson/main/module.xml b/wildfly/modules/system/layers/base/com/google/code/gson/main/module.xml
new file mode 100644
index 0000000..1a82c4d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/google/code/gson/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.google.code.gson" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!-- Direct access to GSON is necessary to take advantage
+             of native Elasticearch APIs in Hibernate Search in particular,
+             so it is allowed in WildFly,
+             though it may not be supported by product vendors
+             (because its APIs could change without prior notice). -->
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="gson-2.8.9.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.sql"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/com/google/guava/failureaccess/main/failureaccess-1.0.2.jar b/wildfly/modules/system/layers/base/com/google/guava/failureaccess/main/failureaccess-1.0.2.jar
new file mode 100644
index 0000000..d73ab80
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/guava/failureaccess/main/failureaccess-1.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/guava/failureaccess/main/module.xml b/wildfly/modules/system/layers/base/com/google/guava/failureaccess/main/module.xml
new file mode 100644
index 0000000..399b7cb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/google/guava/failureaccess/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.google.guava.failureaccess" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="failureaccess-1.0.2.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/google/guava/main/guava-33.0.0-jre.jar b/wildfly/modules/system/layers/base/com/google/guava/main/guava-33.0.0-jre.jar
new file mode 100644
index 0000000..e42ef63
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/guava/main/guava-33.0.0-jre.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/guava/main/module.xml b/wildfly/modules/system/layers/base/com/google/guava/main/module.xml
new file mode 100644
index 0000000..e253e91
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/google/guava/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.google.guava" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="guava-33.0.0-jre.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.google.guava.failureaccess" export="true"/>
+        <module name="java.logging"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/google/protobuf/main/module.xml b/wildfly/modules/system/layers/base/com/google/protobuf/main/module.xml
new file mode 100644
index 0000000..1be1390
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/google/protobuf/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.google.protobuf" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="proto-google-common-protos-2.0.1.jar"/>
+        <resource-root path="protobuf-java-3.25.5.jar"/>
+        <resource-root path="protobuf-java-util-3.25.5.jar"/>
+        <resource-root path="perfmark-api-0.23.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.google.guava"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/google/protobuf/main/perfmark-api-0.23.0.jar b/wildfly/modules/system/layers/base/com/google/protobuf/main/perfmark-api-0.23.0.jar
new file mode 100644
index 0000000..690ce83
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/protobuf/main/perfmark-api-0.23.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/protobuf/main/proto-google-common-protos-2.0.1.jar b/wildfly/modules/system/layers/base/com/google/protobuf/main/proto-google-common-protos-2.0.1.jar
new file mode 100644
index 0000000..2632a7f
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/protobuf/main/proto-google-common-protos-2.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/protobuf/main/protobuf-java-3.25.5.jar b/wildfly/modules/system/layers/base/com/google/protobuf/main/protobuf-java-3.25.5.jar
new file mode 100644
index 0000000..d766488
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/protobuf/main/protobuf-java-3.25.5.jar differ
diff --git a/wildfly/modules/system/layers/base/com/google/protobuf/main/protobuf-java-util-3.25.5.jar b/wildfly/modules/system/layers/base/com/google/protobuf/main/protobuf-java-util-3.25.5.jar
new file mode 100644
index 0000000..5f97266
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/google/protobuf/main/protobuf-java-util-3.25.5.jar differ
diff --git a/wildfly/modules/system/layers/base/com/googlecode/javaewah/main/JavaEWAH-1.2.3.jar b/wildfly/modules/system/layers/base/com/googlecode/javaewah/main/JavaEWAH-1.2.3.jar
new file mode 100644
index 0000000..8e964c9
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/googlecode/javaewah/main/JavaEWAH-1.2.3.jar differ
diff --git a/wildfly/modules/system/layers/base/com/googlecode/javaewah/main/module.xml b/wildfly/modules/system/layers/base/com/googlecode/javaewah/main/module.xml
new file mode 100644
index 0000000..ef9ed7e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/googlecode/javaewah/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.googlecode.javaewah" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="JavaEWAH-1.2.3.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/h2database/h2/main/h2-2.2.224.jar b/wildfly/modules/system/layers/base/com/h2database/h2/main/h2-2.2.224.jar
new file mode 100644
index 0000000..ff1997a
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/h2database/h2/main/h2-2.2.224.jar differ
diff --git a/wildfly/modules/system/layers/base/com/h2database/h2/main/module.xml b/wildfly/modules/system/layers/base/com/h2database/h2/main/module.xml
new file mode 100644
index 0000000..23760f9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/h2database/h2/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.h2database.h2" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="h2-2.2.224.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.compiler"/>
+        <module name="java.desktop"/>
+        <module name="java.instrument"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.scripting"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <!-- H2 uses Jakarta Servlet to allow apps (in our case deployments) to expose its console as a servlet.
+             WildFly isn't concerning itself with allowing this H2 feature to continue to work in both a
+             javax.* EE namespace and jakarta.* EE namespace environment, so this no longer works out of the box.
+             But, we add an optional dep on a non-existent module as a hook to allow users to get it to work.
+             Users who want this to work can provide a module with the name:slot javax.servlet.api:h2. That module could
+             be a simple alias to the jakarta.servlet.api module the server provides, if that works with this module's
+             H2 artifact. Or the user could provide a non-alias module that packages and exposes the servlet resources H2 needs. -->
+        <module name="javax.servlet.api:h2" optional="true"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/ibm/async/asyncutil/main/asyncutil-0.1.0.jar b/wildfly/modules/system/layers/base/com/ibm/async/asyncutil/main/asyncutil-0.1.0.jar
new file mode 100644
index 0000000..29c267e
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/ibm/async/asyncutil/main/asyncutil-0.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/ibm/async/asyncutil/main/module.xml b/wildfly/modules/system/layers/base/com/ibm/async/asyncutil/main/module.xml
new file mode 100644
index 0000000..7b8fb90
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/ibm/async/asyncutil/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.ibm.async.asyncutil" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="asyncutil-0.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/microsoft/azure/storage/main/azure-storage-8.6.6.jar b/wildfly/modules/system/layers/base/com/microsoft/azure/storage/main/azure-storage-8.6.6.jar
new file mode 100644
index 0000000..09feecc
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/microsoft/azure/storage/main/azure-storage-8.6.6.jar differ
diff --git a/wildfly/modules/system/layers/base/com/microsoft/azure/storage/main/module.xml b/wildfly/modules/system/layers/base/com/microsoft/azure/storage/main/module.xml
new file mode 100644
index 0000000..30736b7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/microsoft/azure/storage/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.microsoft.azure.storage" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="azure-storage-8.6.6.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/module.xml b/wildfly/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/module.xml
new file mode 100644
index 0000000..392eedb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.nimbusds.nimbus-jose-jwt" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="nimbus-jose-jwt-9.37.3.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/nimbus-jose-jwt-9.37.3.jar b/wildfly/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/nimbus-jose-jwt-9.37.3.jar
new file mode 100644
index 0000000..0eafe0d
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/nimbusds/nimbus-jose-jwt/main/nimbus-jose-jwt-9.37.3.jar differ
diff --git a/wildfly/modules/system/layers/base/com/squareup/protoparser/main/module.xml b/wildfly/modules/system/layers/base/com/squareup/protoparser/main/module.xml
new file mode 100644
index 0000000..59d6d98
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/squareup/protoparser/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.squareup.protoparser" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="protoparser-4.0.3.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/com/squareup/protoparser/main/protoparser-4.0.3.jar b/wildfly/modules/system/layers/base/com/squareup/protoparser/main/protoparser-4.0.3.jar
new file mode 100644
index 0000000..d530893
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/squareup/protoparser/main/protoparser-4.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/com/sun/xml/bind/main/module.xml b/wildfly/modules/system/layers/base/com/sun/xml/bind/main/module.xml
new file mode 100644
index 0000000..3cf1123
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/sun/xml/bind/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="com.sun.xml.bind" target-name="org.glassfish.jaxb" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/com/sun/xml/fastinfoset/main/FastInfoset-2.1.1.jar b/wildfly/modules/system/layers/base/com/sun/xml/fastinfoset/main/FastInfoset-2.1.1.jar
new file mode 100644
index 0000000..a3558eb
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/sun/xml/fastinfoset/main/FastInfoset-2.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/com/sun/xml/fastinfoset/main/module.xml b/wildfly/modules/system/layers/base/com/sun/xml/fastinfoset/main/module.xml
new file mode 100644
index 0000000..2b7b4e2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/sun/xml/fastinfoset/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.sun.xml.fastinfoset" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="FastInfoset-2.1.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/module.xml b/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/module.xml
new file mode 100644
index 0000000..f60e04a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="com.sun.xml.messaging.saaj" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="saaj-impl-3.0.0.jar"/>
+        <resource-root path="stax-ex-2.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.datatransfer"/>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.activation.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/saaj-impl-3.0.0.jar b/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/saaj-impl-3.0.0.jar
new file mode 100644
index 0000000..a49786f
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/saaj-impl-3.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/stax-ex-2.1.0.jar b/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/stax-ex-2.1.0.jar
new file mode 100644
index 0000000..293ac1e
Binary files /dev/null and b/wildfly/modules/system/layers/base/com/sun/xml/messaging/saaj/main/stax-ex-2.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/module.xml b/wildfly/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/module.xml
new file mode 100644
index 0000000..a508206
--- /dev/null
+++ b/wildfly/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="de.dentrassi.crypto.pem-keystore" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="pem-keystore-2.4.0.jar"/>
+    </resources>
+
+
+    <dependencies>
+        <module name="org.bouncycastle.bcpkix" export="true" services="export"/>
+        <module name="org.bouncycastle.bcprov" export="true" services="export"/>
+    </dependencies>
+
+    <provides>
+        <service name="java.security.Provider">
+            <with-class name="de.dentrassi.crypto.pem.PemKeyStoreProvider"/>
+        </service>
+    </provides>
+</module>
diff --git a/wildfly/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/pem-keystore-2.4.0.jar b/wildfly/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/pem-keystore-2.4.0.jar
new file mode 100644
index 0000000..a9fca7b
Binary files /dev/null and b/wildfly/modules/system/layers/base/de/dentrassi/crypto/pem-keystore/main/pem-keystore-2.4.0.jar differ
diff --git a/wildfly/modules/system/layers/base/gnu/getopt/main/java-getopt-1.0.13.jar b/wildfly/modules/system/layers/base/gnu/getopt/main/java-getopt-1.0.13.jar
new file mode 100644
index 0000000..237ce91
Binary files /dev/null and b/wildfly/modules/system/layers/base/gnu/getopt/main/java-getopt-1.0.13.jar differ
diff --git a/wildfly/modules/system/layers/base/gnu/getopt/main/module.xml b/wildfly/modules/system/layers/base/gnu/getopt/main/module.xml
new file mode 100644
index 0000000..0b15d16
--- /dev/null
+++ b/wildfly/modules/system/layers/base/gnu/getopt/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="gnu.getopt" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="java-getopt-1.0.13.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/ibm/jdk/main/module.xml b/wildfly/modules/system/layers/base/ibm/jdk/main/module.xml
new file mode 100644
index 0000000..06cdfa2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/ibm/jdk/main/module.xml
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="ibm.jdk" xmlns="urn:jboss:module:1.6">
+        <!--
+                This module is deprecated and should not be referenced at all by other modules.
+                There is no replacement or alternative module that could be referenced instead
+                because this module in reality exports nothing (packages don't exist) on JDK 11 and above.
+	-->
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+    <dependencies>
+        <system export="true">
+            <paths>
+                <path name="com/ibm"/>
+                <path name="com/ibm/crypto"/>
+                <path name="com/ibm/crypto/provider"/>
+                <path name="com/ibm/dataaccess"/>
+                <path name="com/ibm/jsse"/>
+                <path name="com/ibm/jsse2"/>
+                <path name="com/ibm/jvm"/>
+                <path name="com/ibm/jvm/io"/>
+                <path name="com/ibm/jvm/util"/>
+                <path name="com/ibm/math"/>
+                <path name="com/ibm/misc"/>
+                <path name="com/ibm/misc/resources"/>
+                <path name="com/ibm/net"/>
+                <path name="com/ibm/nio"/>
+                <path name="com/ibm/nio/ch"/>
+                <path name="com/ibm/security/auth"/>
+                <path name="com/ibm/security/auth/callback"/>
+                <path name="com/ibm/security/auth/login"/>
+                <path name="com/ibm/security/auth/module"/>
+                <path name="com/ibm/security/bootstrap"/>
+                <path name="com/ibm/security/util"/>
+            </paths>
+        </system>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/internal/javax/json/api/ee8/main/jakarta.json-1.1.6.jar b/wildfly/modules/system/layers/base/internal/javax/json/api/ee8/main/jakarta.json-1.1.6.jar
new file mode 100644
index 0000000..1f33076
Binary files /dev/null and b/wildfly/modules/system/layers/base/internal/javax/json/api/ee8/main/jakarta.json-1.1.6.jar differ
diff --git a/wildfly/modules/system/layers/base/internal/javax/json/api/ee8/main/module.xml b/wildfly/modules/system/layers/base/internal/javax/json/api/ee8/main/module.xml
new file mode 100644
index 0000000..e934f2e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/internal/javax/json/api/ee8/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="internal.javax.json.api.ee8" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.json-1.1.6.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/agroal/main/agroal-api-2.0.jar b/wildfly/modules/system/layers/base/io/agroal/main/agroal-api-2.0.jar
new file mode 100644
index 0000000..0d01345
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/agroal/main/agroal-api-2.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/agroal/main/agroal-narayana-2.0.jar b/wildfly/modules/system/layers/base/io/agroal/main/agroal-narayana-2.0.jar
new file mode 100644
index 0000000..c2d1420
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/agroal/main/agroal-narayana-2.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/agroal/main/agroal-pool-2.0.jar b/wildfly/modules/system/layers/base/io/agroal/main/agroal-pool-2.0.jar
new file mode 100644
index 0000000..adc9614
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/agroal/main/agroal-pool-2.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/agroal/main/module.xml b/wildfly/modules/system/layers/base/io/agroal/main/module.xml
new file mode 100644
index 0000000..8d84fc3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/agroal/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.agroal" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="agroal-api-2.0.jar"/>
+        <resource-root path="agroal-narayana-2.0.jar"/>
+        <resource-root path="agroal-pool-2.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/grpc/main/grpc-api-1.58.0.jar b/wildfly/modules/system/layers/base/io/grpc/main/grpc-api-1.58.0.jar
new file mode 100644
index 0000000..cc4a4ba
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/grpc/main/grpc-api-1.58.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/grpc/main/module.xml b/wildfly/modules/system/layers/base/io/grpc/main/module.xml
new file mode 100644
index 0000000..ef5f9bc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/grpc/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.grpc" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="grpc-api-1.58.0.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-commons-1.12.4.jar b/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-commons-1.12.4.jar
new file mode 100644
index 0000000..0bd1cb9
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-commons-1.12.4.jar differ
diff --git a/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-core-1.12.4.jar b/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-core-1.12.4.jar
new file mode 100644
index 0000000..d6a314a
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-core-1.12.4.jar differ
diff --git a/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-registry-otlp-1.12.4.jar b/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-registry-otlp-1.12.4.jar
new file mode 100644
index 0000000..c841980
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/micrometer/main/micrometer-registry-otlp-1.12.4.jar differ
diff --git a/wildfly/modules/system/layers/base/io/micrometer/main/module.xml b/wildfly/modules/system/layers/base/io/micrometer/main/module.xml
new file mode 100644
index 0000000..986cfbc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/micrometer/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.micrometer" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="micrometer-commons-1.12.4.jar"/>
+        <resource-root path="micrometer-core-1.12.4.jar"/>
+        <resource-root path="micrometer-registry-otlp-1.12.4.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.otlp"/>
+        <module name="io.opentelemetry.proto"/>
+        <module name="com.google.protobuf"/>
+
+        <module name="jakarta.servlet.api"/>
+        <module name="java.management"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-buffer/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-buffer/main/module.xml
new file mode 100644
index 0000000..f468767
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-buffer/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-buffer" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-buffer-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-buffer/main/netty-buffer-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-buffer/main/netty-buffer-4.1.112.Final.jar
new file mode 100644
index 0000000..c38a8de
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-buffer/main/netty-buffer-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-dns/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-codec-dns/main/module.xml
new file mode 100644
index 0000000..199f071
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-codec-dns/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-codec-dns" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-codec-dns-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-transport"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-dns/main/netty-codec-dns-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-codec-dns/main/netty-codec-dns-4.1.112.Final.jar
new file mode 100644
index 0000000..380586f
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-codec-dns/main/netty-codec-dns-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-http/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-codec-http/main/module.xml
new file mode 100644
index 0000000..d768af1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-codec-http/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-codec-http" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-codec-http-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-handler"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-http/main/netty-codec-http-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-codec-http/main/netty-codec-http-4.1.112.Final.jar
new file mode 100644
index 0000000..1afc250
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-codec-http/main/netty-codec-http-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-http2/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-codec-http2/main/module.xml
new file mode 100644
index 0000000..31de437
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-codec-http2/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-codec-http2" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-codec-http2-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.google.code.gson"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-transport"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-http2/main/netty-codec-http2-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-codec-http2/main/netty-codec-http2-4.1.112.Final.jar
new file mode 100644
index 0000000..a13556e
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-codec-http2/main/netty-codec-http2-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-socks/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-codec-socks/main/module.xml
new file mode 100644
index 0000000..3863da7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-codec-socks/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-codec-socks" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-codec-socks-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-codec"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec-socks/main/netty-codec-socks-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-codec-socks/main/netty-codec-socks-4.1.112.Final.jar
new file mode 100644
index 0000000..d4f12e0
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-codec-socks/main/netty-codec-socks-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-codec/main/module.xml
new file mode 100644
index 0000000..da16c56
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-codec/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-codec" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-codec-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-codec/main/netty-codec-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-codec/main/netty-codec-4.1.112.Final.jar
new file mode 100644
index 0000000..ac55a6c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-codec/main/netty-codec-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-common/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-common/main/module.xml
new file mode 100644
index 0000000..7828996
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-common/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-common-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jdk.unsupported"/>
+        <module name="io.netty.netty-transport-native-unix-common"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-common/main/netty-common-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-common/main/netty-common-4.1.112.Final.jar
new file mode 100644
index 0000000..51586f1
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-common/main/netty-common-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-handler-proxy/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-handler-proxy/main/module.xml
new file mode 100644
index 0000000..5c75f5b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-handler-proxy/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-handler-proxy" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-handler-proxy-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="io.netty.netty-handler"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-handler-proxy/main/netty-handler-proxy-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-handler-proxy/main/netty-handler-proxy-4.1.112.Final.jar
new file mode 100644
index 0000000..70c9076
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-handler-proxy/main/netty-handler-proxy-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-handler/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-handler/main/module.xml
new file mode 100644
index 0000000..7aaa75a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-handler/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-handler" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-handler-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-unix-common"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-resolver"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-handler/main/netty-handler-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-handler/main/netty-handler-4.1.112.Final.jar
new file mode 100644
index 0000000..10c2f0e
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-handler/main/netty-handler-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-resolver-dns/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-resolver-dns/main/module.xml
new file mode 100644
index 0000000..9017d9c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-resolver-dns/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-resolver-dns" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-resolver-dns-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-dns"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-resolver-dns/main/netty-resolver-dns-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-resolver-dns/main/netty-resolver-dns-4.1.112.Final.jar
new file mode 100644
index 0000000..e59fd27
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-resolver-dns/main/netty-resolver-dns-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-resolver/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-resolver/main/module.xml
new file mode 100644
index 0000000..358351a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-resolver/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-resolver" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-resolver-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-resolver/main/netty-resolver-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-resolver/main/netty-resolver-4.1.112.Final.jar
new file mode 100644
index 0000000..61c2831
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-resolver/main/netty-resolver-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/libnetty_transport_native_epoll_aarch_64.so b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/libnetty_transport_native_epoll_aarch_64.so
new file mode 100644
index 0000000..e760e76
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/libnetty_transport_native_epoll_aarch_64.so differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/libnetty_transport_native_epoll_x86_64.so b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/libnetty_transport_native_epoll_x86_64.so
new file mode 100644
index 0000000..0980992
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/lib/META-INF/native/libnetty_transport_native_epoll_x86_64.so differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/module.xml
new file mode 100644
index 0000000..1682986
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-transport-native-epoll" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="lib"/>
+        <resource-root path="netty-transport-classes-epoll-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-unix-common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/netty-transport-classes-epoll-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/netty-transport-classes-epoll-4.1.112.Final.jar
new file mode 100644
index 0000000..eeec430
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-epoll/main/netty-transport-classes-epoll-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/libnetty_transport_native_kqueue_aarch_64.jnilib b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/libnetty_transport_native_kqueue_aarch_64.jnilib
new file mode 100644
index 0000000..2f6169b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/libnetty_transport_native_kqueue_aarch_64.jnilib differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/libnetty_transport_native_kqueue_x86_64.jnilib b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/libnetty_transport_native_kqueue_x86_64.jnilib
new file mode 100644
index 0000000..37b28b1
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/lib/META-INF/native/libnetty_transport_native_kqueue_x86_64.jnilib differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/module.xml
new file mode 100644
index 0000000..afdc154
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-transport-native-kqueue" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="lib"/>
+        <resource-root path="netty-transport-classes-kqueue-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-unix-common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/netty-transport-classes-kqueue-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/netty-transport-classes-kqueue-4.1.112.Final.jar
new file mode 100644
index 0000000..057e2d5
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-kqueue/main/netty-transport-classes-kqueue-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/module.xml
new file mode 100644
index 0000000..4544f8e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-transport-native-unix-common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-transport-native-unix-common-4.1.112.Final-linux-x86_64.jar"/>
+        <resource-root path="netty-transport-native-unix-common-4.1.112.Final-linux-aarch_64.jar"/>
+        <resource-root path="netty-transport-native-unix-common-4.1.112.Final-osx-x86_64.jar"/>
+        <resource-root path="netty-transport-native-unix-common-4.1.112.Final-osx-aarch_64.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-linux-aarch_64.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-linux-aarch_64.jar
new file mode 100644
index 0000000..c8b9233
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-linux-aarch_64.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-linux-x86_64.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-linux-x86_64.jar
new file mode 100644
index 0000000..1dbdbd4
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-linux-x86_64.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-osx-aarch_64.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-osx-aarch_64.jar
new file mode 100644
index 0000000..35c4783
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-osx-aarch_64.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-osx-x86_64.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-osx-x86_64.jar
new file mode 100644
index 0000000..55d019c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport-native-unix-common/main/netty-transport-native-unix-common-4.1.112.Final-osx-x86_64.jar differ
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport/main/module.xml b/wildfly/modules/system/layers/base/io/netty/netty-transport/main/module.xml
new file mode 100644
index 0000000..da59d34
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/netty/netty-transport/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.netty.netty-transport" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-transport-4.1.112.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-resolver"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/netty/netty-transport/main/netty-transport-4.1.112.Final.jar b/wildfly/modules/system/layers/base/io/netty/netty-transport/main/netty-transport-4.1.112.Final.jar
new file mode 100644
index 0000000..c7061f9
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/netty/netty-transport/main/netty-transport-4.1.112.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/api/events/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/api/events/main/module.xml
new file mode 100644
index 0000000..71ca397
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/api/events/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.api.events" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-api-events-1.29.0-alpha.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/api/events/main/opentelemetry-api-events-1.29.0-alpha.jar b/wildfly/modules/system/layers/base/io/opentelemetry/api/events/main/opentelemetry-api-events-1.29.0-alpha.jar
new file mode 100644
index 0000000..30e3974
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/api/events/main/opentelemetry-api-events-1.29.0-alpha.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/api/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/api/main/module.xml
new file mode 100644
index 0000000..6d7f5fd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/api/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.api" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-api-1.29.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api.events"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.instrumentation.annotations"/>
+        <module name="io.opentelemetry.instrumentation.api"/>
+        <module name="io.opentelemetry.semconv"/>
+        <module name="io.smallrye.opentelemetry" services="import"/>
+
+        <module name="java.logging"/>
+        <module name="jakarta.interceptor.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/api/main/opentelemetry-api-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/api/main/opentelemetry-api-1.29.0.jar
new file mode 100644
index 0000000..d7cb471
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/api/main/opentelemetry-api-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/context/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/context/main/module.xml
new file mode 100644
index 0000000..458e61d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/context/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.context" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-context-1.29.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="java.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/context/main/opentelemetry-context-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/context/main/opentelemetry-context-1.29.0.jar
new file mode 100644
index 0000000..ae0858a
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/context/main/opentelemetry-context-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/jackson-jr-objects-2.17.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/jackson-jr-objects-2.17.0.jar
new file mode 100644
index 0000000..dc6bc8b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/jackson-jr-objects-2.17.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/module.xml
new file mode 100644
index 0000000..608fa47
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.exporter" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-exporter-common-1.29.0.jar"/>
+        <resource-root path="jackson-jr-objects-2.17.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.otlp" services="export"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="io.smallrye.opentelemetry" services="export"/>
+        <module name="org.slf4j"/>
+
+        <module name="java.logging"/>
+        <module name="java.net.http"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/opentelemetry-exporter-common-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/opentelemetry-exporter-common-1.29.0.jar
new file mode 100644
index 0000000..c3e9778
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/exporter/main/opentelemetry-exporter-common-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/module.xml
new file mode 100644
index 0000000..2e48d21
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.instrumentation.annotations" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-instrumentation-annotations-1.29.0.jar"/>
+        <resource-root path="opentelemetry-instrumentation-annotations-support-1.29.0-alpha.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.instrumentation.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/opentelemetry-instrumentation-annotations-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/opentelemetry-instrumentation-annotations-1.29.0.jar
new file mode 100644
index 0000000..66f7ebb
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/opentelemetry-instrumentation-annotations-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/opentelemetry-instrumentation-annotations-support-1.29.0-alpha.jar b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/opentelemetry-instrumentation-annotations-support-1.29.0-alpha.jar
new file mode 100644
index 0000000..623a832
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/annotations/main/opentelemetry-instrumentation-annotations-support-1.29.0-alpha.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/module.xml
new file mode 100644
index 0000000..f02f8ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.instrumentation.api" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-instrumentation-api-1.29.0.jar"/>
+        <resource-root path="opentelemetry-instrumentation-api-semconv-1.29.0-alpha.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.semconv"/>
+        <module name="io.smallrye.opentelemetry" services="import"/>
+
+        <module name="java.logging"/>
+        <module name="jakarta.interceptor.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/opentelemetry-instrumentation-api-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/opentelemetry-instrumentation-api-1.29.0.jar
new file mode 100644
index 0000000..bd2046d
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/opentelemetry-instrumentation-api-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/opentelemetry-instrumentation-api-semconv-1.29.0-alpha.jar b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/opentelemetry-instrumentation-api-semconv-1.29.0-alpha.jar
new file mode 100644
index 0000000..463f2b4
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/instrumentation/api/main/opentelemetry-instrumentation-api-semconv-1.29.0-alpha.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/module.xml
new file mode 100644
index 0000000..78ec700
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.otlp" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="opentelemetry-exporter-otlp-1.29.0.jar"/>
+        <resource-root path="opentelemetry-exporter-otlp-common-1.29.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.smallrye.opentelemetry" services="import"/>
+        <module name="org.slf4j"/>
+
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/opentelemetry-exporter-otlp-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/opentelemetry-exporter-otlp-1.29.0.jar
new file mode 100644
index 0000000..136765c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/opentelemetry-exporter-otlp-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/opentelemetry-exporter-otlp-common-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/opentelemetry-exporter-otlp-common-1.29.0.jar
new file mode 100644
index 0000000..5eef170
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/otlp/main/opentelemetry-exporter-otlp-common-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/proto/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/proto/main/module.xml
new file mode 100644
index 0000000..1a5b452
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/proto/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.proto" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-proto-0.20.0-alpha.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.otlp"/>
+        <module name="com.google.protobuf"/>
+
+        <module name="java.management"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/proto/main/opentelemetry-proto-0.20.0-alpha.jar b/wildfly/modules/system/layers/base/io/opentelemetry/proto/main/opentelemetry-proto-0.20.0-alpha.jar
new file mode 100644
index 0000000..6bb76f2
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/proto/main/opentelemetry-proto-0.20.0-alpha.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/module.xml
new file mode 100644
index 0000000..a963033
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.sdk" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-sdk-1.29.0.jar"/>
+        <resource-root path="opentelemetry-sdk-extension-autoconfigure-1.29.0.jar"/>
+        <resource-root path="opentelemetry-sdk-extension-autoconfigure-spi-1.29.0.jar"/>
+        <resource-root path="opentelemetry-sdk-logs-1.29.0.jar"/>
+        <resource-root path="opentelemetry-sdk-metrics-1.29.0.jar"/>
+        <resource-root path="opentelemetry-sdk-trace-1.29.0.jar"/>
+        <resource-root path="opentelemetry-sdk-common-1.29.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.api.events"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.opentelemetry.semconv"/>
+        <module name="io.smallrye.opentelemetry" services="export"/>
+
+        <module name="java.logging"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-1.29.0.jar
new file mode 100644
index 0000000..de0d21c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-common-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-common-1.29.0.jar
new file mode 100644
index 0000000..2f82752
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-common-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-extension-autoconfigure-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-extension-autoconfigure-1.29.0.jar
new file mode 100644
index 0000000..8c778ef
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-extension-autoconfigure-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-extension-autoconfigure-spi-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-extension-autoconfigure-spi-1.29.0.jar
new file mode 100644
index 0000000..c4d93d6
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-extension-autoconfigure-spi-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-logs-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-logs-1.29.0.jar
new file mode 100644
index 0000000..1dec54b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-logs-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-metrics-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-metrics-1.29.0.jar
new file mode 100644
index 0000000..5825caf
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-metrics-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-trace-1.29.0.jar b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-trace-1.29.0.jar
new file mode 100644
index 0000000..889a4ea
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/sdk/main/opentelemetry-sdk-trace-1.29.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/semconv/main/module.xml b/wildfly/modules/system/layers/base/io/opentelemetry/semconv/main/module.xml
new file mode 100644
index 0000000..350fca3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/opentelemetry/semconv/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.opentelemetry.semconv" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opentelemetry-semconv-1.29.0-alpha.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/opentelemetry/semconv/main/opentelemetry-semconv-1.29.0-alpha.jar b/wildfly/modules/system/layers/base/io/opentelemetry/semconv/main/opentelemetry-semconv-1.29.0-alpha.jar
new file mode 100644
index 0000000..90a0d04
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/opentelemetry/semconv/main/opentelemetry-semconv-1.29.0-alpha.jar differ
diff --git a/wildfly/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/module.xml b/wildfly/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/module.xml
new file mode 100644
index 0000000..f9d06b9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.reactivex.rxjava2.rxjava" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="rxjava-2.2.21.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/rxjava-2.2.21.jar b/wildfly/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/rxjava-2.2.21.jar
new file mode 100644
index 0000000..377d311
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/reactivex/rxjava2/rxjava/main/rxjava-2.2.21.jar differ
diff --git a/wildfly/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/module.xml b/wildfly/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/module.xml
new file mode 100644
index 0000000..a65ebe9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.reactivex.rxjava3.rxjava" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="rxjava-3.1.9.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/rxjava-3.1.9.jar b/wildfly/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/rxjava-3.1.9.jar
new file mode 100644
index 0000000..bcf3718
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/reactivex/rxjava3/rxjava/main/rxjava-3.1.9.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/annotation/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/common/annotation/main/module.xml
new file mode 100644
index 0000000..49bf727
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/common/annotation/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.common.annotation" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-common-annotation-2.5.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/annotation/main/smallrye-common-annotation-2.5.0.jar b/wildfly/modules/system/layers/base/io/smallrye/common/annotation/main/smallrye-common-annotation-2.5.0.jar
new file mode 100644
index 0000000..c63764d
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/common/annotation/main/smallrye-common-annotation-2.5.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/classloader/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/common/classloader/main/module.xml
new file mode 100644
index 0000000..5ce5801
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/common/classloader/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.common.classloader" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-common-classloader-2.5.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/classloader/main/smallrye-common-classloader-2.5.0.jar b/wildfly/modules/system/layers/base/io/smallrye/common/classloader/main/smallrye-common-classloader-2.5.0.jar
new file mode 100644
index 0000000..df5d82b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/common/classloader/main/smallrye-common-classloader-2.5.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/constraint/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/common/constraint/main/module.xml
new file mode 100644
index 0000000..d37819d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/common/constraint/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.common.constraint" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-common-constraint-2.5.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/constraint/main/smallrye-common-constraint-2.5.0.jar b/wildfly/modules/system/layers/base/io/smallrye/common/constraint/main/smallrye-common-constraint-2.5.0.jar
new file mode 100644
index 0000000..ce4cbac
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/common/constraint/main/smallrye-common-constraint-2.5.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/expression/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/common/expression/main/module.xml
new file mode 100644
index 0000000..005658b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/common/expression/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.common.expression" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-common-expression-2.5.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.common.constraint"/>
+        <module name="io.smallrye.common.function"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/expression/main/smallrye-common-expression-2.5.0.jar b/wildfly/modules/system/layers/base/io/smallrye/common/expression/main/smallrye-common-expression-2.5.0.jar
new file mode 100644
index 0000000..4a7a8e4
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/common/expression/main/smallrye-common-expression-2.5.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/function/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/common/function/main/module.xml
new file mode 100644
index 0000000..cf41eea
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/common/function/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.common.function" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-common-function-2.5.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.common.constraint"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/function/main/smallrye-common-function-2.5.0.jar b/wildfly/modules/system/layers/base/io/smallrye/common/function/main/smallrye-common-function-2.5.0.jar
new file mode 100644
index 0000000..b320c9d
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/common/function/main/smallrye-common-function-2.5.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/vertx-context/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/common/vertx-context/main/module.xml
new file mode 100644
index 0000000..d6f5d94
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/common/vertx-context/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.common.vertx-context" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-common-vertx-context-2.5.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.common.constraint"/>
+        <module name="io.vertx.core"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/common/vertx-context/main/smallrye-common-vertx-context-2.5.0.jar b/wildfly/modules/system/layers/base/io/smallrye/common/vertx-context/main/smallrye-common-vertx-context-2.5.0.jar
new file mode 100644
index 0000000..07d3721
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/common/vertx-context/main/smallrye-common-vertx-context-2.5.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/config/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/config/main/module.xml
new file mode 100644
index 0000000..b78e946
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/config/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.config" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-config-3.9.1.jar"/>
+        <resource-root path="smallrye-config-common-3.9.1.jar"/>
+        <resource-root path="smallrye-config-core-3.9.1.jar"/>
+        <resource-root path="smallrye-config-source-file-system-3.9.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="asm.asm"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="io.smallrye.common.constraint"/>
+        <module name="io.smallrye.common.classloader"/>
+        <module name="io.smallrye.common.expression"/>
+        <module name="io.smallrye.common.function"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-3.9.1.jar b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-3.9.1.jar
new file mode 100644
index 0000000..8f7f366
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-3.9.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-common-3.9.1.jar b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-common-3.9.1.jar
new file mode 100644
index 0000000..5a774ec
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-common-3.9.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-core-3.9.1.jar b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-core-3.9.1.jar
new file mode 100644
index 0000000..f90f28b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-core-3.9.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-source-file-system-3.9.1.jar b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-source-file-system-3.9.1.jar
new file mode 100644
index 0000000..ccccb71
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/config/main/smallrye-config-source-file-system-3.9.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/module.xml
new file mode 100644
index 0000000..7f36234
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.fault-tolerance" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-fault-tolerance-6.4.0.jar"/>
+        <resource-root path="smallrye-fault-tolerance-api-6.4.0.jar"/>
+        <resource-root path="smallrye-fault-tolerance-autoconfig-core-6.4.0.jar"/>
+        <resource-root path="smallrye-fault-tolerance-core-6.4.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.enterprise.concurrent.api"/>
+
+        <module name="io.micrometer" optional="true"/>
+        <module name="io.smallrye.common.annotation"/>
+        <module name="io.smallrye.config"/>
+        <module name="io.smallrye.reactive.converters.api"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.fault-tolerance.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.micrometer.deployment" optional="true"/>
+        <module name="org.wildfly.microprofile.fault-tolerance-smallrye.deployment"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-6.4.0.jar b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-6.4.0.jar
new file mode 100644
index 0000000..04a513c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-6.4.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-api-6.4.0.jar b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-api-6.4.0.jar
new file mode 100644
index 0000000..45ec4b6
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-api-6.4.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-autoconfig-core-6.4.0.jar b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-autoconfig-core-6.4.0.jar
new file mode 100644
index 0000000..c63459c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-autoconfig-core-6.4.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-core-6.4.0.jar b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-core-6.4.0.jar
new file mode 100644
index 0000000..c834277
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/fault-tolerance/main/smallrye-fault-tolerance-core-6.4.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/health/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/health/main/module.xml
new file mode 100644
index 0000000..15591e6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/health/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.health" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-health-4.0.4.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.health.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="io.smallrye.config" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/health/main/smallrye-health-4.0.4.jar b/wildfly/modules/system/layers/base/io/smallrye/health/main/smallrye-health-4.0.4.jar
new file mode 100644
index 0000000..86f0647
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/health/main/smallrye-health-4.0.4.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jandex/main/jandex-3.2.2.jar b/wildfly/modules/system/layers/base/io/smallrye/jandex/main/jandex-3.2.2.jar
new file mode 100644
index 0000000..ba5add7
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/jandex/main/jandex-3.2.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jandex/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/jandex/main/module.xml
new file mode 100644
index 0000000..db04064
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/jandex/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.jandex" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <main-class name="org.jboss.jandex.Main"/>
+
+    <resources>
+        <resource-root path="jandex-3.2.2.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jwt/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/module.xml
new file mode 100644
index 0000000..ab5051f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/module.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.jwt" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    
+    <resources>
+        <resource-root path="smallrye-jwt-4.3.1.jar"/>
+        <resource-root path="smallrye-jwt-cdi-extension-4.3.1.jar"/>
+        <resource-root path="smallrye-jwt-common-4.3.1.jar"/>
+        <resource-root path="smallrye-jwt-http-mechanism-4.3.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.security.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="org.bitbucket.jose4j"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.jwt.auth.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="io.smallrye.config" services="import"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-4.3.1.jar b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-4.3.1.jar
new file mode 100644
index 0000000..1912329
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-4.3.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-cdi-extension-4.3.1.jar b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-cdi-extension-4.3.1.jar
new file mode 100644
index 0000000..0188552
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-cdi-extension-4.3.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-common-4.3.1.jar b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-common-4.3.1.jar
new file mode 100644
index 0000000..656bd73
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-common-4.3.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-http-mechanism-4.3.1.jar b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-http-mechanism-4.3.1.jar
new file mode 100644
index 0000000..1a562d3
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/jwt/main/smallrye-jwt-http-mechanism-4.3.1.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/openapi/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/openapi/main/module.xml
new file mode 100644
index 0000000..c5aee5c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/openapi/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.openapi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-open-api-core-3.10.0.jar"/>
+        <resource-root path="smallrye-open-api-jaxrs-3.10.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.sql"/>
+
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.ws.rs.api"/>
+
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="com.fasterxml.jackson.dataformat.jackson-dataformat-yaml"/>
+
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.openapi.api"/>
+
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+
+        <module name="org.yaml.snakeyaml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/openapi/main/smallrye-open-api-core-3.10.0.jar b/wildfly/modules/system/layers/base/io/smallrye/openapi/main/smallrye-open-api-core-3.10.0.jar
new file mode 100644
index 0000000..16255cf
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/openapi/main/smallrye-open-api-core-3.10.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/openapi/main/smallrye-open-api-jaxrs-3.10.0.jar b/wildfly/modules/system/layers/base/io/smallrye/openapi/main/smallrye-open-api-jaxrs-3.10.0.jar
new file mode 100644
index 0000000..d7dd50a
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/openapi/main/smallrye-open-api-jaxrs-3.10.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/module.xml
new file mode 100644
index 0000000..f418af9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/module.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.opentelemetry" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="smallrye-opentelemetry-api-2.6.0.jar"/>
+        <resource-root path="smallrye-opentelemetry-cdi-2.6.0.jar"/>
+        <resource-root path="smallrye-opentelemetry-exporters-2.6.0.jar"/>
+        <resource-root path="smallrye-opentelemetry-propagation-2.6.0.jar"/>
+        <resource-root path="smallrye-opentelemetry-rest-2.6.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.api.events"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.opentelemetry.otlp"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.opentelemetry.semconv"/>
+        <module name="io.opentelemetry.instrumentation.api"/>
+        <module name="io.opentelemetry.instrumentation.annotations"/>
+
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="io.vertx.core"/>
+        <module name="io.vertx.grpc-client"/>
+        <module name="io.vertx.grpc-common"/>
+        <module name="io.netty.netty-buffer"/>
+
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api" services="import"/>
+
+        <module name="java.logging"/>
+        <!-- Needed to satisfy bean injection in this module -->
+        <module name="org.wildfly.extension.opentelemetry-api"/>
+        <module name="org.wildfly.extension.microprofile.telemetry-api" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-api-2.6.0.jar b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-api-2.6.0.jar
new file mode 100644
index 0000000..b39576c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-api-2.6.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-cdi-2.6.0.jar b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-cdi-2.6.0.jar
new file mode 100644
index 0000000..0cef145
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-cdi-2.6.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-exporters-2.6.0.jar b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-exporters-2.6.0.jar
new file mode 100644
index 0000000..5f4b0a8
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-exporters-2.6.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-propagation-2.6.0.jar b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-propagation-2.6.0.jar
new file mode 100644
index 0000000..f6dc1aa
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-propagation-2.6.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-rest-2.6.0.jar b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-rest-2.6.0.jar
new file mode 100644
index 0000000..47e1d86
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/opentelemetry/main/smallrye-opentelemetry-rest-2.6.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/converters/api/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/converters/api/main/module.xml
new file mode 100644
index 0000000..d3017e1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/converters/api/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.converters.api" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-reactive-converter-api-2.6.0.jar"/>
+    </resources>
+    <dependencies>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/converters/api/main/smallrye-reactive-converter-api-2.6.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/converters/api/main/smallrye-reactive-converter-api-2.6.0.jar
new file mode 100644
index 0000000..7202823
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/converters/api/main/smallrye-reactive-converter-api-2.6.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/module.xml
new file mode 100644
index 0000000..b6fc6f7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.messaging.connector.amqp" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-reactive-messaging-amqp-4.24.0.jar"/>
+    </resources>
+    <dependencies>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.reactivex.rxjava2.rxjava"/>
+        <module name="io.smallrye.common.annotation"/>
+        <module name="io.smallrye.config" services="import"/>
+        <module name="io.smallrye.reactive.converters.api"/>
+        <module name="io.smallrye.reactive.messaging"/>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.reactive-streams-operators"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-core"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-amqp-client"/>
+        <module name="io.smallrye.reactive.mutiny.zero"/>
+        <module name="io.smallrye.reactive.mutiny.zero-flow-adapters"/>
+        <module name="io.vertx.client.amqp"/>
+        <module name="io.vertx.core"/>
+        <module name="io.vertx.proton"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="org.apache.qpid.proton"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.reactive-messaging.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.core" services="import"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.reactive.messaging.amqp" services="import"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/smallrye-reactive-messaging-amqp-4.24.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/smallrye-reactive-messaging-amqp-4.24.0.jar
new file mode 100644
index 0000000..5166b05
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/amqp/main/smallrye-reactive-messaging-amqp-4.24.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/module.xml
new file mode 100644
index 0000000..cd2b11b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.messaging.connector.kafka.api" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="smallrye-reactive-messaging-kafka-api-4.24.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.reactive-messaging.api"/>
+        <module name="org.apache.kafka.client"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/smallrye-reactive-messaging-kafka-api-4.24.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/smallrye-reactive-messaging-kafka-api-4.24.0.jar
new file mode 100644
index 0000000..723430b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/api/main/smallrye-reactive-messaging-kafka-api-4.24.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/module.xml
new file mode 100644
index 0000000..e07f8f2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/module.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.messaging.connector.kafka" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-reactive-messaging-kafka-4.24.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.reactivex.rxjava2.rxjava"/>
+        <module name="io.smallrye.config" services="import"/>
+        <module name="io.smallrye.common.annotation"/>
+        <module name="io.smallrye.reactive.converters.api"/>
+        <module name="io.smallrye.reactive.messaging"/>
+        <module name="io.smallrye.reactive.messaging.connector.kafka.api"/>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.reactive-streams-operators"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-core"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-kafka-client"/>
+        <module name="io.smallrye.reactive.mutiny.zero"/>
+        <module name="io.smallrye.reactive.mutiny.zero-flow-adapters"/>
+        <module name="io.vertx.client.kafka"/>
+        <module name="io.vertx.core"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="org.apache.kafka.client" export="true" services="export"/>
+        <module name="org.eclipse.microprofile.reactive-messaging.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.core" services="import"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.wildfly.reactive.messaging.config" optional="true" export="true" services="export"/>
+        <module name="org.wildfly.reactive.messaging.kafka" services="import"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/smallrye-reactive-messaging-kafka-4.24.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/smallrye-reactive-messaging-kafka-4.24.0.jar
new file mode 100644
index 0000000..4944339
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/kafka/main/smallrye-reactive-messaging-kafka-4.24.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/main/module.xml
new file mode 100644
index 0000000..65e6365
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/connector/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.messaging.connector" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="io.smallrye.reactive.messaging.connector.amqp" optional="true" export="true" services="export"/>
+        <!-- Add some other central ampq dependencies so that they will be added to the deployment classpath by the DUP -->
+        <module name="org.wildfly.reactive.messaging.amqp" optional="true" export="true" services="export"/>
+
+        <module name="io.smallrye.reactive.messaging.connector.kafka" optional="true" export="true" services="export"/>
+        <!-- Add the kafka API module and a few other central ones so that it will be added to the deployment classpath by the DUP -->
+        <module name="io.smallrye.reactive.messaging.connector.kafka.api" optional="true" export="true" services="export"/>
+        <module name="org.wildfly.reactive.messaging.kafka" optional="true" export="true" services="export"/>
+
+        <module name="io.smallrye.reactive.messaging.connector.mqtt" optional="true" export="true" services="export"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/main/module.xml
new file mode 100644
index 0000000..72e3bcd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.messaging" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <!--
+        As this artifact duplicates classes (and adds some new ones) from the Eclipse RM API
+        jar, we don't add it here, and instead make the org.eclipse.microprofile.reactive-messaging.api
+        module contain this jar.
+        <artifact name="${io.smallrye.reactive:smallrye-reactive-messaging-api}"/>
+        -->
+        <resource-root path="smallrye-reactive-messaging-provider-4.24.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.reactivex.rxjava2.rxjava"/>
+        <module name="io.smallrye.common.annotation"/>
+        <module name="io.smallrye.common.vertx-context"/>
+        <module name="io.smallrye.config" services="import"/>
+        <module name="io.smallrye.reactive.converters.api"/>
+        <module name="io.smallrye.reactive.messaging.connector"/>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-core"/>
+        <module name="io.smallrye.reactive.mutiny.reactive-streams-operators"/>
+        <module name="io.smallrye.reactive.mutiny.zero"/>
+        <module name="io.smallrye.reactive.mutiny.zero-flow-adapters"/>
+        <module name="io.vertx.core"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.reactive-messaging.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.core" services="import"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.slf4j"/>
+        <module name="org.wildfly.reactive.messaging.config" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/main/smallrye-reactive-messaging-provider-4.24.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/main/smallrye-reactive-messaging-provider-4.24.0.jar
new file mode 100644
index 0000000..b7cc8f0
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/messaging/main/smallrye-reactive-messaging-provider-4.24.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/main/module.xml
new file mode 100644
index 0000000..2487396
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mutiny-2.6.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.reactivestreams"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jctools"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/main/mutiny-2.6.2.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/main/mutiny-2.6.2.jar
new file mode 100644
index 0000000..d32bd30
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/main/mutiny-2.6.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/module.xml
new file mode 100644
index 0000000..2cac7b5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.reactive-streams-operators" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mutiny-reactive-streams-operators-2.6.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.zero"/>
+        <module name="io.smallrye.reactive.mutiny.zero-flow-adapters"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.core" services="import"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/mutiny-reactive-streams-operators-2.6.2.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/mutiny-reactive-streams-operators-2.6.2.jar
new file mode 100644
index 0000000..cc828ad
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/reactive-streams-operators/main/mutiny-reactive-streams-operators-2.6.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/module.xml
new file mode 100644
index 0000000..264f970
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.vertx-amqp-client" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-mutiny-vertx-amqp-client-3.13.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-core"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-runtime"/>
+        <module name="io.vertx.core"/>
+        <module name="io.vertx.client.amqp"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/smallrye-mutiny-vertx-amqp-client-3.13.2.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/smallrye-mutiny-vertx-amqp-client-3.13.2.jar
new file mode 100644
index 0000000..450ca71
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-amqp-client/main/smallrye-mutiny-vertx-amqp-client-3.13.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/module.xml
new file mode 100644
index 0000000..d48892c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.vertx-core" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-mutiny-vertx-core-3.13.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.vertx.core"/>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-runtime"/>
+
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/smallrye-mutiny-vertx-core-3.13.2.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/smallrye-mutiny-vertx-core-3.13.2.jar
new file mode 100644
index 0000000..e3ccb7b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-core/main/smallrye-mutiny-vertx-core-3.13.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/module.xml
new file mode 100644
index 0000000..f289cb1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.vertx-kafka-client" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-mutiny-vertx-kafka-client-3.13.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-core"/>
+        <module name="io.smallrye.reactive.mutiny.vertx-runtime"/>
+        <module name="io.vertx.core"/>
+        <module name="io.vertx.client.kafka"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/smallrye-mutiny-vertx-kafka-client-3.13.2.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/smallrye-mutiny-vertx-kafka-client-3.13.2.jar
new file mode 100644
index 0000000..a258c46
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-kafka-client/main/smallrye-mutiny-vertx-kafka-client-3.13.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/module.xml
new file mode 100644
index 0000000..20aef50
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.vertx-runtime" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="smallrye-mutiny-vertx-runtime-3.13.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.reactive.mutiny"/>
+        <module name="io.vertx.core"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/smallrye-mutiny-vertx-runtime-3.13.2.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/smallrye-mutiny-vertx-runtime-3.13.2.jar
new file mode 100644
index 0000000..20bba01
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/vertx-runtime/main/smallrye-mutiny-vertx-runtime-3.13.2.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/module.xml
new file mode 100644
index 0000000..2d07a64
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.zero-flow-adapters" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mutiny-zero-flow-adapters-1.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/mutiny-zero-flow-adapters-1.1.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/mutiny-zero-flow-adapters-1.1.0.jar
new file mode 100644
index 0000000..9908f10
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero-flow-adapters/main/mutiny-zero-flow-adapters-1.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/module.xml b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/module.xml
new file mode 100644
index 0000000..9436a79
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.smallrye.reactive.mutiny.zero" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mutiny-zero-1.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/mutiny-zero-1.1.0.jar b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/mutiny-zero-1.1.0.jar
new file mode 100644
index 0000000..b821617
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/smallrye/reactive/mutiny/zero/main/mutiny-zero-1.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/io/undertow/core/main/module.xml b/wildfly/modules/system/layers/base/io/undertow/core/main/module.xml
new file mode 100644
index 0000000..112a164
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/undertow/core/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.undertow.core" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="undertow-core-2.3.17.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="jdk.unsupported"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.jboss.xnio.nio" services="import"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.openssl" optional="true"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server" services="import"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/undertow/core/main/undertow-core-2.3.17.Final.jar b/wildfly/modules/system/layers/base/io/undertow/core/main/undertow-core-2.3.17.Final.jar
new file mode 100644
index 0000000..cbc3de7
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/undertow/core/main/undertow-core-2.3.17.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/undertow/jsp/main/jastow-2.2.8.Final.jar b/wildfly/modules/system/layers/base/io/undertow/jsp/main/jastow-2.2.8.Final.jar
new file mode 100644
index 0000000..029a2b0
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/undertow/jsp/main/jastow-2.2.8.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/undertow/jsp/main/module.xml b/wildfly/modules/system/layers/base/io/undertow/jsp/main/module.xml
new file mode 100644
index 0000000..7d64219
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/undertow/jsp/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.undertow.jsp" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jastow-2.2.8.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+        <module name="jakarta.servlet.jstl.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.eclipse.jdt.ecj"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/undertow/servlet/main/module.xml b/wildfly/modules/system/layers/base/io/undertow/servlet/main/module.xml
new file mode 100644
index 0000000..8650398
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/undertow/servlet/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.undertow.servlet" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="undertow-servlet-2.3.17.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.undertow.core"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+        <module name="jakarta.servlet.jstl.api"/>
+        <module name="jdk.unsupported"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/io/undertow/servlet/main/undertow-servlet-2.3.17.Final.jar b/wildfly/modules/system/layers/base/io/undertow/servlet/main/undertow-servlet-2.3.17.Final.jar
new file mode 100644
index 0000000..ab7ee95
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/undertow/servlet/main/undertow-servlet-2.3.17.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/undertow/websocket/main/module.xml b/wildfly/modules/system/layers/base/io/undertow/websocket/main/module.xml
new file mode 100644
index 0000000..1f0e25e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/undertow/websocket/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.undertow.websocket" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="undertow-websockets-jsr-2.3.17.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.websocket.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/undertow/websocket/main/undertow-websockets-jsr-2.3.17.Final.jar b/wildfly/modules/system/layers/base/io/undertow/websocket/main/undertow-websockets-jsr-2.3.17.Final.jar
new file mode 100644
index 0000000..1ffc6a4
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/undertow/websocket/main/undertow-websockets-jsr-2.3.17.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/io/vertx/client/amqp/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/client/amqp/main/module.xml
new file mode 100644
index 0000000..228cc23
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/client/amqp/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.client.amqp" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="vertx-amqp-client-4.5.10.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.slf4j"/>
+        <module name="org.apache.logging.log4j.api"/>
+        <module name="org.apache.qpid.proton"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.vertx.core"/>
+        <module name="io.vertx.proton"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/client/amqp/main/vertx-amqp-client-4.5.10.jar b/wildfly/modules/system/layers/base/io/vertx/client/amqp/main/vertx-amqp-client-4.5.10.jar
new file mode 100644
index 0000000..deee759
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/vertx/client/amqp/main/vertx-amqp-client-4.5.10.jar differ
diff --git a/wildfly/modules/system/layers/base/io/vertx/client/kafka/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/client/kafka/main/module.xml
new file mode 100644
index 0000000..6d3c9cd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/client/kafka/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.client.kafka" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="vertx-kafka-client-4.4.9.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.slf4j"/>
+        <module name="org.apache.kafka.client"/>
+        <module name="io.vertx.core"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/client/kafka/main/vertx-kafka-client-4.4.9.jar b/wildfly/modules/system/layers/base/io/vertx/client/kafka/main/vertx-kafka-client-4.4.9.jar
new file mode 100644
index 0000000..73475f2
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/vertx/client/kafka/main/vertx-kafka-client-4.4.9.jar differ
diff --git a/wildfly/modules/system/layers/base/io/vertx/client/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/client/main/module.xml
new file mode 100644
index 0000000..5e1c2d3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/client/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.client" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <!-- Add optional dependencies to the possible clients -->
+        <module name="io.vertx.client.amqp" optional="true" export="true"/>
+        <module name="io.vertx.client.kafka" optional="true" export="true"/>
+        <module name="io.vertx.client.mqtt" optional="true" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/core/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/core/main/module.xml
new file mode 100644
index 0000000..8815e18
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/core/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.core" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="vertx-core-4.5.10.jar"/>
+    </resources>
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-dns"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="io.netty.netty-codec-http2"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-resolver-dns"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="java.logging"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/core/main/vertx-core-4.5.10.jar b/wildfly/modules/system/layers/base/io/vertx/core/main/vertx-core-4.5.10.jar
new file mode 100644
index 0000000..d106856
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/vertx/core/main/vertx-core-4.5.10.jar differ
diff --git a/wildfly/modules/system/layers/base/io/vertx/grpc-client/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/grpc-client/main/module.xml
new file mode 100644
index 0000000..06ca891
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/grpc-client/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.grpc-client" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="vertx-grpc-client-4.5.10.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="io.vertx.grpc-common"/>
+        <module name="io.vertx.core"/>
+        <module name="io.grpc"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/grpc-client/main/vertx-grpc-client-4.5.10.jar b/wildfly/modules/system/layers/base/io/vertx/grpc-client/main/vertx-grpc-client-4.5.10.jar
new file mode 100644
index 0000000..f8dc38b
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/vertx/grpc-client/main/vertx-grpc-client-4.5.10.jar differ
diff --git a/wildfly/modules/system/layers/base/io/vertx/grpc-common/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/grpc-common/main/module.xml
new file mode 100644
index 0000000..251a743
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/grpc-common/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.grpc-common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="vertx-grpc-common-4.5.10.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.google.protobuf"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.vertx.core"/>
+        <module name="io.grpc"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/grpc-common/main/vertx-grpc-common-4.5.10.jar b/wildfly/modules/system/layers/base/io/vertx/grpc-common/main/vertx-grpc-common-4.5.10.jar
new file mode 100644
index 0000000..f80a57c
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/vertx/grpc-common/main/vertx-grpc-common-4.5.10.jar differ
diff --git a/wildfly/modules/system/layers/base/io/vertx/proton/main/module.xml b/wildfly/modules/system/layers/base/io/vertx/proton/main/module.xml
new file mode 100644
index 0000000..f333e01
--- /dev/null
+++ b/wildfly/modules/system/layers/base/io/vertx/proton/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="io.vertx.proton" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="vertx-proton-4.5.10.jar"/>
+    </resources>
+    <dependencies>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.vertx.core"/>
+        <module name="org.apache.qpid.proton"/>
+        <module name="java.security.sasl"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/io/vertx/proton/main/vertx-proton-4.5.10.jar b/wildfly/modules/system/layers/base/io/vertx/proton/main/vertx-proton-4.5.10.jar
new file mode 100644
index 0000000..b8aace3
Binary files /dev/null and b/wildfly/modules/system/layers/base/io/vertx/proton/main/vertx-proton-4.5.10.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/activation/api/main/jakarta.activation-api-2.1.3.jar b/wildfly/modules/system/layers/base/jakarta/activation/api/main/jakarta.activation-api-2.1.3.jar
new file mode 100644
index 0000000..0d015d5
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/activation/api/main/jakarta.activation-api-2.1.3.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/activation/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/activation/api/main/module.xml
new file mode 100644
index 0000000..a32ff5b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/activation/api/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.activation.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.activation-api-2.1.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.desktop"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/annotation/api/main/jakarta.annotation-api-2.1.1.jar b/wildfly/modules/system/layers/base/jakarta/annotation/api/main/jakarta.annotation-api-2.1.1.jar
new file mode 100644
index 0000000..e13b7df
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/annotation/api/main/jakarta.annotation-api-2.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/annotation/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/annotation/api/main/module.xml
new file mode 100644
index 0000000..2adcbe9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/annotation/api/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.annotation.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.annotation-api-2.1.1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/batch/api/main/jakarta.batch-api-2.1.1.jar b/wildfly/modules/system/layers/base/jakarta/batch/api/main/jakarta.batch-api-2.1.1.jar
new file mode 100644
index 0000000..38b64ba
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/batch/api/main/jakarta.batch-api-2.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/batch/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/batch/api/main/module.xml
new file mode 100644
index 0000000..497109b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/batch/api/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.batch.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.batch-api-2.1.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+    </dependencies>    
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/ejb/api/main/jakarta.ejb-api-4.0.1.jar b/wildfly/modules/system/layers/base/jakarta/ejb/api/main/jakarta.ejb-api-4.0.1.jar
new file mode 100644
index 0000000..bc064a9
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/ejb/api/main/jakarta.ejb-api-4.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/ejb/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/ejb/api/main/module.xml
new file mode 100644
index 0000000..1e52581
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/ejb/api/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.ejb.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.ejb-api-4.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <!-- This dep is for javax.naming -->
+        <module name="jakarta.transaction.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/el/api/main/jboss-el-api_5.0_spec-4.0.1.Final.jar b/wildfly/modules/system/layers/base/jakarta/el/api/main/jboss-el-api_5.0_spec-4.0.1.Final.jar
new file mode 100644
index 0000000..8dbe4a8
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/el/api/main/jboss-el-api_5.0_spec-4.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/el/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/el/api/main/module.xml
new file mode 100644
index 0000000..bcfd981
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/el/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.el.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jboss-el-api_5.0_spec-4.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+    </dependencies>    
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.cdi-api-4.0.1.jar b/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.cdi-api-4.0.1.jar
new file mode 100644
index 0000000..dc7ae1c
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.cdi-api-4.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.lang-model-4.0.1.jar b/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.lang-model-4.0.1.jar
new file mode 100644
index 0000000..606e3ca
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/jakarta.enterprise.lang-model-4.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/module.xml
new file mode 100644
index 0000000..d7073a0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/enterprise/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.enterprise.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.enterprise.cdi-api-4.0.1.jar"/>
+        <resource-root path="jakarta.enterprise.lang-model-4.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.glassfish.expressly" export="true"/>
+        <module name="jakarta.inject.api" export="true"/>
+        <module name="jakarta.interceptor.api" export="true"/>
+        <!-- This is so that all modules depending on CDI automatically get access to annotations such as @PreDestroy -->
+        <module name="jakarta.annotation.api" export="true"/>
+
+        <!-- CDIProvider -->
+        <module name="org.jboss.as.weld" services="import" optional="true"/>
+        <module name="org.jboss.weld.core" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/jakarta.enterprise.concurrent-api-3.0.3.jar b/wildfly/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/jakarta.enterprise.concurrent-api-3.0.3.jar
new file mode 100644
index 0000000..cfc3d83
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/jakarta.enterprise.concurrent-api-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/module.xml
new file mode 100644
index 0000000..f7ccdb6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/enterprise/concurrent/api/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.enterprise.concurrent.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.enterprise.concurrent-api-3.0.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.transaction.api" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/faces/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/faces/api/main/module.xml
new file mode 100644
index 0000000..38d9549
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/faces/api/main/module.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.faces.api" xmlns="urn:jboss:module:1.9">
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="jakarta.enterprise.api" export="true"/>
+        <module name="jakarta.servlet.api" export="true"/>
+        <module name="jakarta.servlet.jsp.api" export="true"/>
+        <module name="jakarta.servlet.jstl.api" export="true"/>
+        <module name="jakarta.validation.api" export="true"/>
+        <module name="jakarta.websocket.api"/>
+
+        <module name="jakarta.faces.impl">
+            <exports>
+                <include-set>
+                    <path name="jakarta/faces"/>
+                    <path name="jakarta/faces/annotation"/>
+                    <path name="jakarta/faces/application"/>
+                    <path name="jakarta/faces/component"/>
+                    <path name="jakarta/faces/component/behavior"/>
+                    <path name="jakarta/faces/component/html"/>
+                    <path name="jakarta/faces/component/search"/>
+                    <path name="jakarta/faces/component/visit"/>
+                    <path name="jakarta/faces/context"/>
+                    <path name="jakarta/faces/convert"/>
+                    <path name="jakarta/faces/el"/>
+                    <path name="jakarta/faces/event"/>
+                    <path name="jakarta/faces/flow"/>
+                    <path name="jakarta/faces/flow/builder"/>
+                    <path name="jakarta/faces/lifecycle"/>
+                    <path name="jakarta/faces/mock"/>
+                    <path name="jakarta/faces/model"/>
+                    <path name="jakarta/faces/push"/>
+                    <path name="jakarta/faces/render"/>
+                    <path name="jakarta/faces/validator"/>
+                    <path name="jakarta/faces/view"/>
+                    <path name="jakarta/faces/view/facelets"/>
+                    <path name="jakarta/faces/webapp"/>
+                </include-set>
+            </exports>
+        </module>
+     
+        <module name="org.glassfish.expressly" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/faces/impl/main/jakarta.faces-4.0.7.jar b/wildfly/modules/system/layers/base/jakarta/faces/impl/main/jakarta.faces-4.0.7.jar
new file mode 100644
index 0000000..dd07f5d
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/faces/impl/main/jakarta.faces-4.0.7.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/faces/impl/main/module.xml b/wildfly/modules/system/layers/base/jakarta/faces/impl/main/module.xml
new file mode 100644
index 0000000..b3ba58b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/faces/impl/main/module.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.faces.impl" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.faces.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+        <module name="jakarta.servlet.jstl.api"/>
+        <module name="jakarta.validation.api" export="true"/>
+        <module name="jakarta.websocket.api"/>
+        <module name="jakarta.xml.bind.api"/>
+
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+
+
+        <module name="org.glassfish.expressly"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+    </dependencies>
+
+    <resources>
+        <resource-root path="jakarta.faces-4.0.7.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/inject/api/main/jakarta.inject-api-2.0.1.jar b/wildfly/modules/system/layers/base/jakarta/inject/api/main/jakarta.inject-api-2.0.1.jar
new file mode 100644
index 0000000..a92e099
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/inject/api/main/jakarta.inject-api-2.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/inject/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/inject/api/main/module.xml
new file mode 100644
index 0000000..5c57124
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/inject/api/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.inject.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.inject-api-2.0.1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/interceptor/api/main/jakarta.interceptor-api-2.1.0.jar b/wildfly/modules/system/layers/base/jakarta/interceptor/api/main/jakarta.interceptor-api-2.1.0.jar
new file mode 100644
index 0000000..c38d69c
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/interceptor/api/main/jakarta.interceptor-api-2.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/interceptor/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/interceptor/api/main/module.xml
new file mode 100644
index 0000000..dad8967
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/interceptor/api/main/module.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.interceptor.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <!--<artifact name="${org.jboss.spec.javax.interceptor:jboss-interceptors-api_1.2_spec}"/>-->
+        <resource-root path="jakarta.interceptor-api-2.1.0.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/jms/api/main/jakarta.jms-api-3.1.0.jar b/wildfly/modules/system/layers/base/jakarta/jms/api/main/jakarta.jms-api-3.1.0.jar
new file mode 100644
index 0000000..b89e12e
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/jms/api/main/jakarta.jms-api-3.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/jms/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/jms/api/main/module.xml
new file mode 100644
index 0000000..a28ae20
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/jms/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.jms.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.jms-api-3.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/json/api/main/jakarta.json-api-2.1.3.jar b/wildfly/modules/system/layers/base/jakarta/json/api/main/jakarta.json-api-2.1.3.jar
new file mode 100644
index 0000000..dbcbea9
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/json/api/main/jakarta.json-api-2.1.3.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/json/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/json/api/main/module.xml
new file mode 100644
index 0000000..3b16644
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/json/api/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.json.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.json-api-2.1.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <!--
+            This is required as a circular dependency because the RI does not include a META-INF/services provider file.
+            It must also be exported so that modules that depend on the API, e.g. deployments, will be able to see the
+            implementation.
+        -->
+        <module name="org.eclipse.parsson" export="true"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/json/bind/api/main/jakarta.json.bind-api-3.0.1.jar b/wildfly/modules/system/layers/base/jakarta/json/bind/api/main/jakarta.json.bind-api-3.0.1.jar
new file mode 100644
index 0000000..864bae6
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/json/bind/api/main/jakarta.json.bind-api-3.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/json/bind/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/json/bind/api/main/module.xml
new file mode 100644
index 0000000..eb50ab0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/json/bind/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.json.bind.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.json.bind-api-3.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.json.api"/>
+        <!-- Circular dependency on the implementation to ensure that:
+             1. The implementation is loaded
+             2. It is done last via the hard-coded class name in the spec API
+         -->
+        <module name="org.eclipse.yasson"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/mail/api/main/jakarta.mail-api-2.1.3.jar b/wildfly/modules/system/layers/base/jakarta/mail/api/main/jakarta.mail-api-2.1.3.jar
new file mode 100644
index 0000000..6b36779
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/mail/api/main/jakarta.mail-api-2.1.3.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/mail/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/mail/api/main/module.xml
new file mode 100644
index 0000000..6468c51
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/mail/api/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.mail.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.mail-api-2.1.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="jakarta.activation.api"/>
+        <module name="org.eclipse.angus.mail" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/mvc/api/main/jakarta.mvc-api-2.1.0.jar b/wildfly/modules/system/layers/base/jakarta/mvc/api/main/jakarta.mvc-api-2.1.0.jar
new file mode 100644
index 0000000..4151419
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/mvc/api/main/jakarta.mvc-api-2.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/mvc/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/mvc/api/main/module.xml
new file mode 100644
index 0000000..b762eff
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/mvc/api/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.mvc.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.stability" value="preview"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.mvc-api-2.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.ws.rs.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/persistence/api/main/jakarta.persistence-api-3.1.0.jar b/wildfly/modules/system/layers/base/jakarta/persistence/api/main/jakarta.persistence-api-3.1.0.jar
new file mode 100644
index 0000000..4030796
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/persistence/api/main/jakarta.persistence-api-3.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/persistence/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/persistence/api/main/module.xml
new file mode 100644
index 0000000..aabea1c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/persistence/api/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.persistence.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.persistence-api-3.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- java.instrument export due to jdeps result -->
+        <module name="java.instrument" export="true"/>
+        <module name="java.logging"/>
+        <!-- PersistenceUnitInfo needs javax.sql.DataSource -->
+        <module name="java.sql" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/resource/api/main/jakarta.resource-api-2.1.0.jar b/wildfly/modules/system/layers/base/jakarta/resource/api/main/jakarta.resource-api-2.1.0.jar
new file mode 100644
index 0000000..5a5d908
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/resource/api/main/jakarta.resource-api-2.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/resource/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/resource/api/main/module.xml
new file mode 100644
index 0000000..eeceee3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/resource/api/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.resource.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.resource-api-2.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.naming" export="false">
+            <exports>
+                <include path="javax/naming"/>
+            </exports>
+        </module>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="jakarta.transaction.api" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/security/auth/message/api/main/jakarta.authentication-api-3.0.0.jar b/wildfly/modules/system/layers/base/jakarta/security/auth/message/api/main/jakarta.authentication-api-3.0.0.jar
new file mode 100644
index 0000000..38e1eba
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/security/auth/message/api/main/jakarta.authentication-api-3.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/security/auth/message/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/security/auth/message/api/main/module.xml
new file mode 100644
index 0000000..3a5d88f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/security/auth/message/api/main/module.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.security.auth.message.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.authentication-api-3.0.0.jar"/>
+    </resources>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/security/enterprise/api/main/jakarta.security.enterprise-api-3.0.0.jar b/wildfly/modules/system/layers/base/jakarta/security/enterprise/api/main/jakarta.security.enterprise-api-3.0.0.jar
new file mode 100644
index 0000000..0382d33
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/security/enterprise/api/main/jakarta.security.enterprise-api-3.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/security/enterprise/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/security/enterprise/api/main/module.xml
new file mode 100644
index 0000000..d049e9e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/security/enterprise/api/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.security.enterprise.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.security.enterprise-api-3.0.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.desktop"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.json.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/security/jacc/api/main/jakarta.authorization-api-2.1.0.jar b/wildfly/modules/system/layers/base/jakarta/security/jacc/api/main/jakarta.authorization-api-2.1.0.jar
new file mode 100644
index 0000000..5e1c947
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/security/jacc/api/main/jakarta.authorization-api-2.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/security/jacc/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/security/jacc/api/main/module.xml
new file mode 100644
index 0000000..f783340
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/security/jacc/api/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.security.jacc.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <!--<artifact name="${org.jboss.spec.javax.security.jacc:jboss-jacc-api_1.5_spec}"/>-->
+        <resource-root path="jakarta.authorization-api-2.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.servlet.api" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/api/main/jakarta.servlet-api-6.0.0.jar b/wildfly/modules/system/layers/base/jakarta/servlet/api/main/jakarta.servlet-api-6.0.0.jar
new file mode 100644
index 0000000..d15c10c
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/servlet/api/main/jakarta.servlet-api-6.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/servlet/api/main/module.xml
new file mode 100644
index 0000000..2627482
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/servlet/api/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.servlet.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.servlet-api-6.0.0.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/jsp/api/main/jakarta.servlet.jsp-api-3.1.1.jar b/wildfly/modules/system/layers/base/jakarta/servlet/jsp/api/main/jakarta.servlet.jsp-api-3.1.1.jar
new file mode 100644
index 0000000..4f8a454
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/servlet/jsp/api/main/jakarta.servlet.jsp-api-3.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/jsp/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/servlet/jsp/api/main/module.xml
new file mode 100644
index 0000000..51bd43f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/servlet/jsp/api/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.servlet.jsp.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.servlet.jsp-api-3.1.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="jakarta.servlet.api" export="true"/>
+        <module name="org.glassfish.expressly" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-3.0.1-jbossorg-1.jar b/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-3.0.1-jbossorg-1.jar
new file mode 100644
index 0000000..d17998a
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-3.0.1-jbossorg-1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-api-3.0.2.jar b/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-api-3.0.2.jar
new file mode 100644
index 0000000..f2d2c82
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/jakarta.servlet.jsp.jstl-api-3.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/module.xml
new file mode 100644
index 0000000..d29376b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/servlet/jstl/api/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.servlet.jstl.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.servlet.jsp.jstl-api-3.0.2.jar"/>
+        <resource-root path="jakarta.servlet.jsp.jstl-3.0.1-jbossorg-1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/transaction/api/main/jakarta.transaction-api-2.0.1.jar b/wildfly/modules/system/layers/base/jakarta/transaction/api/main/jakarta.transaction-api-2.0.1.jar
new file mode 100644
index 0000000..b1e7da4
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/transaction/api/main/jakarta.transaction-api-2.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/transaction/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/transaction/api/main/module.xml
new file mode 100644
index 0000000..d6772e3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/transaction/api/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.transaction.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.transaction-api-2.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.rmi"/>
+        <module name="java.transaction.xa" export="true"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.interceptor.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/validation/api/main/jakarta.validation-api-3.0.2.jar b/wildfly/modules/system/layers/base/jakarta/validation/api/main/jakarta.validation-api-3.0.2.jar
new file mode 100644
index 0000000..254c7a2
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/validation/api/main/jakarta.validation-api-3.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/validation/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/validation/api/main/module.xml
new file mode 100644
index 0000000..18f1bac
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/validation/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.validation.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.validation-api-3.0.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-api-2.1.1.jar b/wildfly/modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-api-2.1.1.jar
new file mode 100644
index 0000000..31f632f
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-api-2.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-client-api-2.1.1.jar b/wildfly/modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-client-api-2.1.1.jar
new file mode 100644
index 0000000..2c77e5a
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/websocket/api/main/jakarta.websocket-client-api-2.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/websocket/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/websocket/api/main/module.xml
new file mode 100644
index 0000000..fa55d87
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/websocket/api/main/module.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.websocket.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.websocket-api-2.1.1.jar"/>
+        <resource-root path="jakarta.websocket-client-api-2.1.1.jar"/>
+    </resources>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/ws/rs/api/main/jakarta.ws.rs-api-3.1.0.jar b/wildfly/modules/system/layers/base/jakarta/ws/rs/api/main/jakarta.ws.rs-api-3.1.0.jar
new file mode 100644
index 0000000..80670a1
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/ws/rs/api/main/jakarta.ws.rs-api-3.1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/ws/rs/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/ws/rs/api/main/module.xml
new file mode 100644
index 0000000..667aa72
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/ws/rs/api/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.ws.rs.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.ws.rs-api-3.1.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <!-- Export the services for RESTful Web Services implementation -->
+        <module name="org.jboss.resteasy.resteasy-client" services="export"/>
+        <module name="org.jboss.resteasy.resteasy-core" services="export"/>
+        <module name="jakarta.xml.bind.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/xml/bind/api/main/jakarta.xml.bind-api-4.0.2.jar b/wildfly/modules/system/layers/base/jakarta/xml/bind/api/main/jakarta.xml.bind-api-4.0.2.jar
new file mode 100644
index 0000000..4824282
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/xml/bind/api/main/jakarta.xml.bind-api-4.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/xml/bind/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/xml/bind/api/main/module.xml
new file mode 100644
index 0000000..d38b049
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/xml/bind/api/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.xml.bind.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jakarta.xml.bind-api-4.0.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="jakarta.activation.api" export="true"/>
+        <module name="org.eclipse.angus.activation" services="export" export="true"/>
+        <!-- Export the implementation as the TCCL is typically the CL of a deployment. We do not want to export the
+             services as that would trigger the loading through the service loader. This can be an issue and require
+             special permissions if the security manager is present. Not exporting the services falls back to a default
+             implementation provided by the org.glassfish.jaxb module.
+
+             Please note the comment in WFLY-17065. The org.glassfish.jaxb module includes more than one module. While
+             it is likely not an issue to NOT export the services, it should be noted this currently affects;
+             jaxb-runtime.jar and jaxb-xjc.jar.
+         -->
+        <module name="org.glassfish.jaxb" services="import" export="true"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/xml/soap/api/main/jboss-saaj-api_3.0_spec-1.0.0.Final.jar b/wildfly/modules/system/layers/base/jakarta/xml/soap/api/main/jboss-saaj-api_3.0_spec-1.0.0.Final.jar
new file mode 100644
index 0000000..dbd275a
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/xml/soap/api/main/jboss-saaj-api_3.0_spec-1.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/xml/soap/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/xml/soap/api/main/module.xml
new file mode 100644
index 0000000..10fc9c9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/xml/soap/api/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.xml.soap.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jboss-saaj-api_3.0_spec-1.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.activation.api" export="true"/>
+        <module name="org.eclipse.angus.activation" services="export" export="true"/>
+        <module name="org.jboss.modules"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/jakarta/xml/ws/api/main/jboss-jakarta-xml-ws-api_4.0_spec-1.0.0.Final.jar b/wildfly/modules/system/layers/base/jakarta/xml/ws/api/main/jboss-jakarta-xml-ws-api_4.0_spec-1.0.0.Final.jar
new file mode 100644
index 0000000..d7f6d5a
Binary files /dev/null and b/wildfly/modules/system/layers/base/jakarta/xml/ws/api/main/jboss-jakarta-xml-ws-api_4.0_spec-1.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/jakarta/xml/ws/api/main/module.xml b/wildfly/modules/system/layers/base/jakarta/xml/ws/api/main/module.xml
new file mode 100644
index 0000000..84c5453
--- /dev/null
+++ b/wildfly/modules/system/layers/base/jakarta/xml/ws/api/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="jakarta.xml.ws.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jboss-jakarta-xml-ws-api_4.0_spec-1.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.xml.bind.api" export="true"/>
+        <module name="jakarta.xml.soap.api" export="true"/>
+        <module name="org.jboss.modules"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/javaee/api/main/module.xml b/wildfly/modules/system/layers/base/javaee/api/main/module.xml
new file mode 100644
index 0000000..7e1775c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javaee/api/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="javaee.api" target-name="wildflyee.api" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/javax/activation/api/main/module.xml b/wildfly/modules/system/layers/base/javax/activation/api/main/module.xml
new file mode 100644
index 0000000..2231f8c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/activation/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.activation.api" target-name="jakarta.activation.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/annotation/api/main/module.xml b/wildfly/modules/system/layers/base/javax/annotation/api/main/module.xml
new file mode 100644
index 0000000..743a4c0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/annotation/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.annotation.api" target-name="jakarta.annotation.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/api/main/module.xml b/wildfly/modules/system/layers/base/javax/api/main/module.xml
new file mode 100644
index 0000000..ec447d4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/api/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="javax.api" xmlns="urn:jboss:module:1.9">
+        <!--
+		This module is deprecated and any use of it should be replaced
+		with java.se, java.xml, java.xml.crypto or jdk.xml.dom JPMS modules provided by Java SE.
+	-->
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+    <dependencies>
+        <module name="java.se" export="true"/>
+        <module name="java.xml" export="true"/>
+        <module name="java.xml.crypto" export="true"/>
+        <module name="jdk.xml.dom" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/javax/batch/api/main/module.xml b/wildfly/modules/system/layers/base/javax/batch/api/main/module.xml
new file mode 100644
index 0000000..e71fe45
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/batch/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.batch.api" target-name="jakarta.batch.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+	 References to this module should be changed to the 'jakarta' module for
+	 which this module is an alias.
+
+	 Note that despite its name this module does not expose javax.* package namespace
+	 APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+	 APIs from the module it aliases.
+
+	 This module only exists to ease migration from the old javax.* namespace to
+	 the current jakarta.* namespace by allowing references to the old module names
+	 to temporarily work. Such references should be updated.
+
+	 (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+	 property child element only because the 'module-alias' element and associated
+	 Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/ejb/api/main/module.xml b/wildfly/modules/system/layers/base/javax/ejb/api/main/module.xml
new file mode 100644
index 0000000..0b4d858
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/ejb/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.ejb.api" target-name="jakarta.ejb.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/el/api/main/module.xml b/wildfly/modules/system/layers/base/javax/el/api/main/module.xml
new file mode 100644
index 0000000..35f6a59
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/el/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.el.api" target-name="jakarta.el.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/enterprise/api/main/module.xml b/wildfly/modules/system/layers/base/javax/enterprise/api/main/module.xml
new file mode 100644
index 0000000..dc32d9c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/enterprise/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.enterprise.api" target-name="jakarta.enterprise.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/enterprise/concurrent/api/main/module.xml b/wildfly/modules/system/layers/base/javax/enterprise/concurrent/api/main/module.xml
new file mode 100644
index 0000000..585e7f4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/enterprise/concurrent/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.enterprise.concurrent.api" target-name="jakarta.enterprise.concurrent.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/faces/api/main/module.xml b/wildfly/modules/system/layers/base/javax/faces/api/main/module.xml
new file mode 100644
index 0000000..0a5a74f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/faces/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.faces.api" target-name="jakarta.faces.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/inject/api/main/module.xml b/wildfly/modules/system/layers/base/javax/inject/api/main/module.xml
new file mode 100644
index 0000000..9349ae8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/inject/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.inject.api" target-name="jakarta.inject.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/interceptor/api/main/module.xml b/wildfly/modules/system/layers/base/javax/interceptor/api/main/module.xml
new file mode 100644
index 0000000..32b285f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/interceptor/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.interceptor.api" target-name="jakarta.interceptor.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/jms/api/main/module.xml b/wildfly/modules/system/layers/base/javax/jms/api/main/module.xml
new file mode 100644
index 0000000..5c15c29
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/jms/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.jms.api" target-name="jakarta.jms.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/json/api/main/module.xml b/wildfly/modules/system/layers/base/javax/json/api/main/module.xml
new file mode 100644
index 0000000..7cb986c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/json/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.json.api" target-name="jakarta.json.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/json/bind/api/main/module.xml b/wildfly/modules/system/layers/base/javax/json/bind/api/main/module.xml
new file mode 100644
index 0000000..745e907
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/json/bind/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.json.bind.api" target-name="jakarta.json.bind.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/jws/api/main/module.xml b/wildfly/modules/system/layers/base/javax/jws/api/main/module.xml
new file mode 100644
index 0000000..e517b2e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/jws/api/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- The jakarta.jws.api is included in jakarta.xml.ws.api since 4.0.0 and this module should be removed in the future -->
+<module-alias name="javax.jws.api" target-name="jakarta.xml.ws.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/mail/api/main/module.xml b/wildfly/modules/system/layers/base/javax/mail/api/main/module.xml
new file mode 100644
index 0000000..046c656
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/mail/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.mail.api" target-name="jakarta.mail.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/orb/api/main/module.xml b/wildfly/modules/system/layers/base/javax/orb/api/main/module.xml
new file mode 100644
index 0000000..39887c8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/orb/api/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="javax.orb.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="openjdk-orb-10.1.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="jdk.unsupported"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.jboss.jts.integration"/>
+        <module name="org.jboss.iiop-client"/>
+        <!-- These dependencies are required only if the
+             iiop-openjdk or jacorb subsystems are present.
+             If they are the subsystem will initialize the
+             ORB with a specification to use classes from
+             these modules. -->
+        <module name="org.wildfly.iiop-openjdk" optional="true"/>
+        <module name="org.jboss.as.transactions" optional="true"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/javax/orb/api/main/openjdk-orb-10.1.0.Final.jar b/wildfly/modules/system/layers/base/javax/orb/api/main/openjdk-orb-10.1.0.Final.jar
new file mode 100644
index 0000000..9a5e037
Binary files /dev/null and b/wildfly/modules/system/layers/base/javax/orb/api/main/openjdk-orb-10.1.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/javax/persistence/api/main/module.xml b/wildfly/modules/system/layers/base/javax/persistence/api/main/module.xml
new file mode 100644
index 0000000..3df08f2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/persistence/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.persistence.api" target-name="jakarta.persistence.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/resource/api/main/module.xml b/wildfly/modules/system/layers/base/javax/resource/api/main/module.xml
new file mode 100644
index 0000000..57849f8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/resource/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.resource.api" target-name="jakarta.resource.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/rmi/api/main/module.xml b/wildfly/modules/system/layers/base/javax/rmi/api/main/module.xml
new file mode 100644
index 0000000..05f2edc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/rmi/api/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="javax.rmi.api" xmlns="urn:jboss:module:1.9">
+    <dependencies>
+        <module name="javax.orb.api" export="false">
+            <exports>
+                <include-set>
+                    <path name="javax/rmi"/>
+                    <path name="javax/rmi/CORBA"/>
+                    <path name="org/jboss/javax/rmi"/>
+                </include-set>
+            </exports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/javax/security/auth/message/api/main/module.xml b/wildfly/modules/system/layers/base/javax/security/auth/message/api/main/module.xml
new file mode 100644
index 0000000..440a172
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/security/auth/message/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.security.auth.message.api" target-name="jakarta.security.auth.message.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/security/enterprise/api/main/module.xml b/wildfly/modules/system/layers/base/javax/security/enterprise/api/main/module.xml
new file mode 100644
index 0000000..9809e61
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/security/enterprise/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.security.enterprise.api" target-name="jakarta.security.enterprise.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/security/jacc/api/main/module.xml b/wildfly/modules/system/layers/base/javax/security/jacc/api/main/module.xml
new file mode 100644
index 0000000..ec0c933
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/security/jacc/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.security.jacc.api" target-name="jakarta.security.jacc.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/servlet/api/main/module.xml b/wildfly/modules/system/layers/base/javax/servlet/api/main/module.xml
new file mode 100644
index 0000000..3387652
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/servlet/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.servlet.api" target-name="jakarta.servlet.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/servlet/jsp/api/main/module.xml b/wildfly/modules/system/layers/base/javax/servlet/jsp/api/main/module.xml
new file mode 100644
index 0000000..1724680
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/servlet/jsp/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.servlet.jsp.api" target-name="jakarta.servlet.jsp.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/servlet/jstl/api/main/module.xml b/wildfly/modules/system/layers/base/javax/servlet/jstl/api/main/module.xml
new file mode 100644
index 0000000..97127c4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/servlet/jstl/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.servlet.jstl.api" target-name="jakarta.servlet.jstl.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/sql/api/main/module.xml b/wildfly/modules/system/layers/base/javax/sql/api/main/module.xml
new file mode 100644
index 0000000..f458ab4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/sql/api/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="javax.sql.api" xmlns="urn:jboss:module:1.9">
+        <!--
+		This module is deprecated and any use of it should be replaced
+		with java.sql, java.sql.rowset or java.transaction.xa JPMS modules provided by Java SE.
+	-->
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+    <dependencies>
+        <module name="java.sql" export="true"/>
+        <module name="java.sql.rowset" export="true"/>
+        <module name="java.transaction.xa" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/javax/transaction/api/main/module.xml b/wildfly/modules/system/layers/base/javax/transaction/api/main/module.xml
new file mode 100644
index 0000000..59de09a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/transaction/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.transaction.api" target-name="jakarta.transaction.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/validation/api/main/module.xml b/wildfly/modules/system/layers/base/javax/validation/api/main/module.xml
new file mode 100644
index 0000000..bc330a4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/validation/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.validation.api" target-name="jakarta.validation.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/websocket/api/main/module.xml b/wildfly/modules/system/layers/base/javax/websocket/api/main/module.xml
new file mode 100644
index 0000000..42edfc1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/websocket/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.websocket.api" target-name="jakarta.websocket.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/ws/rs/api/main/module.xml b/wildfly/modules/system/layers/base/javax/ws/rs/api/main/module.xml
new file mode 100644
index 0000000..5f928d5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/ws/rs/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.ws.rs.api" target-name="jakarta.ws.rs.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/wsdl4j/api/main/module.xml b/wildfly/modules/system/layers/base/javax/wsdl4j/api/main/module.xml
new file mode 100644
index 0000000..522f023
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/wsdl4j/api/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="javax.wsdl4j.api" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="wsdl4j-1.6.3.jar"/>
+    </resources>
+
+    <dependencies>
+      <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/javax/wsdl4j/api/main/wsdl4j-1.6.3.jar b/wildfly/modules/system/layers/base/javax/wsdl4j/api/main/wsdl4j-1.6.3.jar
new file mode 100644
index 0000000..b9c10b9
Binary files /dev/null and b/wildfly/modules/system/layers/base/javax/wsdl4j/api/main/wsdl4j-1.6.3.jar differ
diff --git a/wildfly/modules/system/layers/base/javax/xml/bind/api/main/module.xml b/wildfly/modules/system/layers/base/javax/xml/bind/api/main/module.xml
new file mode 100644
index 0000000..51811c0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/xml/bind/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.xml.bind.api" target-name="jakarta.xml.bind.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/xml/soap/api/main/module.xml b/wildfly/modules/system/layers/base/javax/xml/soap/api/main/module.xml
new file mode 100644
index 0000000..e2b669c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/xml/soap/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.xml.soap.api" target-name="jakarta.xml.soap.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/javax/xml/stream/api/main/module.xml b/wildfly/modules/system/layers/base/javax/xml/stream/api/main/module.xml
new file mode 100644
index 0000000..49e751d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/xml/stream/api/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="javax.xml.stream.api" xmlns="urn:jboss:module:1.9">
+        <!--
+		This module is deprecated and any use of it should be replaced
+		with java.xml JPMS module provided by Java SE.
+	-->
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+    <dependencies>
+        <module name="java.xml">
+            <exports>
+                <include-set>
+                    <path name="javax/xml/stream"/>
+                    <path name="javax/xml/stream/events"/>
+                    <path name="javax/xml/stream/util"/>
+                </include-set>
+            </exports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/javax/xml/ws/api/main/module.xml b/wildfly/modules/system/layers/base/javax/xml/ws/api/main/module.xml
new file mode 100644
index 0000000..9a6199a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/javax/xml/ws/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="javax.xml.ws.api" target-name="jakarta.xml.ws.api" xmlns="urn:jboss:module:1.9"/>
+<!--
+     WARNING: This module is DEPRECATED and will be removed in a future release.
+
+     References to this module should be changed to the 'jakarta' module for
+     which this module is an alias.
+
+     Note that despite its name this module does not expose javax.* package namespace
+     APIs from Jakarta EE 8 or earlier. It exposes the jakarta.* package namespace
+     APIs from the module it aliases.
+
+     This module only exists to ease migration from the old javax.* namespace to
+     the current jakarta.* namespace by allowing references to the old module names
+     to temporarily work. Such references should be updated.
+
+     (Note that an xml comment is used here instead of the usual 'jboss.api=deprecated'
+     property child element only because the 'module-alias' element and associated
+     Java classes do not support property child elements.)
+-->
diff --git a/wildfly/modules/system/layers/base/net/bytebuddy/main/byte-buddy-1.14.18.jar b/wildfly/modules/system/layers/base/net/bytebuddy/main/byte-buddy-1.14.18.jar
new file mode 100644
index 0000000..9208917
Binary files /dev/null and b/wildfly/modules/system/layers/base/net/bytebuddy/main/byte-buddy-1.14.18.jar differ
diff --git a/wildfly/modules/system/layers/base/net/bytebuddy/main/module.xml b/wildfly/modules/system/layers/base/net/bytebuddy/main/module.xml
new file mode 100644
index 0000000..913ff77
--- /dev/null
+++ b/wildfly/modules/system/layers/base/net/bytebuddy/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="net.bytebuddy" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="byte-buddy-1.14.18.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.instrument"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/net/jcip/main/jcip-annotations-1.0.jar b/wildfly/modules/system/layers/base/net/jcip/main/jcip-annotations-1.0.jar
new file mode 100644
index 0000000..06e9066
Binary files /dev/null and b/wildfly/modules/system/layers/base/net/jcip/main/jcip-annotations-1.0.jar differ
diff --git a/wildfly/modules/system/layers/base/net/jcip/main/module.xml b/wildfly/modules/system/layers/base/net/jcip/main/module.xml
new file mode 100644
index 0000000..f4c2df2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/net/jcip/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="net.jcip" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jcip-annotations-1.0.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/aesh/main/aesh-2.4.jar b/wildfly/modules/system/layers/base/org/aesh/main/aesh-2.4.jar
new file mode 100644
index 0000000..a5b0d14
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/aesh/main/aesh-2.4.jar differ
diff --git a/wildfly/modules/system/layers/base/org/aesh/main/aesh-extensions-1.8.jar b/wildfly/modules/system/layers/base/org/aesh/main/aesh-extensions-1.8.jar
new file mode 100644
index 0000000..75b89a7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/aesh/main/aesh-extensions-1.8.jar differ
diff --git a/wildfly/modules/system/layers/base/org/aesh/main/module.xml b/wildfly/modules/system/layers/base/org/aesh/main/module.xml
new file mode 100644
index 0000000..c3209ca
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/aesh/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.aesh" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="aesh-extensions-1.8.jar"/>
+        <resource-root path="readline-2.2.jar"/>
+        <resource-root path="aesh-2.4.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jdk.unsupported"/>
+        <module name="java.logging"/>
+        <module name="org.fusesource.jansi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/aesh/main/readline-2.2.jar b/wildfly/modules/system/layers/base/org/aesh/main/readline-2.2.jar
new file mode 100644
index 0000000..114e01f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/aesh/main/readline-2.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/antlr/main/antlr4-4.13.0.jar b/wildfly/modules/system/layers/base/org/antlr/main/antlr4-4.13.0.jar
new file mode 100644
index 0000000..1eaf4f6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/antlr/main/antlr4-4.13.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/antlr/main/antlr4-runtime-4.13.0.jar b/wildfly/modules/system/layers/base/org/antlr/main/antlr4-runtime-4.13.0.jar
new file mode 100644
index 0000000..40c77ff
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/antlr/main/antlr4-runtime-4.13.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/antlr/main/module.xml b/wildfly/modules/system/layers/base/org/antlr/main/module.xml
new file mode 100644
index 0000000..0179564
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/antlr/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.antlr" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="antlr4-4.13.0.jar"/>
+        <resource-root path="antlr4-runtime-4.13.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-core-client-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-core-client-2.37.0.jar
new file mode 100644
index 0000000..dc367e3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-core-client-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-hqclient-protocol-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-hqclient-protocol-2.37.0.jar
new file mode 100644
index 0000000..e1578f2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-hqclient-protocol-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-jakarta-client-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-jakarta-client-2.37.0.jar
new file mode 100644
index 0000000..0f8517d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-jakarta-client-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-selector-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-selector-2.37.0.jar
new file mode 100644
index 0000000..aa5087f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/artemis-selector-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/module.xml
new file mode 100644
index 0000000..29e11ac
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/client/main/module.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.client" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="artemis-core-client-2.37.0.jar"/>
+        <resource-root path="artemis-selector-2.37.0.jar"/>
+        <resource-root path="artemis-hqclient-protocol-2.37.0.jar"/>
+        <resource-root path="artemis-jakarta-client-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.management.rmi"/>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="org.apache.activemq.artemis.commons"/>
+        <!-- export is required to get  access to InVMConnectorFactory -->
+        <module name="org.apache.activemq.artemis" optional="true" export="true"/>
+        <!-- Import is required to get  access to SSLContext Factory for Elytron -->
+        <module name="org.wildfly.extension.messaging-activemq" services="import" export="true"/>
+        <module name="de.dentrassi.crypto.pem-keystore" services="import" export="true"/>
+        <module name="com.google.guava"/>
+        <module name="jakarta.json.api"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="org.jgroups"/>
+        <module name="org.slf4j"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="java.base"/>
+        <!-- supported protocols (in addition to the CORE protocol) -->
+        <module name="org.apache.activemq.artemis.protocol.amqp" services="import" optional="true"/>
+        <module name="org.apache.activemq.artemis.protocol.hornetq" services="import" optional="true"/>
+        <module name="org.apache.activemq.artemis.protocol.stomp" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/commons/main/artemis-commons-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/commons/main/artemis-commons-2.37.0.jar
new file mode 100644
index 0000000..cd389a6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/commons/main/artemis-commons-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/commons/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/commons/main/module.xml
new file mode 100644
index 0000000..0b41691
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/commons/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.commons" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="artemis-commons-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.management.rmi"/>
+        <module name="org.apache.commons.beanutils"/>
+        <module name="org.slf4j"/>
+        <module name="java.desktop"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <!-- WFLY-6301 This module can be used to load user-created classes that are
+             used by Artemis resources (e.g. connector-service, transformers, etc.)
+        -->
+        <module name="org.apache.activemq.artemis.addons" optional="true" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/activemq-artemis-native-2.0.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/activemq-artemis-native-2.0.0.jar
new file mode 100644
index 0000000..dc73a49
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/activemq-artemis-native-2.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/artemis-journal-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/artemis-journal-2.37.0.jar
new file mode 100644
index 0000000..0eefbdf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/artemis-journal-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-i686/libartemis-native-32.so b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-i686/libartemis-native-32.so
new file mode 100644
index 0000000..97ea5fb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-i686/libartemis-native-32.so differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-x86_64/libartemis-native-64.so b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-x86_64/libartemis-native-64.so
new file mode 100644
index 0000000..9e5b3e3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/lib/linux-x86_64/libartemis-native-64.so differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/module.xml
new file mode 100644
index 0000000..5751a67
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/journal/main/module.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.journal" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!--
+            END USER MODULE USAGE: Subsystem configuration plug points
+
+            End users may depend on this module for access to APIs needed to
+            implement custom plug points exposed by a subsystem's supported
+            management API (in this case the messaging-activemq subsystem).
+            Typically such plug points involve classname and module name
+            configuration attribute pairs where the end user specifies a module and
+            class that they provide to implement an API provided by the subsystem.
+
+            Such APIs and the name of this module are stable API. All other resources
+            exposed by this module are subject to change or removal at any time.
+
+            This module should not be directly depended upon by deployments.
+        -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="lib"/>
+        <resource-root path="artemis-journal-2.37.0.jar"/>
+        <resource-root path="activemq-artemis-native-2.0.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- required for ARTEMIS-298 -->
+        <module name="com.google.guava"/>
+        <module name="internal.javax.json.api.ee8" services="import"/>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="jdk.unsupported"/>
+        <module name="org.apache.activemq.artemis.commons" services="import"/>
+        <module name="org.apache.commons.beanutils"/>
+        <module name="org.jctools"/>
+        <module name="org.slf4j"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-cli-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-cli-2.37.0.jar
new file mode 100644
index 0000000..1ff25fa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-cli-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-dto-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-dto-2.37.0.jar
new file mode 100644
index 0000000..c8f94c5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-dto-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jakarta-server-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jakarta-server-2.37.0.jar
new file mode 100644
index 0000000..bf5f729
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jakarta-server-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jdbc-store-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jdbc-store-2.37.0.jar
new file mode 100644
index 0000000..d71c450
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-jdbc-store-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-server-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-server-2.37.0.jar
new file mode 100644
index 0000000..ffc0f6b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/artemis-server-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/module.xml
new file mode 100644
index 0000000..3694ef1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/main/module.xml
@@ -0,0 +1,86 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!--
+            END USER MODULE USAGE: Subsystem configuration plug points
+
+            End users may depend on this module for access to APIs needed to
+            implement custom plug points exposed by a subsystem's supported
+            management API (in this case the messaging-activemq subsystem).
+            Typically such plug points involve classname and module name
+            configuration attribute pairs where the end user specifies a module and
+            class that they provide to implement an API provided by the subsystem.
+
+            Such APIs and the name of this module are stable API. All other resources
+            exposed by this module are subject to change or removal at any time.
+
+            This module should not be directly depended upon by deployments.
+            You should use the "org.apache.activemq.artemis.client" instead.
+        -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="artemis-server-2.37.0.jar"/>
+        <resource-root path="artemis-cli-2.37.0.jar"/>
+        <resource-root path="artemis-dto-2.37.0.jar"/>
+        <resource-root path="artemis-jdbc-store-2.37.0.jar"/>
+        <resource-root path="artemis-jakarta-server-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+        <module name="java.management.rmi"/>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="com.github.ben-manes.caffeine"/>
+        <module name="com.google.guava"/>
+        <module name="internal.javax.json.api.ee8" services="import"/>
+        <module name="org.apache.commons.beanutils"/>
+        <module name="org.apache.commons.collections"/>
+        <module name="org.apache.commons.lang3"/>
+        <module name="org.apache.activemq.artemis.commons" services="import" export="true"/>
+        <module name="org.apache.activemq.artemis.client" services="import"/>
+        <module name="org.apache.activemq.artemis.service-extensions" services="import"/>
+        <module name="org.apache.activemq.artemis.journal" export="true"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.jctools"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="org.slf4j"/>
+        <!-- WFLY-5213 Optional dependency to use the org.apache.activemq.artemis as a naming's external-context module -->
+        <module name="org.jboss.invocation" optional="true"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <!--this reverse dependency is here so integration classes in the AS code base can be instantiated by Artemis-->
+        <module name="org.wildfly.extension.messaging-activemq" services="import"/>
+        <!-- this optional dependency is required to be able to use this module from a jms-bridge to connect to a remote
+             WildFly server [AS7-6549] -->
+        <module name="org.wildfly.naming-client" optional="true" services="import"/>
+        <!-- supported protocols (in addition to the CORE protocol) -->
+        <module name="org.apache.activemq.artemis.protocol.amqp" services="import" optional="true"/>
+        <module name="org.apache.activemq.artemis.protocol.hornetq" services="import" optional="true"/>
+        <module name="org.apache.activemq.artemis.protocol.stomp" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/artemis-amqp-protocol-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/artemis-amqp-protocol-2.37.0.jar
new file mode 100644
index 0000000..db25030
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/artemis-amqp-protocol-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/module.xml
new file mode 100644
index 0000000..5fd5fb4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/amqp/main/module.xml
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.protocol.amqp" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!--
+            END USER MODULE USAGE: Subsystem configuration plug points
+
+            End users may depend on this module for access to APIs needed to
+            implement custom plug points exposed by a subsystem's supported
+            management API (in this case the messaging-activemq subsystem).
+            Typically such plug points involve classname and module name
+            configuration attribute pairs where the end user specifies a module and
+            class that they provide to implement an API provided by the subsystem.
+
+            Such APIs and the name of this module are stable API. All other resources
+            exposed by this module are subject to change or removal at any time.
+
+            This module should not be directly depended upon by deployments.
+        -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="artemis-amqp-protocol-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="org.apache.qpid.proton"/>
+        <!--<module name="io.netty"/>-->
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <!-- required to load ActiveMQ protocol SPI -->
+        <module name="org.apache.activemq.artemis" optional="true"/>
+        <module name="org.apache.activemq.artemis.client"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/artemis-hornetq-protocol-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/artemis-hornetq-protocol-2.37.0.jar
new file mode 100644
index 0000000..86d57de
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/artemis-hornetq-protocol-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/module.xml
new file mode 100644
index 0000000..ab2de8a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/hornetq/main/module.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.protocol.hornetq" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!--
+            END USER MODULE USAGE: Subsystem configuration plug points
+
+            End users may depend on this module for access to APIs needed to
+            implement custom plug points exposed by a subsystem's supported
+            management API (in this case the messaging-activemq subsystem).
+            Typically such plug points involve classname and module name
+            configuration attribute pairs where the end user specifies a module and
+            class that they provide to implement an API provided by the subsystem.
+
+            Such APIs and the name of this module are stable API. All other resources
+            exposed by this module are subject to change or removal at any time.
+
+            This module should not be directly depended upon by deployments.
+        -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="artemis-hornetq-protocol-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- required to load ActiveMQ protocol SPI -->
+        <module name="org.apache.activemq.artemis" optional="true"/>
+        <module name="org.apache.activemq.artemis.client"/>
+        <module name="org.slf4j"/>
+        <!--<module name="io.netty"/>-->
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/artemis-stomp-protocol-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/artemis-stomp-protocol-2.37.0.jar
new file mode 100644
index 0000000..e85a445
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/artemis-stomp-protocol-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/module.xml
new file mode 100644
index 0000000..471144e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/protocol/stomp/main/module.xml
@@ -0,0 +1,49 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.protocol.stomp" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!--
+            END USER MODULE USAGE: Subsystem configuration plug points
+
+            End users may depend on this module for access to APIs needed to
+            implement custom plug points exposed by a subsystem's supported
+            management API (in this case the messaging-activemq subsystem).
+            Typically such plug points involve classname and module name
+            configuration attribute pairs where the end user specifies a module and
+            class that they provide to implement an API provided by the subsystem.
+
+            Such APIs and the name of this module are stable API. All other resources
+            exposed by this module are subject to change or removal at any time.
+
+            This module should not be directly depended upon by deployments.
+        -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+    
+    <resources>
+        <resource-root path="artemis-stomp-protocol-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- required to load ActiveMQ protocol SPI -->
+        <module name="org.apache.activemq.artemis" optional="true"/>
+        <module name="org.apache.activemq.artemis.client"/>
+        <module name="org.slf4j"/>
+        <!--<module name="io.netty"/>-->
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/ra/main/artemis-jakarta-ra-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/ra/main/artemis-jakarta-ra-2.37.0.jar
new file mode 100644
index 0000000..619945f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/ra/main/artemis-jakarta-ra-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/ra/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/ra/main/module.xml
new file mode 100644
index 0000000..8a5043b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/ra/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.ra" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="artemis-jakarta-ra-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.jts"/>
+        <!-- allow to create a RA that connects to a remote Artemis server -->
+        <module name="org.wildfly.naming-client" optional="true"/>
+        <module name="org.jgroups"/>
+        <module name="org.slf4j"/>
+        <module name="org.apache.activemq.artemis.service-extensions" services="import" export="true"/>
+        <module name="org.apache.activemq.artemis.commons"/>
+        <module name="org.wildfly.extension.messaging-activemq" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/artemis-jakarta-service-extensions-2.37.0.jar b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/artemis-jakarta-service-extensions-2.37.0.jar
new file mode 100644
index 0000000..7f9448e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/artemis-jakarta-service-extensions-2.37.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/module.xml b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/module.xml
new file mode 100644
index 0000000..1e7fe9c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/activemq/artemis/service-extensions/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.activemq.artemis.service-extensions" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="artemis-jakarta-service-extensions-2.37.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.wildfly.extension.messaging-activemq" services="import"/>
+        <module name="org.apache.activemq.artemis.client"/>
+        <module name="org.apache.activemq.artemis.commons"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/beanutils/main/commons-beanutils-1.9.4.jar b/wildfly/modules/system/layers/base/org/apache/commons/beanutils/main/commons-beanutils-1.9.4.jar
new file mode 100644
index 0000000..b73543c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/commons/beanutils/main/commons-beanutils-1.9.4.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/beanutils/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/beanutils/main/module.xml
new file mode 100644
index 0000000..b389842
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/beanutils/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.beanutils" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-beanutils-1.9.4.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.sql"/>
+        <module name="org.apache.commons.logging"/>
+        <module name="org.apache.commons.collections"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/cli/main/commons-cli-1.9.0.jar b/wildfly/modules/system/layers/base/org/apache/commons/cli/main/commons-cli-1.9.0.jar
new file mode 100644
index 0000000..53949ea
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/commons/cli/main/commons-cli-1.9.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/cli/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/cli/main/module.xml
new file mode 100644
index 0000000..1120137
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/cli/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.cli" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-cli-1.9.0.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/codec/main/commons-codec-1.17.1.jar b/wildfly/modules/system/layers/base/org/apache/commons/codec/main/commons-codec-1.17.1.jar
new file mode 100644
index 0000000..5023670
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/commons/codec/main/commons-codec-1.17.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/codec/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/codec/main/module.xml
new file mode 100644
index 0000000..c85d42d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/codec/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.codec" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-codec-1.17.1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/collections/main/commons-collections-3.2.2.jar b/wildfly/modules/system/layers/base/org/apache/commons/collections/main/commons-collections-3.2.2.jar
new file mode 100644
index 0000000..fa5df82
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/commons/collections/main/commons-collections-3.2.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/collections/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/collections/main/module.xml
new file mode 100644
index 0000000..280ed71
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/collections/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.collections" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-collections-3.2.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/io/main/commons-io-2.16.1.jar b/wildfly/modules/system/layers/base/org/apache/commons/io/main/commons-io-2.16.1.jar
new file mode 100644
index 0000000..eb3c2b0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/commons/io/main/commons-io-2.16.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/io/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/io/main/module.xml
new file mode 100644
index 0000000..10456f2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/io/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.io" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-io-2.16.1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/lang3/main/commons-lang3-3.15.0.jar b/wildfly/modules/system/layers/base/org/apache/commons/lang3/main/commons-lang3-3.15.0.jar
new file mode 100644
index 0000000..6695c7f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/commons/lang3/main/commons-lang3-3.15.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/lang3/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/lang3/main/module.xml
new file mode 100644
index 0000000..b2bd3ea
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/lang3/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.lang3" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-lang3-3.15.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/commons/logging/main/module.xml b/wildfly/modules/system/layers/base/org/apache/commons/logging/main/module.xml
new file mode 100644
index 0000000..b98d605
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/commons/logging/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.commons.logging" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <dependencies>
+        <!-- This allows the org.jboss.logging.commons.logging module to be private while keeping this module public -->
+        <module name="org.jboss.logging.commons.logging" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-coloc-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-coloc-4.0.5.jar
new file mode 100644
index 0000000..30af1fd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-coloc-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-soap-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-soap-4.0.5.jar
new file mode 100644
index 0000000..9f83384
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-soap-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-xml-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-xml-4.0.5.jar
new file mode 100644
index 0000000..a166c6b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-bindings-xml-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-aegis-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-aegis-4.0.5.jar
new file mode 100644
index 0000000..4b3b772
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-aegis-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-jaxb-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-jaxb-4.0.5.jar
new file mode 100644
index 0000000..e64e5a7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-databinding-jaxb-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-clustering-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-clustering-4.0.5.jar
new file mode 100644
index 0000000..0f9612f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-clustering-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-throttling-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-throttling-4.0.5.jar
new file mode 100644
index 0000000..61819aa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-features-throttling-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-jaxws-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-jaxws-4.0.5.jar
new file mode 100644
index 0000000..d6f153b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-jaxws-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-simple-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-simple-4.0.5.jar
new file mode 100644
index 0000000..70acac2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-frontend-simple-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-management-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-management-4.0.5.jar
new file mode 100644
index 0000000..220c90e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-management-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-4.0.5.jar
new file mode 100644
index 0000000..80af161
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-saml-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-saml-4.0.5.jar
new file mode 100644
index 0000000..48be3a1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-security-saml-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-4.0.5.jar
new file mode 100644
index 0000000..8d1e0e0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-hc-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-hc-4.0.5.jar
new file mode 100644
index 0000000..1fe3121
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-http-hc-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-jms-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-jms-4.0.5.jar
new file mode 100644
index 0000000..ff3bd18
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-jms-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-local-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-local-4.0.5.jar
new file mode 100644
index 0000000..9967c78
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-transports-local-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-addr-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-addr-4.0.5.jar
new file mode 100644
index 0000000..7f75a73
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-addr-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-mex-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-mex-4.0.5.jar
new file mode 100644
index 0000000..455a924
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-mex-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-policy-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-policy-4.0.5.jar
new file mode 100644
index 0000000..4655e07
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-policy-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-rm-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-rm-4.0.5.jar
new file mode 100644
index 0000000..f0926c5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-ws-rm-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-wsdl-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-wsdl-4.0.5.jar
new file mode 100644
index 0000000..aac5b1e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-rt-wsdl-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-services-ws-discovery-api-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-services-ws-discovery-api-4.0.5.jar
new file mode 100644
index 0000000..266e75f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-services-ws-discovery-api-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-common-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-common-4.0.5.jar
new file mode 100644
index 0000000..8ce34dd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-common-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-java2ws-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-java2ws-4.0.5.jar
new file mode 100644
index 0000000..765569c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-java2ws-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-validator-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-validator-4.0.5.jar
new file mode 100644
index 0000000..7a554e5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-validator-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-core-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-core-4.0.5.jar
new file mode 100644
index 0000000..937bb6d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-core-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-databinding-jaxb-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-databinding-jaxb-4.0.5.jar
new file mode 100644
index 0000000..b6ae979
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-databinding-jaxb-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-frontend-jaxws-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-frontend-jaxws-4.0.5.jar
new file mode 100644
index 0000000..0ba1faf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-tools-wsdlto-frontend-jaxws-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-boolean-4.0.0.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-boolean-4.0.0.jar
new file mode 100644
index 0000000..a914ce4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-boolean-4.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-bug986-4.0.0.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-bug986-4.0.0.jar
new file mode 100644
index 0000000..1c191a9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-bug986-4.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-dv-4.0.0.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-dv-4.0.0.jar
new file mode 100644
index 0000000..dcf71b6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-dv-4.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-runtime-4.0.0.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-runtime-4.0.0.jar
new file mode 100644
index 0000000..cb71319
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-runtime-4.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-ts-4.0.0.jar b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-ts-4.0.0.jar
new file mode 100644
index 0000000..cff4253
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/cxf-xjc-ts-4.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/module.xml b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/module.xml
new file mode 100644
index 0000000..52496ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/cxf/impl/main/module.xml
@@ -0,0 +1,119 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.cxf.impl" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="cxf-rt-bindings-coloc-4.0.5.jar"/>
+        <resource-root path="cxf-rt-bindings-soap-4.0.5.jar"/>
+        <resource-root path="cxf-rt-bindings-xml-4.0.5.jar"/>
+        <resource-root path="cxf-rt-databinding-aegis-4.0.5.jar"/>
+        <resource-root path="cxf-rt-databinding-jaxb-4.0.5.jar"/>
+        <resource-root path="cxf-rt-features-clustering-4.0.5.jar"/>
+        <resource-root path="cxf-rt-features-throttling-4.0.5.jar"/>
+        <resource-root path="cxf-rt-frontend-jaxws-4.0.5.jar"/>
+        <resource-root path="cxf-rt-frontend-simple-4.0.5.jar"/>
+        <resource-root path="cxf-rt-management-4.0.5.jar"/>
+        <resource-root path="cxf-rt-security-4.0.5.jar"/>
+        <resource-root path="cxf-rt-security-saml-4.0.5.jar"/>
+        <resource-root path="cxf-rt-transports-http-4.0.5.jar"/>
+        <resource-root path="cxf-rt-transports-http-hc-4.0.5.jar"/>
+        <resource-root path="cxf-rt-transports-jms-4.0.5.jar"/>
+        <resource-root path="cxf-rt-transports-local-4.0.5.jar"/>
+        <resource-root path="cxf-rt-wsdl-4.0.5.jar"/>
+        <resource-root path="cxf-rt-ws-addr-4.0.5.jar"/>
+        <resource-root path="cxf-rt-ws-mex-4.0.5.jar"/>
+        <resource-root path="cxf-rt-ws-policy-4.0.5.jar"/>
+        <resource-root path="cxf-rt-ws-rm-4.0.5.jar"/>
+        <resource-root path="cxf-tools-common-4.0.5.jar"/>
+        <resource-root path="cxf-tools-java2ws-4.0.5.jar"/>
+        <resource-root path="cxf-tools-validator-4.0.5.jar"/>
+        <resource-root path="cxf-tools-wsdlto-core-4.0.5.jar"/>
+        <resource-root path="cxf-tools-wsdlto-databinding-jaxb-4.0.5.jar"/>
+        <resource-root path="cxf-tools-wsdlto-frontend-jaxws-4.0.5.jar"/>
+        <resource-root path="cxf-services-ws-discovery-api-4.0.5.jar"/>
+        <resource-root path="cxf-xjc-boolean-4.0.0.jar"/>
+        <resource-root path="cxf-xjc-bug986-4.0.0.jar"/>
+        <resource-root path="cxf-xjc-dv-4.0.0.jar"/>
+        <resource-root path="cxf-xjc-ts-4.0.0.jar"/>
+        <resource-root path="cxf-xjc-runtime-4.0.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.sql"/>
+        <module name="java.management"/>
+        <module name="java.management.rmi"/>
+        <module name="java.naming"/>
+        <module name="java.net.http"/>
+        <module name="java.rmi"/>
+        <module name="java.security.jgss"/>
+        <module name="java.xml"/>
+        <module name="asm.asm"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.mail.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="jakarta.xml.bind.api" services="import"/>
+        <module name="org.glassfish.jaxb" services="import"/>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.apache.commons.lang3"/>
+        <module name="org.apache.commons.logging"/>
+        <module name="org.apache.httpcomponents"/>
+        <module name="org.apache.neethi"/>
+        <module name="org.apache.velocity"/>
+        <module name="org.apache.xml-resolver"/>
+        <module name="org.apache.ws.xmlschema"/>
+        <module name="org.apache.ws.security"/>
+        <module name="org.apache.santuario.xmlsec"/>
+        <module name="org.codehaus.woodstox"/>
+        <module name="org.joda.time"/>
+        <module name="org.opensaml"/>
+        <module name="org.apache.cxf" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.apache.cxf.ws-security" export="true" services="export">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.apache.cxf.services-sts" export="true" services="export">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.springframework.spring" optional="true">
+            <imports>
+                <include path="META-INF"/>
+            </imports>
+        </module>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/main/cxf-core-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/main/cxf-core-4.0.5.jar
new file mode 100644
index 0000000..d9c3446
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/main/cxf-core-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/main/cxf-rt-features-logging-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/main/cxf-rt-features-logging-4.0.5.jar
new file mode 100644
index 0000000..5592a99
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/main/cxf-rt-features-logging-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/main/module.xml b/wildfly/modules/system/layers/base/org/apache/cxf/main/module.xml
new file mode 100644
index 0000000..c6d9387
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/cxf/main/module.xml
@@ -0,0 +1,51 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.cxf" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="cxf-core-4.0.5.jar"/>
+        <resource-root path="cxf-rt-features-logging-4.0.5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.compiler"/>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="org.apache.cxf.impl" services="import">
+            <imports>
+                <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+                <include path="META-INF"/>
+            </imports>
+        </module>
+        <module name="org.slf4j"/>
+        <module name="asm.asm"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.validation.api" optional="true"/>
+        <module name="jakarta.mail.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="jakarta.xml.bind.api" services="import"/>
+        <module name="org.glassfish.jaxb" services="import"/>
+        <module name="com.sun.xml.messaging.saaj" export="true" services="export"/>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="com.sun.xml.fastinfoset"/>
+        <module name="org.apache.neethi"/>
+        <module name="org.apache.ws.xmlschema"/>
+        <module name="org.codehaus.woodstox"/>
+        <module name="org.apache.xml-resolver"/>
+        <module name="org.springframework.spring" optional="true">
+            <imports>
+                <include path="META-INF"/>
+            </imports>
+        </module>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/services-sts/main/cxf-services-sts-core-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/services-sts/main/cxf-services-sts-core-4.0.5.jar
new file mode 100644
index 0000000..11fc925
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/services-sts/main/cxf-services-sts-core-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/services-sts/main/module.xml b/wildfly/modules/system/layers/base/org/apache/cxf/services-sts/main/module.xml
new file mode 100644
index 0000000..9a1cbb2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/cxf/services-sts/main/module.xml
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.cxf.services-sts" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="cxf-services-sts-core-4.0.5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.xml"/>
+        <module name="java.xml.crypto"/>
+        <module name="org.apache.cxf.ws-security" services="import">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.apache.cxf.impl" services="import">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="asm.asm"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.mail.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="jakarta.xml.bind.api" services="import"/>
+        <module name="org.glassfish.jaxb" services="import"/>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.apache.commons.lang3"/>
+        <module name="org.apache.httpcomponents"/>
+        <module name="org.apache.neethi"/>
+        <module name="org.apache.velocity"/>
+        <module name="org.apache.xml-resolver"/>
+        <module name="org.apache.ws.xmlschema"/>
+        <module name="org.apache.ws.security"/>
+        <module name="org.apache.santuario.xmlsec"/>
+        <module name="org.codehaus.woodstox"/>
+        <module name="org.joda.time"/>
+        <module name="org.opensaml"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/ws-security/main/cxf-rt-ws-security-4.0.5.jar b/wildfly/modules/system/layers/base/org/apache/cxf/ws-security/main/cxf-rt-ws-security-4.0.5.jar
new file mode 100644
index 0000000..678f56f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/cxf/ws-security/main/cxf-rt-ws-security-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/cxf/ws-security/main/module.xml b/wildfly/modules/system/layers/base/org/apache/cxf/ws-security/main/module.xml
new file mode 100644
index 0000000..9002dda
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/cxf/ws-security/main/module.xml
@@ -0,0 +1,46 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.cxf.ws-security" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="cxf-rt-ws-security-4.0.5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="asm.asm"/>
+        <module name="org.glassfish.jaxb" services="import"/>
+        <module name="java.logging"/>
+        <module name="java.security.jgss"/>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.mail.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="jakarta.xml.bind.api" services="import"/>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.apache.commons.lang3"/>
+        <module name="org.apache.httpcomponents"/>
+        <module name="org.apache.neethi"/>
+        <module name="org.apache.velocity"/>
+        <module name="org.apache.xml-resolver"/>
+        <module name="org.apache.ws.xmlschema"/>
+        <module name="org.apache.ws.security"/>
+        <module name="org.apache.santuario.xmlsec"/>
+        <module name="org.codehaus.woodstox"/>
+        <module name="org.joda.time"/>
+        <module name="org.opensaml"/>
+        <module name="org.apache.cxf.impl" services="import">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+        </module>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/httpclient-4.5.14.jar b/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/httpclient-4.5.14.jar
new file mode 100644
index 0000000..2bb7c07
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/httpclient-4.5.14.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/httpcore-4.4.16.jar b/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/httpcore-4.4.16.jar
new file mode 100644
index 0000000..f0bdebe
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/httpcore-4.4.16.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/module.xml b/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/module.xml
new file mode 100644
index 0000000..0d96dca
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/httpcomponents/core/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.httpcomponents.core" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="httpclient-4.5.14.jar"/>
+        <resource-root path="httpcore-4.4.16.jar"/>
+    </resources>
+
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="org.apache.commons.logging"/>
+        <!-- Following module is available in WildFly full -->
+        <module name="org.apache.commons.codec" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpasyncclient-4.1.5.jar b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpasyncclient-4.1.5.jar
new file mode 100644
index 0000000..5a63e4d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpasyncclient-4.1.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpcore-nio-4.4.16.jar b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpcore-nio-4.4.16.jar
new file mode 100644
index 0000000..d52d892
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpcore-nio-4.4.16.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpmime-4.5.14.jar b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpmime-4.5.14.jar
new file mode 100644
index 0000000..331e95c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/httpmime-4.5.14.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/module.xml b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/module.xml
new file mode 100644
index 0000000..43cf7d2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/httpcomponents/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.httpcomponents" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="httpcore-nio-4.4.16.jar"/>
+        <resource-root path="httpasyncclient-4.1.5.jar"/>
+        <resource-root path="httpmime-4.5.14.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.apache.commons.codec"/>
+        <module name="org.apache.commons.logging"/>
+        <module name="org.apache.httpcomponents.core" export="true" services="export"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-core-0.8.11.jar b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-core-0.8.11.jar
new file mode 100644
index 0000000..0129f2f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-core-0.8.11.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-dom-0.8.11.jar b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-dom-0.8.11.jar
new file mode 100644
index 0000000..0cf07d7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-dom-0.8.11.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-storage-0.8.11.jar b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-storage-0.8.11.jar
new file mode 100644
index 0000000..ba1b0a0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/apache-mime4j-storage-0.8.11.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/module.xml b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/module.xml
new file mode 100644
index 0000000..d863670
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/james/mime4j/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.james.mime4j" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="apache-mime4j-core-0.8.11.jar"/>
+        <resource-root path="apache-mime4j-dom-0.8.11.jar"/>
+        <resource-root path="apache-mime4j-storage-0.8.11.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.apache.commons.io"/>
+        <module name="org.apache.commons.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/kafka/client/main/kafka-clients-3.7.1.jar b/wildfly/modules/system/layers/base/org/apache/kafka/client/main/kafka-clients-3.7.1.jar
new file mode 100644
index 0000000..8b3c8ff
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/kafka/client/main/kafka-clients-3.7.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/kafka/client/main/module.xml b/wildfly/modules/system/layers/base/org/apache/kafka/client/main/module.xml
new file mode 100644
index 0000000..a4d3313
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/kafka/client/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.kafka.client" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="kafka-clients-3.7.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="com.github.luben.zstd-jni"/>
+        <module name="java.management"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="org.lz4.lz4-java"/>
+        <module name="org.slf4j"/>
+        <module name="org.xerial.snappy.snappy-java"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/log4j-api-2.23.1.jar b/wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/log4j-api-2.23.1.jar
new file mode 100644
index 0000000..0e8e3f5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/log4j-api-2.23.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/module.xml b/wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/module.xml
new file mode 100644
index 0000000..43cd75c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/logging/log4j/api/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.logging.log4j.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="log4j-api-2.23.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <!--
+            This is a circular dependency to avoid adding the private implementation to a dependent module. The API uses
+            static variables for the providers and factories. These are located through a custom service loader and we
+            should bind to this implementation only. Users wanting to not use this implementation need to also not use
+            this API.
+        -->
+        <module name="org.jboss.logmanager.log4j2" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-analysis-common-9.11.1.jar b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-analysis-common-9.11.1.jar
new file mode 100644
index 0000000..5a982de
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-analysis-common-9.11.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-core-9.11.1.jar b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-core-9.11.1.jar
new file mode 100644
index 0000000..e558311
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-core-9.11.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-facet-9.11.1.jar b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-facet-9.11.1.jar
new file mode 100644
index 0000000..177db10
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-facet-9.11.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-join-9.11.1.jar b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-join-9.11.1.jar
new file mode 100644
index 0000000..44de58b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-join-9.11.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-queries-9.11.1.jar b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-queries-9.11.1.jar
new file mode 100644
index 0000000..dd129c6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-queries-9.11.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-queryparser-9.11.1.jar b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-queryparser-9.11.1.jar
new file mode 100644
index 0000000..ca6fabc
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/lucene/main/lucene-queryparser-9.11.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/lucene/main/module.xml b/wildfly/modules/system/layers/base/org/apache/lucene/main/module.xml
new file mode 100644
index 0000000..cf3dcc5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/lucene/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.lucene" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!-- Native Lucene access is allowed in WildFly,
+             though it may not be supported by product vendors
+             (because its APIs could change without prior notice). -->
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="lucene-analysis-common-9.11.1.jar"/>
+        <resource-root path="lucene-core-9.11.1.jar"/>
+        <resource-root path="lucene-facet-9.11.1.jar"/>
+        <resource-root path="lucene-queries-9.11.1.jar"/>
+        <resource-root path="lucene-queryparser-9.11.1.jar"/>
+        <resource-root path="lucene-join-9.11.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="jdk.management"/>
+        <module name="jdk.unsupported"/>
+        <module name="com.carrotsearch.hppc"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/neethi/main/module.xml b/wildfly/modules/system/layers/base/org/apache/neethi/main/module.xml
new file mode 100644
index 0000000..01c8344
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/neethi/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.neethi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="neethi-3.2.0.jar"/>
+    </resources>
+
+    <dependencies>
+      <module name="java.xml"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/neethi/main/neethi-3.2.0.jar b/wildfly/modules/system/layers/base/org/apache/neethi/main/neethi-3.2.0.jar
new file mode 100644
index 0000000..840bf4f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/neethi/main/neethi-3.2.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/qpid/proton/main/module.xml b/wildfly/modules/system/layers/base/org/apache/qpid/proton/main/module.xml
new file mode 100644
index 0000000..cefb4ff
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/qpid/proton/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.qpid.proton" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="proton-j-0.34.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/qpid/proton/main/proton-j-0.34.1.jar b/wildfly/modules/system/layers/base/org/apache/qpid/proton/main/proton-j-0.34.1.jar
new file mode 100644
index 0000000..d01d35b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/qpid/proton/main/proton-j-0.34.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/santuario/xmlsec/main/module.xml b/wildfly/modules/system/layers/base/org/apache/santuario/xmlsec/main/module.xml
new file mode 100644
index 0000000..541997c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/santuario/xmlsec/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.santuario.xmlsec" xmlns="urn:jboss:module:1.9">
+
+    <exports>
+        <exclude path="javax/**"/>
+    </exports>
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="xmlsec-3.0.4.jar"/>
+    </resources>
+
+    <dependencies>
+      <module name="org.apache.commons.logging"/>
+      <module name="org.apache.commons.codec"/>
+      <module name="org.slf4j"/>
+      <module name="jakarta.xml.bind.api" services="import"/>
+      <module name="org.glassfish.jaxb" services="import"/>
+      <module name="java.xml"/>
+      <module name="java.xml.crypto"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/santuario/xmlsec/main/xmlsec-3.0.4.jar b/wildfly/modules/system/layers/base/org/apache/santuario/xmlsec/main/xmlsec-3.0.4.jar
new file mode 100644
index 0000000..472a262
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/santuario/xmlsec/main/xmlsec-3.0.4.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/sshd/main/module.xml b/wildfly/modules/system/layers/base/org/apache/sshd/main/module.xml
new file mode 100644
index 0000000..9734dcb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/sshd/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.sshd" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="sshd-common-2.13.2.jar"/>
+        <resource-root path="sshd-core-2.13.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.bouncycastle.bcpg"/>
+        <module name="org.bouncycastle.bcpkix"/>
+        <module name="org.bouncycastle.bcprov"/>
+        <module name="org.slf4j"/>
+        <module name="org.slf4j.impl"/>
+        <module name="java.logging"/>
+        <module name="java.rmi"/>
+        <module name="java.management"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/sshd/main/sshd-common-2.13.2.jar b/wildfly/modules/system/layers/base/org/apache/sshd/main/sshd-common-2.13.2.jar
new file mode 100644
index 0000000..ba1c00b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/sshd/main/sshd-common-2.13.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/sshd/main/sshd-core-2.13.2.jar b/wildfly/modules/system/layers/base/org/apache/sshd/main/sshd-core-2.13.2.jar
new file mode 100644
index 0000000..2f2b6d3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/sshd/main/sshd-core-2.13.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/velocity/main/module.xml b/wildfly/modules/system/layers/base/org/apache/velocity/main/module.xml
new file mode 100644
index 0000000..ae9d0f3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/velocity/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.velocity" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="velocity-engine-core-2.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="org.apache.commons.collections"/>
+        <module name="org.apache.commons.lang3"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/velocity/main/velocity-engine-core-2.3.jar b/wildfly/modules/system/layers/base/org/apache/velocity/main/velocity-engine-core-2.3.jar
new file mode 100644
index 0000000..879a7b4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/velocity/main/velocity-engine-core-2.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/module.xml b/wildfly/modules/system/layers/base/org/apache/ws/security/main/module.xml
new file mode 100644
index 0000000..037b0d1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/ws/security/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.ws.security" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wss4j-bindings-3.0.3.jar"/>
+        <resource-root path="wss4j-policy-3.0.3.jar"/>
+        <resource-root path="wss4j-ws-security-common-3.0.3.jar"/>
+        <resource-root path="wss4j-ws-security-dom-3.0.3.jar"/>
+        <resource-root path="wss4j-ws-security-policy-stax-3.0.3.jar"/>
+        <resource-root path="wss4j-ws-security-stax-3.0.3.jar"/>
+    </resources>
+
+    <dependencies>
+      <module name="jdk.security.jgss"/>
+      <module name="java.security.jgss"/>
+      <module name="jakarta.xml.bind.api" services="import"/>
+      <module name="org.glassfish.jaxb" services="import"/>
+      <module name="com.sun.xml.messaging.saaj" export="true" services="export"/>
+      <module name="org.apache.commons.codec"/>
+      <module name="org.apache.commons.logging"/>
+      <module name="org.apache.neethi"/>
+      <module name="org.jasypt"/>
+      <module name="org.apache.santuario.xmlsec"/>
+      <module name="org.joda.time"/>
+      <module name="org.opensaml"/>
+      <module name="org.slf4j"/>
+      <module name="java.xml"/>
+      <module name="java.xml.crypto"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-bindings-3.0.3.jar b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-bindings-3.0.3.jar
new file mode 100644
index 0000000..23e810d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-bindings-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-policy-3.0.3.jar b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-policy-3.0.3.jar
new file mode 100644
index 0000000..c54e763
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-policy-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-common-3.0.3.jar b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-common-3.0.3.jar
new file mode 100644
index 0000000..3f9030d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-common-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-dom-3.0.3.jar b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-dom-3.0.3.jar
new file mode 100644
index 0000000..9fb0520
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-dom-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-policy-stax-3.0.3.jar b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-policy-stax-3.0.3.jar
new file mode 100644
index 0000000..b6041f8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-policy-stax-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-stax-3.0.3.jar b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-stax-3.0.3.jar
new file mode 100644
index 0000000..ae18136
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/security/main/wss4j-ws-security-stax-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/xmlschema/main/module.xml b/wildfly/modules/system/layers/base/org/apache/ws/xmlschema/main/module.xml
new file mode 100644
index 0000000..44b45d9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/ws/xmlschema/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.ws.xmlschema" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="xmlschema-core-2.3.0.jar"/>
+    </resources>
+
+    <dependencies>
+      <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/ws/xmlschema/main/xmlschema-core-2.3.0.jar b/wildfly/modules/system/layers/base/org/apache/ws/xmlschema/main/xmlschema-core-2.3.0.jar
new file mode 100644
index 0000000..1a76d10
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/ws/xmlschema/main/xmlschema-core-2.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/apache/xml-resolver/main/module.xml b/wildfly/modules/system/layers/base/org/apache/xml-resolver/main/module.xml
new file mode 100644
index 0000000..83f77b9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/apache/xml-resolver/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.apache.xml-resolver" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="xml-resolver-1.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/apache/xml-resolver/main/xml-resolver-1.2.jar b/wildfly/modules/system/layers/base/org/apache/xml-resolver/main/xml-resolver-1.2.jar
new file mode 100644
index 0000000..e535bdc
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/apache/xml-resolver/main/xml-resolver-1.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bitbucket/jose4j/main/jose4j-0.9.6.jar b/wildfly/modules/system/layers/base/org/bitbucket/jose4j/main/jose4j-0.9.6.jar
new file mode 100644
index 0000000..90bd683
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/bitbucket/jose4j/main/jose4j-0.9.6.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bitbucket/jose4j/main/module.xml b/wildfly/modules/system/layers/base/org/bitbucket/jose4j/main/module.xml
new file mode 100644
index 0000000..985402b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bitbucket/jose4j/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bitbucket.jose4j" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jose4j-0.9.6.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcmail/main/bcjmail-jdk18on-1.78.1.jar b/wildfly/modules/system/layers/base/org/bouncycastle/bcmail/main/bcjmail-jdk18on-1.78.1.jar
new file mode 100644
index 0000000..0577148
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/bouncycastle/bcmail/main/bcjmail-jdk18on-1.78.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcmail/main/module.xml b/wildfly/modules/system/layers/base/org/bouncycastle/bcmail/main/module.xml
new file mode 100644
index 0000000..5b8633c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bouncycastle/bcmail/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bouncycastle.bcmail" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <!-- bcjmail is the Jakarta version of bcmail -->
+        <resource-root path="bcjmail-jdk18on-1.78.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- Required for the IBM J9 1.8 -->
+        <module name="java.se"/>
+        <module name="jakarta.mail.api" optional="true"/>
+        <module name="jakarta.activation.api" optional="true"/>
+        <module name="org.bouncycastle.bcpkix"/>
+        <module name="org.bouncycastle.bcprov"/>
+        <module name="org.bouncycastle.bcutil"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcpg/main/bcpg-jdk18on-1.78.1.jar b/wildfly/modules/system/layers/base/org/bouncycastle/bcpg/main/bcpg-jdk18on-1.78.1.jar
new file mode 100644
index 0000000..ed00085
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/bouncycastle/bcpg/main/bcpg-jdk18on-1.78.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcpg/main/module.xml b/wildfly/modules/system/layers/base/org/bouncycastle/bcpg/main/module.xml
new file mode 100644
index 0000000..9df19ab
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bouncycastle/bcpg/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bouncycastle.bcpg" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="bcpg-jdk18on-1.78.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.bouncycastle.bcprov"/>
+        <module name="org.bouncycastle.bcutil"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcpkix/main/bcpkix-jdk18on-1.78.1.jar b/wildfly/modules/system/layers/base/org/bouncycastle/bcpkix/main/bcpkix-jdk18on-1.78.1.jar
new file mode 100644
index 0000000..dca7170
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/bouncycastle/bcpkix/main/bcpkix-jdk18on-1.78.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcpkix/main/module.xml b/wildfly/modules/system/layers/base/org/bouncycastle/bcpkix/main/module.xml
new file mode 100644
index 0000000..b46cc33
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bouncycastle/bcpkix/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bouncycastle.bcpkix" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="bcpkix-jdk18on-1.78.1.jar"/>
+    </resources>
+    
+    <dependencies>
+        <module name="org.bouncycastle.bcprov" services="import"/>
+        <module name="org.bouncycastle.bcutil"/>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcprov/main/bcprov-jdk18on-1.78.1.jar b/wildfly/modules/system/layers/base/org/bouncycastle/bcprov/main/bcprov-jdk18on-1.78.1.jar
new file mode 100644
index 0000000..6726f83
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/bouncycastle/bcprov/main/bcprov-jdk18on-1.78.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcprov/main/module.xml b/wildfly/modules/system/layers/base/org/bouncycastle/bcprov/main/module.xml
new file mode 100644
index 0000000..4e86de0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bouncycastle/bcprov/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bouncycastle.bcprov" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="bcprov-jdk18on-1.78.1.jar"/>
+    </resources>
+    <provides>
+        <service name="java.security.Provider">
+            <with-class name="org.bouncycastle.jce.provider.BouncyCastleProvider"/>
+            <with-class name="org.bouncycastle.pqc.jcajce.provider.BouncyCastlePQCProvider"/>
+        </service>
+    </provides>
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcutil/main/bcutil-jdk18on-1.78.1.jar b/wildfly/modules/system/layers/base/org/bouncycastle/bcutil/main/bcutil-jdk18on-1.78.1.jar
new file mode 100644
index 0000000..348a2ff
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/bouncycastle/bcutil/main/bcutil-jdk18on-1.78.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/bcutil/main/module.xml b/wildfly/modules/system/layers/base/org/bouncycastle/bcutil/main/module.xml
new file mode 100644
index 0000000..1e25815
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bouncycastle/bcutil/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bouncycastle.bcutil" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="bcutil-jdk18on-1.78.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.bouncycastle.bcprov"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/bouncycastle/main/module.xml b/wildfly/modules/system/layers/base/org/bouncycastle/main/module.xml
new file mode 100644
index 0000000..2ef8ff4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/bouncycastle/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.bouncycastle" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="org.bouncycastle.bcpkix" export="true" services="export"/>
+        <module name="org.bouncycastle.bcprov" export="true" services="export"/>
+        <module name="org.bouncycastle.bcmail" export="true" services="export"/>
+    </dependencies>
+
+    <provides>
+        <service name="java.security.Provider">
+            <with-class name="org.bouncycastle.jce.provider.BouncyCastleProvider"/>
+            <with-class name="org.bouncycastle.pqc.jcajce.provider.BouncyCastlePQCProvider"/>
+        </service>
+    </provides>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/module.xml b/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/module.xml
new file mode 100644
index 0000000..9d5ced8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.codehaus.woodstox" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="woodstox-core-6.4.0.jar"/>
+        <resource-root path="stax2-api-4.2.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/stax2-api-4.2.2.jar b/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/stax2-api-4.2.2.jar
new file mode 100644
index 0000000..cc5844f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/stax2-api-4.2.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/woodstox-core-6.4.0.jar b/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/woodstox-core-6.4.0.jar
new file mode 100644
index 0000000..6cdf94c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/codehaus/woodstox/main/woodstox-core-6.4.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/angus/activation/main/angus-activation-2.0.2.jar b/wildfly/modules/system/layers/base/org/eclipse/angus/activation/main/angus-activation-2.0.2.jar
new file mode 100644
index 0000000..93c7aad
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/angus/activation/main/angus-activation-2.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/angus/activation/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/angus/activation/main/module.xml
new file mode 100644
index 0000000..d404ef0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/angus/activation/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.angus.activation" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    
+    <resources>
+        <resource-root path="angus-activation-2.0.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.activation.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/angus/mail/main/angus-mail-2.0.3.jar b/wildfly/modules/system/layers/base/org/eclipse/angus/mail/main/angus-mail-2.0.3.jar
new file mode 100644
index 0000000..3955257
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/angus/mail/main/angus-mail-2.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/angus/mail/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/angus/mail/main/module.xml
new file mode 100644
index 0000000..06c4e25
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/angus/mail/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.angus.mail" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="angus-mail-2.0.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="java.security.sasl"/>
+        <module name="jakarta.mail.api"/>
+        <module name="jakarta.activation.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/jdt/ecj/main/ecj-3.32.0.jar b/wildfly/modules/system/layers/base/org/eclipse/jdt/ecj/main/ecj-3.32.0.jar
new file mode 100644
index 0000000..6866ec7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/jdt/ecj/main/ecj-3.32.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/jdt/ecj/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/jdt/ecj/main/module.xml
new file mode 100644
index 0000000..ed0d9ec
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/jdt/ecj/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.jdt.ecj" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="ecj-3.32.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.compiler"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/jgit/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/jgit/main/module.xml
new file mode 100644
index 0000000..ebfe17f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/jgit/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.jgit" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="org.eclipse.jgit-6.10.0.202406032230-r.jar"/>
+        <resource-root path="org.eclipse.jgit.ssh.apache-6.10.0.202406032230-r.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="org.slf4j"/>
+        <module name="org.slf4j.impl"/>
+        <module name="org.apache.sshd"/>
+        <module name="com.googlecode.javaewah"/>
+        <module name="org.apache.httpcomponents.core"/>
+        <module name="org.bouncycastle.bcpg"/>
+        <module name="org.bouncycastle.bcpkix"/>
+        <module name="org.bouncycastle.bcprov"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit-6.10.0.202406032230-r.jar b/wildfly/modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit-6.10.0.202406032230-r.jar
new file mode 100644
index 0000000..7548418
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit-6.10.0.202406032230-r.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit.ssh.apache-6.10.0.202406032230-r.jar b/wildfly/modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit.ssh.apache-6.10.0.202406032230-r.jar
new file mode 100644
index 0000000..7022398
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/jgit/main/org.eclipse.jgit.ssh.apache-6.10.0.202406032230-r.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/krazo/core/main/krazo-core-3.0.1.jar b/wildfly/modules/system/layers/base/org/eclipse/krazo/core/main/krazo-core-3.0.1.jar
new file mode 100644
index 0000000..a38e59f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/krazo/core/main/krazo-core-3.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/krazo/core/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/krazo/core/main/module.xml
new file mode 100644
index 0000000..23284aa
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/krazo/core/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.krazo.core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.stability" value="preview"/>
+    </properties>
+
+    <resources>
+        <resource-root path="krazo-core-3.0.1.jar"/>
+    </resources>
+    
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.mvc.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <!-- Needed to import service implementations -->
+        <module name="org.eclipse.krazo.resteasy" services="import"/>
+        <!-- Needed to inject the server-provided ValidatorFactory -->
+        <module name="org.hibernate.validator" optional="true"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/krazo/resteasy/main/krazo-resteasy-3.0.1.jar b/wildfly/modules/system/layers/base/org/eclipse/krazo/resteasy/main/krazo-resteasy-3.0.1.jar
new file mode 100644
index 0000000..6e6eea0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/krazo/resteasy/main/krazo-resteasy-3.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/krazo/resteasy/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/krazo/resteasy/main/module.xml
new file mode 100644
index 0000000..e3cfb0a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/krazo/resteasy/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.krazo.resteasy" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.stability" value="preview"/>
+    </properties>
+
+    <resources>
+        <resource-root path="krazo-resteasy-3.0.1.jar"/>
+    </resources>
+    
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.mvc.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.eclipse.krazo.core"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.resteasy.resteasy-validator-provider"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/config/api/main/microprofile-config-api-3.1.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/config/api/main/microprofile-config-api-3.1.jar
new file mode 100644
index 0000000..49953e8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/config/api/main/microprofile-config-api-3.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/config/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/config/api/main/module.xml
new file mode 100644
index 0000000..09b2eb0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/config/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.config.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="microprofile-config-api-3.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/microprofile-fault-tolerance-api-4.0.2.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/microprofile-fault-tolerance-api-4.0.2.jar
new file mode 100644
index 0000000..bb851f2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/microprofile-fault-tolerance-api-4.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/module.xml
new file mode 100644
index 0000000..fd048f2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/fault-tolerance/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.fault-tolerance.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="microprofile-fault-tolerance-api-4.0.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/health/api/main/microprofile-health-api-4.0.1.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/health/api/main/microprofile-health-api-4.0.1.jar
new file mode 100644
index 0000000..f6077c7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/health/api/main/microprofile-health-api-4.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/health/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/health/api/main/module.xml
new file mode 100644
index 0000000..1863df3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/health/api/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.health.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="microprofile-health-api-4.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/microprofile-jwt-auth-api-2.1.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/microprofile-jwt-auth-api-2.1.jar
new file mode 100644
index 0000000..5932587
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/microprofile-jwt-auth-api-2.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/module.xml
new file mode 100644
index 0000000..0b1956f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/jwt/auth/api/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.jwt.auth.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="microprofile-jwt-auth-api-2.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.json.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/microprofile-lra-api-2.0.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/microprofile-lra-api-2.0.jar
new file mode 100644
index 0000000..5f7fdba
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/microprofile-lra-api-2.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/module.xml
new file mode 100644
index 0000000..a1e02ff
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/lra/api/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.lra.api" xmlns="urn:jboss:module:1.9">
+
+  <resources>
+    <resource-root path="microprofile-lra-api-2.0.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="jakarta.ws.rs.api"/>
+    <module name="jakarta.enterprise.api"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/microprofile-openapi-api-3.1.1.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/microprofile-openapi-api-3.1.1.jar
new file mode 100644
index 0000000..c9b38d9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/microprofile-openapi-api-3.1.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/module.xml
new file mode 100644
index 0000000..3cf8b44
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/openapi/api/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.openapi.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="microprofile-openapi-api-3.1.1.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/module.xml
new file mode 100644
index 0000000..c924b1c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.reactive-messaging.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <!-- Here temporarily, it should be in the io.smallrye.reactive.messaging module, or its own -->
+        <resource-root path="smallrye-reactive-messaging-api-4.24.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+        <!-- Needed by the temporary smallrye-reactive-messaging-api -->
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="org.reactivestreams"/>
+        <module name="io.smallrye.reactive.mutiny"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/smallrye-reactive-messaging-api-4.24.0.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/smallrye-reactive-messaging-api-4.24.0.jar
new file mode 100644
index 0000000..57bc48a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-messaging/api/main/smallrye-reactive-messaging-api-4.24.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/microprofile-reactive-streams-operators-api-3.0.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/microprofile-reactive-streams-operators-api-3.0.jar
new file mode 100644
index 0000000..50933a1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/microprofile-reactive-streams-operators-api-3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/module.xml
new file mode 100644
index 0000000..ca92428
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.reactive-streams-operators.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="microprofile-reactive-streams-operators-api-3.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/microprofile-reactive-streams-operators-core-3.0.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/microprofile-reactive-streams-operators-core-3.0.jar
new file mode 100644
index 0000000..4558184
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/microprofile-reactive-streams-operators-core-3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/module.xml
new file mode 100644
index 0000000..a1d50b8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/reactive-streams-operators/core/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.reactive-streams-operators.core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="microprofile-reactive-streams-operators-core-3.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/restclient/main/microprofile-rest-client-api-3.0.1.jar b/wildfly/modules/system/layers/base/org/eclipse/microprofile/restclient/main/microprofile-rest-client-api-3.0.1.jar
new file mode 100644
index 0000000..da48979
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/microprofile/restclient/main/microprofile-rest-client-api-3.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/microprofile/restclient/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/microprofile/restclient/main/module.xml
new file mode 100644
index 0000000..17be79d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/microprofile/restclient/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.microprofile.restclient" xmlns="urn:jboss:module:1.9">
+
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+
+  <resources>
+    <resource-root path="microprofile-rest-client-api-3.0.1.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="java.logging"/>
+    <module name="jakarta.annotation.api"/>
+    <module name="jakarta.enterprise.api"/>
+    <module name="jakarta.xml.bind.api"/>
+    <module name="jakarta.ws.rs.api"/>
+    <module name="org.eclipse.microprofile.config.api"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/parsson/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/parsson/main/module.xml
new file mode 100644
index 0000000..f8f8c2c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/parsson/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.parsson" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="parsson-1.1.7.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.json.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/parsson/main/parsson-1.1.7.jar b/wildfly/modules/system/layers/base/org/eclipse/parsson/main/parsson-1.1.7.jar
new file mode 100644
index 0000000..e343249
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/parsson/main/parsson-1.1.7.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/persistence/main/jipijapa-eclipselink-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/eclipse/persistence/main/jipijapa-eclipselink-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6ce8a6b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/persistence/main/jipijapa-eclipselink-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/eclipse/persistence/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/persistence/main/module.xml
new file mode 100644
index 0000000..6512319
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/persistence/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Represents the EclipseLink module  -->
+<module name="org.eclipse.persistence" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jipijapa-eclipselink-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.json.api" optional="true"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="org.antlr"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/yasson/main/module.xml b/wildfly/modules/system/layers/base/org/eclipse/yasson/main/module.xml
new file mode 100644
index 0000000..5696ba6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/eclipse/yasson/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.eclipse.yasson" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="yasson-3.0.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.json.bind.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/eclipse/yasson/main/yasson-3.0.2.jar b/wildfly/modules/system/layers/base/org/eclipse/yasson/main/yasson-3.0.2.jar
new file mode 100644
index 0000000..e4c0ccb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/eclipse/yasson/main/yasson-3.0.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-8.15.0.jar b/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-8.15.0.jar
new file mode 100644
index 0000000..895e786
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-8.15.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-sniffer-8.15.0.jar b/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-sniffer-8.15.0.jar
new file mode 100644
index 0000000..059b1e7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/elasticsearch-rest-client-sniffer-8.15.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/module.xml b/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/module.xml
new file mode 100644
index 0000000..04337dc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/elasticsearch/client/rest-client/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.elasticsearch.client.rest-client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <!-- Direct access to the Elasticsearch client is allowed in WildFly,
+             though it may not be supported by product vendors
+             (because its APIs could change without prior notice). -->
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <resources>
+        <resource-root path="elasticsearch-rest-client-8.15.0.jar"/>
+        <resource-root path="elasticsearch-rest-client-sniffer-8.15.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.apache.commons.logging"/>
+        <module name="org.apache.commons.codec" export="true"/>
+        <module name="org.apache.httpcomponents" export="true" services="export"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/fusesource/jansi/main/jansi-1.18.jar b/wildfly/modules/system/layers/base/org/fusesource/jansi/main/jansi-1.18.jar
new file mode 100644
index 0000000..a7be6db
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/fusesource/jansi/main/jansi-1.18.jar differ
diff --git a/wildfly/modules/system/layers/base/org/fusesource/jansi/main/module.xml b/wildfly/modules/system/layers/base/org/fusesource/jansi/main/module.xml
new file mode 100644
index 0000000..25eb6a2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/fusesource/jansi/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.fusesource.jansi" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jansi-1.18.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/expressly/main/expressly-5.0.0.jar b/wildfly/modules/system/layers/base/org/glassfish/expressly/main/expressly-5.0.0.jar
new file mode 100644
index 0000000..816ea17
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/expressly/main/expressly-5.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/expressly/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/expressly/main/module.xml
new file mode 100644
index 0000000..18b2dde
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/expressly/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.glassfish.expressly" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="expressly-5.0.0.jar"/>
+    </resources>
+    <dependencies>
+            <module name="java.desktop"/>
+            <module name="jakarta.el.api" services="import" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jakarta/el/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/jakarta/el/main/module.xml
new file mode 100644
index 0000000..4e074d8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/jakarta/el/main/module.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="org.glassfish.jakarta.el" target-name="org.glassfish.expressly" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/jakarta.enterprise.concurrent-3.0.0.jar b/wildfly/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/jakarta.enterprise.concurrent-3.0.0.jar
new file mode 100644
index 0000000..e9a2a3d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/jakarta.enterprise.concurrent-3.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/module.xml
new file mode 100644
index 0000000..d8cabef
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/jakarta/enterprise/concurrent/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.glassfish.jakarta.enterprise.concurrent" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.enterprise.concurrent-3.0.0.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="jakarta.enterprise.concurrent.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.transaction.api" optional="true"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/javax/el/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/javax/el/main/module.xml
new file mode 100644
index 0000000..e7c5c0a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/javax/el/main/module.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="org.glassfish.javax.el" target-name="org.glassfish.jakarta.el" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/javax/enterprise/concurrent/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/javax/enterprise/concurrent/main/module.xml
new file mode 100644
index 0000000..f911c43
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/javax/enterprise/concurrent/main/module.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="org.glassfish.javax.enterprise.concurrent" target-name="org.glassfish.jakarta.enterprise.concurrent" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/codemodel-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/codemodel-4.0.5.jar
new file mode 100644
index 0000000..73c6fb9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/codemodel-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-runtime-4.1.2.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-runtime-4.1.2.jar
new file mode 100644
index 0000000..d1a642b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-runtime-4.1.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-tools-4.1.2.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-tools-4.1.2.jar
new file mode 100644
index 0000000..6967a10
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/istack-commons-tools-4.1.2.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-core-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-core-4.0.5.jar
new file mode 100644
index 0000000..44d089b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-core-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-jxc-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-jxc-4.0.5.jar
new file mode 100644
index 0000000..d26cf1a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-jxc-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-runtime-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-runtime-4.0.5.jar
new file mode 100644
index 0000000..fd5dccf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-runtime-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-xjc-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-xjc-4.0.5.jar
new file mode 100644
index 0000000..5c6b08f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/jaxb-xjc-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/module.xml
new file mode 100644
index 0000000..b592ebe
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.glassfish.jaxb" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="istack-commons-runtime-4.1.2.jar"/>
+        <resource-root path="istack-commons-tools-4.1.2.jar"/>
+        <resource-root path="rngom-4.0.5.jar"/>
+        <resource-root path="relaxng-datatype-4.0.5.jar"/>
+        <resource-root path="codemodel-4.0.5.jar"/>
+        <resource-root path="jaxb-jxc-4.0.5.jar"/>
+        <resource-root path="jaxb-runtime-4.0.5.jar"/>
+        <resource-root path="jaxb-core-4.0.5.jar"/>
+        <resource-root path="jaxb-xjc-4.0.5.jar"/>
+        <resource-root path="xsom-4.0.5.jar"/>
+        <resource-root path="txw2-4.0.5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.compiler"/>
+        <module name="java.desktop"/>
+        <module name="java.xml"/>
+        <module name="jakarta.activation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jdk.compiler" optional="true"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/relaxng-datatype-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/relaxng-datatype-4.0.5.jar
new file mode 100644
index 0000000..87bb714
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/relaxng-datatype-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/rngom-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/rngom-4.0.5.jar
new file mode 100644
index 0000000..d35dc8d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/rngom-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/txw2-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/txw2-4.0.5.jar
new file mode 100644
index 0000000..0c885a1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/txw2-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/xsom-4.0.5.jar b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/xsom-4.0.5.jar
new file mode 100644
index 0000000..b7005ba
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/jaxb/main/xsom-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/soteria/main/jakarta.security.enterprise-3.0.3.jar b/wildfly/modules/system/layers/base/org/glassfish/soteria/main/jakarta.security.enterprise-3.0.3.jar
new file mode 100644
index 0000000..8852bc5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/soteria/main/jakarta.security.enterprise-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/glassfish/soteria/main/module.xml b/wildfly/modules/system/layers/base/org/glassfish/soteria/main/module.xml
new file mode 100644
index 0000000..65e1e2d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/glassfish/soteria/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.glassfish.soteria" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta.security.enterprise-3.0.3.jar"/>
+        <resource-root path="soteria.spi.bean.decorator.weld-3.0.3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="jakarta.security.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="com.nimbusds.nimbus-jose-jwt"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/glassfish/soteria/main/soteria.spi.bean.decorator.weld-3.0.3.jar b/wildfly/modules/system/layers/base/org/glassfish/soteria/main/soteria.spi.bean.decorator.weld-3.0.3.jar
new file mode 100644
index 0000000..4c120f9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/glassfish/soteria/main/soteria.spi.bean.decorator.weld-3.0.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/commons-annotations/main/hibernate-commons-annotations-7.0.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/commons-annotations/main/hibernate-commons-annotations-7.0.1.Final.jar
new file mode 100644
index 0000000..66e4d4e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/commons-annotations/main/hibernate-commons-annotations-7.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/commons-annotations/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/commons-annotations/main/module.xml
new file mode 100644
index 0000000..e2e596f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/commons-annotations/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Represents the Hibernate 4.0.x module-->
+<module name="org.hibernate.commons-annotations" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="hibernate-commons-annotations-7.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+       <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/envers/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/envers/main/module.xml
new file mode 100644
index 0000000..61e47c6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/envers/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Deprecated module alias.
+
+    This module is an alias for the module specified in the 'target-name' attribute,
+    provided for compatibility purposes.
+    Uses of this module should be updated to use the target module.
+    This alias is deprecated and will be removed in a future release.
+-->
+<module-alias name="org.hibernate.envers" target-name="org.hibernate" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/infinispan/main/module.xml
new file mode 100644
index 0000000..0161356
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/infinispan/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="org.hibernate.infinispan" target-name="org.infinispan.hibernate-cache" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/jipijapa-hibernate6-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/jipijapa-hibernate6-34.0.0.Beta1.jar
new file mode 100644
index 0000000..b8a1e02
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/jipijapa-hibernate6-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/module.xml
new file mode 100644
index 0000000..e9f4876
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/jipijapa-hibernate6/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.hibernate.jipijapa-hibernate6" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jipijapa-hibernate6-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+
+        <module name="org.hibernate" services="import"/>
+        <module name="org.hibernate.commons-annotations"/>
+        <module name="org.infinispan.core" services="import"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.hibernate-cache" services="import"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/main/hibernate-core-6.6.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/main/hibernate-core-6.6.1.Final.jar
new file mode 100644
index 0000000..ad35882
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/main/hibernate-core-6.6.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/main/hibernate-envers-6.6.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/main/hibernate-envers-6.6.1.Final.jar
new file mode 100644
index 0000000..1c679ab
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/main/hibernate-envers-6.6.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/main/module.xml
new file mode 100644
index 0000000..3cd7290
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/main/module.xml
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Represents Hibernate ORM 6  -->
+<module name="org.hibernate" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="hibernate-core-6.6.1.Final.jar"/>
+        <resource-root path="hibernate-envers-6.6.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.instrument"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="com.fasterxml.classmate"/>
+        <module name="com.fasterxml.jackson.core.jackson-core" optional="true"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind" optional="true"/>
+        <module name="jakarta.annotation.api"/>
+        <!-- If Jakarta Data is provisioned, depend on it -->
+        <module name="jakarta.data.api" optional="true"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.json.bind.api"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="org.glassfish.jaxb"/>
+        <module name="org.antlr"/>
+        <module name="org.eclipse.yasson" optional="true"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.hibernate.commons-annotations"/>
+        <module name="org.hibernate.jipijapa-hibernate6" services="import"/>
+        <module name="org.infinispan.hibernate-cache" services="import" optional="true"/>
+        <module name="net.bytebuddy"/>
+        <module name="java.xml"/>
+        <!-- If the Oracle JDBC driver classes are accessible, Hibernate ORM will use them to tailor OracleDialect behavior -->
+        <module name="com.oracle.ojdbc" optional="true"/>
+        <!-- If the PostgreSQL JDBC driver classes are accessible, Hibernate ORM will use them to tailor PostgresDialect and CockroachDialect behavior -->
+        <module name="org.postgresql.jdbc" optional="true"/>
+    </dependencies>
+
+    <provides>
+        <service name="org.hibernate.bytecode.spi.BytecodeProvider">
+            <with-class name="org.hibernate.bytecode.internal.bytebuddy.BytecodeProviderImpl"/>
+        </service>
+    </provides>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hibernate-search-backend-elasticsearch-7.2.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hibernate-search-backend-elasticsearch-7.2.1.Final.jar
new file mode 100644
index 0000000..db67652
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/hibernate-search-backend-elasticsearch-7.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/module.xml
new file mode 100644
index 0000000..9e83238
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/backend/elasticsearch/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Hibernate Search Elasticsearch backend: provides the ability to index into a remote Elasticsearch index -->
+<module name="org.hibernate.search.backend.elasticsearch" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="hibernate-search-backend-elasticsearch-7.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.hibernate.search.engine" export="true"/>
+        <!-- This is not exported on purpose: users wanting to use the REST client or Gson directly
+             need to explicitly opt in by adding a dependency to that module -->
+        <module name="org.elasticsearch.client.rest-client"/>
+        <module name="com.google.code.gson"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/backend/lucene/main/hibernate-search-backend-lucene-7.2.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/search/backend/lucene/main/hibernate-search-backend-lucene-7.2.1.Final.jar
new file mode 100644
index 0000000..f85e7c2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/backend/lucene/main/hibernate-search-backend-lucene-7.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/backend/lucene/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/backend/lucene/main/module.xml
new file mode 100644
index 0000000..9253686
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/backend/lucene/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Hibernate Search Lucene backend: provides the ability to index into a Lucene index on the local filesystem -->
+<module name="org.hibernate.search.backend.lucene" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="hibernate-search-backend-lucene-7.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.hibernate.search.engine" export="true"/>
+        <!-- This is not exported on purpose: users wanting to use Lucene directly need to explicitly opt in
+             by adding a dependency to that module -->
+        <module name="org.apache.lucene"/>
+        <module name="com.carrotsearch.hppc"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-engine-7.2.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-engine-7.2.1.Final.jar
new file mode 100644
index 0000000..79c7147
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-engine-7.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-util-common-7.2.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-util-common-7.2.1.Final.jar
new file mode 100644
index 0000000..ad26853
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/hibernate-search-util-common-7.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/module.xml
new file mode 100644
index 0000000..5d72ff2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/engine/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Hibernate Search Engine: the main glue between backend (e.g. Lucene backend)
+     and mapper (e.g. Hibernate ORM mapper) -->
+<module name="org.hibernate.search.engine" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="hibernate-search-util-common-7.2.1.Final.jar"/>
+        <resource-root path="hibernate-search-engine-7.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="io.smallrye.jandex"/>
+
+        <!-- Optional dependencies to import services (used for resolution of bean references in particular). -->
+        <module name="org.hibernate.search.backend.lucene" optional="true" services="import"/>
+        <module name="org.hibernate.search.backend.elasticsearch" optional="true" services="import"/>
+        <module name="org.hibernate.search.mapper.pojo" optional="true" services="import"/>
+        <module name="org.hibernate.search.mapper.orm" optional="true" services="import"/>
+        <module name="org.hibernate.search.mapper.orm.outboxpolling" optional="true" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/jipijapa-hibernatesearch-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/jipijapa-hibernatesearch-34.0.0.Beta1.jar
new file mode 100644
index 0000000..1e397f4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/jipijapa-hibernatesearch-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/module.xml
new file mode 100644
index 0000000..371d2b0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/jipijapa-hibernatesearch/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.hibernate.search.jipijapa-hibernatesearch" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jipijapa-hibernatesearch-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.persistence.api"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="org.hibernate.search.mapper.orm"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/mapper/orm/main/hibernate-search-mapper-orm-7.2.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/orm/main/hibernate-search-mapper-orm-7.2.1.Final.jar
new file mode 100644
index 0000000..ce8e202
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/orm/main/hibernate-search-mapper-orm-7.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/mapper/orm/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/orm/main/module.xml
new file mode 100644
index 0000000..b09064c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/orm/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Hibernate Search ORM Mapper: integrates org.hibernate.search.engine with
+     Hibernate ORM to provide Hibernate Search functionality to
+     JPA Applications -->
+<module name="org.hibernate.search.mapper.orm" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="hibernate-search-mapper-orm-7.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.hibernate.search.engine" export="true"/>
+        <module name="org.hibernate.search.mapper.pojo" export="true"/>
+        <module name="org.hibernate"/>
+        <module name="org.hibernate.search.jipijapa-hibernatesearch" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hibernate-search-mapper-pojo-base-7.2.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hibernate-search-mapper-pojo-base-7.2.1.Final.jar
new file mode 100644
index 0000000..cb10cc3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/hibernate-search-mapper-pojo-base-7.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/module.xml
new file mode 100644
index 0000000..9b1460a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/mapper/pojo/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- Hibernate Search Pojo-base Mapper: base code for mappers such as org.hibernate.search.mapper.orm -->
+<module name="org.hibernate.search.mapper.pojo" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="hibernate-search-mapper-pojo-base-7.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="java.sql" export="true"/> <!-- For java.sql.Date, etc. -->
+        <module name="org.hibernate.search.engine" export="true"/>
+        <module name="org.hibernate.commons-annotations" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/search/orm/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/search/orm/main/module.xml
new file mode 100644
index 0000000..0a770d3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/search/orm/main/module.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!-- The module was renamed in Hibernate Search 6.0. -->
+<module-alias name="org.hibernate.search.orm" target-name="org.hibernate.search.mapper.orm" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/validator/cdi/main/hibernate-validator-cdi-8.0.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/validator/cdi/main/hibernate-validator-cdi-8.0.1.Final.jar
new file mode 100644
index 0000000..2136969
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/validator/cdi/main/hibernate-validator-cdi-8.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/validator/cdi/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/validator/cdi/main/module.xml
new file mode 100644
index 0000000..1942ca2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/validator/cdi/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.hibernate.validator.cdi" xmlns="urn:jboss:module:1.9">
+
+  <resources>
+    <resource-root path="hibernate-validator-cdi-8.0.1.Final.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="jakarta.annotation.api"/>
+    <module name="jakarta.enterprise.api"/>
+    <module name="jakarta.validation.api"/>
+    <module name="org.hibernate.validator"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hibernate/validator/main/hibernate-validator-8.0.1.Final.jar b/wildfly/modules/system/layers/base/org/hibernate/validator/main/hibernate-validator-8.0.1.Final.jar
new file mode 100644
index 0000000..3f966da
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hibernate/validator/main/hibernate-validator-8.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hibernate/validator/main/module.xml b/wildfly/modules/system/layers/base/org/hibernate/validator/main/module.xml
new file mode 100644
index 0000000..9d4073b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hibernate/validator/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.hibernate.validator" xmlns="urn:jboss:module:1.9">
+
+  <resources>
+    <resource-root path="hibernate-validator-8.0.1.Final.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="java.desktop"/>
+    <module name="java.scripting"/>
+    <module name="java.xml"/>
+    <module name="com.fasterxml.classmate"/>
+    <module name="jakarta.persistence.api"/>
+    <module name="jakarta.validation.api"/>
+    <module name="jakarta.xml.bind.api"/>
+    <module name="org.glassfish.expressly"/>
+    <module name="org.jboss.logging"/>
+    <module name="org.jboss.weld.core"/>
+    <module name="org.jboss.weld.spi"/>
+    <module name="org.joda.time"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-commons-2.4.9.Final.jar b/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-commons-2.4.9.Final.jar
new file mode 100644
index 0000000..6679309
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-commons-2.4.9.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-core-client-2.4.9.Final.jar b/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-core-client-2.4.9.Final.jar
new file mode 100644
index 0000000..f229013
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-core-client-2.4.9.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-jakarta-client-2.4.9.Final.jar b/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-jakarta-client-2.4.9.Final.jar
new file mode 100644
index 0000000..df51da4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/hornetq/client/main/hornetq-jakarta-client-2.4.9.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/hornetq/client/main/module.xml b/wildfly/modules/system/layers/base/org/hornetq/client/main/module.xml
new file mode 100644
index 0000000..0a0cce6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/hornetq/client/main/module.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.hornetq.client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="hornetq-commons-2.4.9.Final.jar"/>
+        <resource-root path="hornetq-core-client-2.4.9.Final.jar"/>
+        <resource-root path="hornetq-jakarta-client-2.4.9.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.resource.api"/>
+        <!-- <module name="io.netty"/> -->
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jgroups"/>
+        <module name="org.wildfly.naming-client" services="import"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cachestore/remote/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/cachestore/remote/main/module.xml
new file mode 100644
index 0000000..5cfa7ed
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/cachestore/remote/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="org.infinispan.cachestore.remote" target-name="org.infinispan.persistence.remote" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cdi/common/main/infinispan-cdi-common-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/cdi/common/main/infinispan-cdi-common-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..e7a61d0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/cdi/common/main/infinispan-cdi-common-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cdi/common/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/cdi/common/main/module.xml
new file mode 100644
index 0000000..cb3b1ab
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/cdi/common/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.cdi.common" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-cdi-common-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+
+        <module name="org.infinispan.commons"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cdi/embedded/main/infinispan-cdi-embedded-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/cdi/embedded/main/infinispan-cdi-embedded-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..19d8020
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/cdi/embedded/main/infinispan-cdi-embedded-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cdi/embedded/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/cdi/embedded/main/module.xml
new file mode 100644
index 0000000..fbc2646
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/cdi/embedded/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.cdi.embedded" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-cdi-embedded-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+
+        <module name="org.infinispan.cdi.common"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cdi/remote/main/infinispan-cdi-remote-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/cdi/remote/main/infinispan-cdi-remote-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..ecdc759
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/cdi/remote/main/infinispan-cdi-remote-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/cdi/remote/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/cdi/remote/main/module.xml
new file mode 100644
index 0000000..7a35b66
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/cdi/remote/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.cdi.remote" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-cdi-remote-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+
+        <module name="org.infinispan.cdi.common"/>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/client/hotrod/main/infinispan-client-hotrod-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/client/hotrod/main/infinispan-client-hotrod-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..629603b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/client/hotrod/main/infinispan-client-hotrod-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/client/hotrod/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/client/hotrod/main/module.xml
new file mode 100644
index 0000000..1ea3e32
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/client/hotrod/main/module.xml
@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.client.hotrod" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-client-hotrod-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.security.sasl"/>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="com.github.ben-manes.caffeine"/>
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-resolver-dns"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.reactivex.rxjava3.rxjava"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.protostream.types"/>
+        <module name="org.infinispan.query.client"/>
+        <module name="org.infinispan.query.dsl"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/commons/main/infinispan-commons-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/commons/main/infinispan-commons-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..820ecac
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/commons/main/infinispan-commons-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/commons/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/commons/main/module.xml
new file mode 100644
index 0000000..fd740b4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/commons/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.commons" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-commons-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="com.github.ben-manes.caffeine"/>
+        <module name="io.reactivex.rxjava3.rxjava"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/core/main/infinispan-core-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/core/main/infinispan-core-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..f36193c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/core/main/infinispan-core-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/core/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/core/main/module.xml
new file mode 100644
index 0000000..8b74ed4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/core/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="infinispan-core-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.transaction.xa"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jdk.unsupported"/>
+        <module name="com.github.ben-manes.caffeine"/>
+        <module name="io.reactivex.rxjava3.rxjava"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.infinispan" export="true"/>
+        <module name="org.infinispan.persistence.jdbc" optional="true"/>
+        <module name="org.infinispan.persistence.remote" optional="true"/>
+        <module name="org.infinispan.client.hotrod" optional="true"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.protostream.types"/>
+        <module name="org.jboss.logging"/>
+        <!-- WFLY-14283 Allow Infinispan to resolve exceptions containing JBoss Marshalling TraceInformation -->
+        <module name="org.jboss.marshalling" optional="true"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jgroups" optional="true"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/counter/main/infinispan-clustered-counter-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/counter/main/infinispan-clustered-counter-14.0.31.Final.jar
new file mode 100644
index 0000000..1600156
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/counter/main/infinispan-clustered-counter-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/counter/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/counter/main/module.xml
new file mode 100644
index 0000000..a43bdd2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/counter/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.counter" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-clustered-counter-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-commons-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-commons-14.0.31.Final.jar
new file mode 100644
index 0000000..cad9b4b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-commons-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-spi-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-spi-14.0.31.Final.jar
new file mode 100644
index 0000000..933ca95
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-spi-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-v62-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-v62-14.0.31.Final.jar
new file mode 100644
index 0000000..eb0704c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/infinispan-hibernate-cache-v62-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/module.xml
new file mode 100644
index 0000000..f306698
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/hibernate-cache/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.hibernate-cache" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+
+    <resources>
+        <resource-root path="infinispan-hibernate-cache-spi-14.0.31.Final.jar"/>
+        <resource-root path="infinispan-hibernate-cache-commons-14.0.31.Final.jar"/>
+        <resource-root path="infinispan-hibernate-cache-v62-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.hibernate"/>
+        <module name="org.hibernate.jipijapa-hibernate6" services="import"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core" services="import"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/lock/main/infinispan-clustered-lock-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/lock/main/infinispan-clustered-lock-14.0.31.Final.jar
new file mode 100644
index 0000000..a3f455d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/lock/main/infinispan-clustered-lock-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/lock/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/lock/main/module.xml
new file mode 100644
index 0000000..c68eb6e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/lock/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.lock" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-clustered-lock-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/main/module.xml
new file mode 100644
index 0000000..86a81b0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan" xmlns="urn:jboss:module:1.9">
+
+    <dependencies>
+        <module name="org.infinispan.core">
+            <exports>
+                <include-set>
+                    <path name="org/infinispan"/>
+                    <path name="org/infinispan/manager"/>
+                    <path name="org/infinispan/configuration/cache"/>
+                    <path name="org/infinispan/configuration/global"/>
+                    <path name="org/infinispan/distribution"/>
+                    <path name="org/infinispan/notifications"/>
+                    <path name="org/infinispan/notifications/cachelistener/event"/>
+                    <path name="org/infinispan/notifications/cachemanagerlistener/event"/>
+                    <path name="org/infinispan/remoting/transport"/>
+                    <path name="org/infinispan/util/concurrent"/>
+                    <path name="org/infinispan/util/function"/>
+                </include-set>
+            </exports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/objectfilter/main/infinispan-objectfilter-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/objectfilter/main/infinispan-objectfilter-14.0.31.Final.jar
new file mode 100644
index 0000000..14b8baf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/objectfilter/main/infinispan-objectfilter-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/objectfilter/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/objectfilter/main/module.xml
new file mode 100644
index 0000000..6c990a7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/objectfilter/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.objectfilter" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="infinispan-objectfilter-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.query.dsl"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-common-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-common-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..faf5ff7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-common-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-jakarta-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-jakarta-14.0.31.Final.jar
new file mode 100644
index 0000000..fa21f23
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/infinispan-cachestore-jdbc-jakarta-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/module.xml
new file mode 100644
index 0000000..379d5a6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/persistence/jdbc/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.persistence.jdbc" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="infinispan-cachestore-jdbc-common-jakarta-14.0.31.Final.jar"/>
+        <resource-root path="infinispan-cachestore-jdbc-jakarta-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="io.reactivex.rxjava3.rxjava"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/persistence/remote/main/infinispan-cachestore-remote-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/persistence/remote/main/infinispan-cachestore-remote-14.0.31.Final.jar
new file mode 100644
index 0000000..cc8f2a6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/persistence/remote/main/infinispan-cachestore-remote-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/persistence/remote/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/persistence/remote/main/module.xml
new file mode 100644
index 0000000..3da38b9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/persistence/remote/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.persistence.remote" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="infinispan-cachestore-remote-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+
+        <module name="io.reactivex.rxjava3.rxjava"/>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/protostream/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/protostream/main/module.xml
new file mode 100644
index 0000000..35b5a9e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/protostream/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.protostream" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="protostream-4.6.5.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.compiler"/>
+        <module name="java.logging"/>
+
+        <module name="jdk.unsupported"/>
+        <module name="com.squareup.protoparser"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/protostream/main/protostream-4.6.5.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/protostream/main/protostream-4.6.5.Final.jar
new file mode 100644
index 0000000..6d6f53f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/protostream/main/protostream-4.6.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/protostream/types/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/protostream/types/main/module.xml
new file mode 100644
index 0000000..0522f91
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/protostream/types/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.protostream.types" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="protostream-types-4.6.5.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.protostream"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/protostream/types/main/protostream-types-4.6.5.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/protostream/types/main/protostream-types-4.6.5.Final.jar
new file mode 100644
index 0000000..1eca1de
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/protostream/types/main/protostream-types-4.6.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/client/main/infinispan-remote-query-client-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/query/client/main/infinispan-remote-query-client-14.0.31.Final.jar
new file mode 100644
index 0000000..584c0d6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/query/client/main/infinispan-remote-query-client-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/client/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/query/client/main/module.xml
new file mode 100644
index 0000000..4f8d71a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/query/client/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.query.client" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-remote-query-client-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <!-- Required by org.infinispan.query.remote.client.impl.MarshallerRegistration.getProtoFile -->
+        <module name="org.infinispan.protostream" export="true"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/core/main/infinispan-query-core-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/query/core/main/infinispan-query-core-14.0.31.Final.jar
new file mode 100644
index 0000000..4f4c58e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/query/core/main/infinispan-query-core-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/core/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/query/core/main/module.xml
new file mode 100644
index 0000000..70cbd58
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/query/core/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.query.core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="infinispan-query-core-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.objectfilter"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.query.dsl"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/dsl/main/infinispan-query-dsl-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/query/dsl/main/infinispan-query-dsl-14.0.31.Final.jar
new file mode 100644
index 0000000..40a3323
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/query/dsl/main/infinispan-query-dsl-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/dsl/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/query/dsl/main/module.xml
new file mode 100644
index 0000000..41edb6a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/query/dsl/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.query.dsl" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-query-dsl-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.objectfilter"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/main/infinispan-query-14.0.31.Final.jar b/wildfly/modules/system/layers/base/org/infinispan/query/main/infinispan-query-14.0.31.Final.jar
new file mode 100644
index 0000000..d428d14
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/infinispan/query/main/infinispan-query-14.0.31.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/infinispan/query/main/module.xml b/wildfly/modules/system/layers/base/org/infinispan/query/main/module.xml
new file mode 100644
index 0000000..e9fa133
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/infinispan/query/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.infinispan.query" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="infinispan-query-14.0.31.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.apache.lucene"/>
+        <module name="org.hibernate.commons-annotations"/>
+        <module name="org.hibernate.search.engine"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.lock"/>
+        <module name="org.infinispan.objectfilter"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.query.core"/>
+        <module name="org.infinispan.query.dsl"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jasypt/main/jasypt-1.9.3.jar b/wildfly/modules/system/layers/base/org/jasypt/main/jasypt-1.9.3.jar
new file mode 100644
index 0000000..f4c4606
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jasypt/main/jasypt-1.9.3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jasypt/main/module.xml b/wildfly/modules/system/layers/base/org/jasypt/main/module.xml
new file mode 100644
index 0000000..79bd239
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jasypt/main/module.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jasypt" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="jasypt-1.9.3.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jberet/jberet-core/main/jberet-core-3.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jberet/jberet-core/main/jberet-core-3.0.0.Final.jar
new file mode 100644
index 0000000..06e7a99
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jberet/jberet-core/main/jberet-core-3.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jberet/jberet-core/main/module.xml b/wildfly/modules/system/layers/base/org/jberet/jberet-core/main/module.xml
new file mode 100644
index 0000000..57ec0c8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jberet/jberet-core/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jberet.jberet-core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jberet-core-3.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.scripting"/>
+        <module name="java.sql"/>
+        <module name="jakarta.batch.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="com.h2database.h2" optional="true"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/appclient/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/appclient/main/module.xml
new file mode 100644
index 0000000..8ffb0fc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/appclient/main/module.xml
@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.appclient" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="1.7"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/appclient/logging"/>
+    </exports>
+
+    <main-class name="org.jboss.as.appclient.subsystem.Main"/>
+
+    <resources>
+        <resource-root path="wildfly-appclient-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.server" export="true"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc" export="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.deployment-repository"/>
+        <module name="org.jboss.as.domain-http-interface"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.wildfly.embedded"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.platform-mbean"/>
+        <module name="org.jboss.as.process-controller"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.as.remoting"/>
+        <module name="org.wildfly.extension.elytron" optional="true"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.appclient"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/appclient/main/wildfly-appclient-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/appclient/main/wildfly-appclient-34.0.0.Beta1.jar
new file mode 100644
index 0000000..5c156a9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/appclient/main/wildfly-appclient-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/cli/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/cli/main/module.xml
new file mode 100644
index 0000000..528ed84
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/cli/main/module.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.cli" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <main-class name="org.jboss.as.cli.CommandLineMain"/>
+
+    <resources>
+        <resource-root path="wildfly-cli-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <exports>
+        <exclude path="org/jboss/as/cli/impl/_private"/>
+    </exports>
+
+    <dependencies>
+        <module name="java.datatransfer"/>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.prefs"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+        <module name="org.aesh" export="true"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.as.controller-client"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <!-- optional dep that we will remove when galleon patching is used-->
+        <module name="org.jboss.as.patching.cli" optional="true" services="import"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.embedded"/>
+        <module name="org.wildfly.installation-manager" services="import"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/cli/main/wildfly-cli-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/cli/main/wildfly-cli-26.0.0.Beta5.jar
new file mode 100644
index 0000000..c966d57
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/cli/main/wildfly-cli-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/common/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/clustering/common/main/module.xml
new file mode 100644
index 0000000..c3ef7e6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/clustering/common/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.clustering.common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-common-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/common/main/wildfly-clustering-common-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/clustering/common/main/wildfly-clustering-common-34.0.0.Beta1.jar
new file mode 100644
index 0000000..59413e4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/clustering/common/main/wildfly-clustering-common-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/ejb3/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/clustering/ejb3/infinispan/main/module.xml
new file mode 100644
index 0000000..51f3e74
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/clustering/ejb3/infinispan/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="org.jboss.as.clustering.ejb3.infinispan" target-name="org.wildfly.clustering.ejb.infinispan" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/module.xml
new file mode 100644
index 0000000..eaa667f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/module.xml
@@ -0,0 +1,73 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.clustering.infinispan" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/clustering/ejb/infinispan/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-clustering-infinispan-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+        <module name="jakarta.transaction.api"/>
+
+        <!-- The netty-common module is only require to initialize Netty's InternalLoggingFactory -->
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.reactivex.rxjava3.rxjava"/>
+        <module name="net.jcip"/>
+        <module name="org.infinispan.core" services="import"/>
+        <module name="org.infinispan.persistence.jdbc"/>
+        <module name="org.infinispan.persistence.remote"/>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.infinispan.query.client"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jgroups"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.infinispan.client.api"/>
+        <module name="org.wildfly.clustering.infinispan.client.service"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.clustering.jgroups.spi"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.clustering.singleton.api"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="org.wildfly.transaction.client"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/wildfly-clustering-infinispan-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/wildfly-clustering-infinispan-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..d388d3f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/clustering/infinispan/main/wildfly-clustering-infinispan-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/module.xml
new file mode 100644
index 0000000..6779205
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/module.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.clustering.jgroups" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/clustering/jgroups/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-clustering-jgroups-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jgroups"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.jgroups.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+
+        <!-- Ensure galleon provisions the default channel module -->
+        <module name="org.wildfly.clustering.server"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/wildfly-clustering-jgroups-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/wildfly-clustering-jgroups-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..78b63ee
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/clustering/jgroups/main/wildfly-clustering-jgroups-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/clustering/web/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/clustering/web/infinispan/main/module.xml
new file mode 100644
index 0000000..98865cd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/clustering/web/infinispan/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="org.jboss.as.clustering.web.infinispan" target-name="org.wildfly.clustering.web.infinispan" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/connector/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/connector/main/module.xml
new file mode 100644
index 0000000..2107065
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/connector/main/module.xml
@@ -0,0 +1,69 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.connector" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/connector/_drivermanager"/>
+        <exclude path="org/jboss/as/connector/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-connector-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.hibernate.validator" services="import"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.threads"/>
+        <module name="org.jboss.as.transactions"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.ironjacamar.api"/>
+        <module name="org.jboss.ironjacamar.impl"/>
+        <module name="org.jboss.ironjacamar.jdbcadapters"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.jts.integration"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.jgroups" services="import"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="org.glassfish.expressly"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/connector/main/wildfly-connector-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/connector/main/wildfly-connector-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f32580e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/connector/main/wildfly-connector-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/console/main/hal-console-3.7.5.Final-resources.jar b/wildfly/modules/system/layers/base/org/jboss/as/console/main/hal-console-3.7.5.Final-resources.jar
new file mode 100644
index 0000000..d86ade0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/console/main/hal-console-3.7.5.Final-resources.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/console/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/console/main/module.xml
new file mode 100644
index 0000000..01575f9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/console/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.console" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="hal-console-3.7.5.Final-resources.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- Do not add dependencies to the console as resources in any
+             dependencies could be served up through the HTTP interface. -->
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/controller-client/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/controller-client/main/module.xml
new file mode 100644
index 0000000..b196956
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/controller-client/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.controller-client" xmlns="urn:jboss:module:1.9">
+
+    <exports>
+        <exclude path="org/jboss/as/controller/client/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-controller-client-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.threads"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/controller-client/main/wildfly-controller-client-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/controller-client/main/wildfly-controller-client-26.0.0.Beta5.jar
new file mode 100644
index 0000000..8a6693f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/controller-client/main/wildfly-controller-client-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/controller/main/dir/META-INF/services/org.jboss.as.controller.persistence.ConfigurationExtension b/wildfly/modules/system/layers/base/org/jboss/as/controller/main/dir/META-INF/services/org.jboss.as.controller.persistence.ConfigurationExtension
new file mode 100644
index 0000000..dbefd65
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/controller/main/dir/META-INF/services/org.jboss.as.controller.persistence.ConfigurationExtension
@@ -0,0 +1 @@
+org.jboss.as.controller.persistence.yaml.YamlConfigurationExtension
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/controller/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/controller/main/module.xml
new file mode 100644
index 0000000..dd971c1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/controller/main/module.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.controller" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="dir"/>
+        <resource-root path="wildfly-controller-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+
+        <module name="org.jboss.as.controller-client" export="true"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.dmr" export="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.projectodd.vdx"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.yaml.snakeyaml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/controller/main/wildfly-controller-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/controller/main/wildfly-controller-26.0.0.Beta5.jar
new file mode 100644
index 0000000..bb69871
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/controller/main/wildfly-controller-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/core-security/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/core-security/main/module.xml
new file mode 100644
index 0000000..2f7e9f3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/core-security/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.core-security" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-core-security-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/core-security/main/wildfly-core-security-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/core-security/main/wildfly-core-security-26.0.0.Beta5.jar
new file mode 100644
index 0000000..0bc7c8b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/core-security/main/wildfly-core-security-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/deployment-repository/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/deployment-repository/main/module.xml
new file mode 100644
index 0000000..4e85a46
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/deployment-repository/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.deployment-repository" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/repository/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-deployment-repository-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/deployment-repository/main/wildfly-deployment-repository-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/deployment-repository/main/wildfly-deployment-repository-26.0.0.Beta5.jar
new file mode 100644
index 0000000..ee18413
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/deployment-repository/main/wildfly-deployment-repository-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/deployment-scanner/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/deployment-scanner/main/module.xml
new file mode 100644
index 0000000..154eb1e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/deployment-scanner/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.deployment-scanner" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/server/deployment/scanner/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-deployment-scanner-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <!-- Allow javax->jakarta deployment transformation if this module is provided -->
+        <module name="org.wildfly.deployment.transformation" optional="true" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/deployment-scanner/main/wildfly-deployment-scanner-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/deployment-scanner/main/wildfly-deployment-scanner-26.0.0.Beta5.jar
new file mode 100644
index 0000000..8fb609c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/deployment-scanner/main/wildfly-deployment-scanner-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-add-user/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/domain-add-user/main/module.xml
new file mode 100644
index 0000000..aaa0b36
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/domain-add-user/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.domain-add-user" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <main-class name="org.jboss.as.domain.management.security.adduser.AddUser"/>
+
+    <resources>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.logmanager" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/module.xml
new file mode 100644
index 0000000..3999da5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.domain-http-error-context" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-domain-http-error-context-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- Do not add dependencies to the error context as resources in any
+             dependencies could be served up through the HTTP interface. -->
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/wildfly-domain-http-error-context-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/wildfly-domain-http-error-context-26.0.0.Beta5.jar
new file mode 100644
index 0000000..b0d6fce
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-error-context/main/wildfly-domain-http-error-context-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-http-interface/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-interface/main/module.xml
new file mode 100644
index 0000000..84d8e84
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-interface/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.domain-http-interface" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/domain/http/server/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-domain-http-interface-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="io.undertow.core"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server"/>
+        <module name="org.jboss.msc"/>
+    </dependencies>
+
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-http-interface/main/wildfly-domain-http-interface-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-interface/main/wildfly-domain-http-interface-26.0.0.Beta5.jar
new file mode 100644
index 0000000..14316e2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/domain-http-interface/main/wildfly-domain-http-interface-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-management/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/domain-management/main/module.xml
new file mode 100644
index 0000000..c03ac3f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/domain-management/main/module.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.domain-management" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/domain/management/logging"/>
+        <exclude path="org/jboss/as/domain/management/_private"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-domain-management-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.core-security"/>
+        <!-- for SecurityRealmService ADDITIONAL_PERMISSION -->
+        <module name="org.jboss.ejb-client" optional="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <!-- used with jaas authentication -->
+        <!-- for SecurityRealmService ADDITIONAL_PERMISSION -->
+        <module name="org.wildfly.transaction.client" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/domain-management/main/wildfly-domain-management-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/domain-management/main/wildfly-domain-management-26.0.0.Beta5.jar
new file mode 100644
index 0000000..9765a63
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/domain-management/main/wildfly-domain-management-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/ee/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/ee/main/module.xml
new file mode 100644
index 0000000..d186d41
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/ee/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.ee" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <!-- TODO: used by several other modules, for some reason -->
+    <!-- exports -->
+        <!-- exclude path="org/jboss/as/ee/logging"/ -->
+    <!-- /exports -->
+
+    <resources>
+        <resource-root path="wildfly-ee-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.concurrent.api"/>
+        <module name="jakarta.el.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.transaction.api" optional="true"/>
+        <module name="org.glassfish.jakarta.enterprise.concurrent"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming" optional="true"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.extension.request-controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.invocation"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.ear"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.transaction.client" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/ee/main/wildfly-ee-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/ee/main/wildfly-ee-34.0.0.Beta1.jar
new file mode 100644
index 0000000..848126a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/ee/main/wildfly-ee-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/module.xml
new file mode 100644
index 0000000..3093079
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/module.xml
@@ -0,0 +1,116 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.ejb3" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-ejb3-34.0.0.Beta1.jar"/>
+        <resource-root path="timers"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+
+        <module name="javax.orb.api"/>
+        <module name="javax.rmi.api"/>
+
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.ejb.api"/>
+        <!-- Needed for integration with hibernate validator -->
+        <module name="jakarta.enterprise.api" optional="true"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.persistence.api"/>
+        <!-- For message inflow -->
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.transaction.api"/>
+
+        <!-- Needed for EJB over HTTP support-->
+        <module name="io.undertow.core"/>
+        <module name="io.smallrye.jandex"/>
+
+        <!-- Needed for integration with hibernate validator -->
+        <module name="org.hibernate.validator" optional="true"/>
+        <module name="org.hibernate.validator.cdi" optional="true"/>
+
+        <module name="org.jboss.common-beans" services="import"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <!-- So we can access its integration API -->
+        <module name="org.jboss.as.connector"/>
+        <!-- Need access to org.jboss.as.core.security.ServerSecurityManager -->
+        <module name="org.jboss.as.core-security"/>
+        <!-- Need access to org.jboss.as.domain.management.SecurityRealm for authentication of EJB cluster nodes
+         in EJB client context-->
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.threads"/>
+        <module name="org.jboss.as.transactions"/>
+        <!-- Needed for integration with hibernate validator -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+
+        <module name="org.jboss.classfilewriter"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.ejb-client" services="import"/>
+        <module name="org.jboss.ejb3"/>
+        <module name="org.jboss.iiop-client"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.ironjacamar.api"/>
+        <!-- For recovery manager (com.arjuna.ats.jbossatx.jta.RecoveryManagerService) -->
+        <module name="org.jboss.jts.integration"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river" services="import"/>
+        <!-- the EE metadata -->
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.ejb"/>
+        <module name="org.jboss.metadata.ear"/>
+        <!-- Access to the ModuleClassLoader -->
+        <module name="org.jboss.modules"/>
+        <!-- Access to ServiceName -->
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <!-- For parser DUP -->
+        <module name="org.jboss.vfs"/>
+
+        <module name="org.omg.api"/>
+
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.ejb.spi"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.clustering.singleton.api"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.extension.request-controller"/>
+        <module name="org.wildfly.discovery"/>
+        <module name="org.wildfly.http-client.ejb" services="import"/>
+        <module name="org.wildfly.iiop-openjdk"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="org.wildfly.transaction.client"/>
+
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/timers/timer-sql.properties b/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/timers/timer-sql.properties
new file mode 100644
index 0000000..be3dd91
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/timers/timer-sql.properties
@@ -0,0 +1,22 @@
+#
+# Copyright The WildFly Authors
+# SPDX-License-Identifier: Apache-2.0
+#
+
+create-table=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR NOT NULL, INITIAL_DATE TIMESTAMP, REPEAT_INTERVAL BIGINT, NEXT_DATE TIMESTAMP, PREVIOUS_RUN TIMESTAMP, PRIMARY_KEY VARCHAR, INFO VARCHAR, TIMER_STATE VARCHAR, SCHEDULE_EXPR_SECOND VARCHAR, SCHEDULE_EXPR_MINUTE VARCHAR, SCHEDULE_EXPR_HOUR VARCHAR,SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR, SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR, SCHEDULE_EXPR_MONTH VARCHAR, SCHEDULE_EXPR_YEAR VARCHAR, SCHEDULE_EXPR_START_DATE VARCHAR, SCHEDULE_EXPR_END_DATE VARCHAR, SCHEDULE_EXPR_TIMEZONE VARCHAR, AUTO_TIMER BOOLEAN, TIMEOUT_METHOD_DECLARING_CLASS VARCHAR, TIMEOUT_METHOD_NAME VARCHAR, TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER BOOLEAN, PARTITION_NAME VARCHAR NOT NULL, NODE_NAME VARCHAR)
+create-timer=INSERT INTO JBOSS_EJB_TIMER (ID, TIMED_OBJECT_ID, INITIAL_DATE, REPEAT_INTERVAL, NEXT_DATE, PREVIOUS_RUN, PRIMARY_KEY, INFO, TIMER_STATE, SCHEDULE_EXPR_SECOND, SCHEDULE_EXPR_MINUTE, SCHEDULE_EXPR_HOUR, SCHEDULE_EXPR_DAY_OF_WEEK, SCHEDULE_EXPR_DAY_OF_MONTH, SCHEDULE_EXPR_MONTH, SCHEDULE_EXPR_YEAR, SCHEDULE_EXPR_START_DATE, SCHEDULE_EXPR_END_DATE, SCHEDULE_EXPR_TIMEZONE, AUTO_TIMER, TIMEOUT_METHOD_DECLARING_CLASS, TIMEOUT_METHOD_NAME, TIMEOUT_METHOD_DESCRIPTOR, CALENDAR_TIMER, PARTITION_NAME, NODE_NAME) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+create-auto-timer=INSERT INTO JBOSS_EJB_TIMER (ID, TIMED_OBJECT_ID, NEXT_DATE, INFO, TIMER_STATE, SCHEDULE_EXPR_SECOND, SCHEDULE_EXPR_MINUTE, SCHEDULE_EXPR_HOUR, SCHEDULE_EXPR_DAY_OF_WEEK, SCHEDULE_EXPR_DAY_OF_MONTH, SCHEDULE_EXPR_MONTH, SCHEDULE_EXPR_YEAR, SCHEDULE_EXPR_START_DATE, SCHEDULE_EXPR_END_DATE, SCHEDULE_EXPR_TIMEZONE, AUTO_TIMER, TIMEOUT_METHOD_DECLARING_CLASS, TIMEOUT_METHOD_NAME, TIMEOUT_METHOD_DESCRIPTOR, CALENDAR_TIMER, PARTITION_NAME) SELECT ?, ?, ?, ?, 'CREATED', ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ? WHERE NOT EXISTS (SELECT 1 FROM JBOSS_EJB_TIMER WHERE TIMED_OBJECT_ID=? AND SCHEDULE_EXPR_SECOND=? AND SCHEDULE_EXPR_MINUTE=? AND SCHEDULE_EXPR_HOUR=? AND SCHEDULE_EXPR_DAY_OF_WEEK=? AND SCHEDULE_EXPR_DAY_OF_MONTH=? AND SCHEDULE_EXPR_MONTH=? AND SCHEDULE_EXPR_YEAR=? AND ((SCHEDULE_EXPR_START_DATE IS NULL AND ? IS NULL) OR SCHEDULE_EXPR_START_DATE=?) AND ((SCHEDULE_EXPR_END_DATE IS NULL AND ? IS NULL) OR SCHEDULE_EXPR_END_DATE=?) AND ((SCHEDULE_EXPR_TIMEZONE IS NULL AND ? IS NULL) OR SCHEDULE_EXPR_TIMEZONE=?) AND TIMEOUT_METHOD_DECLARING_CLASS=? AND TIMEOUT_METHOD_NAME=? AND ((TIMEOUT_METHOD_DESCRIPTOR IS NULL AND ? IS NULL) OR TIMEOUT_METHOD_DESCRIPTOR=?) AND PARTITION_NAME=?)
+update-timer=UPDATE JBOSS_EJB_TIMER SET NEXT_DATE=?, PREVIOUS_RUN=?, TIMER_STATE=?, NODE_NAME=? WHERE TIMED_OBJECT_ID=? and ID=? AND PARTITION_NAME=? AND (NODE_NAME IS NULL OR NODE_NAME=?)
+delete-timer=DELETE FROM JBOSS_EJB_TIMER WHERE TIMED_OBJECT_ID=? and ID=? AND PARTITION_NAME=?
+load-all-timers=SELECT ID, TIMED_OBJECT_ID, INITIAL_DATE, REPEAT_INTERVAL, NEXT_DATE, PREVIOUS_RUN, PRIMARY_KEY, INFO, TIMER_STATE, SCHEDULE_EXPR_SECOND, SCHEDULE_EXPR_MINUTE, SCHEDULE_EXPR_HOUR, SCHEDULE_EXPR_DAY_OF_WEEK, SCHEDULE_EXPR_DAY_OF_MONTH, SCHEDULE_EXPR_MONTH, SCHEDULE_EXPR_YEAR, SCHEDULE_EXPR_START_DATE, SCHEDULE_EXPR_END_DATE, SCHEDULE_EXPR_TIMEZONE, AUTO_TIMER, TIMEOUT_METHOD_DECLARING_CLASS, TIMEOUT_METHOD_NAME, TIMEOUT_METHOD_DESCRIPTOR, CALENDAR_TIMER, NODE_NAME FROM JBOSS_EJB_TIMER WHERE TIMED_OBJECT_ID=? AND PARTITION_NAME=?
+load-timer=SELECT ID, TIMED_OBJECT_ID, INITIAL_DATE, REPEAT_INTERVAL, NEXT_DATE, PREVIOUS_RUN, PRIMARY_KEY, INFO, TIMER_STATE, SCHEDULE_EXPR_SECOND, SCHEDULE_EXPR_MINUTE, SCHEDULE_EXPR_HOUR, SCHEDULE_EXPR_DAY_OF_WEEK, SCHEDULE_EXPR_DAY_OF_MONTH, SCHEDULE_EXPR_MONTH, SCHEDULE_EXPR_YEAR, SCHEDULE_EXPR_START_DATE, SCHEDULE_EXPR_END_DATE, SCHEDULE_EXPR_TIMEZONE, AUTO_TIMER, TIMEOUT_METHOD_DECLARING_CLASS, TIMEOUT_METHOD_NAME, TIMEOUT_METHOD_DESCRIPTOR, CALENDAR_TIMER, NODE_NAME FROM JBOSS_EJB_TIMER WHERE TIMED_OBJECT_ID=? and ID=? AND PARTITION_NAME=?
+create-table.hsql=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR NOT NULL, INITIAL_DATE TIMESTAMP, REPEAT_INTERVAL BIGINT, NEXT_DATE TIMESTAMP, PREVIOUS_RUN TIMESTAMP, PRIMARY_KEY VARCHAR, INFO VARCHAR, TIMER_STATE VARCHAR, SCHEDULE_EXPR_SECOND VARCHAR, SCHEDULE_EXPR_MINUTE VARCHAR, SCHEDULE_EXPR_HOUR VARCHAR,SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR, SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR, SCHEDULE_EXPR_MONTH VARCHAR, SCHEDULE_EXPR_YEAR VARCHAR, SCHEDULE_EXPR_START_DATE VARCHAR, SCHEDULE_EXPR_END_DATE VARCHAR, SCHEDULE_EXPR_TIMEZONE VARCHAR, AUTO_TIMER BOOLEAN, TIMEOUT_METHOD_DECLARING_CLASS VARCHAR, TIMEOUT_METHOD_NAME VARCHAR, TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER BOOLEAN, PARTITION_NAME VARCHAR NOT NULL, NODE_NAME VARCHAR);CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.postgresql=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR NOT NULL, INITIAL_DATE TIMESTAMP, REPEAT_INTERVAL BIGINT, NEXT_DATE TIMESTAMP, PREVIOUS_RUN TIMESTAMP, PRIMARY_KEY VARCHAR, INFO TEXT, TIMER_STATE VARCHAR, SCHEDULE_EXPR_SECOND VARCHAR, SCHEDULE_EXPR_MINUTE VARCHAR, SCHEDULE_EXPR_HOUR VARCHAR,SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR, SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR, SCHEDULE_EXPR_MONTH VARCHAR, SCHEDULE_EXPR_YEAR VARCHAR, SCHEDULE_EXPR_START_DATE VARCHAR, SCHEDULE_EXPR_END_DATE VARCHAR, SCHEDULE_EXPR_TIMEZONE VARCHAR, AUTO_TIMER BOOLEAN, TIMEOUT_METHOD_DECLARING_CLASS VARCHAR, TIMEOUT_METHOD_NAME VARCHAR, TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER BOOLEAN, PARTITION_NAME VARCHAR NOT NULL, NODE_NAME VARCHAR);CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.mysql=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR(255) PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR(255) NOT NULL, INITIAL_DATE DATETIME, REPEAT_INTERVAL BIGINT, NEXT_DATE DATETIME, PREVIOUS_RUN DATETIME, PRIMARY_KEY VARCHAR(255), INFO TEXT, TIMER_STATE VARCHAR(32), SCHEDULE_EXPR_SECOND VARCHAR(100), SCHEDULE_EXPR_MINUTE VARCHAR(100), SCHEDULE_EXPR_HOUR VARCHAR(100),SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR(100), SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR(100), SCHEDULE_EXPR_MONTH VARCHAR(100), SCHEDULE_EXPR_YEAR VARCHAR(100), SCHEDULE_EXPR_START_DATE VARCHAR(100), SCHEDULE_EXPR_END_DATE VARCHAR(100), SCHEDULE_EXPR_TIMEZONE VARCHAR(100), AUTO_TIMER BOOLEAN, TIMEOUT_METHOD_NAME VARCHAR(100), TIMEOUT_METHOD_DECLARING_CLASS VARCHAR(255), TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER BOOLEAN, PARTITION_NAME VARCHAR(100) NOT NULL, NODE_NAME VARCHAR(255));CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.mariadb=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR(255) PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR(255) NOT NULL, INITIAL_DATE DATETIME, REPEAT_INTERVAL BIGINT, NEXT_DATE DATETIME, PREVIOUS_RUN DATETIME, PRIMARY_KEY VARCHAR(255), INFO TEXT, TIMER_STATE VARCHAR(32), SCHEDULE_EXPR_SECOND VARCHAR(100), SCHEDULE_EXPR_MINUTE VARCHAR(100), SCHEDULE_EXPR_HOUR VARCHAR(100),SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR(100), SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR(100), SCHEDULE_EXPR_MONTH VARCHAR(100), SCHEDULE_EXPR_YEAR VARCHAR(100), SCHEDULE_EXPR_START_DATE VARCHAR(100), SCHEDULE_EXPR_END_DATE VARCHAR(100), SCHEDULE_EXPR_TIMEZONE VARCHAR(100), AUTO_TIMER BOOLEAN, TIMEOUT_METHOD_NAME VARCHAR(100), TIMEOUT_METHOD_DECLARING_CLASS VARCHAR(255), TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER BOOLEAN, PARTITION_NAME VARCHAR(100) NOT NULL, NODE_NAME VARCHAR(255));CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.oracle=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR2(255) PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR2(255) NOT NULL, INITIAL_DATE TIMESTAMP, REPEAT_INTERVAL NUMBER(20), NEXT_DATE TIMESTAMP, PREVIOUS_RUN TIMESTAMP, PRIMARY_KEY VARCHAR2(255), INFO CLOB, TIMER_STATE VARCHAR2(32), SCHEDULE_EXPR_SECOND VARCHAR2(100), SCHEDULE_EXPR_MINUTE VARCHAR2(100), SCHEDULE_EXPR_HOUR VARCHAR2(100),SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR2(100), SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR2(100), SCHEDULE_EXPR_MONTH VARCHAR2(100), SCHEDULE_EXPR_YEAR VARCHAR2(100), SCHEDULE_EXPR_START_DATE VARCHAR2(100), SCHEDULE_EXPR_END_DATE VARCHAR(100), SCHEDULE_EXPR_TIMEZONE VARCHAR2(100), AUTO_TIMER NUMBER(1), TIMEOUT_METHOD_NAME VARCHAR2(100), TIMEOUT_METHOD_DECLARING_CLASS VARCHAR2(255), TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER NUMBER(1), PARTITION_NAME VARCHAR2(100), NODE_NAME VARCHAR2(255));CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.db2=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR(255) PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR(255) NOT NULL, INITIAL_DATE TIMESTAMP, REPEAT_INTERVAL BIGINT, NEXT_DATE TIMESTAMP, PREVIOUS_RUN TIMESTAMP, PRIMARY_KEY VARCHAR(255), INFO CLOB, TIMER_STATE VARCHAR(32), SCHEDULE_EXPR_SECOND VARCHAR(100), SCHEDULE_EXPR_MINUTE VARCHAR(100), SCHEDULE_EXPR_HOUR VARCHAR(100),SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR(100), SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR(100), SCHEDULE_EXPR_MONTH VARCHAR(100), SCHEDULE_EXPR_YEAR VARCHAR(100), SCHEDULE_EXPR_START_DATE VARCHAR(100), SCHEDULE_EXPR_END_DATE VARCHAR(100), SCHEDULE_EXPR_TIMEZONE VARCHAR(100), AUTO_TIMER INT, TIMEOUT_METHOD_NAME VARCHAR(100), TIMEOUT_METHOD_DECLARING_CLASS VARCHAR(255), TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER INT, PARTITION_NAME VARCHAR(100) NOT NULL, NODE_NAME VARCHAR(255));CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.mssql=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR(255) PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR(255) NOT NULL, INITIAL_DATE DATETIME2, REPEAT_INTERVAL BIGINT, NEXT_DATE DATETIME2, PREVIOUS_RUN DATETIME2, PRIMARY_KEY VARCHAR(255), INFO VARCHAR(8000), TIMER_STATE VARCHAR(255), SCHEDULE_EXPR_SECOND VARCHAR(255), SCHEDULE_EXPR_MINUTE VARCHAR(255), SCHEDULE_EXPR_HOUR VARCHAR(255),SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR(255), SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR(255), SCHEDULE_EXPR_MONTH VARCHAR(255), SCHEDULE_EXPR_YEAR VARCHAR(255), SCHEDULE_EXPR_START_DATE VARCHAR(255), SCHEDULE_EXPR_END_DATE VARCHAR(255), SCHEDULE_EXPR_TIMEZONE VARCHAR(255), AUTO_TIMER SMALLINT, TIMEOUT_METHOD_DECLARING_CLASS VARCHAR(255), TIMEOUT_METHOD_NAME VARCHAR(255), TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER SMALLINT, PARTITION_NAME VARCHAR(100) NOT NULL, NODE_NAME VARCHAR(255));CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+create-table.sybase=CREATE TABLE JBOSS_EJB_TIMER (ID VARCHAR(255) PRIMARY KEY NOT NULL, TIMED_OBJECT_ID VARCHAR(255) NOT NULL, INITIAL_DATE DATETIME, REPEAT_INTERVAL BIGINT, NEXT_DATE DATETIME, PREVIOUS_RUN DATETIME, PRIMARY_KEY VARCHAR(255), INFO VARCHAR(16384), TIMER_STATE VARCHAR(255), SCHEDULE_EXPR_SECOND VARCHAR(255), SCHEDULE_EXPR_MINUTE VARCHAR(255), SCHEDULE_EXPR_HOUR VARCHAR(255),SCHEDULE_EXPR_DAY_OF_WEEK VARCHAR(255), SCHEDULE_EXPR_DAY_OF_MONTH VARCHAR(255), SCHEDULE_EXPR_MONTH VARCHAR(255), SCHEDULE_EXPR_YEAR VARCHAR(255), SCHEDULE_EXPR_START_DATE VARCHAR(255), SCHEDULE_EXPR_END_DATE VARCHAR(255), SCHEDULE_EXPR_TIMEZONE VARCHAR(255), AUTO_TIMER SMALLINT, TIMEOUT_METHOD_DECLARING_CLASS VARCHAR(255), TIMEOUT_METHOD_NAME VARCHAR(255), TIMEOUT_METHOD_DESCRIPTOR CHAR(1), CALENDAR_TIMER SMALLINT, PARTITION_NAME VARCHAR(100) NOT NULL, NODE_NAME VARCHAR(255));CREATE INDEX JBOSS_EJB_TIMER_IDENX ON JBOSS_EJB_TIMER (PARTITION_NAME, TIMED_OBJECT_ID)
+update-running=UPDATE JBOSS_EJB_TIMER SET TIMER_STATE=?, NODE_NAME=? WHERE ID=? AND TIMER_STATE<>? AND TIMER_STATE<>? AND NEXT_DATE<=?
+get-timer-info=SELECT INFO FROM JBOSS_EJB_TIMER WHERE TIMED_OBJECT_ID=? and ID=?
\ No newline at end of file
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/wildfly-ejb3-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/wildfly-ejb3-34.0.0.Beta1.jar
new file mode 100644
index 0000000..1f0572a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/ejb3/main/wildfly-ejb3-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/host-controller/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/host-controller/main/module.xml
new file mode 100644
index 0000000..d3ed952
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/host-controller/main/module.xml
@@ -0,0 +1,61 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.host-controller" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <main-class name="org.jboss.as.host.controller.Main"/>
+
+    <resources>
+        <resource-root path="wildfly-host-controller-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.deployment-repository"/>
+        <module name="org.jboss.as.domain-http-interface"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.jmx" services="import"/>
+        <module name="org.jboss.as.management-client-content"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.patching" optional="true" services="import"/>
+        <module name="org.jboss.as.platform-mbean"/>
+        <module name="org.jboss.as.process-controller"/>
+        <module name="org.jboss.as.protocol">
+            <imports>
+                <include path="**"/>
+            </imports> 
+        </module>
+        <module name="org.jboss.as.remoting"/>
+        <module name="org.jboss.as.server" services="import"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs" services="import"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.installation-manager" services="import"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/host-controller/main/wildfly-host-controller-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/host-controller/main/wildfly-host-controller-26.0.0.Beta5.jar
new file mode 100644
index 0000000..eb3d025
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/host-controller/main/wildfly-host-controller-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jaxrs/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jaxrs/main/module.xml
new file mode 100644
index 0000000..50cb620
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jaxrs/main/module.xml
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jaxrs" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/jaxrs/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-jaxrs-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <!-- Only used if capability org.wildfly.weld is available -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="org.wildfly.extension.undertow"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.jboss.resteasy.resteasy-atom-provider" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-cdi" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-crypto" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-client"/>
+        <module name="org.jboss.resteasy.resteasy-client-api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.resteasy.resteasy-jaxb-provider" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-jackson2-provider" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-jsapi" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-multipart-provider" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-spring" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-validator-provider" optional="true"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jaxrs/main/wildfly-jaxrs-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jaxrs/main/wildfly-jaxrs-34.0.0.Beta1.jar
new file mode 100644
index 0000000..c3f4055
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jaxrs/main/wildfly-jaxrs-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/module.xml
new file mode 100644
index 0000000..5070501
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/module.xml
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jdr" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="1.7"/>
+    </properties>
+
+    <main-class name="org.jboss.as.jdr.CommandLineMain"/>
+
+    <exports>
+        <exclude path="org/jboss/as/jdr/logger"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-jdr-34.0.0.Beta1.jar"/>
+        <resource-root path="resources"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="org.apache.commons.cli"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.cli"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/resources/plugins.properties b/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/resources/plugins.properties
new file mode 100644
index 0000000..0bc475a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/resources/plugins.properties
@@ -0,0 +1,6 @@
+#
+# Copyright The WildFly Authors
+# SPDX-License-Identifier: Apache-2.0
+#
+
+org.jboss.as.jdr.plugins.AS7Plugin=true
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/wildfly-jdr-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/wildfly-jdr-34.0.0.Beta1.jar
new file mode 100644
index 0000000..ec6e9c9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jdr/main/wildfly-jdr-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jmx/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jmx/main/module.xml
new file mode 100644
index 0000000..c2ef0fa
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jmx/main/module.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jmx" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/jmx/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-jmx-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.remoting"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.remoting-jmx" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jmx/main/wildfly-jmx-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/jmx/main/wildfly-jmx-26.0.0.Beta5.jar
new file mode 100644
index 0000000..caf847d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jmx/main/wildfly-jmx-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jpa/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jpa/main/module.xml
new file mode 100644
index 0000000..92ec80d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jpa/main/module.xml
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jpa" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/jpa/messages"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-jpa-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.instrument"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+
+        <module name="org.hibernate.validator" services="import"/>
+        <module name="org.infinispan.core"/>
+        <!-- Only used if capability org.wildfly.bean-validation is available -->
+        <module name="org.wildfly.extension.bean-validation" optional="true"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <!-- optional because guarded by ejb3 capability -->
+        <module name="org.jboss.as.ejb3" optional="true"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.transactions"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.invocation"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.ear"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.weld.core"/>
+        <!-- Only used if capability org.wildfly.weld is available -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jpa/main/wildfly-jpa-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jpa/main/wildfly-jpa-34.0.0.Beta1.jar
new file mode 100644
index 0000000..bb4900b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jpa/main/wildfly-jpa-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jpa/spi/main/jipijapa-spi-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jpa/spi/main/jipijapa-spi-34.0.0.Beta1.jar
new file mode 100644
index 0000000..2134a68
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jpa/spi/main/jipijapa-spi-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jpa/spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jpa/spi/main/module.xml
new file mode 100644
index 0000000..70cea57
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jpa/spi/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jpa.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jipijapa-spi-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.sql"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/module.xml
new file mode 100644
index 0000000..c3ba0b0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jsf-injection" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-jsf-injection-34.0.0.Beta1.jar"/>
+        <resource-root path="weld-jsf-5.1.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.desktop"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.jsf"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.api"/>
+
+        <!-- added this for MyFacesAnnotationProvider -->
+        <module name="jakarta.faces.api"/>
+        <module name="jakarta.faces.impl"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/weld-jsf-5.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/weld-jsf-5.1.3.Final.jar
new file mode 100644
index 0000000..7d37ebb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/weld-jsf-5.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/wildfly-jsf-injection-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/wildfly-jsf-injection-34.0.0.Beta1.jar
new file mode 100644
index 0000000..e109c9a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jsf-injection/main/wildfly-jsf-injection-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsf/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jsf/main/module.xml
new file mode 100644
index 0000000..64b121f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jsf/main/module.xml
@@ -0,0 +1,42 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jsf" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-jsf-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.faces.api"/>
+        <module name="jakarta.faces.impl"/>
+        <!-- Only used if capability org.wildfly.bean-validation is available -->
+        <module name="org.wildfly.extension.bean-validation" optional="true"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <!-- Only used if capability org.wildfly.weld is available -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.weld.spi"/>
+
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsf/main/wildfly-jsf-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jsf/main/wildfly-jsf-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6a7fd2a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jsf/main/wildfly-jsf-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsr77/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/jsr77/main/module.xml
new file mode 100644
index 0000000..8160b3e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/jsr77/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.jsr77" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-jsr77-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.staxmapper"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/jsr77/main/wildfly-jsr77-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/jsr77/main/wildfly-jsr77-34.0.0.Beta1.jar
new file mode 100644
index 0000000..e77cae5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/jsr77/main/wildfly-jsr77-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/logging/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/logging/main/module.xml
new file mode 100644
index 0000000..c382047
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/logging/main/module.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.logging" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/logging/capabilities"/>
+        <exclude path="org/jboss/as/logging/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-logging-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-26.0.0.Beta5.jar
new file mode 100644
index 0000000..0608862
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/logging/main/wildfly-logging-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/mail/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/mail/main/module.xml
new file mode 100644
index 0000000..4049eb0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/mail/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.mail" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-mail-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="jakarta.mail.api"/>
+        <module name="org.eclipse.angus.mail">
+            <imports>
+                <include path="META-INF"/>
+            </imports>
+        </module>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/mail/main/wildfly-mail-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/mail/main/wildfly-mail-34.0.0.Beta1.jar
new file mode 100644
index 0000000..489608a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/mail/main/wildfly-mail-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/management-client-content/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/management-client-content/main/module.xml
new file mode 100644
index 0000000..7375c58
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/management-client-content/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.management-client-content" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-management-client-content-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.deployment-repository"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.dmr"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/management-client-content/main/wildfly-management-client-content-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/management-client-content/main/wildfly-management-client-content-26.0.0.Beta5.jar
new file mode 100644
index 0000000..193a8fd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/management-client-content/main/wildfly-management-client-content-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/modcluster/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/modcluster/main/module.xml
new file mode 100644
index 0000000..b8a970a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/modcluster/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="org.jboss.as.modcluster" target-name="org.wildfly.extension.mod_cluster" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/naming/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/naming/main/module.xml
new file mode 100644
index 0000000..7816c23
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/naming/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.naming" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-naming-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- It is used only if org.wildfly.undertow.http-invoker capability is available -->
+        <module name="io.undertow.core" optional="true"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="org.wildfly.http-client.naming"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.naming-client"/>
+        <!-- Use only by RemoteNamingResourceDefinition resource -->
+        <module name="org.jboss.remoting" optional="true"/>
+        <module name="org.jboss.threads"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/naming/main/wildfly-naming-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/naming/main/wildfly-naming-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f51c5a8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/naming/main/wildfly-naming-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/network/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/network/main/module.xml
new file mode 100644
index 0000000..b118ab2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/network/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.network" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-network-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/network/main/wildfly-network-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/network/main/wildfly-network-26.0.0.Beta5.jar
new file mode 100644
index 0000000..650b97e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/network/main/wildfly-network-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/patching/cli/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/patching/cli/main/module.xml
new file mode 100644
index 0000000..2516e1a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/patching/cli/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.patching.cli" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.patching" export="true" services="export"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/patching/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/patching/main/module.xml
new file mode 100644
index 0000000..1c1eded
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/patching/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.patching" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-patching-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.cli" optional="true"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.controller-client"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/patching/main/wildfly-patching-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/patching/main/wildfly-patching-26.0.0.Beta5.jar
new file mode 100644
index 0000000..ef4d632
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/patching/main/wildfly-patching-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/platform-mbean/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/platform-mbean/main/module.xml
new file mode 100644
index 0000000..3060a8c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/platform-mbean/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.platform-mbean" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/platform/mbean/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-platform-mbean-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.controller-client"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/platform-mbean/main/wildfly-platform-mbean-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/platform-mbean/main/wildfly-platform-mbean-26.0.0.Beta5.jar
new file mode 100644
index 0000000..7183740
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/platform-mbean/main/wildfly-platform-mbean-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/pojo/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/pojo/main/module.xml
new file mode 100644
index 0000000..063c5ac
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/pojo/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.pojo" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/pojo/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-pojo-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="org.jboss.common-beans"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/pojo/main/wildfly-pojo-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/pojo/main/wildfly-pojo-34.0.0.Beta1.jar
new file mode 100644
index 0000000..3b6adbb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/pojo/main/wildfly-pojo-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/process-controller/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/process-controller/main/module.xml
new file mode 100644
index 0000000..39a9513
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/process-controller/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.process-controller" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/process/logging"/>
+    </exports>
+
+    <main-class name="org.jboss.as.process.Main"/>
+
+    <resources>
+        <resource-root path="wildfly-process-controller-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.as.version" export="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.threads"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/process-controller/main/wildfly-process-controller-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/process-controller/main/wildfly-process-controller-26.0.0.Beta5.jar
new file mode 100644
index 0000000..ebc1c9b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/process-controller/main/wildfly-process-controller-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/product/main/banner.txt b/wildfly/modules/system/layers/base/org/jboss/as/product/main/banner.txt
new file mode 100644
index 0000000..e16dbd3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/product/main/banner.txt
@@ -0,0 +1,6 @@
+ _       ___ __    __________     
+| |     / (_) /___/ / ____/ /_  __
+| | /| / / / / __  / /_  / / / / /
+| |/ |/ / / / /_/ / __/ / / /_/ / 
+|__/|__/_/_/\__,_/_/   /_/\__, /  
+                         /____/   
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/product/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/product/main/module.xml
new file mode 100644
index 0000000..1fb8e13
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/product/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.product" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="."/>
+        <resource-root path="wildfly-feature-pack-product-conf-34.0.0.Beta1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/product/main/wildfly-feature-pack-product-conf-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/product/main/wildfly-feature-pack-product-conf-34.0.0.Beta1.jar
new file mode 100644
index 0000000..8cdc69c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/product/main/wildfly-feature-pack-product-conf-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/protocol/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/protocol/main/module.xml
new file mode 100644
index 0000000..cbc32c7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/protocol/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.protocol" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/protocol/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-protocol-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/protocol/main/wildfly-protocol-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/protocol/main/wildfly-protocol-26.0.0.Beta5.jar
new file mode 100644
index 0000000..bbbfc72
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/protocol/main/wildfly-protocol-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/remoting/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/remoting/main/module.xml
new file mode 100644
index 0000000..ed4f3e0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/remoting/main/module.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.remoting" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/remoting/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-remoting-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+
+        <module name="io.undertow.core" optional="true"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.protocol"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.io.spi"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/remoting/main/wildfly-remoting-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/remoting/main/wildfly-remoting-26.0.0.Beta5.jar
new file mode 100644
index 0000000..04cd32e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/remoting/main/wildfly-remoting-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/sar/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/sar/main/module.xml
new file mode 100644
index 0000000..75272cd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/sar/main/module.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.sar" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/service/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-sar-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+
+        <module name="org.jboss.common-beans" services="import"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.jmx"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/sar/main/wildfly-sar-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/sar/main/wildfly-sar-34.0.0.Beta1.jar
new file mode 100644
index 0000000..c0abced
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/sar/main/wildfly-sar-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/security/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/security/main/module.xml
new file mode 100644
index 0000000..c7b0167
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/security/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.security" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/security/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-security-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/security/main/wildfly-security-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/security/main/wildfly-security-34.0.0.Beta1.jar
new file mode 100644
index 0000000..8272a41
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/security/main/wildfly-security-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/server/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/server/main/module.xml
new file mode 100644
index 0000000..cb99f53
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/server/main/module.xml
@@ -0,0 +1,73 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.server" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <main-class name="org.jboss.as.server.DomainServerMain"/>
+
+    <resources>
+        <resource-root path="wildfly-server-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="java.instrument"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+        <!-- Workaround for ELY-1561 -->
+        <module name="jdk.security.auth"/>
+
+        <module name="io.undertow.core"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.eclipse.jgit" optional="true"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.deployment-repository"/>
+        <module name="org.jboss.as.domain-http-interface"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.jmx" services="import"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.patching" optional="true" services="import"/>
+        <module name="org.jboss.as.platform-mbean"/>
+        <module name="org.jboss.as.process-controller"/>
+        <module name="org.jboss.as.protocol">
+            <imports>
+                <include path="**"/>
+            </imports> 
+        </module>
+        <module name="org.jboss.as.remoting"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.classfilewriter"/>
+        <!--this needs to remain here until common-beans is fixed to use passed classloader -->
+        <module name="org.jboss.common-beans" services="export" optional="true"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river" services="import"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc" export="true"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs" services="import"/>
+        <module name="org.wildfly.common"/>
+        <!-- Allow javax->jakarta deployment transformation if this module is provided -->
+        <module name="org.wildfly.deployment.transformation" optional="true" services="import"/>
+        <module name="org.wildfly.extension.core-management-client"/>
+        <module name="org.wildfly.installation-manager" services="import"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/server/main/wildfly-server-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/server/main/wildfly-server-26.0.0.Beta5.jar
new file mode 100644
index 0000000..fc0a575
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/server/main/wildfly-server-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/standalone/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/standalone/main/module.xml
new file mode 100644
index 0000000..fcddeab
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/standalone/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.standalone" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <main-class name="org.jboss.as.server.Main"/>
+
+    <resources>
+    </resources>
+
+    <dependencies>
+        <!-- Workaround for ELY-1561 -->
+        <module name="jdk.security.auth"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.as.jmx" services="import"/>
+        <module name="org.jboss.as.server" export="true"/>
+        <module name="org.jboss.vfs" services="import"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/system-jmx/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/system-jmx/main/module.xml
new file mode 100644
index 0000000..c83a25b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/system-jmx/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.system-jmx" xmlns="urn:jboss:module:1.9">
+
+    <exports>
+        <exclude path="org/jboss/system/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-system-jmx-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="org.jboss.common-beans"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.jmx"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/system-jmx/main/wildfly-system-jmx-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/system-jmx/main/wildfly-system-jmx-34.0.0.Beta1.jar
new file mode 100644
index 0000000..45425d6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/system-jmx/main/wildfly-system-jmx-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/threads/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/threads/main/module.xml
new file mode 100644
index 0000000..d4fe840
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/threads/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.threads" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-threads-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/threads/main/wildfly-threads-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/threads/main/wildfly-threads-26.0.0.Beta5.jar
new file mode 100644
index 0000000..382bbc2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/threads/main/wildfly-threads-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/transactions/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/transactions/main/module.xml
new file mode 100644
index 0000000..109eb3c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/transactions/main/module.xml
@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.transactions" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/txn/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-transactions-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.jboss.jts.integration"/>
+        <module name="org.omg.api"/>
+        <module name="org.wildfly.iiop-openjdk"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.wildfly.security.manager"/>
+
+        <!-- Only used if the org.wildfly.undertow.http-invoker capability is present,
+             in which case this module will also be present.
+             TODO Work out how to mark http-client.transaction as 'passive' so we
+             can make it optional here but have it provisioned if http is available
+        -->
+        <module name="io.undertow.core"/>
+        <module name="org.wildfly.http-client.transaction"/>
+
+        <!-- Only used if the org.jboss.remoting.endpoint capability is present,
+             in which case this module will also be present. -->
+        <module name="org.jboss.remoting" optional="true"/>
+
+        <module name="java.xml"/>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/transactions/main/wildfly-transactions-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/transactions/main/wildfly-transactions-34.0.0.Beta1.jar
new file mode 100644
index 0000000..d7b97fc
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/transactions/main/wildfly-transactions-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/version/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/version/main/module.xml
new file mode 100644
index 0000000..36477ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/version/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.version" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-version-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.modules"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/version/main/wildfly-version-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/jboss/as/version/main/wildfly-version-26.0.0.Beta5.jar
new file mode 100644
index 0000000..63e6e07
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/version/main/wildfly-version-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/web-common/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/web-common/main/module.xml
new file mode 100644
index 0000000..20ccf39
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/web-common/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.web-common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-web-common-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/web-common/main/wildfly-web-common-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/web-common/main/wildfly-web-common-34.0.0.Beta1.jar
new file mode 100644
index 0000000..0d80572
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/web-common/main/wildfly-web-common-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/jbossws-cxf-resources-7.2.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/jbossws-cxf-resources-7.2.0.Final.jar
new file mode 100644
index 0000000..9637d23
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/jbossws-cxf-resources-7.2.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/module.xml
new file mode 100644
index 0000000..79d96c5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/module.xml
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.webservices" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/webservices/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-webservices-server-integration-34.0.0.Beta1.jar"/>
+        <resource-root path="jbossws-cxf-resources-7.2.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.invocation"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.metadata.ear"/>
+        <module name="org.jboss.metadata.ejb"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ejb3"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.ws.api"/>
+        <module name="org.jboss.ws.common" services="import"/>
+        <module name="org.jboss.ws.spi"/>
+        <module name="org.wildfly.extension.undertow"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="jakarta.transaction.api"/>
+        <!-- Only used if capability org.wildfly.weld is available-->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/wildfly-webservices-server-integration-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/wildfly-webservices-server-integration-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6329be5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/webservices/main/wildfly-webservices-server-integration-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/webservices/server/integration/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/webservices/server/integration/main/module.xml
new file mode 100644
index 0000000..25be976
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/webservices/server/integration/main/module.xml
@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.webservices.server.integration" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="asm.asm" export="true"/>
+        <module name="javax.wsdl4j.api" export="true"/>
+        <module name="jakarta.xml.ws.api" export="true"/>
+        <module name="org.glassfish.jaxb" services="export" export="true"/>
+        <module name="org.jboss.ws.api" export="true"/>
+        <module name="org.jboss.ws.spi" export="true"/>
+        <module name="org.jboss.ws.common" services="import" export="true"/>
+        <module name="org.jboss.ws.jaxws-client" services="export" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-factories" services="export" export="true"/>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-undertow" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-udp" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-server" services="export" export="true"/>
+        <!-- Do not import services from cxf module directly, those need to come from jbossws -->
+        <module name="org.apache.cxf.impl" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.apache.commons.codec"/>
+        <module name="org.jboss.as.webservices" services="export" export="true"/>
+        <module name="com.sun.xml.messaging.saaj" services="export" export="true"/>
+        <module name="org.apache.ws.security" export="true"/>
+        <module name="org.bouncycastle.bcmail" export="true"/>
+        <module name="org.bouncycastle.bcpkix" export="true"/>
+        <module name="org.bouncycastle.bcprov" export="true"/>
+        <module name="org.jboss.xts">
+          <imports>
+            <include path="com.arjuna.mw.wst11.client"/>
+            <include path="org.jboss.jbossts.txbridge.outbound"/>
+          </imports>
+        </module>
+        <module name="org.codehaus.woodstox" services="import"/>
+        <module name="org.wildfly.security.elytron"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/module.xml
new file mode 100644
index 0000000..d1dd7a0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.beanvalidation" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-weld-bean-validation-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.extension.bean-validation"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.validation.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/wildfly-weld-bean-validation-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/wildfly-weld-bean-validation-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a5841e1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/beanvalidation/main/wildfly-weld-bean-validation-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/common/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/common/main/module.xml
new file mode 100644
index 0000000..14aaa3e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/common/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.common" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-weld-common-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="java.desktop"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/common/main/wildfly-weld-common-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/common/main/wildfly-weld-common-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6910ce5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/common/main/wildfly-weld-common-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/ejb/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/ejb/main/module.xml
new file mode 100644
index 0000000..b8d1eac
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/ejb/main/module.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.ejb" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/weld/_private"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-weld-ejb-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="org.jboss.as.ejb3"/>
+        <module name="org.jboss.ejb3"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.metadata.ejb"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/ejb/main/wildfly-weld-ejb-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/ejb/main/wildfly-weld-ejb-34.0.0.Beta1.jar
new file mode 100644
index 0000000..5dcc647
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/ejb/main/wildfly-weld-ejb-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/jpa/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/jpa/main/module.xml
new file mode 100644
index 0000000..0ec3d7e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/jpa/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.jpa" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-weld-jpa-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.as.jpa"/>
+        <module name="org.jboss.as.jpa.spi"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.metadata.ear"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.wildfly.common"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.transaction.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/jpa/main/wildfly-weld-jpa-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/jpa/main/wildfly-weld-jpa-34.0.0.Beta1.jar
new file mode 100644
index 0000000..85d6ed4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/jpa/main/wildfly-weld-jpa-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/main/module.xml
new file mode 100644
index 0000000..e4ca738
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/main/module.xml
@@ -0,0 +1,63 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/weld/_private"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-weld-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.as.weld.ejb" optional="true" services="import"/>
+        <module name="org.jboss.as.weld.jpa" optional="true" services="import"/>
+        <module name="org.jboss.as.weld.beanvalidation" optional="true" services="import"/>
+        <module name="org.jboss.as.weld.webservices" optional="true" services="import"/>
+        <module name="org.jboss.as.weld.transactions" optional="true" services="import"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.enterprise.concurrent.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.glassfish.expressly"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <!-- Only needed if capability 'org.wildfly.legacy-security.server-security-manager' is present -->
+        <module name="org.jboss.as.core-security" optional="true"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.metadata.ear"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/main/wildfly-weld-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/main/wildfly-weld-34.0.0.Beta1.jar
new file mode 100644
index 0000000..28cadd5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/main/wildfly-weld-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/spi/main/module.xml
new file mode 100644
index 0000000..92097a0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/spi/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-weld-spi-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.server"/>
+        <module name="jakarta.enterprise.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/spi/main/wildfly-weld-spi-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/spi/main/wildfly-weld-spi-34.0.0.Beta1.jar
new file mode 100644
index 0000000..70b3085
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/spi/main/wildfly-weld-spi-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/transactions/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/transactions/main/module.xml
new file mode 100644
index 0000000..44fcc12
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/transactions/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.transactions" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-weld-transactions-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="jakarta.transaction.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/transactions/main/wildfly-weld-transactions-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/transactions/main/wildfly-weld-transactions-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f8f93ff
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/transactions/main/wildfly-weld-transactions-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/webservices/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/weld/webservices/main/module.xml
new file mode 100644
index 0000000..ac71bcc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/weld/webservices/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.weld.webservices" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-weld-webservices-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.as.webservices.server.integration"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.modules"/>
+        <module name="jakarta.enterprise.api"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/weld/webservices/main/wildfly-weld-webservices-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/weld/webservices/main/wildfly-weld-webservices-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6d15ff1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/weld/webservices/main/wildfly-weld-webservices-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/xts/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/as/xts/main/module.xml
new file mode 100644
index 0000000..0530c7c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/as/xts/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.as.xts" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/xts/logging"/>
+    </exports>
+
+    <resources>
+	    <resource-root path="wildfly-xts-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.transactions"/>
+        <module name="org.jboss.as.network"/>
+        <!-- need this for the endpoint service -->
+        <module name="org.jboss.as.webservices.server.integration"/>
+        <!-- need this for the endpoint security context -->
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xts"/>
+        <!-- need this to get the SPIProviderResolver  -->
+        <module name="org.jboss.ws.spi"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.modules"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.jboss.as.ejb3"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/as/xts/main/wildfly-xts-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/as/xts/main/wildfly-xts-34.0.0.Beta1.jar
new file mode 100644
index 0000000..501a1c4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/as/xts/main/wildfly-xts-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/classfilewriter/main/jboss-classfilewriter-1.3.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/classfilewriter/main/jboss-classfilewriter-1.3.1.Final.jar
new file mode 100644
index 0000000..9770092
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/classfilewriter/main/jboss-classfilewriter-1.3.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/classfilewriter/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/classfilewriter/main/module.xml
new file mode 100644
index 0000000..849c4f1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/classfilewriter/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.classfilewriter" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-classfilewriter-1.3.1.Final.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/common-beans/main/jboss-common-beans-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/common-beans/main/jboss-common-beans-2.0.1.Final.jar
new file mode 100644
index 0000000..0e2fce8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/common-beans/main/jboss-common-beans-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/common-beans/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/common-beans/main/module.xml
new file mode 100644
index 0000000..4901332
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/common-beans/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.common-beans" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+    </dependencies>
+
+    <resources>
+        <resource-root path="jboss-common-beans-2.0.1.Final.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/dmr/main/jboss-dmr-1.7.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/dmr/main/jboss-dmr-1.7.0.Final.jar
new file mode 100644
index 0000000..79a0e60
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/dmr/main/jboss-dmr-1.7.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/dmr/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/dmr/main/module.xml
new file mode 100644
index 0000000..30d0e46
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/dmr/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.dmr" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="jboss-dmr-1.7.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ejb-client/main/jboss-ejb-client-5.0.7.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ejb-client/main/jboss-ejb-client-5.0.7.Final.jar
new file mode 100644
index 0000000..21508ed
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ejb-client/main/jboss-ejb-client-5.0.7.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ejb-client/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ejb-client/main/module.xml
new file mode 100644
index 0000000..c762741
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ejb-client/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ejb-client" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jboss-ejb-client-5.0.7.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.wildfly.discovery"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.naming-client"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.modules"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ejb3/main/jboss-ejb3-ext-api-2.4.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ejb3/main/jboss-ejb3-ext-api-2.4.0.Final.jar
new file mode 100644
index 0000000..cb7c0a9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ejb3/main/jboss-ejb3-ext-api-2.4.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ejb3/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ejb3/main/module.xml
new file mode 100644
index 0000000..8cccfd9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ejb3/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ejb3" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jboss-ejb3-ext-api-2.4.0.Final.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/genericjms/main/META-INF/ra.xml b/wildfly/modules/system/layers/base/org/jboss/genericjms/main/META-INF/ra.xml
new file mode 100644
index 0000000..6db9120
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/genericjms/main/META-INF/ra.xml
@@ -0,0 +1,131 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<connector xmlns="https://jakarta.ee/xml/ns/jakartaee"
+           xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+           xsi:schemaLocation="https://jakarta.ee/xml/ns/jakartaee
+           https://jakarta.ee/xml/ns/jakartaee/connector_2_1.xsd"
+           version="2.1">
+
+    <description>JBoss Generic JMS JCA Resource Adapter</description>
+    <display-name>Generic JMS Adapter</display-name>
+
+    <vendor-name>Red Hat Middleware LLC</vendor-name>
+    <eis-type>JMS 1.1 Server</eis-type>
+    <resourceadapter-version>5.0</resourceadapter-version>
+
+    <license>
+        <description>
+            Copyright The WildFly Authors
+
+            Licensed under the Apache License, Version 2.0 (the "License");
+            you may not use this file except in compliance with the License.
+            You may obtain a copy of the License at
+            http://www.apache.org/licenses/LICENSE-2.0
+            Unless required by applicable law or agreed to in writing, software
+            distributed under the License is distributed on an "AS IS" BASIS,
+            WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+            See the License for the specific language governing permissions and
+            limitations under the License.
+        </description>
+        <license-required>true</license-required>
+    </license>
+
+    <resourceadapter>
+        <resourceadapter-class>org.jboss.resource.adapter.jms.JmsResourceAdapter</resourceadapter-class>
+
+        <outbound-resourceadapter>
+            <connection-definition>
+                <managedconnectionfactory-class>org.jboss.resource.adapter.jms.JmsManagedConnectionFactory
+                </managedconnectionfactory-class>
+                <config-property>
+                    <description>The jndi name of the connection factory</description>
+                    <config-property-name>ConnectionFactory</config-property-name>
+                    <config-property-type>java.lang.String</config-property-type>
+                    <config-property-value>XAConnectionFactory</config-property-value>
+                </config-property>
+                <config-property>
+                    <description>A comma-separated list of JNDI parameters</description>
+                    <config-property-name>JndiParameters</config-property-name>
+                    <config-property-type>java.lang.String</config-property-type>
+                    <config-property-value></config-property-value>
+                </config-property>
+                <config-property>
+                    <description>The default session type</description>
+                    <config-property-name>SessionDefaultType</config-property-name>
+                    <config-property-type>java.lang.String</config-property-type>
+                    <config-property-value>agnostic</config-property-value>
+                </config-property>
+                <config-property>
+                    <description>The user name used to login to the jms server</description>
+                    <config-property-name>UserName</config-property-name>
+                    <config-property-type>java.lang.String</config-property-type>
+                    <config-property-value></config-property-value>
+                </config-property>
+                <config-property>
+                    <description>The password used to login to the jms server</description>
+                    <config-property-name>Password</config-property-name>
+                    <config-property-type>java.lang.String</config-property-type>
+                    <config-property-value></config-property-value>
+                </config-property>
+                <config-property>
+                    <description>The client id for this connection factory</description>
+                    <config-property-name>ClientID</config-property-name>
+                    <config-property-type>java.lang.String</config-property-type>
+                    <config-property-value></config-property-value>
+                </config-property>
+                <config-property>
+                    <config-property-name>Strict</config-property-name>
+                    <config-property-type>java.lang.Boolean</config-property-type>
+                    <config-property-value>true</config-property-value>
+                </config-property>
+                <config-property>
+                    <description>Maximum wait for a lock</description>
+                    <config-property-name>UseTryLock</config-property-name>
+                    <config-property-type>java.lang.Integer</config-property-type>
+                    <config-property-value>60</config-property-value>
+                </config-property>
+                <config-property>
+                    <description>Whether temporary destinations are deleted when a session is closed.</description>
+                    <config-property-name>DeleteTemporaryDestinations</config-property-name>
+                    <config-property-type>java.lang.Boolean</config-property-type>
+                    <config-property-value>true</config-property-value>
+                </config-property>
+                <connectionfactory-interface>org.jboss.resource.adapter.jms.JmsConnectionFactory
+                </connectionfactory-interface>
+                <connectionfactory-impl-class>org.jboss.resource.adapter.jms.JmsConnectionFactoryImpl
+                </connectionfactory-impl-class>
+                <connection-interface>jakarta.jms.Session</connection-interface>
+                <connection-impl-class>org.jboss.resource.adapter.jms.JmsSession</connection-impl-class>
+            </connection-definition>
+            <transaction-support>XATransaction</transaction-support>
+            <authentication-mechanism>
+                <authentication-mechanism-type>BasicPassword</authentication-mechanism-type>
+                <credential-interface>jakarta.resource.spi.security.PasswordCredential</credential-interface>
+            </authentication-mechanism>
+            <reauthentication-support>false</reauthentication-support>
+        </outbound-resourceadapter>
+
+        <inbound-resourceadapter>
+            <messageadapter>
+                <messagelistener>
+                    <messagelistener-type>jakarta.jms.MessageListener</messagelistener-type>
+                    <activationspec>
+                        <activationspec-class>org.jboss.resource.adapter.jms.inflow.JmsActivationSpec
+                        </activationspec-class>
+                        <required-config-property>
+                            <config-property-name>destination</config-property-name>
+                        </required-config-property>
+                        <required-config-property>
+                            <config-property-name>connectionFactory</config-property-name>
+                        </required-config-property>
+                    </activationspec>
+                </messagelistener>
+            </messageadapter>
+        </inbound-resourceadapter>
+
+    </resourceadapter>
+</connector>
diff --git a/wildfly/modules/system/layers/base/org/jboss/genericjms/main/generic-jms-ra-jar-3.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/genericjms/main/generic-jms-ra-jar-3.0.0.Final.jar
new file mode 100644
index 0000000..89794d9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/genericjms/main/generic-jms-ra-jar-3.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/genericjms/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/genericjms/main/module.xml
new file mode 100644
index 0000000..0adc1bc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/genericjms/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.genericjms" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+       <resource-root path="."/>
+        <resource-root path="generic-jms-ra-jar-3.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="jakarta.transaction.api"/>
+        <!-- WFLY-4656 export the JMS API module,  otherwise MDB using this RA will not found JMS classes -->
+        <module name="jakarta.jms.api" export="true"/>
+        <module name="jakarta.resource.api"/>
+        <module name="org.jboss.logging"/>
+
+        <!--
+             This module is used to provide the provider-specific classes
+             containing the JMS implementation (and any of their dependencies)
+             used by the generic JMS resource adapter
+        -->
+        <module name="org.jboss.genericjms.provider" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/iiop-client/main/jboss-iiop-client-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/iiop-client/main/jboss-iiop-client-2.0.1.Final.jar
new file mode 100644
index 0000000..2d42754
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/iiop-client/main/jboss-iiop-client-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/iiop-client/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/iiop-client/main/module.xml
new file mode 100644
index 0000000..3a7b34f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/iiop-client/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.iiop-client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-iiop-client-2.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="org.omg.api"/>
+        <module name="javax.rmi.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/invocation/main/jboss-invocation-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/invocation/main/jboss-invocation-2.0.1.Final.jar
new file mode 100644
index 0000000..9eebcb9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/invocation/main/jboss-invocation-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/invocation/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/invocation/main/module.xml
new file mode 100644
index 0000000..308c648
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/invocation/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.invocation" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-invocation-2.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.transaction.api" optional="true"/>
+        <module name="org.jboss.classfilewriter"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-api-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-api-3.0.10.Final.jar
new file mode 100644
index 0000000..f4d3f29
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-api-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-spi-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-spi-3.0.10.Final.jar
new file mode 100644
index 0000000..fa50a87
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-common-spi-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-core-api-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-core-api-3.0.10.Final.jar
new file mode 100644
index 0000000..cc4130a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/ironjacamar-core-api-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/module.xml
new file mode 100644
index 0000000..a535d95
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/api/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ironjacamar.api" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="ironjacamar-common-api-3.0.10.Final.jar"/>
+        <resource-root path="ironjacamar-common-spi-3.0.10.Final.jar"/>
+        <resource-root path="ironjacamar-core-api-3.0.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.resource.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.threads"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-common-impl-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-common-impl-3.0.10.Final.jar
new file mode 100644
index 0000000..bf759f2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-common-impl-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-core-impl-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-core-impl-3.0.10.Final.jar
new file mode 100644
index 0000000..18c4527
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-core-impl-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-deployers-common-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-deployers-common-3.0.10.Final.jar
new file mode 100644
index 0000000..08008c8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-deployers-common-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-validator-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-validator-3.0.10.Final.jar
new file mode 100644
index 0000000..cce04ae
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/ironjacamar-validator-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/module.xml
new file mode 100644
index 0000000..4466ab7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/impl/main/module.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ironjacamar.impl" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="ironjacamar-common-impl-3.0.10.Final.jar"/>
+        <resource-root path="ironjacamar-core-impl-3.0.10.Final.jar"/>
+        <resource-root path="ironjacamar-deployers-common-3.0.10.Final.jar"/>
+        <resource-root path="ironjacamar-validator-3.0.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.hibernate.validator" services="import"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.ironjacamar.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.transaction.client"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/ironjacamar-jdbc-3.0.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/ironjacamar-jdbc-3.0.10.Final.jar
new file mode 100644
index 0000000..a2b02ce
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/ironjacamar-jdbc-3.0.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/module.xml
new file mode 100644
index 0000000..6f1de2e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ironjacamar/jdbcadapters/main/module.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ironjacamar.jdbcadapters" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="ironjacamar-jdbc-3.0.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="java.transaction.xa"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.hibernate.validator"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.ironjacamar.api"/>
+        <module name="org.jboss.ironjacamar.impl"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.threads"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/jandex/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/jandex/main/module.xml
new file mode 100644
index 0000000..3e61195
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/jandex/main/module.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="org.jboss.jandex" target-name="io.smallrye.jandex" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/jboss/jaxbintros/main/jboss-jaxb-intros-2.0.1.jar b/wildfly/modules/system/layers/base/org/jboss/jaxbintros/main/jboss-jaxb-intros-2.0.1.jar
new file mode 100644
index 0000000..6f616a4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/jaxbintros/main/jboss-jaxb-intros-2.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/jaxbintros/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/jaxbintros/main/module.xml
new file mode 100644
index 0000000..50e39ba
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/jaxbintros/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.jaxbintros" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-jaxb-intros-2.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="org.glassfish.jaxb" services="import"/>
+        <module name="org.apache.commons.logging"/>
+        <module name="org.apache.commons.beanutils"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/jboss-transaction-spi-8.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/jboss-transaction-spi-8.0.0.Final.jar
new file mode 100644
index 0000000..0e9fcc7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/jboss-transaction-spi-8.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/module.xml
new file mode 100644
index 0000000..36bca83
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/jboss-transaction-spi/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.jboss-transaction-spi" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-transaction-spi-8.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.resource.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/jts/integration/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/jts/integration/main/module.xml
new file mode 100644
index 0000000..878ea9e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/jts/integration/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.jts.integration" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="narayana-jts-integration-7.0.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="org.omg.api"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="org.jboss.as.transactions">
+            <imports>
+                <include path="org.jboss.iiop.tm"/>
+            </imports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/jts/integration/main/narayana-jts-integration-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/jts/integration/main/narayana-jts-integration-7.0.2.Final.jar
new file mode 100644
index 0000000..fa3474d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/jts/integration/main/narayana-jts-integration-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/jts/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/jts/main/module.xml
new file mode 100644
index 0000000..139cdeb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/jts/main/module.xml
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.jts" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="narayana-jts-idlj-7.0.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+        <module name="jakarta.transaction.api"/>
+		<!--
+			The jdk.console module is a compile dependency of narayana-jts-idlj
+			but is not a runtime one within WildFly. It's listed here with
+			this comment to prevent it being re-added as a dependency
+			without discussion.
+			
+			Narayana has a 'TxPerfPlugin' JConsolePlugin implementation but 
+			WildFly does not support running JConsole as a modular application.
+			
+			WildFly should not have dependencies on JDK modules that are not 
+			associated with the traditional 'JRE' concept.
+			 
+        <module name="jdk.jconsole"/>
+        -->
+        <module name="org.omg.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.jts.integration"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="jakarta.resource.api"/>
+        <module name="org.apache.activemq.artemis.journal" optional="true"/>
+        <module name="javax.orb.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="jakarta.annotation.api" export="true"/>
+        <module name="jakarta.interceptor.api" export="true"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.jboss.as.transactions">
+            <imports>
+                <include path="org.jboss.as.txn.integration"/>
+            </imports>
+        </module>
+        <!-- For the ContextPropagationAsyncHandler used with the context propagation feature pack -->
+        <module name="org.wildfly.reactive.dep.jts" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/jts/main/narayana-jts-idlj-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/jts/main/narayana-jts-idlj-7.0.2.Final.jar
new file mode 100644
index 0000000..fb80f4f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/jts/main/narayana-jts-idlj-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/logging/commons/logging/main/commons-logging-jboss-logging-1.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/logging/commons/logging/main/commons-logging-jboss-logging-1.0.0.Final.jar
new file mode 100644
index 0000000..d7987d7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/logging/commons/logging/main/commons-logging-jboss-logging-1.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/logging/commons/logging/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/logging/commons/logging/main/module.xml
new file mode 100644
index 0000000..7fbd239
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/logging/commons/logging/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.logging.commons.logging" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="commons-logging-jboss-logging-1.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/jul-to-slf4j-stub-1.0.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/jul-to-slf4j-stub-1.0.1.Final.jar
new file mode 100644
index 0000000..7cf71aa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/jul-to-slf4j-stub-1.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/module.xml
new file mode 100644
index 0000000..958e7a8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/logging/jul-to-slf4j-stub/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.logging.jul-to-slf4j-stub" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="jul-to-slf4j-stub-1.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.6.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.6.1.Final.jar
new file mode 100644
index 0000000..6bb6f7f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/logging/main/jboss-logging-3.6.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/logging/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/logging/main/module.xml
new file mode 100644
index 0000000..2d472ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/logging/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.logging" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="jboss-logging-3.6.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logmanager"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/logmanager/log4j2/main/log4j2-jboss-logmanager-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/logmanager/log4j2/main/log4j2-jboss-logmanager-2.0.1.Final.jar
new file mode 100644
index 0000000..e121785
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/logmanager/log4j2/main/log4j2-jboss-logmanager-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/logmanager/log4j2/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/logmanager/log4j2/main/module.xml
new file mode 100644
index 0000000..2e31687
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/logmanager/log4j2/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.logmanager.log4j2" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="log4j2-jboss-logmanager-2.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.apache.logging.log4j.api"/>
+        <module name="org.jboss.logmanager"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-2.1.19.Final.jar b/wildfly/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-2.1.19.Final.jar
new file mode 100644
index 0000000..2c00a3d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/logmanager/main/jboss-logmanager-2.1.19.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/logmanager/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/logmanager/main/module.xml
new file mode 100644
index 0000000..23cba2d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/logmanager/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.logmanager" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="jboss-logmanager-2.1.19.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="internal.javax.json.api.ee8"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/marshalling/main/jboss-marshalling-2.2.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/marshalling/main/jboss-marshalling-2.2.1.Final.jar
new file mode 100644
index 0000000..0fa9619
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/marshalling/main/jboss-marshalling-2.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/marshalling/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/marshalling/main/module.xml
new file mode 100644
index 0000000..20d45a0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/marshalling/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.marshalling" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-marshalling-2.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jdk.unsupported"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.marshalling.river" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/marshalling/river/main/jboss-marshalling-river-2.2.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/marshalling/river/main/jboss-marshalling-river-2.2.1.Final.jar
new file mode 100644
index 0000000..99cb61f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/marshalling/river/main/jboss-marshalling-river-2.2.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/marshalling/river/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/marshalling/river/main/module.xml
new file mode 100644
index 0000000..e195689
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/marshalling/river/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.marshalling.river" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-marshalling-river-2.2.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jdk.unsupported"/>
+        <module name="org.jboss.marshalling"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/appclient/main/jboss-metadata-appclient-16.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/metadata/appclient/main/jboss-metadata-appclient-16.0.0.Final.jar
new file mode 100644
index 0000000..eeb753e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/metadata/appclient/main/jboss-metadata-appclient-16.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/appclient/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/metadata/appclient/main/module.xml
new file mode 100644
index 0000000..1394764
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/metadata/appclient/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.metadata.appclient" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-metadata-appclient-16.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.metadata.common"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/common/main/jboss-metadata-common-16.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/metadata/common/main/jboss-metadata-common-16.0.0.Final.jar
new file mode 100644
index 0000000..458d3c1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/metadata/common/main/jboss-metadata-common-16.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/common/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/metadata/common/main/module.xml
new file mode 100644
index 0000000..5caa01b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/metadata/common/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.metadata.common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-metadata-common-16.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/ear/main/jboss-metadata-ear-16.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/metadata/ear/main/jboss-metadata-ear-16.0.0.Final.jar
new file mode 100644
index 0000000..79fddce
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/metadata/ear/main/jboss-metadata-ear-16.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/ear/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/metadata/ear/main/module.xml
new file mode 100644
index 0000000..31f1177
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/metadata/ear/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.metadata.ear" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-metadata-ear-16.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/ejb/main/jboss-metadata-ejb-16.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/metadata/ejb/main/jboss-metadata-ejb-16.0.0.Final.jar
new file mode 100644
index 0000000..4400795
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/metadata/ejb/main/jboss-metadata-ejb-16.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/ejb/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/metadata/ejb/main/module.xml
new file mode 100644
index 0000000..e6b10d2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/metadata/ejb/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.metadata.ejb" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-metadata-ejb-16.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.metadata.common"/>
+        <module name="jakarta.ejb.api" optional="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/web/main/jboss-metadata-web-16.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/metadata/web/main/jboss-metadata-web-16.0.0.Final.jar
new file mode 100644
index 0000000..7aee2fb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/metadata/web/main/jboss-metadata-web-16.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/metadata/web/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/metadata/web/main/module.xml
new file mode 100644
index 0000000..c6dece5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/metadata/web/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.metadata.web" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-metadata-web-16.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/mod_cluster-container-spi-2.0.4.Final.jar b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/mod_cluster-container-spi-2.0.4.Final.jar
new file mode 100644
index 0000000..cb477fb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/mod_cluster-container-spi-2.0.4.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/module.xml
new file mode 100644
index 0000000..f9ca0ab
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/container/spi/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.mod_cluster.container.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mod_cluster-container-spi-2.0.4.Final.jar"/>
+    </resources>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/mod_cluster/core/main/mod_cluster-core-2.0.4.Final.jar b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/core/main/mod_cluster-core-2.0.4.Final.jar
new file mode 100644
index 0000000..a2d2205
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/core/main/mod_cluster-core-2.0.4.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/mod_cluster/core/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/core/main/module.xml
new file mode 100644
index 0000000..a092108
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/core/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.mod_cluster.core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mod_cluster-core-2.0.4.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.mod_cluster.container.spi"/>
+        <module name="org.jboss.mod_cluster.load.spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/mod_cluster-load-spi-2.0.4.Final.jar b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/mod_cluster-load-spi-2.0.4.Final.jar
new file mode 100644
index 0000000..d38d400
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/mod_cluster-load-spi-2.0.4.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/module.xml
new file mode 100644
index 0000000..9d39a2b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/mod_cluster/load/spi/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.mod_cluster.load.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mod_cluster-load-spi-2.0.4.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.mod_cluster.container.spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/msc/main/jboss-msc-1.5.5.Final.jar b/wildfly/modules/system/layers/base/org/jboss/msc/main/jboss-msc-1.5.5.Final.jar
new file mode 100644
index 0000000..3aa7ef4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/msc/main/jboss-msc-1.5.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/msc/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/msc/main/module.xml
new file mode 100644
index 0000000..ec9cf03
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/msc/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.msc" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.require-java-version" value="11"/>
+    </properties>
+
+    <main-class name="org.jboss.msc.Version"/>
+
+    <resources>
+        <resource-root path="jboss-msc-1.5.5.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.threads"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/lra-coordinator-jar-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/lra-coordinator-jar-7.0.2.Final.jar
new file mode 100644
index 0000000..a88e755
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/lra-coordinator-jar-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/module.xml
new file mode 100644
index 0000000..cb3bb78
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-coordinator/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.narayana.rts.lra-coordinator" xmlns="urn:jboss:module:1.9">
+
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+  <resources>
+    <resource-root path="lra-coordinator-jar-7.0.2.Final.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="org.eclipse.microprofile.lra.api"/>
+    <module name="jakarta.ws.rs.api"/>
+    <module name="org.jboss.logging"/>
+    <module name="org.jboss.narayana.rts.lra-service-base"/>
+    <!-- lra-coordinator-jar -->
+    <module name="org.jboss.jts"/>
+    <module name="org.eclipse.microprofile.config.api"/>
+    <module name="jakarta.enterprise.api"/>
+    <module name="jakarta.servlet.api"/>
+    <module name="org.eclipse.microprofile.openapi.api"/>
+    <module name="io.smallrye.fault-tolerance"/>
+    <module name="io.smallrye.config" optional="true"/>
+
+    <!-- Loading JAX-RS dependencies for LRA recovery coordinator to be able to do JAX-RS remote calls -->
+    <module name="org.jboss.resteasy.resteasy-jaxrs" services="export"/>
+    <module name="org.jboss.resteasy.resteasy-jaxb-provider" services="export"/>
+    <module name="org.jboss.resteasy.resteasy-jackson2-provider" services="export"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/lra-client-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/lra-client-7.0.2.Final.jar
new file mode 100644
index 0000000..e0af3c2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/lra-client-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/lra-proxy-api-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/lra-proxy-api-7.0.2.Final.jar
new file mode 100644
index 0000000..0ac6b8f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/lra-proxy-api-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/module.xml
new file mode 100644
index 0000000..57b94d9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.narayana.rts.lra-participant" xmlns="urn:jboss:module:1.9">
+
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+  <resources>
+    <resource-root path="lra-client-7.0.2.Final.jar"/>
+    <resource-root path="lra-proxy-api-7.0.2.Final.jar"/>
+    <resource-root path="narayana-lra-7.0.2.Final.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="org.eclipse.microprofile.lra.api"/>
+    <module name="org.jboss.modules"/>
+    <module name="org.jboss.logging"/>
+    <module name="jakarta.ws.rs.api"/>
+    <module name="org.jboss.narayana.rts.lra-service-base"/>
+
+    <!-- lra-client -->
+    <module name="jakarta.enterprise.api"/>
+    <!-- lra-proxy-api -->
+    <module name="io.smallrye.jandex"/>
+    <!-- narayana-lra -->
+    <module name="org.eclipse.microprofile.config.api"/>
+    <module name="io.smallrye.config"/>
+
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/narayana-lra-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/narayana-lra-7.0.2.Final.jar
new file mode 100644
index 0000000..76390fb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-participant/main/narayana-lra-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/lra-service-base-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/lra-service-base-7.0.2.Final.jar
new file mode 100644
index 0000000..5dc6359
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/lra-service-base-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/module.xml
new file mode 100644
index 0000000..7cf43cb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/lra-service-base/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.narayana.rts.lra-service-base" xmlns="urn:jboss:module:1.9">
+
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+  <resources>
+    <resource-root path="lra-service-base-7.0.2.Final.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="org.eclipse.microprofile.lra.api"/>
+    <module name="jakarta.ws.rs.api"/>
+    <module name="org.jboss.logging"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/module.xml
new file mode 100644
index 0000000..7f14f42
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/module.xml
@@ -0,0 +1,40 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.narayana.rts" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="restat-api-7.0.2.Final.jar"/>
+        <resource-root path="restat-util-7.0.2.Final.jar"/>
+        <resource-root path="restat-integration-7.0.2.Final.jar"/>
+        <resource-root path="restat-bridge-7.0.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.resteasy.resteasy-client"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-jaxb-provider"/>
+        <module name="org.jboss.resteasy.resteasy-json-p-provider"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.ws.rs.api" services="export"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.wildfly.extension.rts" export="true">
+            <imports>
+                <include path="org/wildfly/extension/rts/jaxrs"/>
+            </imports>
+        </module>
+        <module name="org.jboss.logging"/>
+
+        <!-- TODO WFLY-5966 validate the need for these and remove if not needed.
+             Prior to WFLY-5922 they were exported by javax.ejb.api. -->
+        <module name="javax.rmi.api"/>
+        <module name="org.omg.api"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-api-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-api-7.0.2.Final.jar
new file mode 100644
index 0000000..703a7d8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-api-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-bridge-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-bridge-7.0.2.Final.jar
new file mode 100644
index 0000000..fe513c5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-bridge-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-integration-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-integration-7.0.2.Final.jar
new file mode 100644
index 0000000..6ebeb73
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-integration-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-util-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-util-7.0.2.Final.jar
new file mode 100644
index 0000000..f13b148
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/narayana/rts/main/restat-util-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/remote-naming/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/remote-naming/main/module.xml
new file mode 100644
index 0000000..3fdc71b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/remote-naming/main/module.xml
@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module-alias name="org.jboss.remote-naming" target-name="org.wildfly.naming-client" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/jboss/remoting-jmx/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/remoting-jmx/main/module.xml
new file mode 100644
index 0000000..55de62e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/remoting-jmx/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.remoting-jmx" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="remoting-jmx-3.1.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.wildfly.client.config"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/remoting-jmx/main/remoting-jmx-3.1.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/remoting-jmx/main/remoting-jmx-3.1.0.Final.jar
new file mode 100644
index 0000000..df3b840
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/remoting-jmx/main/remoting-jmx-3.1.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/remoting/main/jboss-remoting-5.0.29.Final.jar b/wildfly/modules/system/layers/base/org/jboss/remoting/main/jboss-remoting-5.0.29.Final.jar
new file mode 100644
index 0000000..d1c9f75
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/remoting/main/jboss-remoting-5.0.29.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/remoting/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/remoting/main/module.xml
new file mode 100644
index 0000000..aa3c859
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/remoting/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.remoting" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-remoting-5.0.29.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.security.sasl"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling" export="true"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.xnio" export="true"/>
+        <module name="org.jboss.xnio.nio" services="import"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.client.config"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/microprofile-config-2.1.5.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/microprofile-config-2.1.5.Final.jar
new file mode 100644
index 0000000..bd361e6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/microprofile-config-2.1.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/module.xml
new file mode 100644
index 0000000..47d81f0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/microprofile/config/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.microprofile.config" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="microprofile-config-2.1.5.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.resteasy.resteasy-core" services="import"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/module.xml
new file mode 100644
index 0000000..d79e921
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-atom-provider" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-atom-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.glassfish.jaxb"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.resteasy.resteasy-jaxb-provider"/>
+        <module name="org.jboss.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/resteasy-atom-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/resteasy-atom-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..82e3e79
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-atom-provider/main/resteasy-atom-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/module.xml
new file mode 100644
index 0000000..fe14fc2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-cdi" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="resteasy-cdi-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.eclipse.microprofile.restclient" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/resteasy-cdi-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/resteasy-cdi-6.2.10.Final.jar
new file mode 100644
index 0000000..05d11d9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-cdi/main/resteasy-cdi-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/module.xml
new file mode 100644
index 0000000..033455b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-client-api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-client-api-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/resteasy-client-api-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/resteasy-client-api-6.2.10.Final.jar
new file mode 100644
index 0000000..cb812aa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-api/main/resteasy-client-api-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/microprofile-rest-client-2.1.5.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/microprofile-rest-client-2.1.5.Final.jar
new file mode 100644
index 0000000..02eeef5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/microprofile-rest-client-2.1.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/microprofile-rest-client-base-2.1.5.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/microprofile-rest-client-base-2.1.5.Final.jar
new file mode 100644
index 0000000..e9df90c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/microprofile-rest-client-base-2.1.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/module.xml
new file mode 100644
index 0000000..86333c0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client-microprofile/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-client-microprofile" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="microprofile-rest-client-2.1.5.Final.jar"/>
+        <resource-root path="microprofile-rest-client-base-2.1.5.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.eclipse.microprofile.restclient"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.logging"/>
+        <!--This will add additional configuration lookups if available, however it's not required -->
+        <module name="org.jboss.resteasy.microprofile.config" services="import" optional="true"/>
+        <module name="org.jboss.resteasy.resteasy-cdi" services="import"/>
+        <module name="org.jboss.resteasy.resteasy-client-api"/>
+        <module name="org.jboss.resteasy.resteasy-client" services="import"/>
+        <module name="org.jboss.resteasy.resteasy-core" services="import"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/module.xml
new file mode 100644
index 0000000..5c3aa7b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="resteasy-client-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.apache.commons.codec"/>
+        <module name="org.apache.httpcomponents"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.resteasy.resteasy-client-api"/>
+        <module name="org.jboss.resteasy.resteasy-core" services="import"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/resteasy-client-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/resteasy-client-6.2.10.Final.jar
new file mode 100644
index 0000000..0c5ce94
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-client/main/resteasy-client-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/module.xml
new file mode 100644
index 0000000..b13d03e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/module.xml
@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-core-spi" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-core-spi-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.activation.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.reactivestreams"/>
+        <!-- If present, import services that are needed for runtime. This includes deployment specific implementations. -->
+        <module name="org.jboss.as.jaxrs" services="import" optional="true"/>
+        <module name="io.opentelemetry.api" optional="true"/>
+        <module name="io.opentelemetry.exporter" optional="true"/>
+        <module name="io.opentelemetry.sdk" optional="true"/>
+        <!--
+            If a deployment wants to use this it needs to be exported. However, the way it's loaded in the RESTEasyTracingLogger
+            it also needs to be available for this module. This is the reason we export it here.
+            -->
+        <module name="org.jboss.resteasy.resteasy-tracing-api" export="true" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/resteasy-core-spi-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/resteasy-core-spi-6.2.10.Final.jar
new file mode 100644
index 0000000..050048a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core-spi/main/resteasy-core-spi-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/module.xml
new file mode 100644
index 0000000..84fc2cb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="resteasy-core-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.activation.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="com.ibm.async.asyncutil"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/resteasy-core-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/resteasy-core-6.2.10.Final.jar
new file mode 100644
index 0000000..e5ebbb7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-core/main/resteasy-core-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/module.xml
new file mode 100644
index 0000000..eb9636a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-crypto" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="resteasy-crypto-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="jakarta.activation.api"/>
+        <module name="jakarta.mail.api"/>
+        <module name="org.apache.james.mime4j"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.bouncycastle.bcmail"/>
+        <module name="org.bouncycastle.bcpkix"/>
+        <module name="org.bouncycastle.bcprov"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/resteasy-crypto-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/resteasy-crypto-6.2.10.Final.jar
new file mode 100644
index 0000000..52ec160
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-crypto/main/resteasy-crypto-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/module.xml
new file mode 100644
index 0000000..6623464
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-jackson2-provider" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-jackson2-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-annotations" export="true"/>
+        <module name="com.fasterxml.jackson.core.jackson-core" export="true"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind" export="true"/>
+        <module name="com.fasterxml.jackson.jakarta.jackson-jakarta-json-provider" export="true"/>
+        <module name="com.fasterxml.jackson.datatype.jackson-datatype-jdk8"/>
+        <module name="com.fasterxml.jackson.datatype.jackson-datatype-jsr310"/>
+        <module name="com.github.fge.json-patch"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/resteasy-jackson2-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/resteasy-jackson2-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..1aa9dd6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jackson2-provider/main/resteasy-jackson2-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/module.xml
new file mode 100644
index 0000000..8a9c29b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-jaxb-provider" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-jaxb-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.glassfish.jaxb"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/resteasy-jaxb-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/resteasy-jaxb-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..61c4f26
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxb-provider/main/resteasy-jaxb-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxrs/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxrs/main/module.xml
new file mode 100644
index 0000000..aaa472d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jaxrs/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-jaxrs" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+
+    <dependencies>
+        <module name="org.jboss.resteasy.resteasy-client" export="true" services="export"/>
+        <module name="org.jboss.resteasy.resteasy-client-api" export="true"/>
+        <module name="org.jboss.resteasy.resteasy-core" export="true" services="export"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/module.xml
new file mode 100644
index 0000000..4edd2ee
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-jsapi" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-jsapi-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/resteasy-jsapi-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/resteasy-jsapi-6.2.10.Final.jar
new file mode 100644
index 0000000..2d8202d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-jsapi/main/resteasy-jsapi-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/module.xml
new file mode 100644
index 0000000..de702ad
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-json-binding-provider" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    
+    <resources>
+        <resource-root path="resteasy-json-binding-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.json.bind.api"/>
+        <module name="org.apache.commons.io"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/resteasy-json-binding-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/resteasy-json-binding-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..7f1303c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-binding-provider/main/resteasy-json-binding-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/module.xml
new file mode 100644
index 0000000..987edf5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-json-p-provider" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-json-p-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/resteasy-json-p-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/resteasy-json-p-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..4b3fb85
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-json-p-provider/main/resteasy-json-p-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/module.xml
new file mode 100644
index 0000000..0505ec1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-multipart-provider" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-multipart-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.mail.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.apache.james.mime4j"/>
+        <module name="org.jboss.resteasy.resteasy-jaxb-provider"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/resteasy-multipart-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/resteasy-multipart-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..7a623c3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-multipart-provider/main/resteasy-multipart-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/module.xml
new file mode 100644
index 0000000..527e072
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-rxjava2" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="resteasy-rxjava2-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="org.reactivestreams" export="true"/>
+        <module name="io.reactivex.rxjava2.rxjava" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/resteasy-rxjava2-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/resteasy-rxjava2-6.2.10.Final.jar
new file mode 100644
index 0000000..3550cd0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-rxjava2/main/resteasy-rxjava2-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/resteasy-spring-3.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/resteasy-spring-3.1.3.Final.jar
new file mode 100644
index 0000000..d78631a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/bundled/resteasy-spring-jar/resteasy-spring-3.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/module.xml
new file mode 100644
index 0000000..08df689
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-spring/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-spring" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <!-- This module just contains the jar as a resource root. It cannot be depended on to get
+         access to the jar classes-->
+        <resource-root path="bundled"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/module.xml
new file mode 100644
index 0000000..e224437
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-tracing-api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="resteasy-tracing-api-2.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/resteasy-tracing-api-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/resteasy-tracing-api-2.0.1.Final.jar
new file mode 100644
index 0000000..74fd364
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-tracing-api/main/resteasy-tracing-api-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/module.xml
new file mode 100644
index 0000000..03fdbba
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.resteasy.resteasy-validator-provider" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="resteasy-validator-provider-6.2.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi"/>
+        <module name="jakarta.validation.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="org.hibernate.validator"/>
+        <module name="com.fasterxml.classmate"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="org.jboss.resteasy.resteasy-cdi"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/resteasy-validator-provider-6.2.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/resteasy-validator-provider-6.2.10.Final.jar
new file mode 100644
index 0000000..1d9ffc8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/resteasy/resteasy-validator-provider/main/resteasy-validator-provider-6.2.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/staxmapper/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/staxmapper/main/module.xml
new file mode 100644
index 0000000..f6f187b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/staxmapper/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.staxmapper" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="staxmapper-1.5.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/staxmapper/main/staxmapper-1.5.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/staxmapper/main/staxmapper-1.5.0.Final.jar
new file mode 100644
index 0000000..eed9d69
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/staxmapper/main/staxmapper-1.5.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/stdio/main/jboss-stdio-1.1.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/stdio/main/jboss-stdio-1.1.0.Final.jar
new file mode 100644
index 0000000..2f4ca58
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/stdio/main/jboss-stdio-1.1.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/stdio/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/stdio/main/module.xml
new file mode 100644
index 0000000..81b7ed7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/stdio/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.stdio" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-stdio-1.1.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/threads/main/jboss-threads-2.4.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/threads/main/jboss-threads-2.4.0.Final.jar
new file mode 100644
index 0000000..100981f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/threads/main/jboss-threads-2.4.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/threads/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/threads/main/module.xml
new file mode 100644
index 0000000..1353ef0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/threads/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.threads" xmlns="urn:jboss:module:1.9">
+
+   <properties>
+       <property name="jboss.api" value="private"/>
+   </properties>
+
+    <resources>
+        <resource-root path="jboss-threads-2.4.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="jdk.unsupported"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/vfs/main/jboss-vfs-3.3.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/vfs/main/jboss-vfs-3.3.2.Final.jar
new file mode 100644
index 0000000..f7bb0b6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/vfs/main/jboss-vfs-3.3.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/vfs/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/vfs/main/module.xml
new file mode 100644
index 0000000..2d2eb06
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/vfs/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.vfs" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jboss-vfs-3.3.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/api/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/weld/api/main/module.xml
new file mode 100644
index 0000000..6671baa
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/weld/api/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.weld.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="weld-api-5.0.SP3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.servlet.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/api/main/weld-api-5.0.SP3.jar b/wildfly/modules/system/layers/base/org/jboss/weld/api/main/weld-api-5.0.SP3.jar
new file mode 100644
index 0000000..18a4499
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/api/main/weld-api-5.0.SP3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/core/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/module.xml
new file mode 100644
index 0000000..c48da6c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/module.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.weld.core" xmlns="urn:jboss:module:1.9">
+
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+
+  <resources>
+    <resource-root path="weld-core-impl-5.1.3.Final.jar"/>
+    <resource-root path="weld-lite-extension-translator-5.1.3.Final.jar"/>
+    <resource-root path="weld-ejb-5.1.3.Final.jar"/>
+    <resource-root path="weld-jta-5.1.3.Final.jar"/>
+    <resource-root path="weld-web-5.1.3.Final.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="jakarta.annotation.api"/>
+    <module name="jakarta.ejb.api"/>
+    <module name="jakarta.enterprise.api"/>
+    <module name="jakarta.inject.api"/>
+    <module name="jakarta.interceptor.api"/>
+    <module name="jakarta.persistence.api"/>
+    <module name="jakarta.servlet.api"/>
+    <module name="jakarta.transaction.api"/>
+    <module name="jakarta.validation.api"/>
+    <module name="org.glassfish.expressly"/>
+    <module name="org.jboss.classfilewriter"/>
+    <module name="org.jboss.weld.api" export="true"/>
+    <module name="org.jboss.weld.spi" export="true"/>
+    <module name="org.jboss.logging"/>
+    <module name="jdk.unsupported"/>
+    <module name="java.desktop"/>
+    <module name="java.logging"/>
+    <module name="java.naming"/>
+    <module name="java.xml"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-core-impl-5.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-core-impl-5.1.3.Final.jar
new file mode 100644
index 0000000..d8cfff1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-core-impl-5.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-ejb-5.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-ejb-5.1.3.Final.jar
new file mode 100644
index 0000000..cb8f872
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-ejb-5.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-jta-5.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-jta-5.1.3.Final.jar
new file mode 100644
index 0000000..44f935f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-jta-5.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-lite-extension-translator-5.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-lite-extension-translator-5.1.3.Final.jar
new file mode 100644
index 0000000..b7e53c4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-lite-extension-translator-5.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-web-5.1.3.Final.jar b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-web-5.1.3.Final.jar
new file mode 100644
index 0000000..b98e4de
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/core/main/weld-web-5.1.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/weld/spi/main/module.xml
new file mode 100644
index 0000000..1b6843f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/weld/spi/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.weld.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="weld-spi-5.0.SP3.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.naming"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.persistence.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.jboss.weld.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/weld/spi/main/weld-spi-5.0.SP3.jar b/wildfly/modules/system/layers/base/org/jboss/weld/spi/main/weld-spi-5.0.SP3.jar
new file mode 100644
index 0000000..6067c23
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/weld/spi/main/weld-spi-5.0.SP3.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/api/main/jbossws-api-3.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/api/main/jbossws-api-3.0.0.Final.jar
new file mode 100644
index 0000000..3001994
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/api/main/jbossws-api-3.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/api/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/api/main/module.xml
new file mode 100644
index 0000000..94dd0d6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/api/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jbossws-api-3.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.ws.jaxws-client" services="import"/>
+        <module name="java.xml"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/common/main/jbossws-common-5.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/common/main/jbossws-common-5.0.0.Final.jar
new file mode 100644
index 0000000..4f39e18
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/common/main/jbossws-common-5.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/common/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/common/main/module.xml
new file mode 100644
index 0000000..ff4558f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/common/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.common" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-common-5.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.ws.api"/>
+        <module name="org.jboss.ws.spi"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.jaxbintros"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/module.xml
new file mode 100644
index 0000000..f9ba941
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-client/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.cxf.jbossws-cxf-client" xmlns="urn:jboss:module:1.9">
+
+    <dependencies>
+        <!-- JAXB API + REF IMPL -->
+        <module name="jakarta.xml.bind.api" export="true"/>
+        <module name="org.glassfish.jaxb" export="true" services="export"/>
+        <module name="jakarta.xml.ws.api" export="true"/>
+        <!-- WSDL4J API -->
+        <module name="javax.wsdl4j.api" export="true"/>
+        <!-- JBossWS API -->
+        <module name="org.jboss.ws.api" export="true"/>
+        <!--  JBossWS JAXWS client -->
+        <module name="org.jboss.ws.jaxws-client" export="true" services="export"/>
+        <!--  JBossWS configuration of Apache CXF -->
+        <module name="org.jboss.ws.cxf.jbossws-cxf-factories" services="export"/>
+        <!-- Apache CXF APIs only -->
+        <module name="org.apache.cxf" export="true"/>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-undertow" export="true" services="export"/>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-udp" export="true" services="export"/>
+        <module name="org.jboss.jaxbintros" export="true"/>
+        <module name="jakarta.security.auth.message.api" export="true"/>
+        <module name="org.apache.ws.security" export="true"/>
+        <module name="org.eclipse.angus.activation" export="true" services="export"/>
+        <!-- Tools support on JDK 9 and later -->
+        <module name="org.jboss.modules"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/jbossws-cxf-factories-7.2.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/jbossws-cxf-factories-7.2.0.Final.jar
new file mode 100644
index 0000000..6669b56
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/jbossws-cxf-factories-7.2.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/module.xml
new file mode 100644
index 0000000..3d7f30c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-factories/main/module.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.cxf.jbossws-cxf-factories" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-cxf-factories-7.2.0.Final.jar"/>
+    </resources>
+
+    <dependencies/>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/jbossws-cxf-server-7.2.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/jbossws-cxf-server-7.2.0.Final.jar
new file mode 100644
index 0000000..bfbc229
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/jbossws-cxf-server-7.2.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/module.xml
new file mode 100644
index 0000000..0fee67a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-server/main/module.xml
@@ -0,0 +1,55 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.cxf.jbossws-cxf-server" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-cxf-server-7.2.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.apache.commons.codec"/>
+        <module name="org.jboss.ws.api"/>
+        <module name="org.jboss.ws.spi"/>
+        <module name="org.jboss.ws.common"/>
+        <module name="org.jboss.ws.jaxws-client"/>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-factories" services="import"/>
+        <!-- do not import services from cxf, those need to come from jbossws -->
+        <module name="org.apache.cxf.impl">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-undertow" services="import">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-udp" services="import">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="org.jboss.logging"/>
+        <module name="org.apache.ws.security"/>
+        <module name="org.wildfly.security.elytron"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/jbossws-cxf-transports-udp-7.2.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/jbossws-cxf-transports-udp-7.2.0.Final.jar
new file mode 100644
index 0000000..7f379e1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/jbossws-cxf-transports-udp-7.2.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/module.xml
new file mode 100644
index 0000000..aa9577d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-udp/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.cxf.jbossws-cxf-transports-udp" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-cxf-transports-udp-7.2.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.apache.cxf.impl" services="import">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/jbossws-cxf-transports-undertow-7.2.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/jbossws-cxf-transports-undertow-7.2.0.Final.jar
new file mode 100644
index 0000000..5ab0920
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/jbossws-cxf-transports-undertow-7.2.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/module.xml
new file mode 100644
index 0000000..c3b6eba
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/jbossws-cxf-transports-undertow/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.cxf.jbossws-cxf-transports-undertow" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-cxf-transports-undertow-7.2.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.jboss.ws.spi"/>
+        <module name="org.jboss.ws.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.ws.jaxws-undertow-httpspi"/>
+        <module name="org.apache.cxf.impl" services="import">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="io.undertow.core"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/sts/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/sts/main/module.xml
new file mode 100644
index 0000000..be0f576
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/sts/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.cxf.sts" xmlns="urn:jboss:module:1.9">
+    
+    <resources>
+        <resource-root path="wildfly-webservices-opensaml-sysconfig-34.0.0.Beta1.jar"/>
+    </resources>
+    <dependencies>
+        <module name="org.apache.cxf.ws-security" services="export" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.apache.cxf.services-sts" services="export" export="true">
+          <imports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </imports>
+          <exports>
+            <include path="META-INF/cxf"/>
+            <include path="META-INF"/>
+          </exports>
+        </module>
+        <module name="org.opensaml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/cxf/sts/main/wildfly-webservices-opensaml-sysconfig-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/sts/main/wildfly-webservices-opensaml-sysconfig-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a135ab3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/cxf/sts/main/wildfly-webservices-opensaml-sysconfig-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-client/main/jbossws-cxf-client-7.2.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-client/main/jbossws-cxf-client-7.2.0.Final.jar
new file mode 100644
index 0000000..9b8e0bd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-client/main/jbossws-cxf-client-7.2.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-client/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-client/main/module.xml
new file mode 100644
index 0000000..6c4530b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-client/main/module.xml
@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.jaxws-client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-cxf-client-7.2.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.compiler"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="org.glassfish.jaxb" services="import"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.ws.api"/>
+        <module name="org.jboss.ws.spi"/>
+        <module name="org.jboss.ws.common"/>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-factories" services="import"/>
+        <!-- do not import services from cxf, those need to come from jbossws -->
+        <module name="org.apache.cxf.impl">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-undertow" services="import">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-transports-udp" services="import">
+          <imports>
+            <include path="META-INF/cxf"/> <!-- required to also pull in the bus extensions from META-INF -->
+            <include path="META-INF"/>
+          </imports>
+        </module>
+        <module name="org.apache.neethi"/>
+        <module name="org.apache.ws.security"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.apache.commons.beanutils"/>
+        <module name="javax.wsdl4j.api"/>
+        <module name="org.bouncycastle.bcmail"/>
+        <module name="org.bouncycastle.bcpkix"/>
+        <module name="org.bouncycastle.bcprov"/>
+        <module name="org.jboss.modules"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/jaxws-undertow-httpspi-2.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/jaxws-undertow-httpspi-2.0.0.Final.jar
new file mode 100644
index 0000000..ff376e5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/jaxws-undertow-httpspi-2.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/module.xml
new file mode 100644
index 0000000..ba1bd16
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/jaxws-undertow-httpspi/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.jaxws-undertow-httpspi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jaxws-undertow-httpspi-2.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="io.undertow.core"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/saaj-impl/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/saaj-impl/main/module.xml
new file mode 100644
index 0000000..44356e4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/saaj-impl/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.saaj-impl" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="org.jboss.ws.jaxws-client" services="import"/> <!-- to pull the jbossws-cxf SOAPConnection impl -->
+        <module name="com.sun.xml.messaging.saaj" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/spi/main/jbossws-spi-5.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/spi/main/jbossws-spi-5.0.0.Final.jar
new file mode 100644
index 0000000..eb57627
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/spi/main/jbossws-spi-5.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/spi/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/spi/main/module.xml
new file mode 100644
index 0000000..897fd0c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/spi/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-spi-5.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.ws.api"/>
+        <module name="org.jboss.as.webservices"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/tools/common/main/jbossws-common-tools-2.1.0.Final.jar b/wildfly/modules/system/layers/base/org/jboss/ws/tools/common/main/jbossws-common-tools-2.1.0.Final.jar
new file mode 100644
index 0000000..5a9d4bb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/ws/tools/common/main/jbossws-common-tools-2.1.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/tools/common/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/tools/common/main/module.xml
new file mode 100644
index 0000000..1d76e20
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/tools/common/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.tools.common" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossws-common-tools-2.1.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="gnu.getopt"/>
+        <module name="org.jboss.as.webservices.server.integration" services="import">
+          <imports>
+            <include path="META-INF"/>
+            <include path="META-INF/cxf"/>
+          </imports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/tools/wsconsume/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/tools/wsconsume/main/module.xml
new file mode 100644
index 0000000..e882e55
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/tools/wsconsume/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.tools.wsconsume" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="1.7"/>
+    </properties>
+
+    <main-class name="org.jboss.ws.tools.cmd.WSConsume"/>
+
+    <dependencies>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.ws.tools.common"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/ws/tools/wsprovide/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/ws/tools/wsprovide/main/module.xml
new file mode 100644
index 0000000..36b22be
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/ws/tools/wsprovide/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.ws.tools.wsprovide" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.require-java-version" value="1.7"/>
+    </properties>
+
+    <main-class name="org.jboss.ws.tools.cmd.WSProvide"/>
+
+    <dependencies>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.ws.tools.common"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/xnio/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/xnio/main/module.xml
new file mode 100644
index 0000000..f79a1a9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/xnio/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.xnio" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="xnio-api-3.8.16.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.security.sasl"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio.nio" services="import"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.client.config"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/xnio/main/xnio-api-3.8.16.Final.jar b/wildfly/modules/system/layers/base/org/jboss/xnio/main/xnio-api-3.8.16.Final.jar
new file mode 100644
index 0000000..b338811
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/xnio/main/xnio-api-3.8.16.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/module.xml
new file mode 100644
index 0000000..c2fdbac
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.xnio.netty.netty-xnio-transport" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="netty-xnio-transport-0.1.10.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <!--<module name="io.netty"/>-->
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.jboss.xnio.nio"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/netty-xnio-transport-0.1.10.Final.jar b/wildfly/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/netty-xnio-transport-0.1.10.Final.jar
new file mode 100644
index 0000000..4794f6e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/xnio/netty/netty-xnio-transport/main/netty-xnio-transport-0.1.10.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/xnio/nio/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/xnio/nio/main/module.xml
new file mode 100644
index 0000000..ec51732
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/xnio/nio/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.xnio.nio" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="xnio-nio-3.8.16.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jboss/xnio/nio/main/xnio-nio-3.8.16.Final.jar b/wildfly/modules/system/layers/base/org/jboss/xnio/nio/main/xnio-nio-3.8.16.Final.jar
new file mode 100644
index 0000000..084d29a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/xnio/nio/main/xnio-nio-3.8.16.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/xts/main/jbosstxbridge-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/xts/main/jbosstxbridge-7.0.2.Final.jar
new file mode 100644
index 0000000..a0d89d0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/xts/main/jbosstxbridge-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/xts/main/jbossxts-7.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jboss/xts/main/jbossxts-7.0.2.Final.jar
new file mode 100644
index 0000000..b6cf472
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jboss/xts/main/jbossxts-7.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jboss/xts/main/module.xml b/wildfly/modules/system/layers/base/org/jboss/xts/main/module.xml
new file mode 100644
index 0000000..5ff696c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jboss/xts/main/module.xml
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jboss.xts" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jbossxts-7.0.2.Final.jar"/>
+        <resource-root path="jbosstxbridge-7.0.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.rmi"/>
+        <module name="java.xml"/>
+
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="org.jboss.jts"/>
+        <module name="org.jboss.ws.api" services="export"/>
+        <module name="org.jboss.ws.jaxws-client" services="export"/>
+        <module name="org.jboss.ws.cxf.jbossws-cxf-client" services="export"/>
+        <module name="jakarta.xml.soap.api"/>
+        <module name="jakarta.xml.ws.api"/>
+
+        <!-- this is needed to ensure @Resource annotations on the JaxWS endpoint classes are in the
+             classloader scope-->
+        <module name="jakarta.annotation.api" export="true"/>
+        <!-- this is needed to ensure the JaxWS endpoint classes canb refer to HttpServletRequest etc -->
+        <module name="jakarta.servlet.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.interceptor.api" export="true"/>
+
+        <!-- This dependency is required only if the
+             xts subsystem is present. If it is the
+             subsystem may configure the deployment such
+             that this module will need to use classes from
+             the subsystem module.-->
+        <module name="org.jboss.as.xts" export="true" optional="true">
+          <imports>
+            <include path="org.jboss.as.xts.txnclient"/>
+          </imports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jctools/main/jctools-core-4.0.5.jar b/wildfly/modules/system/layers/base/org/jctools/main/jctools-core-4.0.5.jar
new file mode 100644
index 0000000..2a66a92
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jctools/main/jctools-core-4.0.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jctools/main/module.xml b/wildfly/modules/system/layers/base/org/jctools/main/module.xml
new file mode 100644
index 0000000..5b84f90
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jctools/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jctools" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jctools-core-4.0.5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jgroups/aws/main/jgroups-aws-3.0.0.Final.jar b/wildfly/modules/system/layers/base/org/jgroups/aws/main/jgroups-aws-3.0.0.Final.jar
new file mode 100644
index 0000000..a877d61
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jgroups/aws/main/jgroups-aws-3.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jgroups/aws/main/module.xml b/wildfly/modules/system/layers/base/org/jgroups/aws/main/module.xml
new file mode 100644
index 0000000..8d7066a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jgroups/aws/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jgroups.aws" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jgroups-aws-3.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jgroups"/>
+        <module name="software.amazon.awssdk.s3"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jgroups/azure/main/jgroups-azure-2.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jgroups/azure/main/jgroups-azure-2.0.2.Final.jar
new file mode 100644
index 0000000..85370e6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jgroups/azure/main/jgroups-azure-2.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jgroups/azure/main/module.xml b/wildfly/modules/system/layers/base/org/jgroups/azure/main/module.xml
new file mode 100644
index 0000000..63db689
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jgroups/azure/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jgroups.azure" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jgroups-azure-2.0.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.microsoft.azure.storage"/>
+        <module name="org.jgroups"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jgroups/kubernetes/main/jgroups-kubernetes-2.0.2.Final.jar b/wildfly/modules/system/layers/base/org/jgroups/kubernetes/main/jgroups-kubernetes-2.0.2.Final.jar
new file mode 100644
index 0000000..dc6272c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jgroups/kubernetes/main/jgroups-kubernetes-2.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jgroups/kubernetes/main/module.xml b/wildfly/modules/system/layers/base/org/jgroups/kubernetes/main/module.xml
new file mode 100644
index 0000000..1e6ae7f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jgroups/kubernetes/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jgroups.kubernetes" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jgroups-kubernetes-2.0.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.jgroups"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/jgroups/main/jgroups-5.2.28.Final.jar b/wildfly/modules/system/layers/base/org/jgroups/main/jgroups-5.2.28.Final.jar
new file mode 100644
index 0000000..ba370c1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/jgroups/main/jgroups-5.2.28.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/jgroups/main/module.xml b/wildfly/modules/system/layers/base/org/jgroups/main/module.xml
new file mode 100644
index 0000000..5323ed0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/jgroups/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.jgroups" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="jgroups-5.2.28.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.scripting"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+
+        <!-- Required by DNS_PING -->
+        <module name="jdk.naming.dns"/>
+
+        <module name="org.jgroups.azure"/>
+        <module name="org.jgroups.kubernetes"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/joda/time/main/joda-time-2.12.7.jar b/wildfly/modules/system/layers/base/org/joda/time/main/joda-time-2.12.7.jar
new file mode 100644
index 0000000..7994777
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/joda/time/main/joda-time-2.12.7.jar differ
diff --git a/wildfly/modules/system/layers/base/org/joda/time/main/module.xml b/wildfly/modules/system/layers/base/org/joda/time/main/module.xml
new file mode 100644
index 0000000..2549906
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/joda/time/main/module.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.joda.time" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="joda-time-2.12.7.jar"/>
+    </resources>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/module.xml b/wildfly/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/module.xml
new file mode 100644
index 0000000..6e7ae66
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.keycloak.keycloak-adapter-subsystem" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-keycloak-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.staxmapper"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/wildfly-keycloak-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/wildfly-keycloak-34.0.0.Beta1.jar
new file mode 100644
index 0000000..9483935
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/keycloak/keycloak-adapter-subsystem/main/wildfly-keycloak-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/lz4/lz4-java/main/lz4-java-1.8.0.jar b/wildfly/modules/system/layers/base/org/lz4/lz4-java/main/lz4-java-1.8.0.jar
new file mode 100644
index 0000000..89c644b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/lz4/lz4-java/main/lz4-java-1.8.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/lz4/lz4-java/main/module.xml b/wildfly/modules/system/layers/base/org/lz4/lz4-java/main/module.xml
new file mode 100644
index 0000000..ac1929f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/lz4/lz4-java/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.lz4.lz4-java" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="lz4-java-1.8.0.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/omg/api/main/module.xml b/wildfly/modules/system/layers/base/org/omg/api/main/module.xml
new file mode 100644
index 0000000..caf68d0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/omg/api/main/module.xml
@@ -0,0 +1,89 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.omg.api" xmlns="urn:jboss:module:1.9">
+
+    <dependencies>
+        <module name="javax.orb.api" export="false">
+            <exports>
+                <include-set>
+                    <path name="org/omg/ATLAS"/>
+                    <path name="org/omg/BiDirPolicy"/>
+                    <path name="org/omg/CONV_FRAME"/>
+                    <path name="org/omg/CORBA"/>
+                    <path name="org/omg/CORBA/ContainedPackage"/>
+                    <path name="org/omg/CORBA/ContainerPackage"/>
+                    <path name="org/omg/CORBA/InterfaceDefPackage"/>
+                    <path name="org/omg/CORBA/ORBPackage"/>
+                    <path name="org/omg/CORBA/TypeCodePackage"/>
+                    <path name="org/omg/CORBA/ValueDefPackage"/>
+                    <path name="org/omg/CORBA/portable"/>
+                    <path name="org/omg/CORBA_2_3"/>
+                    <path name="org/omg/CORBA_2_3/portable"/>
+                    <path name="org/omg/CORBA_2_5"/>
+                    <path name="org/omg/CSI"/>
+                    <path name="org/omg/CSIIOP"/>
+                    <path name="org/omg/CosCollection"/>
+                    <path name="org/omg/CosConcurrencyControl"/>
+                    <path name="org/omg/CosEventChannelAdmin"/>
+                    <path name="org/omg/CosEventComm"/>
+                    <path name="org/omg/CosNaming"/>
+                    <path name="org/omg/CosNaming/NamingContextExtPackage"/>
+                    <path name="org/omg/CosNaming/NamingContextPackage"/>
+                    <path name="org/omg/CosNotification"/>
+                    <path name="org/omg/CosNotifyChannelAdmin"/>
+                    <path name="org/omg/CosNotifyChannelAdminAck"/>
+                    <path name="org/omg/CosNotifyComm"/>
+                    <path name="org/omg/CosNotifyCommAck"/>
+                    <path name="org/omg/CosNotifyFilter"/>
+                    <path name="org/omg/CosPropertyService"/>
+                    <path name="org/omg/CosTime"/>
+                    <path name="org/omg/CosTypedEventChannelAdmin"/>
+                    <path name="org/omg/CosTypedEventComm"/>
+                    <path name="org/omg/CosTypedNotifyChannelAdmin"/>
+                    <path name="org/omg/CosTypedNotifyComm"/>
+                    <path name="org/omg/Dynamic"/>
+                    <path name="org/omg/DynamicAny"/>
+                    <path name="org/omg/DynamicAny/DynAnyFactoryPackage"/>
+                    <path name="org/omg/DynamicAny/DynAnyPackage"/>
+                    <path name="org/omg/ETF"/>
+                    <path name="org/omg/GIOP"/>
+                    <path name="org/omg/GSSUP"/>
+                    <path name="org/omg/IIOP"/>
+                    <path name="org/omg/IOP"/>
+                    <path name="org/omg/IOP/CodecFactoryPackage"/>
+                    <path name="org/omg/IOP/CodecPackage"/>
+                    <path name="org/omg/Messaging"/>
+                    <path name="org/omg/PortableInterceptor"/>
+                    <path name="org/omg/PortableInterceptor/ORBInitInfoPackage"/>
+                    <path name="org/omg/PortableServer"/>
+                    <path name="org/omg/PortableServer/CurrentPackage"/>
+                    <path name="org/omg/PortableServer/POAManagerPackage"/>
+                    <path name="org/omg/PortableServer/POAPackage"/>
+                    <path name="org/omg/PortableServer/ServantLocatorPackage"/>
+                    <path name="org/omg/PortableServer/portable"/>
+                    <path name="org/omg/RTCORBA"/>
+                    <path name="org/omg/SSLIOP"/>
+                    <path name="org/omg/Security"/>
+                    <path name="org/omg/SecurityAdmin"/>
+                    <path name="org/omg/SecurityLevel1"/>
+                    <path name="org/omg/SecurityLevel2"/>
+                    <path name="org/omg/SecurityReplaceable"/>
+                    <path name="org/omg/SendingContext"/>
+                    <path name="org/omg/TimeBase"/>
+                    <path name="org/omg/dds"/>
+                </include-set>
+            </exports>
+        </module>
+        <module name="org.jboss.jts" export="false">
+            <exports>
+                <include-set>
+                    <path name="org/omg/CosTransactions"/>
+                    <path name="org/omg/XA"/>
+                </include-set>
+            </exports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/cryptacular-1.2.5.jar b/wildfly/modules/system/layers/base/org/opensaml/main/cryptacular-1.2.5.jar
new file mode 100644
index 0000000..8cc43f3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/cryptacular-1.2.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/java-support-8.0.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/java-support-8.0.0.jar
new file mode 100644
index 0000000..22a73eb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/java-support-8.0.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/module.xml b/wildfly/modules/system/layers/base/org/opensaml/main/module.xml
new file mode 100644
index 0000000..31d4b1a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/opensaml/main/module.xml
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.opensaml" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="opensaml-core-4.3.0.jar"/>
+        <resource-root path="opensaml-profile-api-4.3.0.jar"/>
+        <resource-root path="opensaml-saml-api-4.3.0.jar"/>
+        <resource-root path="opensaml-saml-impl-4.3.0.jar"/>
+        <resource-root path="opensaml-security-api-4.3.0.jar"/>
+        <resource-root path="opensaml-security-impl-4.3.0.jar"/>
+        <resource-root path="opensaml-soap-api-4.3.0.jar"/>
+        <resource-root path="opensaml-xacml-api-4.3.0.jar"/>
+        <resource-root path="opensaml-xacml-impl-4.3.0.jar"/>
+        <resource-root path="opensaml-xacml-saml-api-4.3.0.jar"/>
+        <resource-root path="opensaml-xacml-saml-impl-4.3.0.jar"/>
+        <resource-root path="opensaml-xmlsec-api-4.3.0.jar"/>
+        <resource-root path="opensaml-xmlsec-impl-4.3.0.jar"/>
+        <resource-root path="cryptacular-1.2.5.jar"/>
+        <resource-root path="java-support-8.0.0.jar"/>
+    </resources>
+
+    <dependencies>
+      <module name="java.scripting"/>
+      <module name="org.slf4j"/>
+      <module name="org.apache.santuario.xmlsec"/>
+      <module name="org.apache.ws.security"/>
+      <module name="org.joda.time"/>
+      <module name="com.google.guava"/>
+      <module name="org.bouncycastle.bcmail"/>
+      <module name="org.bouncycastle.bcpkix"/>
+      <module name="org.bouncycastle.bcprov"/>
+      <module name="org.apache.commons.codec"/>
+      <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-core-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-core-4.3.0.jar
new file mode 100644
index 0000000..4efa3aa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-core-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-profile-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-profile-api-4.3.0.jar
new file mode 100644
index 0000000..9080204
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-profile-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-saml-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-saml-api-4.3.0.jar
new file mode 100644
index 0000000..8c2d899
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-saml-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-saml-impl-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-saml-impl-4.3.0.jar
new file mode 100644
index 0000000..003b27f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-saml-impl-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-security-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-security-api-4.3.0.jar
new file mode 100644
index 0000000..6c935e2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-security-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-security-impl-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-security-impl-4.3.0.jar
new file mode 100644
index 0000000..6038fc1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-security-impl-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-soap-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-soap-api-4.3.0.jar
new file mode 100644
index 0000000..23f9032
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-soap-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-api-4.3.0.jar
new file mode 100644
index 0000000..430de78
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-impl-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-impl-4.3.0.jar
new file mode 100644
index 0000000..f70dc31
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-impl-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-api-4.3.0.jar
new file mode 100644
index 0000000..bf51757
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-impl-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-impl-4.3.0.jar
new file mode 100644
index 0000000..1e87b9d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xacml-saml-impl-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-api-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-api-4.3.0.jar
new file mode 100644
index 0000000..05d0daf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-api-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-impl-4.3.0.jar b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-impl-4.3.0.jar
new file mode 100644
index 0000000..10d49b9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/opensaml/main/opensaml-xmlsec-impl-4.3.0.jar differ
diff --git a/wildfly/modules/system/layers/base/org/projectodd/vdx/main/module.xml b/wildfly/modules/system/layers/base/org/projectodd/vdx/main/module.xml
new file mode 100644
index 0000000..6352ce6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/projectodd/vdx/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.projectodd.vdx" xmlns="urn:jboss:module:1.9">
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+
+  <resources>
+    <resource-root path="vdx-core-1.1.6.jar"/>
+    <resource-root path="vdx-wildfly-1.1.6.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="java.xml"/>
+    <module name="org.jboss.logging"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/projectodd/vdx/main/vdx-core-1.1.6.jar b/wildfly/modules/system/layers/base/org/projectodd/vdx/main/vdx-core-1.1.6.jar
new file mode 100644
index 0000000..12ab675
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/projectodd/vdx/main/vdx-core-1.1.6.jar differ
diff --git a/wildfly/modules/system/layers/base/org/projectodd/vdx/main/vdx-wildfly-1.1.6.jar b/wildfly/modules/system/layers/base/org/projectodd/vdx/main/vdx-wildfly-1.1.6.jar
new file mode 100644
index 0000000..1c0c343
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/projectodd/vdx/main/vdx-wildfly-1.1.6.jar differ
diff --git a/wildfly/modules/system/layers/base/org/reactivestreams/main/module.xml b/wildfly/modules/system/layers/base/org/reactivestreams/main/module.xml
new file mode 100644
index 0000000..77171d5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/reactivestreams/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.reactivestreams" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="reactive-streams-1.0.4.jar"/>
+    </resources>
+
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/reactivestreams/main/reactive-streams-1.0.4.jar b/wildfly/modules/system/layers/base/org/reactivestreams/main/reactive-streams-1.0.4.jar
new file mode 100644
index 0000000..e58c483
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/reactivestreams/main/reactive-streams-1.0.4.jar differ
diff --git a/wildfly/modules/system/layers/base/org/slf4j/impl/main/jbosgi-xservice.properties b/wildfly/modules/system/layers/base/org/slf4j/impl/main/jbosgi-xservice.properties
new file mode 100644
index 0000000..5fa643f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/slf4j/impl/main/jbosgi-xservice.properties
@@ -0,0 +1,8 @@
+#
+# Copyright The WildFly Authors
+# SPDX-License-Identifier: Apache-2.0
+#
+
+Bundle-SymbolicName: org.slf4j.impl
+Bundle-Version: 1.7.2
+Export-Package: org.slf4j.impl;version="1.7.2"
diff --git a/wildfly/modules/system/layers/base/org/slf4j/impl/main/module.xml b/wildfly/modules/system/layers/base/org/slf4j/impl/main/module.xml
new file mode 100644
index 0000000..4d15aa4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/slf4j/impl/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.slf4j.impl" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="slf4j-jboss-logmanager-2.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.slf4j"/>
+        <module name="org.jboss.logmanager"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/slf4j/impl/main/slf4j-jboss-logmanager-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/slf4j/impl/main/slf4j-jboss-logmanager-2.0.1.Final.jar
new file mode 100644
index 0000000..da4af21
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/slf4j/impl/main/slf4j-jboss-logmanager-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/slf4j/main/module.xml b/wildfly/modules/system/layers/base/org/slf4j/main/module.xml
new file mode 100644
index 0000000..9a84f54
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/slf4j/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.slf4j" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="slf4j-api-2.0.13.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.slf4j.impl" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/slf4j/main/slf4j-api-2.0.13.jar b/wildfly/modules/system/layers/base/org/slf4j/main/slf4j-api-2.0.13.jar
new file mode 100644
index 0000000..a800cc2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/slf4j/main/slf4j-api-2.0.13.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/README.txt b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/README.txt
new file mode 100644
index 0000000..d23b32b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/README.txt
@@ -0,0 +1 @@
+Feature packs should add their indices to this folder
\ No newline at end of file
diff --git a/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/wildfly-ee-galleon-pack-unstable-api-annotation-index.zip b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/wildfly-ee-galleon-pack-unstable-api-annotation-index.zip
new file mode 100644
index 0000000..92457bf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/wildfly-ee-galleon-pack-unstable-api-annotation-index.zip differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/wildfly-galleon-pack-unstable-api-annotation-index.zip b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/wildfly-galleon-pack-unstable-api-annotation-index.zip
new file mode 100644
index 0000000..b949d84
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/content/wildfly-galleon-pack-unstable-api-annotation-index.zip differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/module.xml
new file mode 100644
index 0000000..e229c3a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/_internal/unstable-api-annotation-index/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly._internal.unstable-api-annotation-index" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="content"/>
+    </resources>
+    
+    <exports>
+        <include path="*"/>
+        <include path="**/*"/>
+    </exports>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/bootable-jar/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/bootable-jar/main/module.xml
new file mode 100644
index 0000000..806fc85
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/bootable-jar/main/module.xml
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.bootable-jar" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-jar-runtime-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <exports>
+        <exclude path="org/wildfly/core/jar/runtime/_private"/>
+    </exports>
+
+    <dependencies>
+        <!-- JMX to expose server MBeans -->
+        <!-- Fake java.management module required to access ManagementFactory -->
+        <module name="java.management"/>
+        <!-- module required to retrieve MBeanServer builder -->
+        <module name="org.jboss.as.jmx" services="import"/>
+        <!-- end JMX -->
+
+        <module name="java.xml"/>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.controller-client"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager" services="import"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.as.process-controller"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private" services="import"/>
+        <module name="org.jboss.as.cli"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/bootable-jar/main/wildfly-jar-runtime-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/bootable-jar/main/wildfly-jar-runtime-26.0.0.Beta5.jar
new file mode 100644
index 0000000..6d05781
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/bootable-jar/main/wildfly-jar-runtime-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/client/config/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/client/config/main/module.xml
new file mode 100644
index 0000000..d9485d2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/client/config/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.client.config" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-client-config-1.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/client/config/main/wildfly-client-config-1.0.1.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/client/config/main/wildfly-client-config-1.0.1.Final.jar
new file mode 100644
index 0000000..370e8c7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/client/config/main/wildfly-client-config-1.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/module.xml
new file mode 100644
index 0000000..d681175
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.cache.infinispan.common" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-cache-infinispan-common-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/wildfly-clustering-cache-infinispan-common-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/wildfly-clustering-cache-infinispan-common-1.1.2.Final.jar
new file mode 100644
index 0000000..5d7874b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/common/main/wildfly-clustering-cache-infinispan-common-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/module.xml
new file mode 100644
index 0000000..172ee96
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.cache.infinispan.embedded" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-cache-infinispan-embedded-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jgroups" optional="true"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/wildfly-clustering-cache-infinispan-embedded-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/wildfly-clustering-cache-infinispan-embedded-1.1.2.Final.jar
new file mode 100644
index 0000000..af86cb1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/embedded/main/wildfly-clustering-cache-infinispan-embedded-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/module.xml
new file mode 100644
index 0000000..ecb06aa
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.cache.infinispan.remote" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-cache-infinispan-remote-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="com.github.ben-manes.caffeine"/>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/wildfly-clustering-cache-infinispan-remote-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/wildfly-clustering-cache-infinispan-remote-1.1.2.Final.jar
new file mode 100644
index 0000000..4886cf3
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/infinispan/remote/main/wildfly-clustering-cache-infinispan-remote-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/module.xml
new file mode 100644
index 0000000..cebca6e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.cache.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-cache-spi-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="net.jcip"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common" services="import"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/wildfly-clustering-cache-spi-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/wildfly-clustering-cache-spi-1.1.2.Final.jar
new file mode 100644
index 0000000..6e251da
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/cache/spi/main/wildfly-clustering-cache-spi-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/context/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/context/main/module.xml
new file mode 100644
index 0000000..cbf0b6c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/context/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.context" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-context-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- Loads naming contextualizer -->
+        <module name="org.jboss.as.clustering.common" services="import" optional="true"/>
+        <!-- Loads batching contextualizer -->
+        <module name="org.wildfly.clustering.cache.infinispan.common" services="import" optional="true"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/context/main/wildfly-clustering-context-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/context/main/wildfly-clustering-context-1.1.2.Final.jar
new file mode 100644
index 0000000..e55a42f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/context/main/wildfly-clustering-context-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/module.xml
new file mode 100644
index 0000000..c4c8263
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.ejb.cache" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-ejb-cache-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.ejb.client"/>
+        <module name="org.wildfly.clustering.ejb.spi"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/wildfly-clustering-ejb-cache-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/wildfly-clustering-ejb-cache-34.0.0.Beta1.jar
new file mode 100644
index 0000000..b6e02bb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/cache/main/wildfly-clustering-ejb-cache-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/module.xml
new file mode 100644
index 0000000..9cdeb17
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.ejb.client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-ejb-client-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.wildfly.clustering.marshalling.api"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/wildfly-clustering-ejb-client-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/wildfly-clustering-ejb-client-34.0.0.Beta1.jar
new file mode 100644
index 0000000..3dcd931
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/client/main/wildfly-clustering-ejb-client-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/module.xml
new file mode 100644
index 0000000..9bd5d53
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/module.xml
@@ -0,0 +1,56 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.ejb.infinispan" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/clustering/ejb/infinispan/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-clustering-ejb-infinispan-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded" services="import"/>
+        <module name="org.wildfly.clustering.cache.spi" services="import"/>
+        <module name="org.wildfly.clustering.ejb.cache" services="import"/>
+        <module name="org.wildfly.clustering.ejb.client" services="import"/>
+        <module name="org.wildfly.clustering.ejb.spi"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.clustering.marshalling.api"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.infinispan" services="import"/>
+        <module name="org.wildfly.clustering.server.jgroups" services="import"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi" services="import"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/wildfly-clustering-ejb-infinispan-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/wildfly-clustering-ejb-infinispan-34.0.0.Beta1.jar
new file mode 100644
index 0000000..c62ecef
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/infinispan/main/wildfly-clustering-ejb-infinispan-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/module.xml
new file mode 100644
index 0000000..de2ca99
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/module.xml
@@ -0,0 +1,32 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.ejb.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-ejb-spi-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.ejb.api"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <!-- Enable dynamic loading of schedule timer operation provider -->
+        <module name="org.jboss.as.ejb3" services="import"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <!-- Enable dynamic loading of legacy distributable bean manager provider -->
+        <module name="org.wildfly.clustering.ejb.infinispan" services="import" optional="true"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/wildfly-clustering-ejb-spi-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/wildfly-clustering-ejb-spi-34.0.0.Beta1.jar
new file mode 100644
index 0000000..dfafe45
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/ejb/spi/main/wildfly-clustering-ejb-spi-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/module.xml
new file mode 100644
index 0000000..4923db4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.el.expressly" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-el-expressly-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.el.api"/>
+
+        <module name="org.glassfish.expressly"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/wildfly-clustering-el-expressly-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/wildfly-clustering-el-expressly-34.0.0.Beta1.jar
new file mode 100644
index 0000000..3a43a37
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/el/expressly/main/wildfly-clustering-el-expressly-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/api/main/module.xml
new file mode 100644
index 0000000..ce36816
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/api/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.faces.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-faces-api-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.faces.api"/>
+
+        <module name="org.infinispan.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/api/main/wildfly-clustering-faces-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/api/main/wildfly-clustering-faces-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..9b5bc39
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/api/main/wildfly-clustering-faces-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/module.xml
new file mode 100644
index 0000000..b739d81
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.faces.mojarra" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-faces-mojarra-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.faces.impl"/>
+        <module name="jakarta.faces.api"/>
+        <module name="jakarta.servlet.api"/>
+
+        <module name="org.infinispan.protostream"/>
+        <module name="org.wildfly.clustering.faces.api"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/wildfly-clustering-faces-mojarra-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/wildfly-clustering-faces-mojarra-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a02b58b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/faces/mojarra/main/wildfly-clustering-faces-mojarra-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/module.xml
new file mode 100644
index 0000000..5647815
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.infinispan.client.api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-infinispan-client-api-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/wildfly-clustering-infinispan-client-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/wildfly-clustering-infinispan-client-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..df27a86
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/api/main/wildfly-clustering-infinispan-client-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/module.xml
new file mode 100644
index 0000000..947e8fc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.infinispan.client.service" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-infinispan-client-service-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.clustering.infinispan.client.api"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/wildfly-clustering-infinispan-client-service-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/wildfly-clustering-infinispan-client-service-34.0.0.Beta1.jar
new file mode 100644
index 0000000..98be64a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/client/service/main/wildfly-clustering-infinispan-client-service-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/module.xml
new file mode 100644
index 0000000..f47b229
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.infinispan.embedded.service" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-infinispan-embedded-service-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/wildfly-clustering-infinispan-embedded-service-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/wildfly-clustering-infinispan-embedded-service-34.0.0.Beta1.jar
new file mode 100644
index 0000000..03f3e8b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/infinispan/embedded/service/main/wildfly-clustering-infinispan-embedded-service-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/module.xml
new file mode 100644
index 0000000..fcc297b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/module.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.jgroups.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-clustering-jgroups-api-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jgroups"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/wildfly-clustering-jgroups-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/wildfly-clustering-jgroups-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a77f720
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/api/main/wildfly-clustering-jgroups-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/module.xml
new file mode 100644
index 0000000..87559cd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.jgroups.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-jgroups-spi-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jgroups"/>
+        <module name="org.wildfly.clustering.jgroups.api"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/wildfly-clustering-jgroups-spi-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/wildfly-clustering-jgroups-spi-34.0.0.Beta1.jar
new file mode 100644
index 0000000..7c06e58
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/jgroups/spi/main/wildfly-clustering-jgroups-spi-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/module.xml
new file mode 100644
index 0000000..34dda01
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.marshalling.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-clustering-marshalling-api-34.0.0.Beta1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/wildfly-clustering-marshalling-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/wildfly-clustering-marshalling-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..1804649
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/api/main/wildfly-clustering-marshalling-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/module.xml
new file mode 100644
index 0000000..3bab966
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.marshalling.jboss" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-marshalling-jboss-1.1.2.Final.jar"/>
+        <resource-root path="wildfly-clustering-marshalling-jboss-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.sql"/>
+
+        <module name="org.jboss.marshalling"/>
+        <module name="org.wildfly.clustering.marshalling.api"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-1.1.2.Final.jar
new file mode 100644
index 0000000..e94dfce
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a8ce1b5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/jboss/main/wildfly-clustering-marshalling-jboss-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/module.xml
new file mode 100644
index 0000000..e8454d8
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.marshalling.protostream" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-marshalling-protostream-1.1.2.Final.jar"/>
+        <resource-root path="wildfly-clustering-marshalling-protostream-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.sql"/>
+
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-1.1.2.Final.jar
new file mode 100644
index 0000000..621c2ae
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-34.0.0.Beta1.jar
new file mode 100644
index 0000000..8e1d51c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/protostream/main/wildfly-clustering-marshalling-protostream-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/module.xml
new file mode 100644
index 0000000..97fd22b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.marshalling.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-marshalling-spi-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/wildfly-clustering-marshalling-spi-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/wildfly-clustering-marshalling-spi-1.1.2.Final.jar
new file mode 100644
index 0000000..6fe65e9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/marshalling/spi/main/wildfly-clustering-marshalling-spi-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/module.xml
new file mode 100644
index 0000000..4b4b77c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/module.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.server.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-api-34.0.0.Beta1.jar"/>
+        <resource-root path="wildfly-clustering-server-api-1.1.2.Final.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-1.1.2.Final.jar
new file mode 100644
index 0000000..e9b688d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..4838be6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/api/main/wildfly-clustering-server-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/module.xml
new file mode 100644
index 0000000..5c5a0a7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.server.infinispan" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-infinispan-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jgroups"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded" services="import"/>
+        <module name="org.wildfly.clustering.cache.spi" services="import"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.jgroups" services="import"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.spi" services="import"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/wildfly-clustering-server-infinispan-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/wildfly-clustering-server-infinispan-1.1.2.Final.jar
new file mode 100644
index 0000000..7c630cd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/infinispan/main/wildfly-clustering-server-infinispan-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/module.xml
new file mode 100644
index 0000000..a1878e6
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.server.jgroups" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-jgroups-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jgroups"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/wildfly-clustering-server-jgroups-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/wildfly-clustering-server-jgroups-1.1.2.Final.jar
new file mode 100644
index 0000000..74b2044
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/jgroups/main/wildfly-clustering-server-jgroups-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/local/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/local/main/module.xml
new file mode 100644
index 0000000..dafd3ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/local/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.server.local" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-local-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/local/main/wildfly-clustering-server-local-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/local/main/wildfly-clustering-server-local-1.1.2.Final.jar
new file mode 100644
index 0000000..a2aeafe
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/local/main/wildfly-clustering-server-local-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/main/module.xml
new file mode 100644
index 0000000..a0f7087
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Alias for a private module.
+
+    This module is an alias for a private module and may be removed at any time.
+-->
+<module-alias name="org.wildfly.clustering.server" target-name="org.wildfly.clustering.singleton.server" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/service/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/service/main/module.xml
new file mode 100644
index 0000000..f524415
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/service/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.server.service" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-service-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <!-- Enable dynamic installation of clustering services per channel or cache -->
+        <module name="org.wildfly.extension.clustering.server" services="import"/>
+        <!-- Enable dynamic installation of singleton services -->
+        <module name="org.wildfly.extension.clustering.singleton" services="import"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/service/main/wildfly-clustering-server-service-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/service/main/wildfly-clustering-server-service-34.0.0.Beta1.jar
new file mode 100644
index 0000000..99f4926
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/service/main/wildfly-clustering-server-service-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/spi/main/module.xml
new file mode 100644
index 0000000..630025d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/spi/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.server.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-spi-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/server/spi/main/wildfly-clustering-server-spi-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/spi/main/wildfly-clustering-server-spi-1.1.2.Final.jar
new file mode 100644
index 0000000..5aa77ea
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/server/spi/main/wildfly-clustering-server-spi-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/service/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/service/main/module.xml
new file mode 100644
index 0000000..6177fe1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/service/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.service" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-service-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/service/main/wildfly-clustering-service-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/service/main/wildfly-clustering-service-34.0.0.Beta1.jar
new file mode 100644
index 0000000..402bf15
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/service/main/wildfly-clustering-service-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/cache/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/cache/main/module.xml
new file mode 100644
index 0000000..f2c3276
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/cache/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.session.cache" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-session-cache-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.clustering.session.spec.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/cache/main/wildfly-clustering-session-cache-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/cache/main/wildfly-clustering-session-cache-1.1.2.Final.jar
new file mode 100644
index 0000000..8368779
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/cache/main/wildfly-clustering-session-cache-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/module.xml
new file mode 100644
index 0000000..5ece3f2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.session.infinispan.embedded" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-session-infinispan-embedded-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded" services="import"/>
+        <module name="org.wildfly.clustering.cache.spi" services="import"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.infinispan" services="import"/>
+        <module name="org.wildfly.clustering.server.jgroups" services="import"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.spi" services="import"/>
+        <module name="org.wildfly.clustering.session.cache" services="import"/>
+        <module name="org.wildfly.clustering.session.spec.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/wildfly-clustering-session-infinispan-embedded-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/wildfly-clustering-session-infinispan-embedded-1.1.2.Final.jar
new file mode 100644
index 0000000..24cfedd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/embedded/main/wildfly-clustering-session-infinispan-embedded-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/module.xml
new file mode 100644
index 0000000..d36bbd3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/module.xml
@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.session.infinispan.remote" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-session-infinispan-remote-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+
+        <module name="com.github.ben-manes.caffeine"/>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.infinispan.remote"/>
+        <module name="org.wildfly.clustering.cache.spi" services="import"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.spi" services="import"/>
+        <module name="org.wildfly.clustering.session.cache" services="import"/>
+        <module name="org.wildfly.clustering.session.spec.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/wildfly-clustering-session-infinispan-remote-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/wildfly-clustering-session-infinispan-remote-1.1.2.Final.jar
new file mode 100644
index 0000000..14c4438
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/infinispan/remote/main/wildfly-clustering-session-infinispan-remote-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/module.xml
new file mode 100644
index 0000000..a8e9ced
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.session.spec.servlet" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-session-spec-servlet-6.0-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.servlet.api"/>
+
+        <module name="org.wildfly.clustering.session.spec.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/wildfly-clustering-session-spec-servlet-6.0-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/wildfly-clustering-session-spec-servlet-6.0-1.1.2.Final.jar
new file mode 100644
index 0000000..9262faf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/servlet/main/wildfly-clustering-session-spec-servlet-6.0-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/module.xml
new file mode 100644
index 0000000..3e63484
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.session.spec.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-session-spec-spi-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.clustering.session.spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/wildfly-clustering-session-spec-spi-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/wildfly-clustering-session-spec-spi-1.1.2.Final.jar
new file mode 100644
index 0000000..63a2857
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spec/spi/main/wildfly-clustering-session-spec-spi-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spi/main/module.xml
new file mode 100644
index 0000000..0a5eb84
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spi/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.session.spi" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-session-spi-1.1.2.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <!-- Enable dynamic discovery of session identifier serializer -->
+        <module name="org.wildfly.clustering.web.undertow" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spi/main/wildfly-clustering-session-spi-1.1.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spi/main/wildfly-clustering-session-spi-1.1.2.Final.jar
new file mode 100644
index 0000000..55f15c5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/session/spi/main/wildfly-clustering-session-spi-1.1.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/module.xml
new file mode 100644
index 0000000..c5162b4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.singleton.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-clustering-singleton-api-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.service" export="true"/>
+        <module name="org.wildfly.service" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/wildfly-clustering-singleton-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/wildfly-clustering-singleton-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f6a211f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/api/main/wildfly-clustering-singleton-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/module.xml
new file mode 100644
index 0000000..a0295fe
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.singleton.compat" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-singleton-compat-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.clustering.singleton.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/wildfly-clustering-singleton-compat-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/wildfly-clustering-singleton-compat-34.0.0.Beta1.jar
new file mode 100644
index 0000000..eaa31d4
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/compat/main/wildfly-clustering-singleton-compat-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/main/module.xml
new file mode 100644
index 0000000..4cc4be1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Deprecated module alias.
+
+    This module is an alias for the module specified in the 'target-name' attribute,
+    provided for compatibility purposes.
+    Uses of this module should be updated to use the target module.
+    This alias is deprecated and will be removed in a future release.
+-->
+<module-alias name="org.wildfly.clustering.singleton" target-name="org.wildfly.clustering.singleton.api" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/module.xml
new file mode 100644
index 0000000..f5a20a3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/module.xml
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.singleton.server" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-singleton-server-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded" services="import"/>
+        <module name="org.wildfly.clustering.cache.spi" services="import"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.infinispan" services="import"/>
+        <module name="org.wildfly.clustering.server.jgroups" services="import"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi" services="import"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.clustering.singleton.api"/>
+        <module name="org.wildfly.clustering.singleton.compat"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/wildfly-clustering-singleton-server-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/wildfly-clustering-singleton-server-34.0.0.Beta1.jar
new file mode 100644
index 0000000..28d4881
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/singleton/server/main/wildfly-clustering-singleton-server-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/api/main/module.xml
new file mode 100644
index 0000000..686d433
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/api/main/module.xml
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.web.api" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-clustering-web-api-34.0.0.Beta1.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/api/main/wildfly-clustering-web-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/api/main/wildfly-clustering-web-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a94d956
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/api/main/wildfly-clustering-web-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/container/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/container/main/module.xml
new file mode 100644
index 0000000..dff5a86
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/container/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.web.container" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-web-container-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <!-- Allow dynamic loading of distributable session management and single sign-on providers -->
+        <module name="org.wildfly.clustering.web.undertow" services="import" optional="true"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/container/main/wildfly-clustering-web-container-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/container/main/wildfly-clustering-web-container-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f6eaa47
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/container/main/wildfly-clustering-web-container-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/hotrod/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/hotrod/main/module.xml
new file mode 100644
index 0000000..55f6e1c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/hotrod/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Deprecated module alias.
+
+    This module is an alias for the module specified in the 'target-name' attribute,
+    provided for compatibility purposes.
+    Uses of this module should be updated to use the target module.
+    This alias is deprecated and will be removed in a future release.
+-->
+<module-alias name="org.wildfly.clustering.web.hotrod" target-name="org.wildfly.clustering.session.infinispan.remote" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/infinispan/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/infinispan/main/module.xml
new file mode 100644
index 0000000..f595d32
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/infinispan/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<!--
+    END USER MODULE USAGE: Deprecated module alias.
+
+    This module is an alias for the module specified in the 'target-name' attribute,
+    provided for compatibility purposes.
+    Uses of this module should be updated to use the target module.
+    This alias is deprecated and will be removed in a future release.
+-->
+<module-alias name="org.wildfly.clustering.web.infinispan" target-name="org.wildfly.clustering.session.infinispan.embedded" xmlns="urn:jboss:module:1.9"/>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/service/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/service/main/module.xml
new file mode 100644
index 0000000..43bfd99
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/service/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.web.service" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-web-service-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+
+        <!-- Enable dynamic installation of legacy session management provider -->
+        <module name="org.wildfly.extension.clustering.web" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/service/main/wildfly-clustering-web-service-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/service/main/wildfly-clustering-web-service-34.0.0.Beta1.jar
new file mode 100644
index 0000000..3931e2f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/service/main/wildfly-clustering-web-service-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/module.xml
new file mode 100644
index 0000000..4fadd7a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/module.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.web.undertow" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-web-undertow-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.servlet.api"/>
+
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.clustering.session.spec.servlet"/>
+        <module name="org.wildfly.clustering.session.spec.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+        <module name="org.wildfly.clustering.web.container"/>
+        <module name="org.wildfly.clustering.web.service"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.extension.undertow"/>
+        <module name="org.wildfly.security.elytron-base"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server-servlet"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/wildfly-clustering-web-undertow-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/wildfly-clustering-web-undertow-34.0.0.Beta1.jar
new file mode 100644
index 0000000..e4224a8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/web/undertow/main/wildfly-clustering-web-undertow-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/core/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/core/main/module.xml
new file mode 100644
index 0000000..b4d8056
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/core/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.weld.core" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-weld-core-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.weld.spi"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/core/main/wildfly-clustering-weld-core-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/core/main/wildfly-clustering-weld-core-34.0.0.Beta1.jar
new file mode 100644
index 0000000..7fb926c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/core/main/wildfly-clustering-weld-core-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/module.xml
new file mode 100644
index 0000000..569adea
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.weld.ejb" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-weld-ejb-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.ejb3"/>
+        <module name="org.jboss.as.weld.ejb"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.wildfly.clustering.ejb.client"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/wildfly-clustering-weld-ejb-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/wildfly-clustering-weld-ejb-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a149acd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/ejb/main/wildfly-clustering-weld-ejb-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/web/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/web/main/module.xml
new file mode 100644
index 0000000..d15cd82
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/web/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.clustering.weld.web" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-weld-web-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/web/main/wildfly-clustering-weld-web-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/web/main/wildfly-clustering-weld-web-34.0.0.Beta1.jar
new file mode 100644
index 0000000..7410849
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/clustering/weld/web/main/wildfly-clustering-weld-web-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/common/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/common/main/module.xml
new file mode 100644
index 0000000..e10b700
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/common/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-common-1.7.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/common/main/wildfly-common-1.7.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/common/main/wildfly-common-1.7.0.Final.jar
new file mode 100644
index 0000000..511ff32
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/common/main/wildfly-common-1.7.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/discovery/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/discovery/main/module.xml
new file mode 100644
index 0000000..e4240a3
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/discovery/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.discovery" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-discovery-client-1.3.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/discovery/main/wildfly-discovery-client-1.3.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/discovery/main/wildfly-discovery-client-1.3.0.Final.jar
new file mode 100644
index 0000000..b94a16a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/discovery/main/wildfly-discovery-client-1.3.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/embedded/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/embedded/main/module.xml
new file mode 100644
index 0000000..66bfc89
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/embedded/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.embedded" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <!-- Core version of the embedded API is currently only meant
+        for use by the CLI -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/jboss/as/embedded/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-embedded-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.controller-client"/>
+        <module name="org.jboss.as.host-controller"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.stdio"/>
+        <module name="org.jboss.threads"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/embedded/main/wildfly-embedded-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/embedded/main/wildfly-embedded-26.0.0.Beta5.jar
new file mode 100644
index 0000000..a825a8f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/embedded/main/wildfly-embedded-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/event/logger/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/event/logger/main/module.xml
new file mode 100644
index 0000000..0bc224e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/event/logger/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.event.logger" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-event-logger-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="internal.javax.json.api.ee8"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/event/logger/main/wildfly-event-logger-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/event/logger/main/wildfly-event-logger-26.0.0.Beta5.jar
new file mode 100644
index 0000000..52ea70d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/event/logger/main/wildfly-event-logger-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/module.xml
new file mode 100644
index 0000000..fc818e2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.batch.jberet" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/batch/jberet/_private"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-batch-jberet-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.sql"/>
+        <module name="jakarta.batch.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jberet.jberet-core" services="import"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.threads"/>
+        <module name="org.jboss.as.server"/>
+        <!-- Only used if capability org.wildfly.weld is available -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.extension.request-controller"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="java.xml"/>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/wildfly-batch-jberet-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/wildfly-batch-jberet-34.0.0.Beta1.jar
new file mode 100644
index 0000000..16b3938
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/batch/jberet/main/wildfly-batch-jberet-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/bean-validation/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/bean-validation/main/module.xml
new file mode 100644
index 0000000..bc61e62
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/bean-validation/main/module.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.bean-validation" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/beanvalidation/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-bean-validation-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.validation.api"/>
+        <module name="org.hibernate.validator" optional="true" services="import"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <!-- Only used if capability org.wildfly.weld is available -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/bean-validation/main/wildfly-bean-validation-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/bean-validation/main/wildfly-bean-validation-34.0.0.Beta1.jar
new file mode 100644
index 0000000..b252630
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/bean-validation/main/wildfly-bean-validation-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/module.xml
new file mode 100644
index 0000000..2c5fc86
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.clustering.ejb" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-ejb-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.clustering.ejb.cache"/>
+        <module name="org.wildfly.clustering.ejb.infinispan"/>
+        <module name="org.wildfly.clustering.ejb.spi"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/wildfly-clustering-ejb-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/wildfly-clustering-ejb-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..1899b2a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/ejb/main/wildfly-clustering-ejb-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/server/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/server/main/module.xml
new file mode 100644
index 0000000..539d491
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/server/main/module.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.clustering.server" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-server-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jgroups"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.clustering.jgroups.spi"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.infinispan"/>
+        <module name="org.wildfly.clustering.server.jgroups"/>
+        <module name="org.wildfly.clustering.server.local"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/server/main/wildfly-clustering-server-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/server/main/wildfly-clustering-server-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..818855d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/server/main/wildfly-clustering-server-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/module.xml
new file mode 100644
index 0000000..8fad912
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.clustering.singleton" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-singleton-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.clustering.singleton.api"/>
+        <module name="org.wildfly.clustering.singleton.compat"/>
+        <module name="org.wildfly.clustering.singleton.server"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/wildfly-clustering-singleton-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/wildfly-clustering-singleton-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..e46530d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/singleton/main/wildfly-clustering-singleton-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/web/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/web/main/module.xml
new file mode 100644
index 0000000..123de90
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/web/main/module.xml
@@ -0,0 +1,71 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.clustering.web" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-clustering-web-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+
+        <module name="org.infinispan.commons"/>
+        <module name="org.infinispan.core"/>
+        <module name="org.infinispan.client.hotrod"/>
+        <module name="org.infinispan.protostream"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.jsf"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.invocation" optional="true"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.clustering.cache.infinispan.common"/>
+        <module name="org.wildfly.clustering.cache.infinispan.embedded"/>
+        <module name="org.wildfly.clustering.cache.infinispan.remote"/>
+        <module name="org.wildfly.clustering.cache.spi"/>
+        <module name="org.wildfly.clustering.el.expressly"/>
+        <module name="org.wildfly.clustering.faces.mojarra"/>
+        <module name="org.wildfly.clustering.infinispan.client.api"/>
+        <module name="org.wildfly.clustering.infinispan.client.service"/>
+        <module name="org.wildfly.clustering.infinispan.embedded.service"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.marshalling.protostream"/>
+        <module name="org.wildfly.clustering.marshalling.spi"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.infinispan"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.clustering.session.cache"/>
+        <module name="org.wildfly.clustering.session.infinispan.embedded"/>
+        <module name="org.wildfly.clustering.session.infinispan.remote"/>
+        <module name="org.wildfly.clustering.session.spec.servlet"/>
+        <module name="org.wildfly.clustering.session.spec.spi"/>
+        <module name="org.wildfly.clustering.session.spi"/>
+        <module name="org.wildfly.clustering.web.api"/>
+        <module name="org.wildfly.clustering.web.service"/>
+        <module name="org.wildfly.clustering.weld.core"/>
+        <module name="org.wildfly.clustering.weld.ejb"/>
+        <module name="org.wildfly.clustering.weld.web"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/web/main/wildfly-clustering-web-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/web/main/wildfly-clustering-web-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..ab2520d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/clustering/web/main/wildfly-clustering-web-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/core-management-client/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management-client/main/module.xml
new file mode 100644
index 0000000..5ac9c01
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management-client/main/module.xml
@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.core-management-client" xmlns="urn:jboss:module:1.9">
+    <resources>
+        <resource-root path="wildfly-core-management-client-26.0.0.Beta5.jar"/>
+    </resources>
+    <dependencies>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/core-management-client/main/wildfly-core-management-client-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management-client/main/wildfly-core-management-client-26.0.0.Beta5.jar
new file mode 100644
index 0000000..96de8e0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management-client/main/wildfly-core-management-client-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/core-management/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management/main/module.xml
new file mode 100644
index 0000000..99358d5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.core-management" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-core-management-subsystem-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- for java.beans -->
+        <module name="java.desktop"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs" services="import"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.extension.core-management-client"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.unstable.annotation.api.indexer"/>
+        <module name="org.wildfly._internal.unstable-api-annotation-index"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/core-management/main/wildfly-core-management-subsystem-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management/main/wildfly-core-management-subsystem-26.0.0.Beta5.jar
new file mode 100644
index 0000000..73e49ea
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/core-management/main/wildfly-core-management-subsystem-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/module.xml
new file mode 100644
index 0000000..ddcf26f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.datasources-agroal" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-datasources-agroal-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.agroal"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="java.security.jgss"/>
+        <module name="java.sql"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.security.elytron"/>
+        <module name="org.wildfly.transaction.client"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/wildfly-datasources-agroal-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/wildfly-datasources-agroal-34.0.0.Beta1.jar
new file mode 100644
index 0000000..94405be
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/datasources-agroal/main/wildfly-datasources-agroal-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/discovery/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/discovery/main/module.xml
new file mode 100644
index 0000000..09f6d5f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/discovery/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.discovery" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-discovery-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.discovery"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/discovery/main/wildfly-discovery-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/discovery/main/wildfly-discovery-26.0.0.Beta5.jar
new file mode 100644
index 0000000..0ada58b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/discovery/main/wildfly-discovery-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/ee-security/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/ee-security/main/module.xml
new file mode 100644
index 0000000..8a33fb5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/ee-security/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.ee-security" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/ee-security/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-ee-security-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.glassfish.soteria"/>
+        <module name="jakarta.security.enterprise.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="io.smallrye.jandex"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/ee-security/main/wildfly-ee-security-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/ee-security/main/wildfly-ee-security-34.0.0.Beta1.jar
new file mode 100644
index 0000000..c3eb285
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/ee-security/main/wildfly-ee-security-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/module.xml
new file mode 100644
index 0000000..bf71e11
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.elytron-oidc-client" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-oidc-client-subsystem-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="org.wildfly.security.elytron-http-oidc"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/wildfly-elytron-oidc-client-subsystem-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/wildfly-elytron-oidc-client-subsystem-34.0.0.Beta1.jar
new file mode 100644
index 0000000..24acce2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron-oidc-client/main/wildfly-elytron-oidc-client-subsystem-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/jaas-realm/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/jaas-realm/main/module.xml
new file mode 100644
index 0000000..3f39f21
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/jaas-realm/main/module.xml
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ JBoss, Home of Professional Open Source.
+  ~ Copyright 2023, Red Hat, Inc., and individual contributors
+  ~ as indicated by the @author tags. See the copyright.txt file in the
+  ~ distribution for a full listing of individual contributors.
+  ~
+  ~ This is free software; you can redistribute it and/or modify it
+  ~ under the terms of the GNU Lesser General Public License as
+  ~ published by the Free Software Foundation; either version 2.1 of
+  ~ the License, or (at your option) any later version.
+  ~
+  ~ This software is distributed in the hope that it will be useful,
+  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
+  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
+  ~ Lesser General Public License for more details.
+  ~
+  ~ You should have received a copy of the GNU Lesser General Public
+  ~ License along with this software; if not, write to the Free
+  ~ Software Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA
+  ~ 02110-1301 USA, or see the FSF site: http://www.fsf.org.
+  -->
+<module name="org.wildfly.extension.elytron.jaas-realm" xmlns="urn:jboss:module:1.9">
+
+    <!--    This module is deprecated, and you should use the jaas-realm resource instead of this module. -->
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private" export="true"/>
+        <module name="org.wildfly.extension.elytron" export="true">
+            <exports>
+                <!--
+                     Limit what we export by excluding resources in subdirectories of 'org/wildfly/extension/elytron'.
+                     The meaning of the trailing '*' in the path here is to match subdirectories, but not individual
+                     resources directly under 'org/wildfly/extension/elytron'.
+                     Ideally we would only export a single class, but JBoss Modules does not support that kind of
+                     configuration, so as a next-best we don't export resources that are not in that class's package.
+                 -->
+                <exclude path="org/wildfly/extension/elytron/*"/>
+            </exports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/main/module.xml
new file mode 100644
index 0000000..033123c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/main/module.xml
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.elytron" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/elytron/ElytronExtension"/>
+        <exclude path="org/wildfly/extension/elytron/ElytronSubsystemTransformers"/>
+        <exclude path="org/wildfly/extension/elytron/_private"/>
+        <exclude path="org/wildfly/extension/elytron/capabilities/_private"/>
+        <exclude path="org/wildfly/extension/elytron/expression"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-elytron-integration-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/main/wildfly-elytron-integration-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/main/wildfly-elytron-integration-26.0.0.Beta5.jar
new file mode 100644
index 0000000..885493c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/elytron/main/wildfly-elytron-integration-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/health/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/health/main/module.xml
new file mode 100644
index 0000000..561babc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/health/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.health" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-health-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/health/main/wildfly-health-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/health/main/wildfly-health-34.0.0.Beta1.jar
new file mode 100644
index 0000000..03538e8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/health/main/wildfly-health-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/io/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/io/main/module.xml
new file mode 100644
index 0000000..2a28878
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/io/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.io" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/io/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-io-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="jdk.security.auth"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.jboss.xnio.nio" services="import"/>
+        <module name="org.wildfly.common"/>
+        <!-- Temporarily export this dependency, until dependents modules in wildfly are updated -->
+        <module name="org.wildfly.io.spi" export="true"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="io.undertow.core"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/io/main/wildfly-io-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/io/main/wildfly-io-26.0.0.Beta5.jar
new file mode 100644
index 0000000..fa0ba21
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/io/main/wildfly-io-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/module.xml
new file mode 100644
index 0000000..5bc8239
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.messaging-activemq.injection" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-messaging-activemq-injection-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/wildfly-messaging-activemq-injection-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/wildfly-messaging-activemq-injection-34.0.0.Beta1.jar
new file mode 100644
index 0000000..30e218e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/injection/main/wildfly-messaging-activemq-injection-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/artemis-wildfly-integration-2.0.2.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/artemis-wildfly-integration-2.0.2.Final.jar
new file mode 100644
index 0000000..741c1fa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/artemis-wildfly-integration-2.0.2.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml
new file mode 100644
index 0000000..d3beea7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/module.xml
@@ -0,0 +1,96 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.messaging-activemq" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-messaging-activemq-subsystem-34.0.0.Beta1.jar"/>
+        <resource-root path="artemis-wildfly-integration-2.0.2.Final.jar"/>
+    </resources>
+
+     <provides>
+        <service name="org.apache.activemq.artemis.spi.core.remoting.ssl.SSLContextFactory">
+          <with-class name="org.jboss.activemq.artemis.wildfly.integration.WildFlySSLContextFactory"/>
+        </service>
+    </provides>
+
+    <dependencies>
+        <module name="org.wildfly.extension.messaging-activemq.injection"/>
+        <module name="java.logging"/>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.sql"/>
+        <module name="java.transaction.xa"/>
+        <module name="java.xml"/>
+
+        <!-- io.undertow.core is required only if http-acceptor are used -->
+        <module name="io.undertow.core" optional="true"/>
+        <!--<module name="io.netty"/>-->
+        <module name="io.netty.netty-buffer"/>
+        <module name="io.netty.netty-transport"/>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.netty.netty-handler-proxy"/>
+        <module name="io.netty.netty-codec"/>
+        <module name="io.netty.netty-codec-socks"/>
+        <module name="io.netty.netty-common"/>
+        <module name="io.netty.netty-resolver"/>
+        <module name="io.netty.netty-transport-native-epoll"/>
+        <module name="io.netty.netty-transport-native-kqueue"/>
+        <module name="io.netty.netty-codec-http"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.jms.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.resource.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.apache.activemq.artemis" services="import" optional="true"/>
+        <module name="org.apache.activemq.artemis.client" services="import" export="true"/>
+        <module name="org.apache.activemq.artemis.ra" export="true"/>
+        <module name="org.jboss.common-beans"/>
+        <module name="org.jboss.staxmapper"/>
+        <!-- required to provide high-level Jakarta Messaging CLI commands loaded by the extension -->
+        <module name="org.jboss.as.cli" optional="true"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.as.server"/>
+        <!-- Only used if capability org.wildfly.weld is available -->
+        <module name="org.jboss.as.weld.common" optional="true"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.ironjacamar.impl"/>
+        <module name="org.jboss.ironjacamar.api"/>
+        <module name="org.jboss.as.connector"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.jboss.jboss-transaction-spi"/>
+        <module name="org.wildfly.naming-client" services="import"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.weld.core"/>
+        <!-- org.jboss.xnio is required only if http-acceptor are used -->
+        <module name="org.jboss.xnio" optional="true"/>
+        <!-- org.jboss.xnio.netty.netty-xnio-transport is required only if http-acceptor are used -->
+        <module name="org.jboss.xnio.netty.netty-xnio-transport" optional="true"/>
+        <module name="org.wildfly.clustering.marshalling.jboss"/>
+        <module name="org.wildfly.clustering.server.api"/>
+        <module name="org.wildfly.clustering.server.service"/>
+        <module name="org.wildfly.clustering.server.spi"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+        <module name="org.wildfly.transaction.client"/>
+        <!-- Use the HornetQ client module to create the legacy connection factory and destination resources -->
+        <module name="org.hornetq.client" optional="true"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/wildfly-messaging-activemq-subsystem-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/wildfly-messaging-activemq-subsystem-34.0.0.Beta1.jar
new file mode 100644
index 0000000..644b0e7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/messaging-activemq/main/wildfly-messaging-activemq-subsystem-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/metrics/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/metrics/main/module.xml
new file mode 100644
index 0000000..ee60fa9
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/metrics/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.metrics" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-metrics-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/metrics/main/wildfly-metrics-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/metrics/main/wildfly-metrics-34.0.0.Beta1.jar
new file mode 100644
index 0000000..76b5d6b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/metrics/main/wildfly-metrics-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/micrometer/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/micrometer/main/module.xml
new file mode 100644
index 0000000..2875ded
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/micrometer/main/module.xml
@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.micrometer" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-micrometer-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.micrometer"/>
+        <module name="io.undertow.core"/>
+        <module name="org.wildfly.micrometer.deployment"/>
+
+        <module name="java.logging"/>
+        <module name="java.desktop"/>
+        <module name="java.management"/>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.manager"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/micrometer/main/wildfly-micrometer-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/micrometer/main/wildfly-micrometer-34.0.0.Beta1.jar
new file mode 100644
index 0000000..240e2fb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/micrometer/main/wildfly-micrometer-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/module.xml
new file mode 100644
index 0000000..9e4eb0d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.config-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-config-smallrye-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="io.smallrye.config" export="true"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/wildfly-microprofile-config-smallrye-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/wildfly-microprofile-config-smallrye-34.0.0.Beta1.jar
new file mode 100644
index 0000000..9650c2d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/config-smallrye/main/wildfly-microprofile-config-smallrye-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/module.xml
new file mode 100644
index 0000000..8cdc45c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/module.xml
@@ -0,0 +1,34 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.fault-tolerance-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-fault-tolerance-smallrye-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="io.smallrye.fault-tolerance"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/wildfly-microprofile-fault-tolerance-smallrye-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/wildfly-microprofile-fault-tolerance-smallrye-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..5acb24b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/fault-tolerance-smallrye/main/wildfly-microprofile-fault-tolerance-smallrye-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/module.xml
new file mode 100644
index 0000000..8f6b898
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/module.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.health-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-health-smallrye-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.health"/>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.health.api"/>
+        <module name="org.wildfly.extension.health"/>
+        <module name="org.wildfly.extension.microprofile.config-smallrye"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.json.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/wildfly-microprofile-health-smallrye-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/wildfly-microprofile-health-smallrye-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6633dde
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/health-smallrye/main/wildfly-microprofile-health-smallrye-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/module.xml
new file mode 100644
index 0000000..f93d3d1
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.jwt-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-jwt-smallrye-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.config" export="true"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.security.elytron-jwt"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="io.smallrye.jandex"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/wildfly-microprofile-jwt-smallrye-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/wildfly-microprofile-jwt-smallrye-34.0.0.Beta1.jar
new file mode 100644
index 0000000..8af3677
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/jwt-smallrye/main/wildfly-microprofile-jwt-smallrye-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/module.xml
new file mode 100644
index 0000000..719deba
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/module.xml
@@ -0,0 +1,39 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.lra-coordinator" xmlns="urn:jboss:module:1.9">
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+
+  <resources>
+    <resource-root path="wildfly-microprofile-lra-coordinator-34.0.0.Beta1.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="org.jboss.narayana.rts.lra-coordinator"/>
+    <module name="org.jboss.jts"/>
+    <module name="org.jboss.jboss-transaction-spi"/>
+
+    <module name="jakarta.ws.rs.api"/>
+    <module name="jakarta.servlet.api"/>
+    <module name="io.undertow.core"/>
+    <module name="io.undertow.servlet"/>
+    <module name="org.wildfly.extension.undertow"/>
+
+    <!-- Loading JAX-RS dependencies for LRA coordinator boot up -->
+    <module name="org.jboss.resteasy.resteasy-jaxrs" services="export"/>
+    <module name="org.jboss.resteasy.resteasy-jaxb-provider" services="export"/>
+    <module name="org.hibernate.validator" services="export"/>
+    <module name="org.jboss.resteasy.resteasy-jackson2-provider" services="export"/>
+
+    <module name="org.jboss.as.controller"/>
+    <module name="org.jboss.as.server"/>
+    <module name="org.jboss.logging"/>
+    <module name="org.jboss.modules"/>
+    <module name="org.jboss.staxmapper"/>
+    <module name="org.wildfly.security.manager"/>
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/wildfly-microprofile-lra-coordinator-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/wildfly-microprofile-lra-coordinator-34.0.0.Beta1.jar
new file mode 100644
index 0000000..3f9cf9b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-coordinator/main/wildfly-microprofile-lra-coordinator-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/module.xml
new file mode 100644
index 0000000..1fce143
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/module.xml
@@ -0,0 +1,47 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.lra-participant" xmlns="urn:jboss:module:1.9">
+  <properties>
+    <property name="jboss.api" value="private"/>
+  </properties>
+
+  <resources>
+    <resource-root path="wildfly-microprofile-lra-participant-34.0.0.Beta1.jar"/>
+  </resources>
+
+  <dependencies>
+    <module name="org.eclipse.microprofile.lra.api"/>
+    <module name="org.jboss.narayana.rts.lra-participant"/>
+    <module name="io.smallrye.jandex"/>
+
+    <module name="jakarta.enterprise.api"/>
+    <module name="org.jboss.as.jaxrs"/>
+    <module name="jakarta.ws.rs.api"/>
+    <module name="jakarta.servlet.api"/>
+
+    <module name="org.jboss.vfs"/>
+    <module name="org.jboss.as.weld.common"/>
+    <module name="org.jboss.as.ee"/>
+
+    <module name="io.undertow.core"/>
+    <module name="io.undertow.servlet"/>
+    <module name="org.wildfly.extension.undertow"/>
+
+    <!-- Loading JAX-RS dependencies for LRA Participant Proxy bootup -->
+    <module name="org.jboss.resteasy.resteasy-jaxrs" services="export"/>
+    <module name="org.jboss.resteasy.resteasy-jaxb-provider" services="export"/>
+    <module name="org.hibernate.validator" services="export"/>
+    <module name="org.jboss.resteasy.resteasy-jackson2-provider" services="export"/>
+
+    <module name="org.jboss.as.controller"/>
+    <module name="org.jboss.as.server"/>
+    <module name="org.jboss.logging"/>
+    <module name="org.jboss.modules"/>
+    <module name="org.jboss.staxmapper"/>
+    <module name="org.wildfly.security.manager"/>
+
+  </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/wildfly-microprofile-lra-participant-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/wildfly-microprofile-lra-participant-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a02b467
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/lra-participant/main/wildfly-microprofile-lra-participant-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/module.xml
new file mode 100644
index 0000000..03e4f8f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.metrics-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-metrics-smallrye-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.extension.metrics"/>
+        <module name="org.wildfly.extension.microprofile.config-smallrye"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.annotation.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/wildfly-microprofile-metrics-smallrye-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/wildfly-microprofile-metrics-smallrye-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f09c9f2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/metrics-smallrye/main/wildfly-microprofile-metrics-smallrye-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/module.xml
new file mode 100644
index 0000000..50b26dd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/module.xml
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.openapi-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/microprofile/openapi/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-openapi-smallrye-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.ws.rs.api"/>
+
+        <module name="io.smallrye.jandex"/>
+        <module name="io.smallrye.openapi"/>
+
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.openapi.api"/>
+
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.jaxrs"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.resteasy.resteasy-client"/>
+        <module name="org.jboss.resteasy.resteasy-core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs"/>
+
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.extension.undertow"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/wildfly-microprofile-openapi-smallrye-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/wildfly-microprofile-openapi-smallrye-34.0.0.Beta1.jar
new file mode 100644
index 0000000..01e90bb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/openapi-smallrye/main/wildfly-microprofile-openapi-smallrye-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/module.xml
new file mode 100644
index 0000000..d4dba4f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/module.xml
@@ -0,0 +1,35 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.opentracing-smallrye" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-opentracing-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.network"/>
+
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.security.elytron"/>
+        <module name="org.wildfly.service"/>
+
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/wildfly-microprofile-opentracing-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/wildfly-microprofile-opentracing-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..74a38b7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/opentracing-smallrye/main/wildfly-microprofile-opentracing-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/module.xml
new file mode 100644
index 0000000..64266a5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/module.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.reactive-messaging-smallrye" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-messaging-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <!-- Needed to initialise the netty logger if the module is present -->
+        <module name="io.netty" optional="true"/>
+
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.reactive.messaging.common"/>
+        <module name="org.wildfly.reactive.messaging.amqp" optional="true" services="export"/>
+        <module name="org.wildfly.reactive.messaging.kafka" optional="true" services="export"/>
+        <module name="org.wildfly.security.manager"/>
+
+        <!--
+            Most RM dependencies are provisioned in the subsystem definition, as they are not
+            required by the subsystem itself, only by the deployments
+        -->
+
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/wildfly-microprofile-reactive-messaging-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/wildfly-microprofile-reactive-messaging-34.0.0.Beta1.jar
new file mode 100644
index 0000000..8ae9829
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-messaging-smallrye/main/wildfly-microprofile-reactive-messaging-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/module.xml
new file mode 100644
index 0000000..5468de0
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.reactive-streams-operators-smallrye" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-streams-operators-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+
+        <!--
+            The RSO dependencies are provisioned in the subsystem definition, as they are not
+            required by the subsystem itself, only by the deployments
+        -->
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/wildfly-microprofile-reactive-streams-operators-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/wildfly-microprofile-reactive-streams-operators-34.0.0.Beta1.jar
new file mode 100644
index 0000000..1a2bffc
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/reactive-streams-operators-smallrye/main/wildfly-microprofile-reactive-streams-operators-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/module.xml
new file mode 100644
index 0000000..de29d59
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/module.xml
@@ -0,0 +1,38 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.telemetry-api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-telemetry-cdi-provider-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.wildfly.extension.microprofile.config-smallrye"/>
+        <module name="org.wildfly.extension.opentelemetry"/>
+        <module name="org.wildfly.extension.opentelemetry-api" export="true"/>
+
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.smallrye.opentelemetry"/>
+
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.security.manager"/>
+
+        <module name="java.logging"/>
+
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api" optional="true" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/wildfly-microprofile-telemetry-cdi-provider-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/wildfly-microprofile-telemetry-cdi-provider-34.0.0.Beta1.jar
new file mode 100644
index 0000000..bd50eb7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry-api/main/wildfly-microprofile-telemetry-cdi-provider-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/module.xml
new file mode 100644
index 0000000..e463f67
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/module.xml
@@ -0,0 +1,50 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.microprofile.telemetry" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-telemetry-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.extension.microprofile.telemetry-api"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.wildfly.extension.microprofile.config-smallrye"/>
+        <module name="org.wildfly.extension.opentelemetry"/>
+        <module name="org.wildfly.extension.opentelemetry-api"/>
+
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.smallrye.opentelemetry"/>
+
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.manager"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/wildfly-microprofile-telemetry-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/wildfly-microprofile-telemetry-34.0.0.Beta1.jar
new file mode 100644
index 0000000..71d4a71
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/microprofile/telemetry/main/wildfly-microprofile-telemetry-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/module.xml
new file mode 100644
index 0000000..6fe535e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.mod_cluster" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-mod_cluster-extension-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.common-beans"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.mod_cluster.container.spi"/>
+        <module name="org.jboss.mod_cluster.core"/>
+        <module name="org.jboss.mod_cluster.load.spi"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.mod_cluster.undertow" services="import"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/wildfly-mod_cluster-extension-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/wildfly-mod_cluster-extension-34.0.0.Beta1.jar
new file mode 100644
index 0000000..91b667c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/mod_cluster/main/wildfly-mod_cluster-extension-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/module.xml
new file mode 100644
index 0000000..1cfe8ce
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/module.xml
@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.mvc-krazo" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+        <property name="jboss.stability" value="preview"/>
+    </properties>
+
+    <resources>
+        <resource-root path="mvc-krazo-subsystem-1.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.eclipse.krazo.core"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/mvc-krazo-subsystem-1.0.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/mvc-krazo-subsystem-1.0.0.Final.jar
new file mode 100644
index 0000000..96c4776
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/mvc-krazo/main/mvc-krazo-subsystem-1.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/module.xml
new file mode 100644
index 0000000..9dcebcd
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.opentelemetry-api" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-opentelemetry-api-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.smallrye.opentelemetry"/>
+
+        <module name="java.logging"/>
+
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.ws.rs.api" optional="true" services="import"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.security.manager"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/wildfly-opentelemetry-api-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/wildfly-opentelemetry-api-34.0.0.Beta1.jar
new file mode 100644
index 0000000..5fdf361
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry-api/main/wildfly-opentelemetry-api-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/module.xml
new file mode 100644
index 0000000..647caeb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/module.xml
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.opentelemetry" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-opentelemetry-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.extension.opentelemetry-api"/>
+        <module name="io.opentelemetry.api"/>
+        <module name="io.opentelemetry.sdk"/>
+        <module name="io.opentelemetry.context"/>
+        <module name="io.opentelemetry.exporter"/>
+        <module name="io.smallrye.opentelemetry" services="import"/>
+
+        <module name="java.logging"/>
+        <module name="jakarta.enterprise.api"/>
+
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.jboss.weld.spi"/>
+
+        <module name="org.wildfly.security.manager"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/wildfly-opentelemetry-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/wildfly-opentelemetry-34.0.0.Beta1.jar
new file mode 100644
index 0000000..ff2bc67
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/opentelemetry/main/wildfly-opentelemetry-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/picketlink/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/picketlink/main/module.xml
new file mode 100644
index 0000000..52fe941
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/picketlink/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.picketlink" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/picketlink/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-picketlink-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.staxmapper"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/picketlink/main/wildfly-picketlink-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/picketlink/main/wildfly-picketlink-34.0.0.Beta1.jar
new file mode 100644
index 0000000..897700a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/picketlink/main/wildfly-picketlink-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/request-controller/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/request-controller/main/module.xml
new file mode 100644
index 0000000..2a4376f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/request-controller/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.request-controller" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/requestcontroller/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-request-controller-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio.nio" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/request-controller/main/wildfly-request-controller-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/request-controller/main/wildfly-request-controller-26.0.0.Beta5.jar
new file mode 100644
index 0000000..c1877a1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/request-controller/main/wildfly-request-controller-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/rts/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/rts/main/module.xml
new file mode 100644
index 0000000..4f8149d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/rts/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.rts" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-rts-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <exports>
+        <exclude path="org/wildfly/extension/rts/logging"/>
+    </exports>
+
+    <dependencies>
+        <module name="jakarta.transaction.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.jaxrs"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.vfs"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.jts"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="org.wildfly.extension.undertow"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="org.jboss.resteasy.resteasy-core" services="export"/>
+        <module name="org.jboss.resteasy.resteasy-core-spi" services="export"/>
+        <module name="org.jboss.resteasy.resteasy-jaxb-provider" services="export"/>
+        <module name="org.hibernate.validator" services="export"/>
+        <module name="org.jboss.narayana.rts"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="java.xml"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/rts/main/wildfly-rts-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/rts/main/wildfly-rts-34.0.0.Beta1.jar
new file mode 100644
index 0000000..0a568df
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/rts/main/wildfly-rts-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/security/manager/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/security/manager/main/module.xml
new file mode 100644
index 0000000..1b44115
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/security/manager/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.security.manager" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-security-manager-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.se"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.manager"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/security/manager/main/wildfly-security-manager-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/security/manager/main/wildfly-security-manager-26.0.0.Beta5.jar
new file mode 100644
index 0000000..ad906bb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/security/manager/main/wildfly-security-manager-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/undertow/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/extension/undertow/main/module.xml
new file mode 100644
index 0000000..3bed12a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/extension/undertow/main/module.xml
@@ -0,0 +1,79 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.extension.undertow" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/extension/undertow/logging"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-undertow-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.undertow.core" services="import"/>
+        <module name="io.undertow.servlet" services="import"/>
+        <module name="io.undertow.jsp"/>
+        <module name="io.undertow.websocket"/>
+        <module name="java.desktop"/>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="jakarta.annotation.api"/>
+        <!-- Only needed if using access logging -->
+        <module name="jakarta.json.api" optional="true"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.servlet.jsp.api"/>
+        <module name="jakarta.websocket.api"/>
+        <module name="io.smallrye.jandex"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.clustering.web.container"/>
+        <!-- Allow dynamic loading of distributable session management provider -->
+        <module name="org.wildfly.clustering.web.undertow" services="import" optional="true"/>
+        <module name="org.wildfly.extension.request-controller"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.domain-management"/>
+        <module name="org.jboss.as.ee"/>
+        <module name="org.jboss.as.core-security"/>
+        <module name="org.wildfly.extension.io"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server-servlet"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.common-beans" services="import"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river" services="import"/>
+        <module name="org.jboss.as.web-common"/>
+        <module name="org.jboss.invocation"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.web"/>
+        <module name="org.jboss.metadata.ear"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.jboss.vfs"/>
+        <module name="org.jboss.as.version"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.jboss.xnio.nio" services="import"/>
+        <module name="org.wildfly.http-client.common"/>
+        <module name="org.wildfly.event.logger" optional="true"/>
+        <module name="org.wildfly.common" optional="true"/>
+        <module name="org.wildfly.service"/>
+        <module name="org.wildfly.subsystem"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/extension/undertow/main/wildfly-undertow-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/extension/undertow/main/wildfly-undertow-34.0.0.Beta1.jar
new file mode 100644
index 0000000..dae6144
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/extension/undertow/main/wildfly-undertow-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/common/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/http-client/common/main/module.xml
new file mode 100644
index 0000000..7a6b56d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/http-client/common/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.http-client.common" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+         <resource-root path="wildfly-http-client-common-2.0.7.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.xml"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river"/>
+        <module name="org.wildfly.security.elytron"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/common/main/wildfly-http-client-common-2.0.7.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/http-client/common/main/wildfly-http-client-common-2.0.7.Final.jar
new file mode 100644
index 0000000..b2bdd44
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/http-client/common/main/wildfly-http-client-common-2.0.7.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/ejb/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/http-client/ejb/main/module.xml
new file mode 100644
index 0000000..6ab60da
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/http-client/ejb/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.http-client.ejb" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-http-ejb-client-2.0.7.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.rmi"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.wildfly.http-client.common"/>
+        <module name="org.wildfly.http-client.naming"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.wildfly.naming-client"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river"/>
+        <module name="org.wildfly.security.elytron"/>
+        <module name="org.wildfly.http-client.transaction"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.discovery"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/ejb/main/wildfly-http-ejb-client-2.0.7.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/http-client/ejb/main/wildfly-http-ejb-client-2.0.7.Final.jar
new file mode 100644
index 0000000..812fd54
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/http-client/ejb/main/wildfly-http-ejb-client-2.0.7.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/naming/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/http-client/naming/main/module.xml
new file mode 100644
index 0000000..486e969
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/http-client/naming/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.http-client.naming" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-http-naming-client-2.0.7.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="org.wildfly.http-client.common"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.jboss.ejb-client"/>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.security.elytron"/>
+        <module name="org.wildfly.http-client.ejb" optional="true" services="import"/>
+        <module name="org.wildfly.naming-client"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/naming/main/wildfly-http-naming-client-2.0.7.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/http-client/naming/main/wildfly-http-naming-client-2.0.7.Final.jar
new file mode 100644
index 0000000..7497c25
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/http-client/naming/main/wildfly-http-naming-client-2.0.7.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/transaction/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/http-client/transaction/main/module.xml
new file mode 100644
index 0000000..411870e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/http-client/transaction/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.http-client.transaction" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-http-transaction-client-2.0.7.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.rmi"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="org.wildfly.transaction.client"/>
+        <module name="org.wildfly.http-client.common"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.wildfly.common"/>
+        <module name="io.undertow.core"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.marshalling"/>
+        <module name="org.jboss.marshalling.river"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.security.elytron"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/http-client/transaction/main/wildfly-http-transaction-client-2.0.7.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/http-client/transaction/main/wildfly-http-transaction-client-2.0.7.Final.jar
new file mode 100644
index 0000000..0d42808
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/http-client/transaction/main/wildfly-http-transaction-client-2.0.7.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/iiop-openjdk/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/iiop-openjdk/main/module.xml
new file mode 100644
index 0000000..23b381b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/iiop-openjdk/main/module.xml
@@ -0,0 +1,37 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.iiop-openjdk" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-iiop-openjdk-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+        <module name="java.rmi"/>
+        <module name="java.security.jgss"/>
+        <module name="jakarta.transaction.api"/>
+        <module name="javax.orb.api"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.naming"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.jboss.metadata.ejb"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.jboss.jts"/>
+        <module name="org.jboss.jts.integration"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/iiop-openjdk/main/wildfly-iiop-openjdk-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/iiop-openjdk/main/wildfly-iiop-openjdk-34.0.0.Beta1.jar
new file mode 100644
index 0000000..a95cdfb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/iiop-openjdk/main/wildfly-iiop-openjdk-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/installation-manager/api/main/installation-manager-api-1.0.3.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/api/main/installation-manager-api-1.0.3.Final.jar
new file mode 100644
index 0000000..b4f5ad1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/api/main/installation-manager-api-1.0.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/installation-manager/api/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/api/main/module.xml
new file mode 100644
index 0000000..fde1272
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/api/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.installation-manager.api" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="installation-manager-api-1.0.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.prospero" services="export" optional="true" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/installation-manager/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/main/module.xml
new file mode 100644
index 0000000..89d6651
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.installation-manager" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-installation-manager-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.host-controller"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.installation-manager.api" services="import"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.cli"/>
+        <module name="org.jboss.as.domain-http-interface"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.wildfly.security.manager"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/installation-manager/main/wildfly-installation-manager-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/main/wildfly-installation-manager-26.0.0.Beta5.jar
new file mode 100644
index 0000000..1277ed9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/installation-manager/main/wildfly-installation-manager-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/io/spi/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/io/spi/main/module.xml
new file mode 100644
index 0000000..ef1280c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/io/spi/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.io.spi" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-io-spi-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/io/spi/main/wildfly-io-spi-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/io/spi/main/wildfly-io-spi-26.0.0.Beta5.jar
new file mode 100644
index 0000000..a0c0f24
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/io/spi/main/wildfly-io-spi-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/micrometer/deployment/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/micrometer/deployment/main/module.xml
new file mode 100644
index 0000000..e72711d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/micrometer/deployment/main/module.xml
@@ -0,0 +1,26 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.micrometer.deployment" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-micrometer-deployment-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.micrometer" export="true"/>
+
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.wildfly.security.manager"/>
+
+        <module name="jakarta.enterprise.api"/>
+        <module name="java.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/micrometer/deployment/main/wildfly-micrometer-deployment-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/micrometer/deployment/main/wildfly-micrometer-deployment-34.0.0.Beta1.jar
new file mode 100644
index 0000000..0bb4000
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/micrometer/deployment/main/wildfly-micrometer-deployment-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/module.xml
new file mode 100644
index 0000000..fbc2f99
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.microprofile.fault-tolerance-smallrye.deployment" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-fault-tolerance-smallrye-deployment-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.naming"/>
+
+        <module name="jakarta.enterprise.concurrent.api"/>
+
+        <module name="io.smallrye.fault-tolerance"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/wildfly-microprofile-fault-tolerance-smallrye-deployment-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/wildfly-microprofile-fault-tolerance-smallrye-deployment-34.0.0.Beta1.jar
new file mode 100644
index 0000000..8c715de
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/microprofile/fault-tolerance-smallrye/deployment/main/wildfly-microprofile-fault-tolerance-smallrye-deployment-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/module.xml
new file mode 100644
index 0000000..e888b52
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.mod_cluster.undertow" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-mod_cluster-undertow-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.servlet.api"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="org.jboss.as.clustering.common"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.network"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.mod_cluster.container.spi"/>
+        <module name="org.jboss.mod_cluster.core"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.xnio"/>
+        <module name="org.wildfly.clustering.context"/>
+        <module name="org.wildfly.clustering.service"/>
+        <module name="org.wildfly.extension.mod_cluster"/>
+        <module name="org.wildfly.extension.undertow"/>
+        <module name="org.wildfly.security.elytron-private"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/wildfly-mod_cluster-undertow-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/wildfly-mod_cluster-undertow-34.0.0.Beta1.jar
new file mode 100644
index 0000000..4833430
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/mod_cluster/undertow/main/wildfly-mod_cluster-undertow-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/naming-client/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/naming-client/main/module.xml
new file mode 100644
index 0000000..7abaf11
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/naming-client/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.naming-client" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-naming-client-2.0.1.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.management"/>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.remoting"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.jboss.ejb-client" services="import" optional="true"/>
+        <module name="org.wildfly.transaction.client" services="import" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/naming-client/main/wildfly-naming-client-2.0.1.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/naming-client/main/wildfly-naming-client-2.0.1.Final.jar
new file mode 100644
index 0000000..163a30f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/naming-client/main/wildfly-naming-client-2.0.1.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/naming/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/naming/main/module.xml
new file mode 100644
index 0000000..dbed4d5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/naming/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.naming" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="public"/>
+    </properties>
+
+    <dependencies>
+        <module name="org.jboss.as.naming" export="true">
+            <imports>
+                <include-set>
+                    <path name="org/wildfly/naming/java/permission"/>
+                </include-set>
+            </imports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-s390x/libwfssl.so b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-s390x/libwfssl.so
new file mode 100644
index 0000000..2370f1a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-s390x/libwfssl.so differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-x86_64/libwfssl.so b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-x86_64/libwfssl.so
new file mode 100644
index 0000000..b77439e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/linux-x86_64/libwfssl.so differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/macosx-x86_64/libwfssl.dylib b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/macosx-x86_64/libwfssl.dylib
new file mode 100644
index 0000000..5c656cb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/macosx-x86_64/libwfssl.dylib differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/win-x86_64/wfssl.dll b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/win-x86_64/wfssl.dll
new file mode 100644
index 0000000..8e40022
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/lib/win-x86_64/wfssl.dll differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/openssl/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/module.xml
new file mode 100644
index 0000000..bdae44a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.openssl" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-openssl-java-2.2.5.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="jdk.unsupported"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/openssl/main/wildfly-openssl-java-2.2.5.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/wildfly-openssl-java-2.2.5.Final.jar
new file mode 100644
index 0000000..662d1d9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/openssl/main/wildfly-openssl-java-2.2.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/dep/jts/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/reactive/dep/jts/main/module.xml
new file mode 100644
index 0000000..22465eb
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/reactive/dep/jts/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.reactive.dep.jts" xmlns="urn:jboss:module:1.9">
+    <!--
+        A convenience module for WildFly's org.jboss.jts module
+    -->
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api" export="true" optional="true"/>
+        <module name="org.reactivestreams" export="true" optional="true"/>
+        <module name="io.smallrye.reactive.mutiny.reactive-streams-operators" export="true" optional="true"/>
+        <module name="io.smallrye.reactive.converters.api" export="true" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/module.xml
new file mode 100644
index 0000000..06fb673
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/module.xml
@@ -0,0 +1,33 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.reactive.messaging.amqp" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-messaging-amqp-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.netty.netty-handler"/>
+        <module name="io.smallrye.common.annotation"/>
+        <module name="io.vertx.client.amqp"/>
+        <module name="io.vertx.core"/>
+        <module name="io.vertx.proton"/>
+        <module name="jakarta.enterprise.api" optional="true"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.reactive-messaging.api"/>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.as.weld.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.reactive.messaging.common"/>
+        <module name="org.wildfly.reactive.messaging.config"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/wildfly-microprofile-reactive-messaging-amqp-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/wildfly-microprofile-reactive-messaging-amqp-34.0.0.Beta1.jar
new file mode 100644
index 0000000..994b030
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/amqp/main/wildfly-microprofile-reactive-messaging-amqp-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/module.xml
new file mode 100644
index 0000000..42e8bcf
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/module.xml
@@ -0,0 +1,25 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.reactive.messaging.common" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-messaging-common-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.config"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.reactive.messaging.common"/>
+        <module name="org.wildfly.reactive.messaging.config"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/wildfly-microprofile-reactive-messaging-common-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/wildfly-microprofile-reactive-messaging-common-34.0.0.Beta1.jar
new file mode 100644
index 0000000..f320f41
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/common/main/wildfly-microprofile-reactive-messaging-common-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/module.xml
new file mode 100644
index 0000000..238271c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/module.xml
@@ -0,0 +1,18 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.reactive.messaging.config" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-messaging-config-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.eclipse.microprofile.config.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/wildfly-microprofile-reactive-messaging-config-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/wildfly-microprofile-reactive-messaging-config-34.0.0.Beta1.jar
new file mode 100644
index 0000000..543ec85
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/config/main/wildfly-microprofile-reactive-messaging-config-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/module.xml
new file mode 100644
index 0000000..df132be
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.reactive.messaging.kafka" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-messaging-kafka-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.config"/>
+        <module name="org.apache.kafka.client"/>
+        <module name="org.eclipse.microprofile.config.api"/>
+        <module name="org.eclipse.microprofile.reactive-messaging.api"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.modules"/>
+         <module name="org.jboss.msc"/>
+        <module name="org.wildfly.reactive.messaging.common"/>
+        <module name="org.wildfly.reactive.messaging.config"/>
+        <module name="org.wildfly.security.manager"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/wildfly-microprofile-reactive-messaging-kafka-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/wildfly-microprofile-reactive-messaging-kafka-34.0.0.Beta1.jar
new file mode 100644
index 0000000..149692d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/reactive/messaging/kafka/main/wildfly-microprofile-reactive-messaging-kafka-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/module.xml
new file mode 100644
index 0000000..93bbda2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.reactive.mutiny.reactive-streams-operators.cdi-provider" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-microprofile-reactive-streams-operators-cdi-provider-34.0.0.Beta1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jakarta.enterprise.api"/>
+        <module name="org.eclipse.microprofile.reactive-streams-operators.api"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.jboss.weld.api"/>
+        <module name="org.reactivestreams"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/wildfly-microprofile-reactive-streams-operators-cdi-provider-34.0.0.Beta1.jar b/wildfly/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/wildfly-microprofile-reactive-streams-operators-cdi-provider-34.0.0.Beta1.jar
new file mode 100644
index 0000000..6ed065a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/reactive/mutiny/reactive-streams-operators/cdi-provider/main/wildfly-microprofile-reactive-streams-operators-cdi-provider-34.0.0.Beta1.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/module.xml
new file mode 100644
index 0000000..9edf346
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/module.xml
@@ -0,0 +1,115 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-base" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <!--
+             Although this module is private see the module 'org.wildfly.security.elytron' for the re-exported public API.
+         -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/security/_private"/>
+        <exclude path="org/wildfly/security/manager/_private"/>
+        <exclude path="org/wildfly/security/sasl/digest/_private"/>
+        <exclude path="org/wildfly/security/util/_private"/>
+    </exports>
+
+    <resources>
+        <resource-root path="wildfly-elytron-asn1-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-audit-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-auth-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-auth-server-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-auth-server-deprecated-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-auth-server-http-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-auth-server-sasl-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-auth-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-base-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-client-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-credential-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-credential-source-impl-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-credential-store-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-digest-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-dynamic-ssl-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-encryption-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-basic-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-bearer-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-cert-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-digest-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-external-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-form-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-spnego-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-sso-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-http-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-json-util-2.6.0.Final.jar"/>
+        <!-- <artifact name="${org.wildfly.security:wildfly-elytron-jwt}"/> To be added as independent module in WildFly -->
+        <resource-root path="wildfly-elytron-keystore-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-mechanism-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-mechanism-digest-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-mechanism-http-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-mechanism-gssapi-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-mechanism-oauth2-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-mechanism-scram-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-password-impl-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-permission-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-provider-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-realm-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-realm-jdbc-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-realm-ldap-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-realm-token-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-auth-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-anonymous-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-digest-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-entity-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-external-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-gs2-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-gssapi-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-localuser-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-oauth2-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-otp-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-plain-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-sasl-scram-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-security-manager-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-security-manager-action-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-ssl-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-ssh-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-x500-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-x500-cert-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-x500-cert-acme-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-x500-cert-util-2.6.0.Final.jar"/>
+        <resource-root path="wildfly-elytron-x500-principal-2.6.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.naming"/>
+        <module name="java.security.jgss"/>
+        <module name="java.security.sasl"/>
+        <module name="java.sql"/>
+        <module name="java.xml"/>
+        <module name="java.xml.crypto"/>
+        <module name="jakarta.json.api"/>
+        <module name="jdk.security.auth"/>
+        <module name="jdk.unsupported"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.jboss.modules"/>
+        <module name="org.jboss.threads"/>
+        <module name="org.wildfly.common"/>
+        <module name="jakarta.xml.ws.api" optional="true"/>
+        <module name="org.jboss.ws.spi" optional="true"/>
+        <module name="org.apache.sshd"/>
+        <module name="org.jboss.resteasy.resteasy-jaxrs" optional="true"/>
+        <!--
+        This is only exported because some of the ElytronXmlParser methods throw an exception in this module. If other
+        modules use the parser, they need to have visibility to this module.
+        -->
+        <module name="org.wildfly.client.config" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-asn1-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-asn1-2.6.0.Final.jar
new file mode 100644
index 0000000..9516f92
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-asn1-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-audit-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-audit-2.6.0.Final.jar
new file mode 100644
index 0000000..04f4abf
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-audit-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-2.6.0.Final.jar
new file mode 100644
index 0000000..621112a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-2.6.0.Final.jar
new file mode 100644
index 0000000..b026d03
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-deprecated-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-deprecated-2.6.0.Final.jar
new file mode 100644
index 0000000..444f694
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-deprecated-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-http-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-http-2.6.0.Final.jar
new file mode 100644
index 0000000..8b8d5e9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-http-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-sasl-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-sasl-2.6.0.Final.jar
new file mode 100644
index 0000000..dba5722
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-server-sasl-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-util-2.6.0.Final.jar
new file mode 100644
index 0000000..bb79cef
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-auth-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-base-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-base-2.6.0.Final.jar
new file mode 100644
index 0000000..5f51d2b
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-base-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-client-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-client-2.6.0.Final.jar
new file mode 100644
index 0000000..681e3d1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-client-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-2.6.0.Final.jar
new file mode 100644
index 0000000..1753402
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-source-impl-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-source-impl-2.6.0.Final.jar
new file mode 100644
index 0000000..ef82b5a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-source-impl-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-store-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-store-2.6.0.Final.jar
new file mode 100644
index 0000000..33279a5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-credential-store-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-digest-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-digest-2.6.0.Final.jar
new file mode 100644
index 0000000..1046da8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-digest-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-dynamic-ssl-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-dynamic-ssl-2.6.0.Final.jar
new file mode 100644
index 0000000..09941d5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-dynamic-ssl-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-encryption-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-encryption-2.6.0.Final.jar
new file mode 100644
index 0000000..257cdd1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-encryption-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-2.6.0.Final.jar
new file mode 100644
index 0000000..68be59f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-basic-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-basic-2.6.0.Final.jar
new file mode 100644
index 0000000..a2edbc5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-basic-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-bearer-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-bearer-2.6.0.Final.jar
new file mode 100644
index 0000000..5f25fda
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-bearer-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-cert-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-cert-2.6.0.Final.jar
new file mode 100644
index 0000000..14fdb79
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-cert-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-digest-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-digest-2.6.0.Final.jar
new file mode 100644
index 0000000..36596b1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-digest-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-external-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-external-2.6.0.Final.jar
new file mode 100644
index 0000000..0324393
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-external-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-form-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-form-2.6.0.Final.jar
new file mode 100644
index 0000000..4eac8f6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-form-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-spnego-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-spnego-2.6.0.Final.jar
new file mode 100644
index 0000000..1f3032a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-spnego-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-sso-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-sso-2.6.0.Final.jar
new file mode 100644
index 0000000..1e8a8a8
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-sso-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-util-2.6.0.Final.jar
new file mode 100644
index 0000000..e1852a1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-http-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-json-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-json-util-2.6.0.Final.jar
new file mode 100644
index 0000000..c5eefad
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-json-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-keystore-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-keystore-2.6.0.Final.jar
new file mode 100644
index 0000000..8809f45
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-keystore-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-2.6.0.Final.jar
new file mode 100644
index 0000000..be9465a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-digest-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-digest-2.6.0.Final.jar
new file mode 100644
index 0000000..22ac8cd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-digest-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-gssapi-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-gssapi-2.6.0.Final.jar
new file mode 100644
index 0000000..ff84047
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-gssapi-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-http-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-http-2.6.0.Final.jar
new file mode 100644
index 0000000..2cabbe0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-http-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-oauth2-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-oauth2-2.6.0.Final.jar
new file mode 100644
index 0000000..0e1d210
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-oauth2-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-scram-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-scram-2.6.0.Final.jar
new file mode 100644
index 0000000..7aeca51
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-mechanism-scram-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-password-impl-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-password-impl-2.6.0.Final.jar
new file mode 100644
index 0000000..5bfcdbb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-password-impl-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-permission-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-permission-2.6.0.Final.jar
new file mode 100644
index 0000000..88dc756
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-permission-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-provider-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-provider-util-2.6.0.Final.jar
new file mode 100644
index 0000000..856e09f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-provider-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-2.6.0.Final.jar
new file mode 100644
index 0000000..6e2a9e7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-jdbc-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-jdbc-2.6.0.Final.jar
new file mode 100644
index 0000000..c014f36
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-jdbc-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-ldap-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-ldap-2.6.0.Final.jar
new file mode 100644
index 0000000..9ec719e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-ldap-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-token-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-token-2.6.0.Final.jar
new file mode 100644
index 0000000..58c924f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-realm-token-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-2.6.0.Final.jar
new file mode 100644
index 0000000..7695939
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-anonymous-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-anonymous-2.6.0.Final.jar
new file mode 100644
index 0000000..6c72fe5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-anonymous-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-auth-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-auth-util-2.6.0.Final.jar
new file mode 100644
index 0000000..979f4d7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-auth-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-digest-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-digest-2.6.0.Final.jar
new file mode 100644
index 0000000..e8893fe
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-digest-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-entity-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-entity-2.6.0.Final.jar
new file mode 100644
index 0000000..82357d7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-entity-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-external-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-external-2.6.0.Final.jar
new file mode 100644
index 0000000..0bc6f40
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-external-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gs2-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gs2-2.6.0.Final.jar
new file mode 100644
index 0000000..db5d2b1
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gs2-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gssapi-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gssapi-2.6.0.Final.jar
new file mode 100644
index 0000000..43c1ccd
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-gssapi-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-localuser-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-localuser-2.6.0.Final.jar
new file mode 100644
index 0000000..f35408e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-localuser-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-oauth2-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-oauth2-2.6.0.Final.jar
new file mode 100644
index 0000000..1c68525
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-oauth2-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-otp-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-otp-2.6.0.Final.jar
new file mode 100644
index 0000000..566ba7f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-otp-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-plain-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-plain-2.6.0.Final.jar
new file mode 100644
index 0000000..892722d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-plain-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-scram-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-scram-2.6.0.Final.jar
new file mode 100644
index 0000000..b04f551
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-sasl-scram-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-2.6.0.Final.jar
new file mode 100644
index 0000000..a4d0fde
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-action-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-action-2.6.0.Final.jar
new file mode 100644
index 0000000..e33a69c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-security-manager-action-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssh-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssh-util-2.6.0.Final.jar
new file mode 100644
index 0000000..149d0fa
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssh-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssl-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssl-2.6.0.Final.jar
new file mode 100644
index 0000000..c8ff4c5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-ssl-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-util-2.6.0.Final.jar
new file mode 100644
index 0000000..7a7e9a9
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-2.6.0.Final.jar
new file mode 100644
index 0000000..754178d
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-2.6.0.Final.jar
new file mode 100644
index 0000000..7330647
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-acme-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-acme-2.6.0.Final.jar
new file mode 100644
index 0000000..8f3384a
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-acme-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-util-2.6.0.Final.jar
new file mode 100644
index 0000000..3acdba7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-cert-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-principal-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-principal-2.6.0.Final.jar
new file mode 100644
index 0000000..8cdab41
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-base/main/wildfly-elytron-x500-principal-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/module.xml
new file mode 100644
index 0000000..4655fe2
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-http-oidc" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-http-oidc-2.6.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-jose-jwk"/>
+        <module name="org.wildfly.security.elytron-jose-util"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.apache.httpcomponents.core"/>
+        <module name="org.bitbucket.jose4j"/>
+        <module name="org.jboss.logging"/>
+        <module name="jakarta.json.api"/>
+        <module name="java.security.sasl"/>
+        <module name="jakarta.servlet.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/wildfly-elytron-http-oidc-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/wildfly-elytron-http-oidc-2.6.0.Final.jar
new file mode 100644
index 0000000..86dd2ec
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-http-oidc/main/wildfly-elytron-http-oidc-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/module.xml
new file mode 100644
index 0000000..f19cddf
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/module.xml
@@ -0,0 +1,23 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-jose-jwk" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-jose-jwk-2.6.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-jose-util"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="org.jboss.logging"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/wildfly-elytron-jose-jwk-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/wildfly-elytron-jose-jwk-2.6.0.Final.jar
new file mode 100644
index 0000000..772e955
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-jwk/main/wildfly-elytron-jose-jwk-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/module.xml
new file mode 100644
index 0000000..a93f066
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-jose-util" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-jose-util-2.6.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="com.fasterxml.jackson.core.jackson-annotations"/>
+        <module name="com.fasterxml.jackson.core.jackson-core"/>
+        <module name="com.fasterxml.jackson.core.jackson-databind"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/wildfly-elytron-jose-util-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/wildfly-elytron-jose-util-2.6.0.Final.jar
new file mode 100644
index 0000000..4f8dadc
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jose-util/main/wildfly-elytron-jose-util-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/module.xml
new file mode 100644
index 0000000..ae5a01f
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-jwt" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-jwt-2.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="io.smallrye.jwt"/>
+        <module name="org.eclipse.microprofile.jwt.auth.api"/>
+        <module name="jakarta.json.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/wildfly-elytron-jwt-2.0.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/wildfly-elytron-jwt-2.0.0.Final.jar
new file mode 100644
index 0000000..4c0d1e2
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-jwt/main/wildfly-elytron-jwt-2.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-private/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-private/main/module.xml
new file mode 100644
index 0000000..d40dd4e
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-private/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-private" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <!--
+             Although this module is private see the module 'org.wildfly.security.elytron' for the re-exported public API.
+         -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+    </resources>
+
+    <dependencies>
+        <!--
+        This is only exported because some of the ElytronXmlParser methods throw an exception in this module. If other
+        modules use the parser, they need to have visibility to this module.
+        -->
+        <module name="org.wildfly.client.config" export="true"/>
+        <!-- The artifacts in these dependencies were previously exported by this module. -->
+        <module name="org.wildfly.security.elytron-base" services="export" export="true"/>
+        <module name="org.wildfly.security.jakarta.authentication" export="true"/>
+        <module name="org.wildfly.security.jakarta.authorization" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-tool/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-tool/main/module.xml
new file mode 100644
index 0000000..aa98014
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-tool/main/module.xml
@@ -0,0 +1,30 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-tool" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-tool-2.6.0.Final.jar"/>
+    </resources>
+
+    <main-class name="org.wildfly.security.tool.ElytronTool"/>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="org.apache.commons.lang3"/>
+        <module name="org.apache.commons.cli"/>
+        <module name="org.apache.sshd"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.slf4j"/>
+        <module name="org.wildfly.security.elytron-base" services="import"/>
+        <module name="org.wildfly.security.elytron-tool-addons" services="import" optional="true"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.aesh"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-tool/main/wildfly-elytron-tool-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-tool/main/wildfly-elytron-tool-2.6.0.Final.jar
new file mode 100644
index 0000000..cef9d4e
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-tool/main/wildfly-elytron-tool-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/module.xml
new file mode 100644
index 0000000..0200f63
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/module.xml
@@ -0,0 +1,28 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-web.undertow-server-servlet" version="4.1.0.Final" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="undertow-server-servlet-4.1.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.metadata.common"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server"/>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="org.wildfly.security.jakarta.authorization"/>
+        <module name="io.undertow.core"/>
+        <module name="io.undertow.servlet"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/undertow-server-servlet-4.1.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/undertow-server-servlet-4.1.0.Final.jar
new file mode 100644
index 0000000..16bd511
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server-servlet/main/undertow-server-servlet-4.1.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/module.xml
new file mode 100644
index 0000000..3da9df5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron-web.undertow-server" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="undertow-server-4.1.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.security.elytron-private"/>
+        <module name="io.undertow.core"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.xnio"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/undertow-server-4.1.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/undertow-server-4.1.0.Final.jar
new file mode 100644
index 0000000..75903e7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/elytron-web/undertow-server/main/undertow-server-4.1.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/elytron/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/elytron/main/module.xml
new file mode 100644
index 0000000..59703e5
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/elytron/main/module.xml
@@ -0,0 +1,48 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.elytron" xmlns="urn:jboss:module:1.9">
+
+    <dependencies>
+        <module name="org.wildfly.security.elytron-private" services="export" export="true">
+            <exports>
+                <include-set>
+                    <path name="org/wildfly/security"/>
+                    <path name="org/wildfly/security/asn1"/>
+                    <path name="org/wildfly/security/auth"/>
+                    <path name="org/wildfly/security/auth/callback"/>
+                    <path name="org/wildfly/security/auth/client"/>
+                    <path name="org/wildfly/security/auth/jaspi"/>
+                    <path name="org/wildfly/security/auth/permission"/>
+                    <path name="org/wildfly/security/auth/principal"/>
+                    <path name="org/wildfly/security/auth/server"/>
+                    <path name="org/wildfly/security/auth/server/event"/>
+                    <path name="org/wildfly/security/auth/util"/>
+                    <path name="org/wildfly/security/authz"/>
+                    <path name="org/wildfly/security/credential"/>
+                    <path name="org/wildfly/security/credential/source"/>
+                    <path name="org/wildfly/security/credential/store"/>
+                    <path name="org/wildfly/security/evidence"/>
+                    <path name="org/wildfly/security/http"/>
+                    <path name="org/wildfly/security/key"/>
+                    <path name="org/wildfly/security/manager"/>
+                    <path name="org/wildfly/security/manager/action"/>
+                    <path name="org/wildfly/security/mechanism"/>
+                    <path name="org/wildfly/security/password"/>
+                    <path name="org/wildfly/security/password/interfaces"/>
+                    <path name="org/wildfly/security/password/spec"/>
+                    <path name="org/wildfly/security/password/util"/>
+                    <path name="org/wildfly/security/permission"/>
+                    <path name="org/wildfly/security/sasl/util"/>
+                    <path name="org/wildfly/security/ssl"/>
+                    <path name="org/wildfly/security/x500"/>
+                    <path name="org/wildfly/security/x500/cert"/>
+                </include-set>
+            </exports>
+        </module>
+        <module name="org.wildfly.common" export="true"/>
+        <module name="org.wildfly.client.config" export="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/module.xml
new file mode 100644
index 0000000..0913f3c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/module.xml
@@ -0,0 +1,20 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.http.sfbasic" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="wildfly-elytron-http-stateful-basic-2.6.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.wildfly.security.elytron-base"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/wildfly-elytron-http-stateful-basic-2.6.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/wildfly-elytron-http-stateful-basic-2.6.0.Final.jar
new file mode 100644
index 0000000..c4c1dc7
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/http/sfbasic/main/wildfly-elytron-http-stateful-basic-2.6.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/jakarta-authentication-3.0.3.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/jakarta-authentication-3.0.3.Final.jar
new file mode 100644
index 0000000..e6ddda6
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/jakarta-authentication-3.0.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/module.xml
new file mode 100644
index 0000000..1878c4c
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authentication/main/module.xml
@@ -0,0 +1,31 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.jakarta.authentication" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <!--
+             Although this module is private see the module 'org.wildfly.security.elytron' for the re-exported public API.
+         -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <exports>
+        <exclude path="org/wildfly/security/auth/jaspi/_private"/>
+    </exports>
+
+    <resources>
+        <resource-root path="jakarta-authentication-3.0.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jdk.security.auth"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="jakarta.servlet.api" optional="true"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-base"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/jakarta-authorization-3.0.3.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/jakarta-authorization-3.0.3.Final.jar
new file mode 100644
index 0000000..826c7b5
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/jakarta-authorization-3.0.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/module.xml
new file mode 100644
index 0000000..9f55c9b
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/authorization/main/module.xml
@@ -0,0 +1,27 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.jakarta.authorization" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <!--
+             Although this module is private see the module 'org.wildfly.security.elytron' for the re-exported public API.
+         -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta-authorization-3.0.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="jdk.security.auth"/>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="jakarta.security.jacc.api" optional="true"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-base"/>
+        <module name="org.wildfly.security.elytron-web.undertow-server-servlet" optional="true" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/jakarta-client-resteasy-3.0.3.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/jakarta-client-resteasy-3.0.3.Final.jar
new file mode 100644
index 0000000..6806b30
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/jakarta-client-resteasy-3.0.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/module.xml
new file mode 100644
index 0000000..0c470b4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/resteasy/main/module.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.jakarta.client.resteasy" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta-client-resteasy-3.0.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="org.jboss.resteasy.resteasy-jaxrs"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.wildfly.security.elytron-base" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/jakarta-client-webservices-3.0.3.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/jakarta-client-webservices-3.0.3.Final.jar
new file mode 100644
index 0000000..da0556f
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/jakarta-client-webservices-3.0.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/module.xml
new file mode 100644
index 0000000..4a6bcda
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/client/webservices/main/module.xml
@@ -0,0 +1,24 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.jakarta.client.webservices" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta-client-webservices-3.0.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="org.jboss.logmanager"/>
+        <module name="jakarta.xml.ws.api"/>
+        <module name="org.jboss.ws.spi"/>
+        <module name="org.wildfly.client.config"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.security.elytron-base" services="import"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/security/main/jakarta-security-3.0.3.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/security/main/jakarta-security-3.0.3.Final.jar
new file mode 100644
index 0000000..ac6ded0
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/security/main/jakarta-security-3.0.3.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/security/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/security/main/module.xml
new file mode 100644
index 0000000..676ebde
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/jakarta/security/main/module.xml
@@ -0,0 +1,36 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.jakarta.security" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="jakarta-security-3.0.3.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.glassfish.soteria" export="true"/>
+
+        <module name="java.logging"/>
+        <module name="jakarta.security.enterprise.api"/>
+        <module name="jakarta.servlet.api"/>
+        <module name="jakarta.enterprise.api"/>
+        <module name="jakarta.security.auth.message.api"/>
+        <module name="org.jboss.weld.core"/>
+        <module name="org.jboss.weld.spi"/>
+        <module name="org.wildfly.security.elytron"/>
+        <module name="jakarta.xml.bind.api"/>
+        <module name="jakarta.interceptor.api"/>
+        <module name="jakarta.annotation.api"/>
+        <module name="jakarta.inject.api"/>
+        <module name="jakarta.security.jacc.api"/>
+        <module name="jakarta.ejb.api"/>
+        <module name="jakarta.json.api"/>
+        <module name="jakarta.ws.rs.api"/>
+        <module name="com.nimbusds.nimbus-jose-jwt"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/security/manager/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/security/manager/main/module.xml
new file mode 100644
index 0000000..ad16c33
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/security/manager/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.security.manager" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="org.wildfly.security.elytron-private" export="true">
+            <exports>
+                <include-set>
+                    <path name="org/wildfly/security/manager"/>
+                    <path name="org/wildfly/security/manager/action"/>
+                </include-set>
+            </exports>
+        </module>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/service/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/service/main/module.xml
new file mode 100644
index 0000000..6a84ec4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/service/main/module.xml
@@ -0,0 +1,16 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.service" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-service-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.msc"/>
+        <module name="org.wildfly.common"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/service/main/wildfly-service-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/service/main/wildfly-service-26.0.0.Beta5.jar
new file mode 100644
index 0000000..a0be25c
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/service/main/wildfly-service-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/subsystem/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/subsystem/main/module.xml
new file mode 100644
index 0000000..25047c7
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/subsystem/main/module.xml
@@ -0,0 +1,21 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.subsystem" xmlns="urn:jboss:module:1.9">
+
+    <resources>
+        <resource-root path="wildfly-subsystem-26.0.0.Beta5.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.as.controller"/>
+        <module name="org.jboss.as.server"/>
+        <module name="org.jboss.dmr"/>
+        <module name="org.jboss.msc"/>
+        <module name="org.jboss.staxmapper"/>
+        <module name="org.wildfly.common"/>
+        <module name="org.wildfly.service"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/subsystem/main/wildfly-subsystem-26.0.0.Beta5.jar b/wildfly/modules/system/layers/base/org/wildfly/subsystem/main/wildfly-subsystem-26.0.0.Beta5.jar
new file mode 100644
index 0000000..05417da
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/subsystem/main/wildfly-subsystem-26.0.0.Beta5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/transaction/client/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/transaction/client/main/module.xml
new file mode 100644
index 0000000..b24bbbc
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/transaction/client/main/module.xml
@@ -0,0 +1,44 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.transaction.client" xmlns="urn:jboss:module:1.9">
+
+<exports>
+    <exclude path="org/wildfly/transaction/client/_private"/>
+</exports>
+
+<resources>
+    <resource-root path="wildfly-transaction-client-3.0.5.Final.jar"/>
+</resources>
+
+<dependencies>
+    <!-- Sorted alphabetically -->
+    <module name="java.naming"/>
+    <module name="jakarta.resource.api"/>
+    <module name="jakarta.transaction.api"/>
+
+    <module name="org.jboss.ejb-client" services="import" optional="true"/>
+    <!-- Not needed if the transaction subsystem is not present to build a JBossLocalTransactionProvider -->
+    <module name="org.jboss.jboss-transaction-spi" optional="true"/>
+    <!-- Not needed if the transaction subsystem is not present to build a JBossLocalTransactionProvider -->
+    <module name="org.jboss.jts" optional="true"/>
+    <!-- Not needed if the transaction subsystem is not present to build a JBossLocalTransactionProvider -->
+    <module name="org.jboss.jts.integration" optional="true"/>
+    <module name="org.wildfly.http-client.transaction" optional="true"/>
+    <module name="org.jboss.logging"/>
+    <module name="org.jboss.remoting"/>
+    <module name="org.jboss.xnio"/>
+
+    <module name="org.wildfly.common"/>
+    <module name="org.wildfly.naming-client"/>
+    <module name="org.wildfly.security.elytron"/>
+</dependencies>
+
+<provides>
+    <service name="org.wildfly.transaction.client.spi.RemoteTransactionProvider">
+        <with-class name="org.wildfly.httpclient.transaction.HttpRemoteTransactionProvider"/>
+    </service>
+</provides>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/transaction/client/main/wildfly-transaction-client-3.0.5.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/transaction/client/main/wildfly-transaction-client-3.0.5.Final.jar
new file mode 100644
index 0000000..5a69970
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/transaction/client/main/wildfly-transaction-client-3.0.5.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/module.xml b/wildfly/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/module.xml
new file mode 100644
index 0000000..29fcd61
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.wildfly.unstable.annotation.api.indexer" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="unstable-api-annotation-classpath-indexer-1.0.0.Final.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="org.jboss.logging"/>
+        <module name="io.smallrye.jandex"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/unstable-api-annotation-classpath-indexer-1.0.0.Final.jar b/wildfly/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/unstable-api-annotation-classpath-indexer-1.0.0.Final.jar
new file mode 100644
index 0000000..1e311eb
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/wildfly/unstable/annotation/api/indexer/main/unstable-api-annotation-classpath-indexer-1.0.0.Final.jar differ
diff --git a/wildfly/modules/system/layers/base/org/xerial/snappy/snappy-java/main/module.xml b/wildfly/modules/system/layers/base/org/xerial/snappy/snappy-java/main/module.xml
new file mode 100644
index 0000000..494b512
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/xerial/snappy/snappy-java/main/module.xml
@@ -0,0 +1,14 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.xerial.snappy.snappy-java" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <resource-root path="snappy-java-1.1.10.5.jar"/>
+    </resources>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/xerial/snappy/snappy-java/main/snappy-java-1.1.10.5.jar b/wildfly/modules/system/layers/base/org/xerial/snappy/snappy-java/main/snappy-java-1.1.10.5.jar
new file mode 100644
index 0000000..7707e58
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/xerial/snappy/snappy-java/main/snappy-java-1.1.10.5.jar differ
diff --git a/wildfly/modules/system/layers/base/org/yaml/snakeyaml/main/module.xml b/wildfly/modules/system/layers/base/org/yaml/snakeyaml/main/module.xml
new file mode 100644
index 0000000..11b9248
--- /dev/null
+++ b/wildfly/modules/system/layers/base/org/yaml/snakeyaml/main/module.xml
@@ -0,0 +1,19 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="org.yaml.snakeyaml" xmlns="urn:jboss:module:1.9">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="snakeyaml-2.2.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.logging"/>
+        <module name="java.desktop"/>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/org/yaml/snakeyaml/main/snakeyaml-2.2.jar b/wildfly/modules/system/layers/base/org/yaml/snakeyaml/main/snakeyaml-2.2.jar
new file mode 100644
index 0000000..275dd57
Binary files /dev/null and b/wildfly/modules/system/layers/base/org/yaml/snakeyaml/main/snakeyaml-2.2.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/annotations-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/annotations-2.20.126.jar
new file mode 100644
index 0000000..b3b71ed
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/annotations-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/apache-client-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/apache-client-2.20.126.jar
new file mode 100644
index 0000000..51b519d
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/apache-client-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/arns-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/arns-2.20.126.jar
new file mode 100644
index 0000000..a521267
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/arns-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/auth-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/auth-2.20.126.jar
new file mode 100644
index 0000000..b728f47
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/auth-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-core-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-core-2.20.126.jar
new file mode 100644
index 0000000..0804761
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-core-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-query-protocol-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-query-protocol-2.20.126.jar
new file mode 100644
index 0000000..2977a37
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-query-protocol-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-xml-protocol-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-xml-protocol-2.20.126.jar
new file mode 100644
index 0000000..e73289d
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/aws-xml-protocol-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/crt-core-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/crt-core-2.20.126.jar
new file mode 100644
index 0000000..c22788f
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/crt-core-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/endpoints-spi-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/endpoints-spi-2.20.126.jar
new file mode 100644
index 0000000..aa761cc
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/endpoints-spi-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/eventstream-1.0.1.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/eventstream-1.0.1.jar
new file mode 100644
index 0000000..6397d93
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/eventstream-1.0.1.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/http-client-spi-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/http-client-spi-2.20.126.jar
new file mode 100644
index 0000000..51f5279
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/http-client-spi-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/json-utils-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/json-utils-2.20.126.jar
new file mode 100644
index 0000000..28bbcef
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/json-utils-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/metrics-spi-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/metrics-spi-2.20.126.jar
new file mode 100644
index 0000000..c2c377f
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/metrics-spi-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/module.xml b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/module.xml
new file mode 100644
index 0000000..67cbe85
--- /dev/null
+++ b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/module.xml
@@ -0,0 +1,43 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="software.amazon.awssdk.s3" xmlns="urn:jboss:module:1.9">
+
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <resources>
+        <resource-root path="annotations-2.20.126.jar"/>
+        <resource-root path="apache-client-2.20.126.jar"/>
+        <resource-root path="arns-2.20.126.jar"/>
+        <resource-root path="auth-2.20.126.jar"/>
+        <resource-root path="aws-core-2.20.126.jar"/>
+        <resource-root path="aws-query-protocol-2.20.126.jar"/>
+        <resource-root path="aws-xml-protocol-2.20.126.jar"/>
+        <resource-root path="crt-core-2.20.126.jar"/>
+        <resource-root path="endpoints-spi-2.20.126.jar"/>
+        <resource-root path="http-client-spi-2.20.126.jar"/>
+        <resource-root path="json-utils-2.20.126.jar"/>
+        <resource-root path="metrics-spi-2.20.126.jar"/>
+        <resource-root path="profiles-2.20.126.jar"/>
+        <resource-root path="protocol-core-2.20.126.jar"/>
+        <resource-root path="regions-2.20.126.jar"/>
+        <resource-root path="s3-2.20.126.jar"/>
+        <resource-root path="sdk-core-2.20.126.jar"/>
+        <resource-root path="third-party-jackson-core-2.20.126.jar"/>
+        <resource-root path="utils-2.20.126.jar"/>
+        <resource-root path="eventstream-1.0.1.jar"/>
+    </resources>
+
+    <dependencies>
+        <module name="java.xml"/>
+
+        <module name="org.apache.httpcomponents.core"/>
+        <module name="org.reactivestreams"/>
+        <module name="org.slf4j"/>
+    </dependencies>
+
+</module>
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/profiles-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/profiles-2.20.126.jar
new file mode 100644
index 0000000..8c375ad
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/profiles-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/protocol-core-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/protocol-core-2.20.126.jar
new file mode 100644
index 0000000..6e54237
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/protocol-core-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/regions-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/regions-2.20.126.jar
new file mode 100644
index 0000000..ce047c6
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/regions-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/s3-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/s3-2.20.126.jar
new file mode 100644
index 0000000..c8cd91e
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/s3-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/sdk-core-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/sdk-core-2.20.126.jar
new file mode 100644
index 0000000..0529d4d
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/sdk-core-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/third-party-jackson-core-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/third-party-jackson-core-2.20.126.jar
new file mode 100644
index 0000000..74641d4
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/third-party-jackson-core-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/utils-2.20.126.jar b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/utils-2.20.126.jar
new file mode 100644
index 0000000..cd004c2
Binary files /dev/null and b/wildfly/modules/system/layers/base/software/amazon/awssdk/s3/main/utils-2.20.126.jar differ
diff --git a/wildfly/modules/system/layers/base/sun/jdk/main/module.xml b/wildfly/modules/system/layers/base/sun/jdk/main/module.xml
new file mode 100644
index 0000000..46a07ef
--- /dev/null
+++ b/wildfly/modules/system/layers/base/sun/jdk/main/module.xml
@@ -0,0 +1,188 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="sun.jdk" xmlns="urn:jboss:module:1.6">
+	<!--
+		This module is deprecated and any use of it should be replaced
+		with the use of a JPMS module provided by Java SE.
+		
+		The original purpose of this module was to make it possible for
+		JBoss Modules modules to get access to various Java SE packages.
+		However, since Java SE 9, Java SE has exposed these packages via
+		SE's own JPMS modules, and JBoss Modules allows modules to declare
+		dependencies on SE's JPMS modules in the same way dependencies
+		on native JBoss Modules modules are declared. Simply use the name
+		of the JPMS module in a 'module' element's 'name' attribute. 
+		
+		For example, to add a dependency on the Java SE jdk.security.jgss module:
+		
+		<module name="jdk.security.jgss"/>
+		
+		In the 'paths' section below, the various resource paths (i.e. packages)
+		exposed by this module are grouped by the JPMS module that provides
+		them, with a comment identifying the relevant JPMS module. Users
+		moving away from use of this module can use this information to 
+		identify the appropriate JPMS module(s) to use instead of this one.
+	-->	
+    <properties>
+        <property name="jboss.api" value="deprecated"/>
+    </properties>
+
+    <resources>
+        <!-- currently jboss modules has not way of importing services from
+        classes.jar so we duplicate them here -->
+        <resource-root path="service-loader-resources"/>
+    </resources>
+    <dependencies>
+        <module name="sun.scripting" export="true"/>
+        <system export="true">
+            <paths>
+
+                <!-- See below for replacement modules -->
+
+                <!-- Internal to java.base -->
+
+                <path name="com/sun/net/ssl/internal/ssl"/>
+                <path name="com/sun/crypto/provider"/>
+                <path name="sun/security/action"/>
+                <path name="sun/security/ssl"/>
+                <path name="sun/security/pkcs"/>
+                <path name="sun/security/x509"/>
+                <path name="sun/invoke"/>
+                <path name="sun/nio"/>
+                <path name="sun/nio/ch"/>
+                <path name="sun/nio/cs"/>
+                <path name="sun/nio/cs/ext"/>
+                <path name="sun/security/util"/>
+                <path name="sun/util"/>
+                <path name="sun/util/calendar"/>
+                <path name="sun/util/locale"/>
+                <path name="sun/util/resources"/>
+                <path name="sun/security/provider"/>
+                <path name="sun/text"/>
+
+                <!-- Module java.corba (should not be used) -->
+
+                <path name="com/sun/jndi/url/corbaname"/>
+                <path name="com/sun/jndi/url/iiop"/>
+                <path name="com/sun/jndi/url/iiopname"/>
+
+                <!-- Internal to java.desktop -->
+
+                <path name="com/sun/imageio/plugins/bmp"/>
+                <path name="com/sun/imageio/plugins/common"/>
+                <path name="com/sun/imageio/plugins/gif"/>
+                <path name="com/sun/imageio/plugins/jpeg"/>
+                <path name="com/sun/imageio/plugins/png"/>
+                <path name="com/sun/imageio/plugins/wbmp"/>
+                <path name="com/sun/imageio/spi"/>
+                <path name="com/sun/imageio/stream"/>
+                <path name="com/sun/media/sound"/>
+                <path name="sun/awt"/>
+                <path name="sun/awt/color"/>
+                <path name="sun/awt/datatransfer"/>
+                <path name="sun/awt/dnd"/>
+                <path name="sun/awt/event"/>
+                <path name="sun/awt/geom"/>
+                <path name="sun/awt/im"/>
+                <path name="sun/awt/image"/>
+                <path name="sun/awt/image/codec"/>
+                <path name="sun/awt/motif"/>
+                <path name="sun/awt/resources"/>
+                <path name="sun/awt/shell"/>
+                <path name="sun/awt/util"/>
+                <path name="sun/awt/windows"/>
+                <path name="sun/awt/X11"/>
+                <path name="sun/dc"/>
+                <path name="sun/print"/>
+                <path name="sun/print/resources"/>
+                <path name="sun/invoke"/>
+
+                <!-- Internal to java.naming -->
+
+                <path name="com/sun/jndi/ldap"/>
+                <path name="com/sun/jndi/ldap/ext"/>
+                <path name="com/sun/jndi/url/ldap"/>
+                <path name="com/sun/jndi/url/ldaps"/>
+
+                <!-- Internal to java.rmi -->
+
+                <path name="sun/rmi/log"/>
+                <path name="sun/rmi/registry"/>
+                <path name="sun/rmi/runtime"/>
+                <path name="sun/rmi/server"/>
+                <path name="sun/rmi/transport"/>
+                <path name="sun/rmi/transport/proxy"/>
+                <path name="sun/rmi/transport/tcp"/>
+
+                <!-- Internal to java.security.jgss -->
+
+                <path name="sun/security/krb5"/>
+                <path name="sun/security/krb5/internal"/>
+
+                <!-- Internal to java.sql.rowset -->
+
+                <path name="com/sun/rowset"/>
+                <path name="com/sun/rowset/providers"/>
+
+                <!-- Internal to java.xml -->
+
+                <path name="com/sun/org/apache/bcel/internal/classfile"/>
+
+                <!-- Internal to java.xml.crypto -->
+
+                <path name="com/sun/org/apache/xml/internal/security/transforms/implementations"/>
+
+                <!-- Module jdk.crypto.cryptoki -->
+
+                <path name="sun/security/pkcs11"/>
+
+                <!-- Internal to jdk.naming.dns -->
+
+                <path name="com/sun/jndi/dns"/>
+                <path name="com/sun/jndi/url/dns"/>
+
+                <!-- Internal to jdk.naming.rmi -->
+
+                <path name="com/sun/jndi/url/rmi"/>
+
+                <!-- Module jdk.security.auth -->
+
+                <path name="com/sun/security/auth"/>
+                <path name="com/sun/security/auth/login"/>
+                <path name="com/sun/security/auth/module"/>
+
+                <!-- Module jdk.security.jgss -->
+
+                <path name="com/sun/security/jgss"/>
+
+                <!-- Module jdk.unsupported -->
+
+                <path name="sun/misc"/>
+
+                <!-- Module jdk.xml.bind -->
+
+                <path name="com/sun/tools/internal/xjc"/>
+
+                <!-- No equivalent module -->
+
+                <path name="com/sun/image/codec/jpeg"/>
+                <path name="sun/jdbc/odbc"/>
+                <path name="sun/jdbc/odbc/ee"/>
+                <path name="sun/io"/>
+                <path name="sun/net/spi/nameservice"/>
+                <path name="sun/net/spi/nameservice/dns"/>
+                <path name="sun/security"/>
+                <path name="META-INF/services"/>
+
+            </paths>
+            <exports>
+                <include-set>
+                    <path name="META-INF/services"/>
+                </include-set>
+            </exports>
+        </system>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/sun/jdk/main/service-loader-resources/META-INF/services/java.sql.Driver b/wildfly/modules/system/layers/base/sun/jdk/main/service-loader-resources/META-INF/services/java.sql.Driver
new file mode 100644
index 0000000..73d549a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/sun/jdk/main/service-loader-resources/META-INF/services/java.sql.Driver
@@ -0,0 +1 @@
+sun.jdbc.odbc.JdbcOdbcDriver
diff --git a/wildfly/modules/system/layers/base/sun/scripting/main/module.xml b/wildfly/modules/system/layers/base/sun/scripting/main/module.xml
new file mode 100644
index 0000000..931ceb4
--- /dev/null
+++ b/wildfly/modules/system/layers/base/sun/scripting/main/module.xml
@@ -0,0 +1,66 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="sun.scripting" xmlns="urn:jboss:module:1.6">
+    <properties>
+        <property name="jboss.api" value="private"/>
+    </properties>
+    <resources>
+        <!-- currently jboss modules has not way of importing services from
+        classes.jar so we duplicate them here -->
+        <resource-root path="service-loader-resources"/>
+    </resources>
+    <dependencies>
+        <system export="true">
+            <paths>
+
+                <!-- No equivalent module -->
+
+                <path name="apple/applescript"/>
+                <path name="com/sun/script/javascript"/>
+
+                <!-- Module jdk.scripting.nashorn -->
+
+                <path name="jdk/nashorn/api/scripting"/>
+                <path name="jdk/nashorn/api/scripting/resources"/>
+                <path name="jdk/nashorn/internal/codegen"/>
+                <path name="jdk/nashorn/internal/codegen/types"/>
+                <path name="jdk/nashorn/internal/ir"/>
+                <path name="jdk/nashorn/internal/ir/annotations"/>
+                <path name="jdk/nashorn/internal/ir/debug"/>
+                <path name="jdk/nashorn/internal/ir/visitor"/>
+                <path name="jdk/nashorn/internal/lookup"/>
+                <path name="jdk/nashorn/internal/objects"/>
+                <path name="jdk/nashorn/internal/objects/annotations"/>
+                <path name="jdk/nashorn/internal/parser"/>
+                <path name="jdk/nashorn/internal/runtime"/>
+                <path name="jdk/nashorn/internal/runtime/arrays"/>
+                <path name="jdk/nashorn/internal/runtime/linker"/>
+                <path name="jdk/nashorn/internal/runtime/options"/>
+                <path name="jdk/nashorn/internal/runtime/regexp"/>
+                <path name="jdk/nashorn/internal/runtime/regexp/joni"/>
+                <path name="jdk/nashorn/internal/runtime/resources"/>
+                <path name="jdk/nashorn/internal/runtime/resources/fx"/>
+                <path name="jdk/nashorn/internal/runtime/scripts"/>
+                <path name="jdk/nashorn/internal/tools"/>
+                <path name="jdk/nashorn/internal/tools/resources"/>
+                <path name="jdk/nashorn/tools"/>
+
+                <!-- Module jdk.dynalink -->
+
+                <path name="jdk/internal/dynalink"/>
+                <path name="jdk/internal/dynalink/beans"/>
+                <path name="jdk/internal/dynalink/linker"/>
+                <path name="jdk/internal/dynalink/support"/>
+                <path name="META-INF/services"/>
+            </paths>
+            <exports>
+                <include-set>
+                    <path name="META-INF/services"/>
+                </include-set>
+            </exports>
+        </system>
+    </dependencies>
+</module>
diff --git a/wildfly/modules/system/layers/base/sun/scripting/main/service-loader-resources/META-INF/services/javax.script.ScriptEngineFactory b/wildfly/modules/system/layers/base/sun/scripting/main/service-loader-resources/META-INF/services/javax.script.ScriptEngineFactory
new file mode 100644
index 0000000..3251f9d
--- /dev/null
+++ b/wildfly/modules/system/layers/base/sun/scripting/main/service-loader-resources/META-INF/services/javax.script.ScriptEngineFactory
@@ -0,0 +1 @@
+jdk.nashorn.api.scripting.NashornScriptEngineFactory
diff --git a/wildfly/modules/system/layers/base/wildflyee/api/main/module.xml b/wildfly/modules/system/layers/base/wildflyee/api/main/module.xml
new file mode 100644
index 0000000..827826a
--- /dev/null
+++ b/wildfly/modules/system/layers/base/wildflyee/api/main/module.xml
@@ -0,0 +1,81 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+<module name="wildflyee.api" xmlns="urn:jboss:module:1.9">
+
+    <!--
+      README for this module:
+
+      This module depends upon all the Jakarta EE API modules and exports their
+      APIs, providing access to all the available APIs in one place.
+
+      The dependencies on the EE APIs are all optional, so if a slimmed server
+      is provisioned that only provides a subset of APIs, the missing ones will
+      be ignored and this module will only provide those APIs that are provisioned.
+
+      There are two use cases for this module:
+
+      1) When WildFly dynamically generates modules from a set of
+         resources to provide as a dependency to a deployment, it adds
+         a dependency on this module to the generated module to help
+         ensure it has access to any needed APIs. Examples of this
+         kind of dynamic generation are the WildFly 'ee' subsystem's
+         global module directory feature, as well as modules generated to
+         encapsulate MANIFEST.mf Class-Path entries.
+
+      2) It can be a convenience for static module developers who can
+         add it as a dependency and get access to all the EE APIs without
+         having to identify which specific APIs are needed. This use is
+         a bit of an anti-pattern; module authors should understand and
+         document their dependencies. WildFly's own modules are not
+         allowed to declare dependencies on this module.
+
+      Deployments should not declare dependencies on this module. WildFly
+      subsystems add the appropriate EE API dependencies to deployments.
+    -->
+
+    <properties>
+        <!-- This module is marked as private both because its use case
+             as a convenience for static module developers is questionable,
+             but also because deployments should not declare dependencies
+             on this and should get a log WARN if they do. -->
+        <property name="jboss.api" value="private"/>
+    </properties>
+
+    <dependencies>
+        <module name="jakarta.activation.api" export="true" optional="true"/>
+        <module name="jakarta.annotation.api" export="true" optional="true"/>
+        <module name="jakarta.batch.api" export="true" optional="true"/>
+        <module name="jakarta.ejb.api" export="true" optional="true"/>
+        <module name="jakarta.enterprise.api" export="true" optional="true"/>
+        <module name="jakarta.enterprise.concurrent.api" export="true" optional="true"/>
+        <module name="jakarta.inject.api" export="true" optional="true"/>
+        <module name="jakarta.interceptor.api" export="true" optional="true"/>
+        <module name="jakarta.json.api" export="true" optional="true"/>
+        <module name="jakarta.jms.api" export="true" optional="true"/>
+        <module name="jakarta.xml.ws.api" export="true" optional="true"/>
+        <module name="jakarta.mail.api" export="true" optional="true"/>
+        <module name="jakarta.persistence.api" export="true" optional="true"/>
+        <module name="jakarta.resource.api" export="true" optional="true"/>
+        <module name="javax.rmi.api" export="true" optional="true"/>
+        <module name="jakarta.security.auth.message.api" export="true" optional="true"/>
+        <module name="jakarta.security.jacc.api" export="true" optional="true"/>
+        <module name="jakarta.servlet.api" export="true" optional="true"/>
+        <module name="jakarta.servlet.jsp.api" export="true" optional="true"/>
+        <module name="jakarta.transaction.api" export="true" optional="true"/>
+        <module name="jakarta.validation.api" export="true" optional="true"/>
+        <module name="jakarta.ws.rs.api" export="true" services="export" optional="true"/>
+        <module name="jakarta.websocket.api" export="true" optional="true"/>
+        <module name="jakarta.xml.bind.api" export="true" optional="true"/>
+        <module name="jakarta.xml.soap.api" export="true" optional="true"/>
+        <!-- TODO WFCORE-6385 Consider replacing this with jakarta.el.api.
+             Modules that need the EL impl in Eclipse Expressly should directly
+             declare a dep, and not rely on wildflyee.api for it. -->
+        <module name="org.glassfish.expressly" export="true" optional="true"/>
+        <module name="org.omg.api" export="true" optional="true"/>
+        <!-- This one always goes last. -->
+        <module name="java.se" export="true" optional="true"/>
+    </dependencies>
+</module>
diff --git a/wildfly/standalone/configuration/application-roles.properties b/wildfly/standalone/configuration/application-roles.properties
new file mode 100644
index 0000000..43e5589
--- /dev/null
+++ b/wildfly/standalone/configuration/application-roles.properties
@@ -0,0 +1,23 @@
+#
+# Properties declaration of users roles for the realm 'ApplicationRealm' which is the default realm
+# for application services on a new installation.
+#
+# This includes the following protocols: remote ejb, remote jndi, web, remote jms
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# The format of this file is as follows: -
+# username=role1,role2,role3
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+# The following illustrates how an admin user could be defined.
+#
+#admin=PowerUser,BillingAdmin,
+#guest=guest
diff --git a/wildfly/standalone/configuration/application-users.properties b/wildfly/standalone/configuration/application-users.properties
new file mode 100644
index 0000000..24889c3
--- /dev/null
+++ b/wildfly/standalone/configuration/application-users.properties
@@ -0,0 +1,25 @@
+#
+# Properties declaration of users for the realm 'ApplicationRealm' which is the default realm
+# for application services on a new installation.
+#
+# This includes the following protocols: remote ejb, remote jndi, web, remote jms
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# The format of this realm is as follows: -
+# username=HEX( MD5( username ':' realm ':' password))
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+#$REALM_NAME=ApplicationRealm$ This line is used by the add-user utility to identify the realm name already used in this file.
+#
+# The following illustrates how an admin user could be defined, this
+# is for illustration only and does not correspond to a usable password.
+#
+#admin=2a0923285184943425d1f53ddd58ec7a
diff --git a/wildfly/standalone/configuration/logging.properties b/wildfly/standalone/configuration/logging.properties
new file mode 100644
index 0000000..51d8cf5
--- /dev/null
+++ b/wildfly/standalone/configuration/logging.properties
@@ -0,0 +1,49 @@
+# Note this file has been generated and will be overwritten if a
+# logging subsystem has been defined in the XML configuration.
+
+
+# Additional loggers to configure (the root logger is always configured)
+loggers=sun.rmi,com.networknt.schema,io.jaegertracing.Configuration,org.jboss.as.config,com.arjuna
+
+logger.level=INFO
+logger.handlers=FILE,CONSOLE
+
+logger.sun.rmi.level=WARN
+logger.sun.rmi.useParentHandlers=true
+
+logger.com.networknt.schema.level=WARN
+logger.com.networknt.schema.useParentHandlers=true
+
+logger.io.jaegertracing.Configuration.level=WARN
+logger.io.jaegertracing.Configuration.useParentHandlers=true
+
+logger.org.jboss.as.config.level=DEBUG
+logger.org.jboss.as.config.useParentHandlers=true
+
+logger.com.arjuna.level=WARN
+logger.com.arjuna.useParentHandlers=true
+
+handler.CONSOLE=org.jboss.logmanager.handlers.ConsoleHandler
+handler.CONSOLE.level=INFO
+handler.CONSOLE.formatter=COLOR-PATTERN
+handler.CONSOLE.properties=autoFlush,target
+handler.CONSOLE.autoFlush=true
+handler.CONSOLE.target=SYSTEM_OUT
+
+handler.FILE=org.jboss.logmanager.handlers.PeriodicRotatingFileHandler
+handler.FILE.level=ALL
+handler.FILE.formatter=PATTERN
+handler.FILE.properties=autoFlush,append,fileName,suffix
+handler.FILE.constructorProperties=fileName,append
+handler.FILE.autoFlush=true
+handler.FILE.append=true
+handler.FILE.fileName=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+handler.FILE.suffix=.yyyy-MM-dd
+
+formatter.PATTERN=org.jboss.logmanager.formatters.PatternFormatter
+formatter.PATTERN.properties=pattern
+formatter.PATTERN.pattern=%d{yyyy-MM-dd HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%e%n
+
+formatter.COLOR-PATTERN=org.jboss.logmanager.formatters.PatternFormatter
+formatter.COLOR-PATTERN.properties=pattern
+formatter.COLOR-PATTERN.pattern=%K{level}%d{HH\:mm\:ss,SSS} %-5p [%c] (%t) %s%e%n
diff --git a/wildfly/standalone/configuration/mgmt-groups.properties b/wildfly/standalone/configuration/mgmt-groups.properties
new file mode 100644
index 0000000..c5ced8b
--- /dev/null
+++ b/wildfly/standalone/configuration/mgmt-groups.properties
@@ -0,0 +1,22 @@
+#
+# Properties declaration of users groups for the realm 'ManagementRealm'.
+#
+# This is used for domain management, users groups membership information is used to assign the user
+# specific management roles.
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# The format of this file is as follows: -
+# username=role1,role2,role3
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+# The following illustrates how an admin user could be defined.
+#
+admin=
diff --git a/wildfly/standalone/configuration/mgmt-users.properties b/wildfly/standalone/configuration/mgmt-users.properties
new file mode 100644
index 0000000..152b8eb
--- /dev/null
+++ b/wildfly/standalone/configuration/mgmt-users.properties
@@ -0,0 +1,27 @@
+#
+# Properties declaration of users for the realm 'ManagementRealm' which is the default realm
+# for new installations. Further authentication mechanism can be configured
+# as part of the <management /> in standalone.xml.
+#
+# Users can be added to this properties file at any time, updates after the server has started
+# will be automatically detected.
+#
+# By default the properties realm expects the entries to be in the format: -
+# username=HEX( MD5( username ':' realm ':' password))
+#
+# A utility script is provided which can be executed from the bin folder to add the users: -
+# - Linux
+#  bin/add-user.sh
+#
+# - Windows
+#  bin\add-user.bat
+#
+#$REALM_NAME=ManagementRealm$ This line is used by the add-user utility to identify the realm name already used in this file.
+#
+# On start-up the server will also automatically add a user $local - this user is specifically
+# for local tools running against this AS installation.
+#
+# The following illustrates how an admin user could be defined, this
+# is for illustration only and does not correspond to a usable password.
+#
+admin=c22052286cd5d72239a90fe193737253
diff --git a/wildfly/standalone/configuration/standalone-full-ha.xml b/wildfly/standalone/configuration/standalone-full-ha.xml
new file mode 100644
index 0000000..5db5be0
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone-full-ha.xml
@@ -0,0 +1,661 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="PING"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <socket-protocol type="MPING" socket-binding="jgroups-mping"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <cluster password="${jboss.messaging.cluster.password:CHANGE ME!!}"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10" redistribution-delay="1000"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jgroups-broadcast-group name="bg-group1" jgroups-cluster="activemq-cluster" connectors="http-connector"/>
+                <jgroups-discovery-group name="dg-group1" jgroups-cluster="activemq-cluster"/>
+                <cluster-connection name="my-cluster" address="jms" connector-name="http-connector" discovery-group="dg-group1"/>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector" ha="true" block-on-acknowledge="true" reconnect-attempts="-1"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise-socket="modcluster" listener="ajp">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone-full.xml b/wildfly/standalone/configuration/standalone-full.xml
new file mode 100644
index 0000000..6d4655d
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone-full.xml
@@ -0,0 +1,569 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+        <extension module="org.wildfly.iiop-openjdk"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" jms-connection-factory="java:jboss/DefaultJMSConnectionFactory" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <mdb>
+                <resource-adapter-ref resource-adapter-name="${ejb.resource-adapter-name:activemq-ra.rar}"/>
+                <bean-instance-pool-ref pool-name="mdb-strict-max-pool"/>
+            </mdb>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <iiop enable-by-default="false" use-qualified-name="false"/>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:iiop-openjdk:3.0">
+            <orb socket-binding="iiop"/>
+            <initializers security="elytron" transactions="spec"/>
+            <security server-requires-ssl="false" client-requires-ssl="false"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0">
+            <server name="default">
+                <security elytron-domain="ApplicationDomain"/>
+                <statistics enabled="${wildfly.messaging-activemq.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+                <security-setting name="#">
+                    <role name="guest" send="true" consume="true" create-non-durable-queue="true" delete-non-durable-queue="true"/>
+                </security-setting>
+                <address-setting name="#" dead-letter-address="jms.queue.DLQ" expiry-address="jms.queue.ExpiryQueue" max-size-bytes="10485760" page-size-bytes="2097152" message-counter-history-day-limit="10"/>
+                <http-connector name="http-connector" socket-binding="http" endpoint="http-acceptor"/>
+                <http-connector name="http-connector-throughput" socket-binding="http" endpoint="http-acceptor-throughput">
+                    <param name="batch-delay" value="50"/>
+                </http-connector>
+                <in-vm-connector name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-connector>
+                <http-acceptor name="http-acceptor" http-listener="default"/>
+                <http-acceptor name="http-acceptor-throughput" http-listener="default">
+                    <param name="batch-delay" value="50"/>
+                    <param name="direct-deliver" value="false"/>
+                </http-acceptor>
+                <in-vm-acceptor name="in-vm" server-id="0">
+                    <param name="buffer-pooling" value="false"/>
+                </in-vm-acceptor>
+                <jms-queue name="ExpiryQueue" entries="java:/jms/queue/ExpiryQueue"/>
+                <jms-queue name="DLQ" entries="java:/jms/queue/DLQ"/>
+                <connection-factory name="InVmConnectionFactory" entries="java:/ConnectionFactory" connectors="in-vm"/>
+                <connection-factory name="RemoteConnectionFactory" entries="java:jboss/exported/jms/RemoteConnectionFactory" connectors="http-connector"/>
+                <pooled-connection-factory name="activemq-ra" entries="java:/JmsXA java:jboss/DefaultJMSConnectionFactory" connectors="in-vm" transaction="xa"/>
+            </server>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+        <interface name="unsecure">
+            <inet-address value="${jboss.bind.address.unsecure:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="iiop" interface="unsecure" port="3528"/>
+        <socket-binding name="iiop-ssl" interface="unsecure" port="3529"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone-ha.xml b/wildfly/standalone/configuration/standalone-ha.xml
new file mode 100644
index 0000000..70ee261
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone-ha.xml
@@ -0,0 +1,610 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.modcluster"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.singleton"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb"/>
+            <infinispan-client-mappings-registry cache-container="ejb" cache="client-mappings"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="distributable" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service default-persistent-timer-management="persistent" default-transient-timer-management="transient">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="ejb" default-cache="dist" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <transport lock-timeout="60000"/>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+                <replicated-cache name="client-mappings">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+                <distributed-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+            <cache-container name="server" default-cache="default" marshaller="PROTOSTREAM" aliases="singleton cluster" modules="org.wildfly.clustering.singleton.server">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="default">
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="PING"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <socket-protocol type="MPING" socket-binding="jgroups-mping"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:modcluster:6.0">
+            <proxy name="default" advertise-socket="modcluster" listener="ajp">
+                <dynamic-load-provider>
+                    <load-metric type="cpu"/>
+                </dynamic-load-provider>
+            </proxy>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:singleton:1.0">
+            <singleton-policies default="default">
+                <singleton-policy name="default" cache-container="server">
+                    <simple-election-policy/>
+                </singleton-policy>
+            </singleton-policies>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <ajp-listener name="ajp" socket-binding="ajp"/>
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="modcluster" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone-load-balancer.xml b/wildfly/standalone/configuration/standalone-load-balancer.xml
new file mode 100644
index 0000000..f2278fe
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone-load-balancer.xml
@@ -0,0 +1,239 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions"/>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <http-listener name="management" socket-binding="mcmp-management" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <filter-ref name="load-balancer"/>
+                </host>
+            </server>
+            <servlet-container name="default"/>
+            <filters>
+                <mod-cluster name="load-balancer" management-socket-binding="mcmp-management" advertise-socket-binding="modcluster" enable-http2="true" max-retries="3">
+                    <single-affinity/>
+                </mod-cluster>
+            </filters>
+        </subsystem>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="mcmp-management" interface="private" port="${jboss.mcmp.port:8090}"/>
+        <socket-binding name="modcluster" interface="private" multicast-address="${jboss.modcluster.multicast.address:224.0.1.105}" multicast-port="23364"/>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone-microprofile-ha.xml b/wildfly/standalone/configuration/standalone-microprofile-ha.xml
new file mode 100644
index 0000000..d204d6c
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone-microprofile-ha.xml
@@ -0,0 +1,471 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.clustering.jgroups"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.health-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.openapi-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.telemetry"/>
+        <extension module="org.wildfly.extension.opentelemetry"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <primary-owner-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <infinispan-routing cache-container="web" cache="routing"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <transport lock-timeout="60000"/>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+                <invalidation-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </invalidation-cache>
+                <replicated-cache name="timestamps">
+                    <expiration interval="0"/>
+                </replicated-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="dist" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.session.infinispan.embedded">
+                <transport lock-timeout="60000"/>
+                <replicated-cache name="sso">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <replicated-cache name="routing">
+                    <expiration interval="0"/>
+                </replicated-cache>
+                <distributed-cache name="dist">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </distributed-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jgroups:9.0">
+            <channels default="ee">
+                <channel name="ee" stack="udp" cluster="ejb"/>
+            </channels>
+            <stacks>
+                <stack name="udp">
+                    <transport type="UDP" socket-binding="jgroups-udp"/>
+                    <protocol type="RED"/>
+                    <protocol type="PING"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-udp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+                <stack name="tcp">
+                    <transport type="TCP" socket-binding="jgroups-tcp"/>
+                    <protocol type="RED"/>
+                    <socket-protocol type="MPING" socket-binding="jgroups-mping"/>
+                    <protocol type="MERGE3"/>
+                    <socket-protocol type="FD_SOCK2" socket-binding="jgroups-tcp-fd"/>
+                    <protocol type="FD_ALL3"/>
+                    <protocol type="VERIFY_SUSPECT2"/>
+                    <protocol type="pbcast.NAKACK2"/>
+                    <protocol type="UNICAST3"/>
+                    <protocol type="pbcast.STABLE"/>
+                    <protocol type="pbcast.GMS"/>
+                    <protocol type="UFC"/>
+                    <protocol type="MFC"/>
+                    <protocol type="FRAG4"/>
+                </stack>
+            </stacks>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0"/>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-fault-tolerance-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-health-smallrye:3.0" security-enabled="false" empty-liveness-checks-status="${env.MP_HEALTH_EMPTY_LIVENESS_CHECKS_STATUS:UP}" empty-readiness-checks-status="${env.MP_HEALTH_EMPTY_READINESS_CHECKS_STATUS:UP}" empty-startup-checks-status="${env.MP_HEALTH_EMPTY_STARTUP_CHECKS_STATUS:UP}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-openapi-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-telemetry:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0"/>
+        <subsystem xmlns="urn:wildfly:opentelemetry:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="private">
+            <inet-address value="${jboss.bind.address.private:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="jgroups-mping" interface="private" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45700"/>
+        <socket-binding name="jgroups-tcp" interface="private" port="7600"/>
+        <socket-binding name="jgroups-tcp-fd" interface="private" port="57600"/>
+        <socket-binding name="jgroups-udp" interface="private" port="55200" multicast-address="${jboss.default.multicast.address:230.0.0.4}" multicast-port="45688"/>
+        <socket-binding name="jgroups-udp-fd" interface="private" port="54200"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone-microprofile.xml b/wildfly/standalone/configuration/standalone-microprofile.xml
new file mode 100644
index 0000000..8b7e9a3
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone-microprofile.xml
@@ -0,0 +1,414 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.messaging-activemq"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.fault-tolerance-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.health-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.openapi-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.telemetry"/>
+        <extension module="org.wildfly.extension.opentelemetry"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:messaging-activemq:16.0"/>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-fault-tolerance-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-health-smallrye:3.0" security-enabled="false" empty-liveness-checks-status="${env.MP_HEALTH_EMPTY_LIVENESS_CHECKS_STATUS:UP}" empty-readiness-checks-status="${env.MP_HEALTH_EMPTY_READINESS_CHECKS_STATUS:UP}" empty-startup-checks-status="${env.MP_HEALTH_EMPTY_STARTUP_CHECKS_STATUS:UP}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-openapi-smallrye:1.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-telemetry:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0"/>
+        <subsystem xmlns="urn:wildfly:opentelemetry:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone.xml b/wildfly/standalone/configuration/standalone.xml
new file mode 100644
index 0000000..9c57861
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone.xml
@@ -0,0 +1,522 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone_xml_history/standalone.boot.xml b/wildfly/standalone/configuration/standalone_xml_history/standalone.boot.xml
new file mode 100644
index 0000000..9c57861
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone_xml_history/standalone.boot.xml
@@ -0,0 +1,522 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone_xml_history/standalone.initial.xml b/wildfly/standalone/configuration/standalone_xml_history/standalone.initial.xml
new file mode 100644
index 0000000..9c57861
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone_xml_history/standalone.initial.xml
@@ -0,0 +1,522 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/configuration/standalone_xml_history/standalone.last.xml b/wildfly/standalone/configuration/standalone_xml_history/standalone.last.xml
new file mode 100644
index 0000000..9c57861
--- /dev/null
+++ b/wildfly/standalone/configuration/standalone_xml_history/standalone.last.xml
@@ -0,0 +1,522 @@
+<?xml version="1.0" encoding="UTF-8"?>
+
+<server xmlns="urn:jboss:domain:community:20.0">
+    <extensions>
+        <extension module="org.jboss.as.clustering.infinispan"/>
+        <extension module="org.jboss.as.connector"/>
+        <extension module="org.jboss.as.deployment-scanner"/>
+        <extension module="org.jboss.as.ee"/>
+        <extension module="org.jboss.as.ejb3"/>
+        <extension module="org.jboss.as.jaxrs"/>
+        <extension module="org.jboss.as.jdr"/>
+        <extension module="org.jboss.as.jmx"/>
+        <extension module="org.jboss.as.jpa"/>
+        <extension module="org.jboss.as.jsf"/>
+        <extension module="org.jboss.as.logging"/>
+        <extension module="org.jboss.as.mail"/>
+        <extension module="org.jboss.as.naming"/>
+        <extension module="org.jboss.as.pojo"/>
+        <extension module="org.jboss.as.remoting"/>
+        <extension module="org.jboss.as.sar"/>
+        <extension module="org.jboss.as.transactions"/>
+        <extension module="org.jboss.as.webservices"/>
+        <extension module="org.jboss.as.weld"/>
+        <extension module="org.wildfly.extension.batch.jberet"/>
+        <extension module="org.wildfly.extension.bean-validation"/>
+        <extension module="org.wildfly.extension.clustering.ejb"/>
+        <extension module="org.wildfly.extension.clustering.web"/>
+        <extension module="org.wildfly.extension.core-management"/>
+        <extension module="org.wildfly.extension.discovery"/>
+        <extension module="org.wildfly.extension.ee-security"/>
+        <extension module="org.wildfly.extension.elytron"/>
+        <extension module="org.wildfly.extension.elytron-oidc-client"/>
+        <extension module="org.wildfly.extension.health"/>
+        <extension module="org.wildfly.extension.io"/>
+        <extension module="org.wildfly.extension.metrics"/>
+        <extension module="org.wildfly.extension.microprofile.config-smallrye"/>
+        <extension module="org.wildfly.extension.microprofile.jwt-smallrye"/>
+        <extension module="org.wildfly.extension.request-controller"/>
+        <extension module="org.wildfly.extension.security.manager"/>
+        <extension module="org.wildfly.extension.undertow"/>
+    </extensions>
+    <management>
+        <audit-log>
+            <formatters>
+                <json-formatter name="json-formatter"/>
+            </formatters>
+            <handlers>
+                <file-handler name="file" formatter="json-formatter" path="audit-log.log" relative-to="jboss.server.data.dir"/>
+            </handlers>
+            <logger log-boot="true" log-read-only="false" enabled="false">
+                <handlers>
+                    <handler name="file"/>
+                </handlers>
+            </logger>
+        </audit-log>
+        <management-interfaces>
+            <http-interface http-authentication-factory="management-http-authentication">
+                <http-upgrade enabled="true" sasl-authentication-factory="management-sasl-authentication"/>
+                <socket-binding http="management-http"/>
+            </http-interface>
+        </management-interfaces>
+        <access-control provider="simple">
+            <role-mapping>
+                <role name="SuperUser">
+                    <include>
+                        <user name="$local"/>
+                    </include>
+                </role>
+            </role-mapping>
+        </access-control>
+    </management>
+    <profile>
+        <subsystem xmlns="urn:jboss:domain:logging:8.0">
+            <console-handler name="CONSOLE">
+                <level name="INFO"/>
+                <formatter>
+                    <named-formatter name="COLOR-PATTERN"/>
+                </formatter>
+            </console-handler>
+            <periodic-rotating-file-handler name="FILE" autoflush="true">
+                <formatter>
+                    <named-formatter name="PATTERN"/>
+                </formatter>
+                <file relative-to="jboss.server.log.dir" path="server.log"/>
+                <suffix value=".yyyy-MM-dd"/>
+                <append value="true"/>
+            </periodic-rotating-file-handler>
+            <logger category="com.arjuna">
+                <level name="WARN"/>
+            </logger>
+            <logger category="com.networknt.schema">
+                <level name="WARN"/>
+            </logger>
+            <logger category="io.jaegertracing.Configuration">
+                <level name="WARN"/>
+            </logger>
+            <logger category="org.jboss.as.config">
+                <level name="DEBUG"/>
+            </logger>
+            <logger category="sun.rmi">
+                <level name="WARN"/>
+            </logger>
+            <root-logger>
+                <level name="INFO"/>
+                <handlers>
+                    <handler name="CONSOLE"/>
+                    <handler name="FILE"/>
+                </handlers>
+            </root-logger>
+            <formatter name="PATTERN">
+                <pattern-formatter pattern="%d{yyyy-MM-dd HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+            <formatter name="COLOR-PATTERN">
+                <pattern-formatter pattern="%K{level}%d{HH:mm:ss,SSS} %-5p [%c] (%t) %s%e%n"/>
+            </formatter>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:batch-jberet:3.0">
+            <default-job-repository name="in-memory"/>
+            <default-thread-pool name="batch"/>
+            <security-domain name="ApplicationDomain"/>
+            <job-repository name="in-memory">
+                <in-memory/>
+            </job-repository>
+            <thread-pool name="batch">
+                <max-threads count="10"/>
+                <keepalive-time time="30" unit="seconds"/>
+            </thread-pool>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:bean-validation:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:core-management:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:datasources:7.2">
+            <datasources>
+                <datasource jndi-name="java:jboss/datasources/ExampleDS" pool-name="ExampleDS" enabled="true" use-java-context="true" statistics-enabled="${wildfly.datasources.statistics-enabled:${wildfly.statistics-enabled:false}}">
+                    <connection-url>jdbc:h2:mem:test;DB_CLOSE_DELAY=-1;DB_CLOSE_ON_EXIT=FALSE;MODE=${wildfly.h2.compatibility.mode:REGULAR}</connection-url>
+                    <driver>h2</driver>
+                    <security user-name="sa" password="sa"/>
+                </datasource>
+                <drivers>
+                    <driver name="h2" module="com.h2database.h2">
+                        <xa-datasource-class>org.h2.jdbcx.JdbcDataSource</xa-datasource-class>
+                    </driver>
+                </drivers>
+            </datasources>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:deployment-scanner:2.0">
+            <deployment-scanner path="deployments" relative-to="jboss.server.base.dir" scan-interval="5000" runtime-failure-causes-rollback="${jboss.deployment.scanner.rollback.on.failure:false}"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:discovery:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:distributable-ejb:1.0" default-bean-management="default">
+            <infinispan-bean-management name="default" max-active-beans="10000" cache-container="ejb" cache="passivation"/>
+            <local-client-mappings-registry/>
+            <infinispan-timer-management name="persistent" cache-container="ejb" cache="persistent" max-active-timers="10000"/>
+            <infinispan-timer-management name="transient" cache-container="ejb" cache="transient" max-active-timers="10000"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:distributable-web:4.0" default-session-management="default" default-single-sign-on-management="default">
+            <infinispan-session-management name="default" cache-container="web" granularity="SESSION">
+                <local-affinity/>
+            </infinispan-session-management>
+            <infinispan-single-sign-on-management name="default" cache-container="web" cache="sso"/>
+            <local-routing/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee:6.0">
+            <spec-descriptor-property-replacement>false</spec-descriptor-property-replacement>
+            <concurrent>
+                <context-services>
+                    <context-service name="default" jndi-name="java:jboss/ee/concurrency/context/default"/>
+                </context-services>
+                <managed-thread-factories>
+                    <managed-thread-factory name="default" jndi-name="java:jboss/ee/concurrency/factory/default" context-service="default"/>
+                </managed-thread-factories>
+                <managed-executor-services>
+                    <managed-executor-service name="default" jndi-name="java:jboss/ee/concurrency/executor/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="5000"/>
+                </managed-executor-services>
+                <managed-scheduled-executor-services>
+                    <managed-scheduled-executor-service name="default" jndi-name="java:jboss/ee/concurrency/scheduler/default" context-service="default" hung-task-termination-period="0" hung-task-threshold="60000" keepalive-time="3000"/>
+                </managed-scheduled-executor-services>
+            </concurrent>
+            <default-bindings context-service="java:jboss/ee/concurrency/context/default" datasource="java:jboss/datasources/ExampleDS" managed-executor-service="java:jboss/ee/concurrency/executor/default" managed-scheduled-executor-service="java:jboss/ee/concurrency/scheduler/default" managed-thread-factory="java:jboss/ee/concurrency/factory/default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:ee-security:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:ejb3:10.0">
+            <session-bean>
+                <stateless>
+                    <bean-instance-pool-ref pool-name="slsb-strict-max-pool"/>
+                </stateless>
+                <stateful default-access-timeout="5000" cache-ref="simple" passivation-disabled-cache-ref="simple"/>
+                <singleton default-access-timeout="5000"/>
+            </session-bean>
+            <pools>
+                <bean-instance-pools>
+                    <strict-max-pool name="slsb-strict-max-pool" derive-size="from-worker-pools" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                    <strict-max-pool name="mdb-strict-max-pool" derive-size="from-cpu-count" instance-acquisition-timeout="5" instance-acquisition-timeout-unit="MINUTES"/>
+                </bean-instance-pools>
+            </pools>
+            <caches>
+                <simple-cache name="simple"/>
+                <distributable-cache name="distributable"/>
+            </caches>
+            <async thread-pool-name="default"/>
+            <timer-service thread-pool-name="default" default-data-store="default-file-store">
+                <data-stores>
+                    <file-data-store name="default-file-store" path="timer-service-data" relative-to="jboss.server.data.dir"/>
+                </data-stores>
+            </timer-service>
+            <remote connectors="http-remoting-connector" thread-pool-name="default">
+                <channel-creation-options>
+                    <option name="MAX_OUTBOUND_MESSAGES" value="1234" type="remoting"/>
+                </channel-creation-options>
+            </remote>
+            <thread-pools>
+                <thread-pool name="default">
+                    <max-threads count="10"/>
+                    <keepalive-time time="60" unit="seconds"/>
+                </thread-pool>
+            </thread-pools>
+            <default-security-domain value="other"/>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+            <default-missing-method-permissions-deny-access value="true"/>
+            <statistics enabled="${wildfly.ejb3.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <log-system-exceptions value="true"/>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron:community:18.0" final-providers="combined-providers" disallowed-providers="OracleUcrypto">
+            <providers>
+                <aggregate-providers name="combined-providers">
+                    <providers name="elytron"/>
+                    <providers name="openssl"/>
+                </aggregate-providers>
+                <provider-loader name="elytron" module="org.wildfly.security.elytron"/>
+                <provider-loader name="openssl" module="org.wildfly.openssl"/>
+            </providers>
+            <audit-logging>
+                <file-audit-log name="local-audit" path="audit.log" relative-to="jboss.server.log.dir" format="JSON"/>
+            </audit-logging>
+            <security-domains>
+                <security-domain name="ApplicationDomain" default-realm="ApplicationRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ApplicationRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local"/>
+                </security-domain>
+                <security-domain name="ManagementDomain" default-realm="ManagementRealm" permission-mapper="default-permission-mapper">
+                    <realm name="ManagementRealm" role-decoder="groups-to-roles"/>
+                    <realm name="local" role-mapper="super-user-mapper"/>
+                </security-domain>
+            </security-domains>
+            <security-realms>
+                <identity-realm name="local" identity="$local"/>
+                <properties-realm name="ApplicationRealm">
+                    <users-properties path="application-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ApplicationRealm"/>
+                    <groups-properties path="application-roles.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+                <properties-realm name="ManagementRealm">
+                    <users-properties path="mgmt-users.properties" relative-to="jboss.server.config.dir" digest-realm-name="ManagementRealm"/>
+                    <groups-properties path="mgmt-groups.properties" relative-to="jboss.server.config.dir"/>
+                </properties-realm>
+            </security-realms>
+            <mappers>
+                <simple-permission-mapper name="default-permission-mapper" mapping-mode="first">
+                    <permission-mapping>
+                        <principal name="anonymous"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                    <permission-mapping match-all="true">
+                        <permission-set name="login-permission"/>
+                        <permission-set name="default-permissions"/>
+                    </permission-mapping>
+                </simple-permission-mapper>
+                <constant-realm-mapper name="local" realm-name="local"/>
+                <simple-role-decoder name="groups-to-roles" attribute="groups"/>
+                <constant-role-mapper name="super-user-mapper">
+                    <role name="SuperUser"/>
+                </constant-role-mapper>
+            </mappers>
+            <permission-sets>
+                <permission-set name="login-permission">
+                    <permission class-name="org.wildfly.security.auth.permission.LoginPermission"/>
+                </permission-set>
+                <permission-set name="default-permissions">
+                    <permission class-name="org.wildfly.transaction.client.RemoteTransactionPermission" module="org.wildfly.transaction.client"/>
+                    <permission class-name="org.jboss.ejb.client.RemoteEJBPermission" module="org.jboss.ejb-client"/>
+                    <permission class-name="org.wildfly.extension.batch.jberet.deployment.BatchPermission" module="org.wildfly.extension.batch.jberet" target-name="*"/>
+                </permission-set>
+            </permission-sets>
+            <http>
+                <http-authentication-factory name="application-http-authentication" security-domain="ApplicationDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="BASIC">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <http-authentication-factory name="management-http-authentication" security-domain="ManagementDomain" http-server-mechanism-factory="global">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="DIGEST">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </http-authentication-factory>
+                <provider-http-server-mechanism-factory name="global"/>
+            </http>
+            <sasl>
+                <sasl-authentication-factory name="application-sasl-authentication" sasl-server-factory="configured" security-domain="ApplicationDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ApplicationRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <sasl-authentication-factory name="management-sasl-authentication" sasl-server-factory="configured" security-domain="ManagementDomain">
+                    <mechanism-configuration>
+                        <mechanism mechanism-name="JBOSS-LOCAL-USER" realm-mapper="local"/>
+                        <mechanism mechanism-name="DIGEST-MD5">
+                            <mechanism-realm realm-name="ManagementRealm"/>
+                        </mechanism>
+                    </mechanism-configuration>
+                </sasl-authentication-factory>
+                <configurable-sasl-server-factory name="configured" sasl-server-factory="elytron">
+                    <properties>
+                        <property name="wildfly.sasl.local-user.default-user" value="$local"/>
+                        <property name="wildfly.sasl.local-user.challenge-path" value="${jboss.server.temp.dir}/auth"/>
+                    </properties>
+                </configurable-sasl-server-factory>
+                <mechanism-provider-filtering-sasl-server-factory name="elytron" sasl-server-factory="global">
+                    <filters>
+                        <filter provider-name="WildFlyElytron"/>
+                    </filters>
+                </mechanism-provider-filtering-sasl-server-factory>
+                <provider-sasl-server-factory name="global"/>
+            </sasl>
+            <tls>
+                <key-stores>
+                    <key-store name="applicationKS">
+                        <credential-reference clear-text="password"/>
+                        <implementation type="JKS"/>
+                        <file path="application.keystore" relative-to="jboss.server.config.dir"/>
+                    </key-store>
+                </key-stores>
+                <key-managers>
+                    <key-manager name="applicationKM" key-store="applicationKS" generate-self-signed-certificate-host="localhost">
+                        <credential-reference clear-text="password"/>
+                    </key-manager>
+                </key-managers>
+                <server-ssl-contexts>
+                    <server-ssl-context name="applicationSSC" key-manager="applicationKM"/>
+                </server-ssl-contexts>
+            </tls>
+            <policy name="jacc">
+                <jacc-policy/>
+            </policy>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:elytron-oidc-client:2.0"/>
+        <subsystem xmlns="urn:wildfly:health:1.0" security-enabled="false"/>
+        <subsystem xmlns="urn:jboss:domain:infinispan:14.0">
+            <cache-container name="hibernate" marshaller="JBOSS" modules="org.infinispan.hibernate-cache">
+                <local-cache name="entity">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="local-query">
+                    <heap-memory size="10000"/>
+                    <expiration max-idle="100000"/>
+                </local-cache>
+                <local-cache name="timestamps">
+                    <expiration interval="0"/>
+                </local-cache>
+                <local-cache name="pending-puts">
+                    <expiration max-idle="60000"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="ejb" default-cache="passivation" marshaller="PROTOSTREAM" aliases="sfsb" modules="org.wildfly.clustering.ejb.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="persistent">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store preload="true"/>
+                </local-cache>
+                <local-cache name="transient">
+                    <locking isolation="REPEATABLE_READ"/>
+                    <transaction mode="BATCH"/>
+                    <expiration interval="0"/>
+                    <file-store passivation="true" purge="true"/>
+                </local-cache>
+            </cache-container>
+            <cache-container name="web" default-cache="passivation" marshaller="PROTOSTREAM" modules="org.wildfly.clustering.web.infinispan">
+                <local-cache name="passivation">
+                    <expiration interval="0"/>
+                    <file-store passivation="true"/>
+                </local-cache>
+                <local-cache name="sso">
+                    <expiration interval="0"/>
+                </local-cache>
+            </cache-container>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:io:4.0" default-worker="default">
+            <worker name="default"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jaxrs:3.0"/>
+        <subsystem xmlns="urn:jboss:domain:jca:6.0">
+            <archive-validation enabled="true" fail-on-error="true" fail-on-warn="false"/>
+            <bean-validation enabled="true"/>
+            <default-workmanager>
+                <short-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </short-running-threads>
+                <long-running-threads>
+                    <core-threads count="50"/>
+                    <queue-length count="50"/>
+                    <max-threads count="50"/>
+                    <keepalive-time time="10" unit="seconds"/>
+                </long-running-threads>
+            </default-workmanager>
+            <cached-connection-manager/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jdr:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:jmx:1.3">
+            <expose-resolved-model/>
+            <expose-expression-model/>
+            <remoting-connector/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jpa:1.1">
+            <jpa default-extended-persistence-inheritance="DEEP"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:jsf:1.1"/>
+        <subsystem xmlns="urn:jboss:domain:mail:4.0">
+            <mail-session name="default" jndi-name="java:jboss/mail/Default">
+                <smtp-server outbound-socket-binding-ref="mail-smtp"/>
+            </mail-session>
+        </subsystem>
+        <subsystem xmlns="urn:wildfly:metrics:1.0" security-enabled="false" exposed-subsystems="*" prefix="${wildfly.metrics.prefix:wildfly}"/>
+        <subsystem xmlns="urn:wildfly:microprofile-config-smallrye:2.0"/>
+        <subsystem xmlns="urn:wildfly:microprofile-jwt-smallrye:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:naming:2.0">
+            <remote-naming/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:pojo:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:remoting:7.0">
+            <endpoint worker="default"/>
+            <http-connector name="http-remoting-connector" connector-ref="default" sasl-authentication-factory="application-sasl-authentication"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:request-controller:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:resource-adapters:7.1"/>
+        <subsystem xmlns="urn:jboss:domain:sar:1.0"/>
+        <subsystem xmlns="urn:jboss:domain:security-manager:1.0">
+            <deployment-permissions>
+                <maximum-set>
+                    <permission class="java.security.AllPermission"/>
+                </maximum-set>
+            </deployment-permissions>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:transactions:6.0">
+            <core-environment node-identifier="${jboss.tx.node.id:1}">
+                <process-id>
+                    <uuid/>
+                </process-id>
+            </core-environment>
+            <recovery-environment socket-binding="txn-recovery-environment" status-socket-binding="txn-status-manager"/>
+            <coordinator-environment statistics-enabled="${wildfly.transactions.statistics-enabled:${wildfly.statistics-enabled:false}}"/>
+            <object-store path="tx-object-store" relative-to="jboss.server.data.dir"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:undertow:14.0" default-virtual-host="default-host" default-servlet-container="default" default-server="default-server" statistics-enabled="${wildfly.undertow.statistics-enabled:${wildfly.statistics-enabled:false}}" default-security-domain="other">
+            <byte-buffer-pool name="default"/>
+            <buffer-cache name="default"/>
+            <server name="default-server">
+                <http-listener name="default" socket-binding="http" redirect-socket="https" enable-http2="true"/>
+                <https-listener name="https" socket-binding="https" ssl-context="applicationSSC" enable-http2="true"/>
+                <host name="default-host" alias="localhost">
+                    <location name="/" handler="welcome-content"/>
+                    <http-invoker http-authentication-factory="application-http-authentication"/>
+                </host>
+            </server>
+            <servlet-container name="default">
+                <jsp-config/>
+                <websockets/>
+            </servlet-container>
+            <handlers>
+                <file name="welcome-content" path="${jboss.home.dir}/welcome-content"/>
+            </handlers>
+            <application-security-domains>
+                <application-security-domain name="other" security-domain="ApplicationDomain"/>
+            </application-security-domains>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:webservices:2.0" statistics-enabled="${wildfly.webservices.statistics-enabled:${wildfly.statistics-enabled:false}}">
+            <wsdl-host>${jboss.bind.address:127.0.0.1}</wsdl-host>
+            <endpoint-config name="Standard-Endpoint-Config"/>
+            <endpoint-config name="Recording-Endpoint-Config">
+                <pre-handler-chain name="recording-handlers" protocol-bindings="##SOAP11_HTTP ##SOAP11_HTTP_MTOM ##SOAP12_HTTP ##SOAP12_HTTP_MTOM">
+                    <handler name="RecordingHandler" class="org.jboss.ws.common.invocation.RecordingServerHandler"/>
+                </pre-handler-chain>
+            </endpoint-config>
+            <client-config name="Standard-Client-Config"/>
+        </subsystem>
+        <subsystem xmlns="urn:jboss:domain:weld:5.0"/>
+    </profile>
+    <interfaces>
+        <interface name="management">
+            <inet-address value="${jboss.bind.address.management:127.0.0.1}"/>
+        </interface>
+        <interface name="public">
+            <inet-address value="${jboss.bind.address:127.0.0.1}"/>
+        </interface>
+    </interfaces>
+    <socket-binding-group name="standard-sockets" default-interface="public" port-offset="${jboss.socket.binding.port-offset:0}">
+        <socket-binding name="ajp" port="${jboss.ajp.port:8009}"/>
+        <socket-binding name="http" port="${jboss.http.port:8080}"/>
+        <socket-binding name="https" port="${jboss.https.port:8443}"/>
+        <socket-binding name="management-http" interface="management" port="${jboss.management.http.port:9990}"/>
+        <socket-binding name="management-https" interface="management" port="${jboss.management.https.port:9993}"/>
+        <socket-binding name="txn-recovery-environment" port="4712"/>
+        <socket-binding name="txn-status-manager" port="4713"/>
+        <outbound-socket-binding name="mail-smtp">
+            <remote-destination host="${jboss.mail.server.host:localhost}" port="${jboss.mail.server.port:25}"/>
+        </outbound-socket-binding>
+    </socket-binding-group>
+</server>
\ No newline at end of file
diff --git a/wildfly/standalone/data/content/11/85002832f0c77a967d99cfabd6694be29128f7/content b/wildfly/standalone/data/content/11/85002832f0c77a967d99cfabd6694be29128f7/content
new file mode 100644
index 0000000..9de1f0b
Binary files /dev/null and b/wildfly/standalone/data/content/11/85002832f0c77a967d99cfabd6694be29128f7/content differ
diff --git a/wildfly/standalone/data/content/13/9ce0aa33df7d526500a1f9ecbf0758fdfe525f/content b/wildfly/standalone/data/content/13/9ce0aa33df7d526500a1f9ecbf0758fdfe525f/content
new file mode 100644
index 0000000..776201f
Binary files /dev/null and b/wildfly/standalone/data/content/13/9ce0aa33df7d526500a1f9ecbf0758fdfe525f/content differ
diff --git a/wildfly/standalone/data/content/16/2dc3fd004cd05798ab2270b1b49d05480a38b3/content b/wildfly/standalone/data/content/16/2dc3fd004cd05798ab2270b1b49d05480a38b3/content
new file mode 100644
index 0000000..a416ccd
Binary files /dev/null and b/wildfly/standalone/data/content/16/2dc3fd004cd05798ab2270b1b49d05480a38b3/content differ
diff --git a/wildfly/standalone/data/content/21/a6d16b3917807581ef058ae3b661cd7d14cbe0/content b/wildfly/standalone/data/content/21/a6d16b3917807581ef058ae3b661cd7d14cbe0/content
new file mode 100644
index 0000000..7ed81fb
Binary files /dev/null and b/wildfly/standalone/data/content/21/a6d16b3917807581ef058ae3b661cd7d14cbe0/content differ
diff --git a/wildfly/standalone/data/content/21/c26fff02cdd9297e56d4c7d0ae4e23ed095fe4/content b/wildfly/standalone/data/content/21/c26fff02cdd9297e56d4c7d0ae4e23ed095fe4/content
new file mode 100644
index 0000000..69dcd53
Binary files /dev/null and b/wildfly/standalone/data/content/21/c26fff02cdd9297e56d4c7d0ae4e23ed095fe4/content differ
diff --git a/wildfly/standalone/data/content/2c/659ef583a131a7764c7eed3ee2d4fe69c5ced5/content b/wildfly/standalone/data/content/2c/659ef583a131a7764c7eed3ee2d4fe69c5ced5/content
new file mode 100644
index 0000000..1853ec7
Binary files /dev/null and b/wildfly/standalone/data/content/2c/659ef583a131a7764c7eed3ee2d4fe69c5ced5/content differ
diff --git a/wildfly/standalone/data/content/30/a5763f7aaeba14fbc6d1d6ecbaed89ee7169ec/content b/wildfly/standalone/data/content/30/a5763f7aaeba14fbc6d1d6ecbaed89ee7169ec/content
new file mode 100644
index 0000000..741c8ac
Binary files /dev/null and b/wildfly/standalone/data/content/30/a5763f7aaeba14fbc6d1d6ecbaed89ee7169ec/content differ
diff --git a/wildfly/standalone/data/content/70/d6b3c9841e99f84bbb642ee51c44cb9b9ecddb/content b/wildfly/standalone/data/content/70/d6b3c9841e99f84bbb642ee51c44cb9b9ecddb/content
new file mode 100644
index 0000000..067e1ee
Binary files /dev/null and b/wildfly/standalone/data/content/70/d6b3c9841e99f84bbb642ee51c44cb9b9ecddb/content differ
diff --git a/wildfly/standalone/data/content/8b/585fd5ccf3ac7d3097e801802d723c6900817a/content b/wildfly/standalone/data/content/8b/585fd5ccf3ac7d3097e801802d723c6900817a/content
new file mode 100644
index 0000000..4c55cc3
Binary files /dev/null and b/wildfly/standalone/data/content/8b/585fd5ccf3ac7d3097e801802d723c6900817a/content differ
diff --git a/wildfly/standalone/data/content/92/bda770b8091e716d3bfeb0cb63e83e5f1c9131/content b/wildfly/standalone/data/content/92/bda770b8091e716d3bfeb0cb63e83e5f1c9131/content
new file mode 100644
index 0000000..821991a
Binary files /dev/null and b/wildfly/standalone/data/content/92/bda770b8091e716d3bfeb0cb63e83e5f1c9131/content differ
diff --git a/wildfly/standalone/data/content/93/df251736d3d514211a5f19940ae2d12fc00e45/content b/wildfly/standalone/data/content/93/df251736d3d514211a5f19940ae2d12fc00e45/content
new file mode 100644
index 0000000..f073eef
Binary files /dev/null and b/wildfly/standalone/data/content/93/df251736d3d514211a5f19940ae2d12fc00e45/content differ
diff --git a/wildfly/standalone/data/content/ab/7a91908d62184e547bc4927391a50e3d2aa4b7/content b/wildfly/standalone/data/content/ab/7a91908d62184e547bc4927391a50e3d2aa4b7/content
new file mode 100644
index 0000000..c1a8a9a
Binary files /dev/null and b/wildfly/standalone/data/content/ab/7a91908d62184e547bc4927391a50e3d2aa4b7/content differ
diff --git a/wildfly/standalone/data/content/ac/121103ece3ea8b0d66f0dc3545757eea7d1a4d/content b/wildfly/standalone/data/content/ac/121103ece3ea8b0d66f0dc3545757eea7d1a4d/content
new file mode 100644
index 0000000..8cad151
Binary files /dev/null and b/wildfly/standalone/data/content/ac/121103ece3ea8b0d66f0dc3545757eea7d1a4d/content differ
diff --git a/wildfly/standalone/data/content/af/dc9287d9995b903bbbf84edc1c78a1960a00be/content b/wildfly/standalone/data/content/af/dc9287d9995b903bbbf84edc1c78a1960a00be/content
new file mode 100644
index 0000000..372c170
Binary files /dev/null and b/wildfly/standalone/data/content/af/dc9287d9995b903bbbf84edc1c78a1960a00be/content differ
diff --git a/wildfly/standalone/data/content/d1/72f7b53ec74d0a2a1f7c9ac29c1519425c1b1a/content b/wildfly/standalone/data/content/d1/72f7b53ec74d0a2a1f7c9ac29c1519425c1b1a/content
new file mode 100644
index 0000000..24323b9
Binary files /dev/null and b/wildfly/standalone/data/content/d1/72f7b53ec74d0a2a1f7c9ac29c1519425c1b1a/content differ
diff --git a/wildfly/standalone/data/content/e3/46ad2398892f0f4c1ba94eec33d38558d9d39c/content b/wildfly/standalone/data/content/e3/46ad2398892f0f4c1ba94eec33d38558d9d39c/content
new file mode 100644
index 0000000..02aa24a
Binary files /dev/null and b/wildfly/standalone/data/content/e3/46ad2398892f0f4c1ba94eec33d38558d9d39c/content differ
diff --git a/wildfly/standalone/data/content/e4/71c1233c9d792a979f17c1a8a53b86509f5edf/content b/wildfly/standalone/data/content/e4/71c1233c9d792a979f17c1a8a53b86509f5edf/content
new file mode 100644
index 0000000..9ba9528
Binary files /dev/null and b/wildfly/standalone/data/content/e4/71c1233c9d792a979f17c1a8a53b86509f5edf/content differ
diff --git a/wildfly/standalone/data/content/e6/7b51c2f921e803bb55d29e5ff7e98ba1b1994d/content b/wildfly/standalone/data/content/e6/7b51c2f921e803bb55d29e5ff7e98ba1b1994d/content
new file mode 100644
index 0000000..723dff8
Binary files /dev/null and b/wildfly/standalone/data/content/e6/7b51c2f921e803bb55d29e5ff7e98ba1b1994d/content differ
diff --git a/wildfly/standalone/data/content/f0/7bb4fda117bdfa730ec199504805f879cb9692/content b/wildfly/standalone/data/content/f0/7bb4fda117bdfa730ec199504805f879cb9692/content
new file mode 100644
index 0000000..48b0f98
Binary files /dev/null and b/wildfly/standalone/data/content/f0/7bb4fda117bdfa730ec199504805f879cb9692/content differ
diff --git a/wildfly/standalone/data/content/f0/bd6c1c507eb51c912102e16438ff2c7e2ff8e7/content b/wildfly/standalone/data/content/f0/bd6c1c507eb51c912102e16438ff2c7e2ff8e7/content
new file mode 100644
index 0000000..e35a0e8
Binary files /dev/null and b/wildfly/standalone/data/content/f0/bd6c1c507eb51c912102e16438ff2c7e2ff8e7/content differ
diff --git a/wildfly/standalone/data/content/f2/eb56ff266671572188496387d3cc88445b3d25/content b/wildfly/standalone/data/content/f2/eb56ff266671572188496387d3cc88445b3d25/content
new file mode 100644
index 0000000..70d6377
Binary files /dev/null and b/wildfly/standalone/data/content/f2/eb56ff266671572188496387d3cc88445b3d25/content differ
diff --git a/wildfly/standalone/data/content/f8/f7d9743cffeb479dafd27f1f190946d538ade0/content b/wildfly/standalone/data/content/f8/f7d9743cffeb479dafd27f1f190946d538ade0/content
new file mode 100644
index 0000000..4c10a38
Binary files /dev/null and b/wildfly/standalone/data/content/f8/f7d9743cffeb479dafd27f1f190946d538ade0/content differ
diff --git a/wildfly/standalone/data/kernel/process-uuid b/wildfly/standalone/data/kernel/process-uuid
new file mode 100644
index 0000000..fcfc73f
--- /dev/null
+++ b/wildfly/standalone/data/kernel/process-uuid
@@ -0,0 +1 @@
+c20c4d5d-4a42-4107-a839-f35dd6951c8d
diff --git a/wildfly/standalone/deployments/README.txt b/wildfly/standalone/deployments/README.txt
new file mode 100644
index 0000000..7fa298c
--- /dev/null
+++ b/wildfly/standalone/deployments/README.txt
@@ -0,0 +1,190 @@
+The standalone/deployments directory in the JBoss Application Server
+distribution is the location end users can place their deployment content
+(e.g. war, ear, jar, sar files) to have it automatically deployed into the server
+runtime.
+
+Users, particularly those running production systems, are encouraged to use the
+JBoss AS management APIs to upload and deploy deployment content instead of
+relying on the deployment scanner subsystem that periodically scans this
+directory.  See the JBoss AS documentation for details.
+
+DEPLOYMENT MODES
+
+The filesystem deployment scanner in AS 7 and later works differently from
+previous JBoss AS releases. The scanner can operate in one of two different
+modes, depending on whether it will directly monitor the deployment content
+in order to decide to deploy (or redeploy) it.
+
+1) Auto-deploy mode: The scanner will directly monitor the deployment content,
+automatically deploying new content and redeploying content whose timestamp
+has changed. This is similiar to the behavior of previous AS releases, although
+there are differences:
+
+a) A change in any file in an exploded deployment triggers redeploy. Because
+EE 6 applications do not require deployment descriptors, there is no attempt
+to monitor deployment descriptors and only redeploy when a deployment
+descriptor changes.
+b) The scanner will place marker files in this directory as an indication of
+the status of its attempts to deploy or undeploy content. These are detailed
+below.
+
+2) Manual deploy mode: The scanner will not attempt to directly monitor the
+deployment content and decide if or when the end user wishes the content to
+be deployed or undeployed. Instead, the scanner relies on a system of marker
+files, with the user's addition or removal of a marker file serving as a sort
+of command telling the scanner to deploy, undeploy or redeploy content.
+
+
+Auto-deploy mode and manual deploy mode can be independently configured for
+zipped deployment content and exploded deployment content. This is done by
+editing the appropriate "auto-deploy" attributes on the deployment-scanner
+element in the standalone.xml configuration file:
+
+<deployment-scanner path="deployment" relative-to="jboss.server.base.dir"
+    scan-interval="5000" auto-deploy-zipped="true" auto-deploy-exploded="false"/>
+
+By default, auto-deploy of zipped content is enabled, and auto-deploy of
+exploded content is disabled. Manual deploy mode is strongly recommended for
+exploded content, as exploded content is inherently vulnerable to the scanner
+trying to auto-deploy partially copied content. Manual deploy mode also allows
+deployment resources (e.g. html and css files) to be replaced without
+triggering a redeploy of the application.
+
+
+MARKER FILES
+
+The marker files always have the same name as the deployment content to which
+they relate, but with an additional file suffix appended. For example, the
+marker file to indicate the example.war file should be deployed is named
+example.war.dodeploy. Different marker file suffixes have different meanings.
+
+The relevant marker file types are:
+
+.dodeploy      -- Placed by the user to indicate that the given content should
+                  be deployed into the runtime (or redeployed if already
+                  deployed in the runtime.)
+
+.skipdeploy    -- Disables auto-deploy of the content for as long as the file
+                  is present. Most useful for allowing updates to exploded
+                  content without having the scanner initiate redeploy in the
+                  middle of the update. Can be used with zipped content as
+                  well, although the scanner will detect in-progress changes
+                  to zipped content and wait until changes are complete.
+
+.isdeploying   -- Placed by the deployment scanner service to indicate that it
+                  has noticed a .dodeploy file or new or updated auto-deploy
+                  mode content and is in the process of deploying the content.
+                  This marker file will be deleted when the deployment process
+                  completes.
+
+.deployed      -- Placed by the deployment scanner service to indicate that the
+                  given content has been deployed into the runtime. If an end
+                  user deletes this file, the content will be undeployed.
+
+.failed        -- Placed by the deployment scanner service to indicate that the
+                  given content failed to deploy into the runtime. The content
+                  of the file will include some information about the cause of
+                  the failure. Note that with auto-deploy mode, removing this
+                  file will make the deployment eligible for deployment again.
+
+.isundeploying -- Placed by the deployment scanner service to indicate that it
+                  has noticed a .deployed file has been deleted and the
+                  content is being undeployed. This marker file will be deleted
+                  when the undeployment process completes.
+
+.undeployed    -- Placed by the deployment scanner service to indicate that the
+                  given content has been undeployed from the runtime. If an end
+                  user deletes this file, it has no impact.
+
+.pending       -- Placed by the deployment scanner service to indicate that it
+                  has noticed the need to deploy content but has not yet
+                  instructed the server to deploy it. This file is created if
+                  the scanner detects that some auto-deploy content is still in
+                  the process of being copied or if there is some problem that
+                  prevents auto-deployment. The scanner will not instruct the
+                  server to deploy or undeploy any content (not just the
+                  directly affected content) as long as this condition holds.
+
+Basic workflows:
+
+All examples assume variable $AS points to the root of the JBoss AS distribution.
+Windows users: the examples below use Unix shell commands; see the "Windows
+Notes" below.
+
+A) Add new zipped content and deploy it:
+
+1. cp target/example.war $AS/standalone/deployments
+2. (Manual mode only) touch $AS/standalone/deployments/example.war.dodeploy
+
+B) Add new unzipped content and deploy it:
+
+1. cp -r target/example.war/ $AS/standalone/deployments
+2. (Manual mode only) touch $AS/standalone/deployments/example.war.dodeploy
+
+C) Undeploy currently deployed content:
+
+1. rm $AS/standalone/deployments/example.war.deployed
+
+D) Auto-deploy mode only: Undeploy currently deployed content:
+
+1. rm $AS/standalone/deployments/example.war
+
+Note that this approach is not recommended with unzipped content as the server
+maintains no other copy of unzipped content and deleting it without first
+triggering an undeploy temporarily results in a live application with
+potentially critical resources no longer available. For unzipped content use
+the 'rm $AS/standalone/deployments/example.war.deployed' approach.
+
+E) Replace currently deployed zipped content with a new version and deploy it:
+
+1. cp target/example.war/ $AS/standalone/deployments
+2. (Manual mode only) touch $AS/standalone/deployments/example.war.dodeploy
+
+F) Manual mode only: Replace currently deployed unzipped content with a new
+   version and deploy it:
+
+1. rm $AS/standalone/deployments/example.war.deployed
+2. wait for $AS/standalone/deployments/example.war.undeployed file to appear
+3. cp -r target/example.war/ $AS/standalone/deployments
+4. touch $AS/standalone/deployments/example.war.dodeploy
+
+G) Auto-deploy mode only: Replace currently deployed unzipped content with a
+   new version and deploy it:
+
+1. touch $AS/standalone/deployments/example.war.skipdeploy
+2. cp -r target/example.war/ $AS/standalone/deployments
+3. rm $AS/standalone/deployments/example.war.skipdeploy
+
+H) Manual mode only: Live replace portions of currently deployed unzipped
+   content without redeploying:
+
+1. cp -r target/example.war/foo.html $AS/standalone/deployments/example.war
+
+I) Auto-deploy mode only: Live replace portions of currently deployed unzipped
+   content without redeploying:
+
+1. touch $AS/standalone/deployments/example.war.skipdeploy
+2. cp -r target/example.war/foo.html $AS/standalone/deployments/example.war
+
+J) Manual or auto-deploy mode: Redeploy currently deployed content (i.e. bounce
+   it with no content change):
+
+1. touch $AS/standalone/deployments/example.war.dodeploy
+
+K) Auto-deploy mode only: Redeploy currently deployed content (i.e. bounce
+   it with no content change):
+
+1. touch $AS/standalone/deployments/example.war
+
+
+Windows Notes:
+
+The above examples use Unix shell commands. Windows equivalents are:
+
+cp src dest --> xcopy /y src dest
+cp -r src dest --> xcopy /e /s /y src dest
+rm afile --> del afile
+touch afile --> echo>> afile
+
+Note that the behavior of 'touch' and 'echo' are different but the
+differences are not relevant to the usages in the examples above.
diff --git a/wildfly/standalone/deployments/helloworld.war b/wildfly/standalone/deployments/helloworld.war
new file mode 100644
index 0000000..24323b9
Binary files /dev/null and b/wildfly/standalone/deployments/helloworld.war differ
diff --git a/wildfly/standalone/deployments/helloworld.war.deployed b/wildfly/standalone/deployments/helloworld.war.deployed
new file mode 100644
index 0000000..0e77ba4
--- /dev/null
+++ b/wildfly/standalone/deployments/helloworld.war.deployed
@@ -0,0 +1 @@
+helloworld.war
\ No newline at end of file
diff --git a/wildfly/standalone/deployments/server.war b/wildfly/standalone/deployments/server.war
new file mode 100644
index 0000000..1853ec7
Binary files /dev/null and b/wildfly/standalone/deployments/server.war differ
diff --git a/wildfly/standalone/deployments/server.war.deployed b/wildfly/standalone/deployments/server.war.deployed
new file mode 100644
index 0000000..5eb6b2f
--- /dev/null
+++ b/wildfly/standalone/deployments/server.war.deployed
@@ -0,0 +1 @@
+server.war
\ No newline at end of file
diff --git a/wildfly/standalone/log/audit.log b/wildfly/standalone/log/audit.log
new file mode 100644
index 0000000..e69de29
diff --git a/wildfly/standalone/log/server.log b/wildfly/standalone/log/server.log
new file mode 100644
index 0000000..2d2e100
--- /dev/null
+++ b/wildfly/standalone/log/server.log
@@ -0,0 +1,5006 @@
+2024-10-15 00:07:33,602 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 92) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/34/12d842513f08b7b5527fd7f42afc14248e8f1e is obsolete and will be removed
+2024-10-15 00:07:33,604 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 92) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/34/12d842513f08b7b5527fd7f42afc14248e8f1e/content
+2024-10-15 00:07:33,604 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 92) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/35/ff739652b1e20af2624753f3dc0a50d3dc358f is obsolete and will be removed
+2024-10-15 00:07:33,605 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 92) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/35/ff739652b1e20af2624753f3dc0a50d3dc358f/content
+2024-10-15 00:15:00,084 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 00:15:00,090 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:15:00,091 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 00:15:00,100 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0019: Host default-host stopping
+2024-10-15 00:15:00,100 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 00:15:00,102 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:15:00,103 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 00:15:00,116 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 00:15:00,116 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 00:15:00,117 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 00:15:00,117 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 00:15:00,119 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 00:15:00,121 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 00:15:00,128 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 35ms
+2024-10-15 00:15:53,097 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 00:15:53,371 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 00:15:53,375 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 00:15:53,435 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 00:15:53,436 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 00:15:53,436 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 00:15:53,877 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 00:15:54,126 INFO  [org.jboss.as.server.deployment.scanner] (DeploymentScanner-threads - 1) WFLYDS0015: Re-attempting failed deployment server.war
+2024-10-15 00:15:54,156 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 13) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/d1/72f7b53ec74d0a2a1f7c9ac29c1519425c1b1a/content
+2024-10-15 00:15:54,166 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 00:15:54,178 INFO  [org.xnio] (MSC service thread 1-1) XNIO version 3.8.16.Final
+2024-10-15 00:15:54,182 INFO  [org.xnio.nio] (MSC service thread 1-1) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 00:15:54,199 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 00:15:54,201 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 00:15:54,208 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 00:15:54,208 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 00:15:54,210 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 00:15:54,212 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 00:15:54,213 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 00:15:54,215 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 00:15:54,217 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 00:15:54,224 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 00:15:54,227 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 00:15:54,229 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 00:15:54,231 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 00:15:54,232 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 00:15:54,236 INFO  [org.jboss.as.connector] (MSC service thread 1-7) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 00:15:54,241 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 00:15:54,242 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.29.Final
+2024-10-15 00:15:54,245 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 00:15:54,251 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 00:15:54,267 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 00:15:54,271 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 00:15:54,278 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 00:15:54,341 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 00:15:54,363 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 00:15:54,364 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 00:15:54,368 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 00:15:54,374 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0012: Started server default-server.
+2024-10-15 00:15:54,377 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) Queuing requests.
+2024-10-15 00:15:54,378 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0018: Host default-host starting
+2024-10-15 00:15:54,396 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 00:15:54,438 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:15:54,440 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 00:15:54,467 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:15:54,505 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-3) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 00:15:54,549 INFO  [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 00:15:54,734 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-15 00:15:54,752 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-15 00:15:54,762 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-15 00:15:54,769 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-15 00:15:54,808 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-15 00:15:54,808 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-15 00:15:54,816 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-15 00:15:54,816 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component servlet.AreaCheckServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-15 00:15:54,822 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-15 00:15:54,822 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.ScriptFreeTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-15 00:15:54,828 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-15 00:15:54,829 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component controller.ControllerServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-15 00:15:54,880 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-15 00:15:54,880 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-1) MSC000001: Failed to start null: org.jboss.msc.service.StartException in anonymous service: Failed to start service
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1609)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	... 6 more
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-15 00:15:54,932 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 00:15:54,942 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "server.war")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"server.war\".undertow-deployment.UndertowDeploymentInfoService" => "Failed to start service
+    Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module \"deployment.server.war\" from Service Module Loader): javax/servlet/http/HttpServlet
+    Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module \"deployment.server.war\" from Service Module Loader]"}}
+2024-10-15 00:15:54,964 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 00:15:54,964 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 00:15:54,965 INFO  [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report
+WFLYCTL0186:   Services which failed to start:      service jboss.deployment.unit."server.war".undertow-deployment.UndertowDeploymentInfoService: Failed to start service
+WFLYCTL0448: 2 additional services are down due to their dependencies being missing or failed
+2024-10-15 00:15:54,988 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 00:15:54,993 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 00:15:54,993 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 00:15:54,994 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started (with errors) in 2109ms - Started 765 of 976 services (4 services failed or missing dependencies, 332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 00:15:59,227 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 00:15:59,229 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:15:59,231 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 00:15:59,237 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 13) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 00:15:59,240 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 00:15:59,242 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:15:59,242 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0019: Host default-host stopping
+2024-10-15 00:15:59,243 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 00:15:59,252 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 00:15:59,252 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 00:15:59,253 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 00:15:59,253 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 00:15:59,256 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 00:15:59,257 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 21ms
+2024-10-15 00:15:59,257 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 23ms
+2024-10-15 00:15:59,261 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 27ms
+2024-10-15 00:16:10,292 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 00:16:10,557 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 00:16:10,561 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 00:16:10,620 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 00:16:10,621 DEBUG [org.jboss.as.config] (MSC service thread 1-3) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 00:16:10,622 DEBUG [org.jboss.as.config] (MSC service thread 1-3) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 00:16:11,036 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 00:16:11,304 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 00:16:11,312 INFO  [org.xnio] (MSC service thread 1-8) XNIO version 3.8.16.Final
+2024-10-15 00:16:11,316 INFO  [org.xnio.nio] (MSC service thread 1-8) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 00:16:11,330 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 00:16:11,332 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 00:16:11,337 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 00:16:11,337 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 00:16:11,342 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 00:16:11,342 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 00:16:11,343 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 00:16:11,347 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 00:16:11,347 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 00:16:11,348 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 00:16:11,348 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 00:16:11,355 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 00:16:11,365 INFO  [org.jboss.as.connector] (MSC service thread 1-6) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 00:16:11,370 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 00:16:11,373 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 00:16:11,377 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 00:16:11,383 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 00:16:11,389 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 00:16:11,392 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 00:16:11,407 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 5.0.29.Final
+2024-10-15 00:16:11,414 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 00:16:11,423 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 00:16:11,439 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 00:16:11,448 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 00:16:11,448 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 00:16:11,452 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0012: Started server default-server.
+2024-10-15 00:16:11,453 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 00:16:11,455 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 00:16:11,480 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 00:16:11,526 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:16:11,533 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 00:16:11,554 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:16:11,573 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-8) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 00:16:11,606 INFO  [org.jboss.ws.common.management] (MSC service thread 1-7) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 00:16:11,926 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 78) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 00:16:11,958 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 00:16:11,981 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 00:16:11,985 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 00:16:11,985 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 00:16:11,986 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1909ms - Started 403 of 609 services (327 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 00:22:05,363 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 00:22:05,365 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:22:05,366 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 00:22:05,372 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 00:22:05,372 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 78) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 00:22:05,374 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0019: Host default-host stopping
+2024-10-15 00:22:05,374 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-8) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:22:05,375 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 00:22:05,384 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 00:22:05,384 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 00:22:05,385 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 00:22:05,385 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 00:22:05,385 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 18ms
+2024-10-15 00:22:05,385 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 00:22:05,389 INFO  [org.jboss.as] (MSC service thread 1-6) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 20ms
+2024-10-15 00:23:58,292 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 00:23:58,568 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 00:23:58,572 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 00:23:58,632 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 00:23:58,633 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 00:23:58,633 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 00:23:59,043 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 00:23:59,282 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 32) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/ad/d8af0a0a8cc0550a1363cd195d825825788432/content
+2024-10-15 00:23:59,307 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 00:23:59,314 INFO  [org.xnio] (MSC service thread 1-4) XNIO version 3.8.16.Final
+2024-10-15 00:23:59,318 INFO  [org.xnio.nio] (MSC service thread 1-4) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 00:23:59,336 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 00:23:59,338 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 00:23:59,339 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 00:23:59,342 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 00:23:59,345 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 00:23:59,345 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 00:23:59,347 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 00:23:59,352 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 00:23:59,353 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 00:23:59,355 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 00:23:59,360 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 00:23:59,360 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 00:23:59,360 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 00:23:59,375 INFO  [org.jboss.remoting] (MSC service thread 1-6) JBoss Remoting version 5.0.29.Final
+2024-10-15 00:23:59,377 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 00:23:59,374 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 00:23:59,378 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 00:23:59,390 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 00:23:59,391 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 00:23:59,400 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 00:23:59,408 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 00:23:59,424 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 00:23:59,428 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 00:23:59,437 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 00:23:59,446 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 00:23:59,446 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 00:23:59,453 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-15 00:23:59,459 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) Queuing requests.
+2024-10-15 00:23:59,460 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0018: Host default-host starting
+2024-10-15 00:23:59,501 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 00:23:59,555 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 00:23:59,558 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:23:59,595 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:23:59,607 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-1) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 00:23:59,648 INFO  [org.jboss.ws.common.management] (MSC service thread 1-2) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 00:24:00,013 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 00:24:00,013 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 82) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 00:24:00,047 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 00:24:00,048 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 00:24:00,072 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 00:24:00,076 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 00:24:00,076 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 00:24:00,078 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1986ms - Started 470 of 676 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 00:33:58,791 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/41/c113ec3c9bf89524330bad19b8a0ba1d430161 is obsolete and will be removed
+2024-10-15 00:33:58,793 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/41/c113ec3c9bf89524330bad19b8a0ba1d430161/content
+2024-10-15 00:36:03,544 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 00:36:03,547 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:36:03,548 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 00:36:03,554 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 00:36:03,555 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 86) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 00:36:03,555 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 00:36:03,556 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0019: Host default-host stopping
+2024-10-15 00:36:03,557 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:36:03,558 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 00:36:03,568 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 00:36:03,568 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 00:36:03,568 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 00:36:03,568 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 00:36:03,568 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 00:36:03,569 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 18ms
+2024-10-15 00:36:03,569 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 20ms
+2024-10-15 00:36:03,572 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 23ms
+2024-10-15 00:39:00,690 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 00:39:00,961 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 00:39:00,967 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 00:39:01,029 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 00:39:01,030 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 00:39:01,031 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 00:39:01,444 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 00:39:01,704 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 20) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/13/201329b3ac01b7b52937a2c4474521dbaeef82/content
+2024-10-15 00:39:01,730 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 00:39:01,737 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-15 00:39:01,741 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 00:39:01,755 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 00:39:01,758 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 00:39:01,758 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 00:39:01,764 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 00:39:01,765 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 00:39:01,764 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 00:39:01,766 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 00:39:01,766 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 00:39:01,770 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 00:39:01,770 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 00:39:01,775 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 00:39:01,772 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 00:39:01,779 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 00:39:01,779 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 00:39:01,782 INFO  [org.jboss.as.connector] (MSC service thread 1-2) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 00:39:01,797 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 00:39:01,799 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 00:39:01,800 INFO  [org.jboss.remoting] (MSC service thread 1-3) JBoss Remoting version 5.0.29.Final
+2024-10-15 00:39:01,806 INFO  [org.jboss.as.naming] (MSC service thread 1-8) WFLYNAM0003: Starting Naming Service
+2024-10-15 00:39:01,806 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 00:39:01,813 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 00:39:01,829 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 00:39:01,839 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 00:39:01,881 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 00:39:01,884 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 00:39:01,884 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 00:39:01,887 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0012: Started server default-server.
+2024-10-15 00:39:01,889 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) Queuing requests.
+2024-10-15 00:39:01,889 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0018: Host default-host starting
+2024-10-15 00:39:01,909 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 00:39:01,949 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:39:01,957 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 00:39:01,972 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:39:02,003 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-5) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 00:39:02,042 INFO  [org.jboss.ws.common.management] (MSC service thread 1-2) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 00:39:02,420 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 00:39:02,420 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 00:39:02,452 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 00:39:02,453 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 00:39:02,474 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 00:39:02,478 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 00:39:02,478 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 00:39:02,479 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1990ms - Started 474 of 680 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 00:49:01,178 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/ad/d8af0a0a8cc0550a1363cd195d825825788432 is obsolete and will be removed
+2024-10-15 00:49:01,181 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/ad/d8af0a0a8cc0550a1363cd195d825825788432/content
+2024-10-15 00:49:18,456 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 00:49:18,458 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:49:18,458 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 00:49:18,464 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 00:49:18,465 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 00:49:18,465 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 00:49:18,467 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0019: Host default-host stopping
+2024-10-15 00:49:18,468 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:49:18,468 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 00:49:18,479 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 00:49:18,479 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 00:49:18,479 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 00:49:18,479 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 00:49:18,480 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 19ms
+2024-10-15 00:49:18,480 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 18ms
+2024-10-15 00:49:18,480 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 00:49:18,484 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 23ms
+2024-10-15 00:49:57,197 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 00:49:57,457 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 00:49:57,462 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 00:49:57,521 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 00:49:57,522 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 00:49:57,522 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 00:49:57,934 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 00:49:58,191 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 36) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/29/35a2a64ce4dd07f06bfb7187ae4f4f3ef34016/content
+2024-10-15 00:49:58,213 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 00:49:58,223 INFO  [org.xnio] (MSC service thread 1-6) XNIO version 3.8.16.Final
+2024-10-15 00:49:58,228 INFO  [org.xnio.nio] (MSC service thread 1-6) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 00:49:58,246 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 00:49:58,248 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 00:49:58,249 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 00:49:58,249 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 00:49:58,251 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 00:49:58,255 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 00:49:58,256 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 00:49:58,256 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 00:49:58,263 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 00:49:58,265 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 00:49:58,265 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 00:49:58,266 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 00:49:58,280 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 00:49:58,280 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 00:49:58,289 INFO  [org.jboss.as.connector] (MSC service thread 1-3) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 00:49:58,303 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 00:49:58,307 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 5.0.29.Final
+2024-10-15 00:49:58,314 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 00:49:58,315 INFO  [org.jboss.as.naming] (MSC service thread 1-4) WFLYNAM0003: Starting Naming Service
+2024-10-15 00:49:58,316 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 00:49:58,322 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 00:49:58,363 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 00:49:58,376 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 00:49:58,396 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 00:49:58,404 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0012: Started server default-server.
+2024-10-15 00:49:58,406 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 00:49:58,407 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 00:49:58,412 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) Queuing requests.
+2024-10-15 00:49:58,415 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0018: Host default-host starting
+2024-10-15 00:49:58,446 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 00:49:58,492 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:49:58,495 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 00:49:58,527 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:49:58,528 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-1) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 00:49:58,568 INFO  [org.jboss.ws.common.management] (MSC service thread 1-4) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 00:49:59,061 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 00:49:59,061 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 00:49:59,108 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 00:49:59,108 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 00:49:59,146 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 00:49:59,151 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 00:49:59,151 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 00:49:59,152 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2167ms - Started 474 of 680 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 00:54:51,802 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 00:54:51,804 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:54:51,805 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 00:54:51,811 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 00:54:51,812 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 00:54:51,812 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 00:54:51,814 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0019: Host default-host stopping
+2024-10-15 00:54:51,815 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:54:51,815 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 00:54:51,827 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 00:54:51,827 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 00:54:51,828 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 00:54:51,828 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 00:54:51,828 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 21ms
+2024-10-15 00:54:51,829 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 00:54:51,830 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 22ms
+2024-10-15 00:54:51,834 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 26ms
+2024-10-15 00:55:05,779 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 00:55:06,060 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 00:55:06,069 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 00:55:06,127 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 00:55:06,128 DEBUG [org.jboss.as.config] (MSC service thread 1-3) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 00:55:06,129 DEBUG [org.jboss.as.config] (MSC service thread 1-3) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 00:55:06,593 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 00:55:06,869 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/07/d5ccd00af1ec5cf2ef1856e97e64522b2a0e54/content
+2024-10-15 00:55:06,896 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 00:55:06,907 INFO  [org.xnio] (MSC service thread 1-1) XNIO version 3.8.16.Final
+2024-10-15 00:55:06,911 INFO  [org.xnio.nio] (MSC service thread 1-1) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 00:55:06,936 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 00:55:06,938 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 00:55:06,942 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 00:55:06,945 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 00:55:06,949 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 00:55:06,949 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 00:55:06,948 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 00:55:06,950 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 00:55:06,951 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 00:55:06,955 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 00:55:06,956 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 00:55:06,957 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 00:55:06,963 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 00:55:06,972 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 00:55:06,974 INFO  [org.jboss.as.connector] (MSC service thread 1-3) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 00:55:06,975 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 00:55:06,979 INFO  [org.jboss.remoting] (MSC service thread 1-5) JBoss Remoting version 5.0.29.Final
+2024-10-15 00:55:06,989 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 00:55:06,995 INFO  [org.jboss.as.naming] (MSC service thread 1-1) WFLYNAM0003: Starting Naming Service
+2024-10-15 00:55:06,998 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 00:55:07,013 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 00:55:07,044 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 00:55:07,053 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 00:55:07,067 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 00:55:07,067 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 00:55:07,073 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 00:55:07,082 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-15 00:55:07,085 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) Queuing requests.
+2024-10-15 00:55:07,088 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0018: Host default-host starting
+2024-10-15 00:55:07,124 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 00:55:07,171 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 00:55:07,175 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 00:55:07,204 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 00:55:07,236 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-4) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 00:55:07,286 INFO  [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 00:55:07,719 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 00:55:07,719 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 00:55:07,763 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 00:55:07,764 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 00:55:07,790 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 00:55:07,795 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 00:55:07,796 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 00:55:07,797 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2226ms - Started 474 of 680 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:05:06,313 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 41) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/13/201329b3ac01b7b52937a2c4474521dbaeef82 is obsolete and will be removed
+2024-10-15 01:05:06,315 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 41) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/13/201329b3ac01b7b52937a2c4474521dbaeef82/content
+2024-10-15 01:05:06,315 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 41) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/29/35a2a64ce4dd07f06bfb7187ae4f4f3ef34016 is obsolete and will be removed
+2024-10-15 01:05:06,316 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 41) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/29/35a2a64ce4dd07f06bfb7187ae4f4f3ef34016/content
+2024-10-15 01:09:01,169 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:09:01,171 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:09:01,172 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:09:01,178 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:09:01,179 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:09:01,179 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:09:01,181 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0019: Host default-host stopping
+2024-10-15 01:09:01,182 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-8) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:09:01,182 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:09:01,192 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:09:01,192 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:09:01,192 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:09:01,192 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:09:01,193 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:09:01,193 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 19ms
+2024-10-15 01:09:01,194 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 19ms
+2024-10-15 01:09:01,197 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 23ms
+2024-10-15 01:09:20,748 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:09:21,026 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:09:21,030 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:09:21,093 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:09:21,094 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:09:21,094 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:09:21,528 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:09:21,778 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 32) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/75/696b907c77aad54ac88eadf19aceda69006152/content
+2024-10-15 01:09:21,805 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:09:21,812 INFO  [org.xnio] (MSC service thread 1-6) XNIO version 3.8.16.Final
+2024-10-15 01:09:21,817 INFO  [org.xnio.nio] (MSC service thread 1-6) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:09:21,834 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:09:21,837 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:09:21,838 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:09:21,842 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:09:21,843 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:09:21,844 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:09:21,845 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:09:21,845 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:09:21,847 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:09:21,854 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:09:21,852 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:09:21,859 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:09:21,861 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:09:21,869 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:09:21,875 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:09:21,874 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:09:21,884 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:09:21,887 INFO  [org.jboss.as.naming] (MSC service thread 1-5) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:09:21,889 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:09:21,898 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:09:21,899 INFO  [org.jboss.remoting] (MSC service thread 1-3) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:09:21,932 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:09:21,939 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:09:21,947 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:09:21,947 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:09:21,950 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:09:21,961 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0012: Started server default-server.
+2024-10-15 01:09:21,964 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) Queuing requests.
+2024-10-15 01:09:21,965 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0018: Host default-host starting
+2024-10-15 01:09:21,998 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:09:22,044 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:09:22,051 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:09:22,068 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:09:22,090 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-7) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:09:22,130 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:09:22,483 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:09:22,483 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:09:22,525 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:09:22,525 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:09:22,550 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:09:22,555 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:09:22,555 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:09:22,556 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1998ms - Started 474 of 680 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:10:10,578 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /server/result.jsp: org.apache.jasper.JasperException: java.lang.NullPointerException: Cannot invoke "java.lang.Boolean.booleanValue()" because the return value of "jakarta.servlet.http.HttpServletRequest.getAttribute(String)" is null
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:461)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.jsp@2.2.8.Final//io.undertow.jsp.JspFileHandler.handleRequest(JspFileHandler.java:32)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:258)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:183)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:189)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:137)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:100)
+	at deployment.server.war//ru.akarpov.web2.AreaCheckServlet.processRequest(AreaCheckServlet.java:73)
+	at deployment.server.war//ru.akarpov.web2.AreaCheckServlet.doPost(AreaCheckServlet.java:13)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:547)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:258)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:183)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:189)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:137)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:100)
+	at deployment.server.war//ru.akarpov.web2.ControllerServlet.processRequest(ControllerServlet.java:23)
+	at deployment.server.war//ru.akarpov.web2.ControllerServlet.doPost(ControllerServlet.java:13)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:547)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
+	at org.wildfly.security.elytron-web.undertow-server-servlet@4.1.0.Final//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:44)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:51)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:395)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at org.jboss.xnio@3.8.16.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.NullPointerException: Cannot invoke "java.lang.Boolean.booleanValue()" because the return value of "jakarta.servlet.http.HttpServletRequest.getAttribute(String)" is null
+	at org.apache.jsp.result_jsp._jspService(result_jsp.java:125)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:422)
+	... 88 more
+
+2024-10-15 01:12:51,015 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /server/result.jsp: org.apache.jasper.JasperException: java.lang.NullPointerException: Cannot invoke "java.lang.Boolean.booleanValue()" because the return value of "jakarta.servlet.http.HttpServletRequest.getAttribute(String)" is null
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:461)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.jsp@2.2.8.Final//io.undertow.jsp.JspFileHandler.handleRequest(JspFileHandler.java:32)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:258)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:183)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:189)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:137)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:100)
+	at deployment.server.war//ru.akarpov.web2.AreaCheckServlet.processRequest(AreaCheckServlet.java:73)
+	at deployment.server.war//ru.akarpov.web2.AreaCheckServlet.doPost(AreaCheckServlet.java:13)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:547)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:258)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchToPath(ServletInitialHandler.java:183)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImpl(RequestDispatcherImpl.java:189)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forwardImplSetup(RequestDispatcherImpl.java:137)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.spec.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:100)
+	at deployment.server.war//ru.akarpov.web2.ControllerServlet.processRequest(ControllerServlet.java:23)
+	at deployment.server.war//ru.akarpov.web2.ControllerServlet.doPost(ControllerServlet.java:13)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:547)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
+	at org.wildfly.security.elytron-web.undertow-server-servlet@4.1.0.Final//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:44)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:51)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:395)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at org.jboss.xnio@3.8.16.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.NullPointerException: Cannot invoke "java.lang.Boolean.booleanValue()" because the return value of "jakarta.servlet.http.HttpServletRequest.getAttribute(String)" is null
+	at org.apache.jsp.result_jsp._jspService(result_jsp.java:125)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.runtime.HttpJspBase.service(HttpJspBase.java:70)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:422)
+	... 88 more
+
+2024-10-15 01:13:58,420 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:13:58,421 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:13:58,422 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:13:58,429 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:13:58,430 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:13:58,430 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:13:58,432 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0019: Host default-host stopping
+2024-10-15 01:13:58,432 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-4) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:13:58,433 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:13:58,443 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:13:58,443 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:13:58,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:13:58,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:13:58,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:13:58,445 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 20ms
+2024-10-15 01:13:58,446 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 20ms
+2024-10-15 01:13:58,449 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 25ms
+2024-10-15 01:14:15,100 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:14:15,378 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:14:15,382 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:14:15,439 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:14:15,440 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:14:15,440 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:14:15,857 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:14:16,127 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 11) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/f2/eb56ff266671572188496387d3cc88445b3d25/content
+2024-10-15 01:14:16,151 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:14:16,161 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-15 01:14:16,165 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:14:16,184 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:14:16,183 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:14:16,190 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:14:16,190 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:14:16,192 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:14:16,193 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:14:16,191 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:14:16,195 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:14:16,197 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:14:16,198 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:14:16,199 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:14:16,202 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:14:16,209 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:14:16,216 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:14:16,216 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:14:16,219 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:14:16,222 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:14:16,241 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:14:16,244 INFO  [org.jboss.as.naming] (MSC service thread 1-4) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:14:16,245 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:14:16,250 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:14:16,275 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:14:16,281 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:14:16,286 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:14:16,290 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:14:16,291 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:14:16,308 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0012: Started server default-server.
+2024-10-15 01:14:16,314 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) Queuing requests.
+2024-10-15 01:14:16,315 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0018: Host default-host starting
+2024-10-15 01:14:16,356 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:14:16,398 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:14:16,421 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:14:16,435 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:14:16,457 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-5) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:14:16,494 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:14:16,912 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:14:16,912 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:14:16,949 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:14:16,950 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:14:16,973 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:14:16,978 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:14:16,978 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:14:16,979 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2080ms - Started 474 of 680 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:24:15,592 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/75/696b907c77aad54ac88eadf19aceda69006152 is obsolete and will be removed
+2024-10-15 01:24:15,594 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/75/696b907c77aad54ac88eadf19aceda69006152/content
+2024-10-15 01:24:15,594 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0009: Content /home/sanspie/Projects/web-2/wildfly/standalone/data/content/07/d5ccd00af1ec5cf2ef1856e97e64522b2a0e54 is obsolete and will be removed
+2024-10-15 01:24:15,595 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 85) WFLYDR0002: Content removed from location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/07/d5ccd00af1ec5cf2ef1856e97e64522b2a0e54/content
+2024-10-15 01:25:56,506 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:25:56,508 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:25:56,508 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:25:56,515 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:25:56,515 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:25:56,515 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 89) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:25:56,517 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 01:25:56,518 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-8) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:25:56,518 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:25:56,528 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:25:56,528 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:25:56,529 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:25:56,529 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:25:56,529 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:25:56,529 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 18ms
+2024-10-15 01:25:56,530 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 18ms
+2024-10-15 01:25:56,533 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 22ms
+2024-10-15 01:26:09,482 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:26:09,748 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:26:09,753 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:26:09,813 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:26:09,814 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:26:09,814 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:26:10,255 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:26:10,556 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 31) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/f0/bd6c1c507eb51c912102e16438ff2c7e2ff8e7/content
+2024-10-15 01:26:10,586 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:26:10,597 INFO  [org.xnio] (MSC service thread 1-6) XNIO version 3.8.16.Final
+2024-10-15 01:26:10,603 INFO  [org.xnio.nio] (MSC service thread 1-6) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:26:10,634 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:26:10,636 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:26:10,636 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:26:10,633 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:26:10,638 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:26:10,638 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:26:10,638 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:26:10,636 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:26:10,645 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:26:10,650 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:26:10,666 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:26:10,664 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:26:10,668 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:26:10,666 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:26:10,679 INFO  [org.jboss.as.connector] (MSC service thread 1-6) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:26:10,679 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:26:10,686 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:26:10,691 INFO  [org.jboss.as.naming] (MSC service thread 1-1) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:26:10,692 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:26:10,690 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:26:10,709 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:26:10,732 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:26:10,759 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:26:10,773 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:26:10,783 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0012: Started server default-server.
+2024-10-15 01:26:10,784 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:26:10,785 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:26:10,786 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) Queuing requests.
+2024-10-15 01:26:10,788 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0018: Host default-host starting
+2024-10-15 01:26:10,834 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:26:10,894 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:26:10,903 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:26:10,928 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:26:10,938 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-4) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:26:10,971 INFO  [org.jboss.ws.common.management] (MSC service thread 1-8) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:26:11,370 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:26:11,370 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 85) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:26:11,411 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:26:11,411 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:26:11,437 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:26:11,440 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:26:11,441 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:26:11,442 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2159ms - Started 478 of 684 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:28:28,944 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:28:28,946 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:28:28,947 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:28:28,953 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:28:28,954 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:28:28,954 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:28:28,957 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 01:28:28,957 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:28:28,958 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:28:28,968 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:28:28,968 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:28:28,969 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:28:28,969 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:28:28,969 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:28:28,970 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 20ms
+2024-10-15 01:28:28,970 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 20ms
+2024-10-15 01:28:28,974 INFO  [org.jboss.as] (MSC service thread 1-6) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 25ms
+2024-10-15 01:28:42,198 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:28:42,463 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:28:42,467 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:28:42,532 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:28:42,534 DEBUG [org.jboss.as.config] (MSC service thread 1-3) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:28:42,534 DEBUG [org.jboss.as.config] (MSC service thread 1-3) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:28:42,940 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:28:43,221 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 21) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/8b/585fd5ccf3ac7d3097e801802d723c6900817a/content
+2024-10-15 01:28:43,248 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:28:43,257 INFO  [org.xnio] (MSC service thread 1-2) XNIO version 3.8.16.Final
+2024-10-15 01:28:43,262 INFO  [org.xnio.nio] (MSC service thread 1-2) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:28:43,278 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:28:43,281 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:28:43,281 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:28:43,284 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:28:43,285 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:28:43,292 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:28:43,292 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:28:43,293 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:28:43,301 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:28:43,301 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:28:43,301 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:28:43,302 INFO  [org.jboss.as.connector] (MSC service thread 1-4) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:28:43,307 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:28:43,308 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:28:43,308 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:28:43,321 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:28:43,323 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:28:43,332 INFO  [org.jboss.as.naming] (MSC service thread 1-7) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:28:43,332 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:28:43,359 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:28:43,365 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:28:43,378 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-3) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:28:43,384 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:28:43,399 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:28:43,403 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:28:43,403 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:28:43,409 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0012: Started server default-server.
+2024-10-15 01:28:43,414 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 01:28:43,417 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 01:28:43,447 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:28:43,502 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:28:43,506 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:28:43,538 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:28:43,544 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-8) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:28:43,591 INFO  [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:28:44,001 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:28:44,001 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 85) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:28:44,043 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:28:44,043 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:28:44,068 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:28:44,072 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:28:44,072 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:28:44,074 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2087ms - Started 478 of 684 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:30:02,969 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:30:02,971 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:30:02,972 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:30:02,978 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:30:02,979 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 85) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:30:02,979 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:30:02,981 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 01:30:02,982 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:30:02,982 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:30:02,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:30:02,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:30:02,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:30:02,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:30:02,993 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:30:02,993 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 18ms
+2024-10-15 01:30:02,993 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 18ms
+2024-10-15 01:30:02,997 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 23ms
+2024-10-15 01:30:14,478 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:30:14,748 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:30:14,752 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:30:14,814 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:30:14,815 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:30:14,815 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:30:15,207 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:30:15,461 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/21/c26fff02cdd9297e56d4c7d0ae4e23ed095fe4/content
+2024-10-15 01:30:15,483 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:30:15,491 INFO  [org.xnio] (MSC service thread 1-2) XNIO version 3.8.16.Final
+2024-10-15 01:30:15,495 INFO  [org.xnio.nio] (MSC service thread 1-2) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:30:15,511 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:30:15,514 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:30:15,513 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:30:15,522 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:30:15,523 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:30:15,524 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:30:15,526 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:30:15,532 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:30:15,532 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:30:15,535 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:30:15,534 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:30:15,537 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:30:15,550 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:30:15,552 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:30:15,552 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:30:15,555 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:30:15,561 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:30:15,566 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:30:15,566 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:30:15,566 INFO  [org.jboss.as.naming] (MSC service thread 1-1) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:30:15,589 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:30:15,594 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-3) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:30:15,602 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:30:15,648 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:30:15,653 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:30:15,653 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:30:15,657 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0012: Started server default-server.
+2024-10-15 01:30:15,659 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) Queuing requests.
+2024-10-15 01:30:15,661 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0018: Host default-host starting
+2024-10-15 01:30:15,694 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:30:15,742 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:30:15,748 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:30:15,774 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:30:15,788 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-5) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:30:15,834 INFO  [org.jboss.ws.common.management] (MSC service thread 1-8) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:30:16,228 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:30:16,228 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 85) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:30:16,262 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:30:16,262 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:30:16,284 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:30:16,288 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:30:16,289 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:30:16,290 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2018ms - Started 478 of 684 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:33:43,636 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:33:43,637 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:33:43,638 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:33:43,645 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:33:43,645 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:33:43,645 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 90) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:33:43,647 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 01:33:43,648 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:33:43,648 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:33:43,658 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:33:43,658 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:33:43,658 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:33:43,658 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:33:43,659 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:33:43,660 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 19ms
+2024-10-15 01:33:43,660 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 18ms
+2024-10-15 01:33:43,664 INFO  [org.jboss.as] (MSC service thread 1-6) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 24ms
+2024-10-15 01:34:41,511 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:34:41,791 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:34:41,795 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:34:41,852 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:34:41,853 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:34:41,854 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:34:42,247 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:34:42,518 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/92/bda770b8091e716d3bfeb0cb63e83e5f1c9131/content
+2024-10-15 01:34:42,541 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:34:42,550 INFO  [org.xnio] (MSC service thread 1-8) XNIO version 3.8.16.Final
+2024-10-15 01:34:42,554 INFO  [org.xnio.nio] (MSC service thread 1-8) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:34:42,571 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:34:42,572 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:34:42,576 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:34:42,577 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:34:42,578 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:34:42,580 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:34:42,582 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:34:42,587 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:34:42,589 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:34:42,586 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:34:42,591 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:34:42,590 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:34:42,593 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:34:42,597 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:34:42,600 INFO  [org.jboss.as.connector] (MSC service thread 1-6) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:34:42,615 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:34:42,623 INFO  [org.jboss.as.naming] (MSC service thread 1-1) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:34:42,620 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:34:42,625 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:34:42,637 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:34:42,642 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:34:42,658 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:34:42,666 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:34:42,704 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:34:42,709 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0012: Started server default-server.
+2024-10-15 01:34:42,716 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) Queuing requests.
+2024-10-15 01:34:42,717 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:34:42,717 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:34:42,718 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0018: Host default-host starting
+2024-10-15 01:34:42,748 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:34:42,811 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:34:42,828 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:34:42,852 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:34:42,868 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-5) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:34:42,906 INFO  [org.jboss.ws.common.management] (MSC service thread 1-4) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:34:43,297 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 84) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:34:43,297 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:34:43,339 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:34:43,340 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:34:43,370 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:34:43,375 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:34:43,375 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:34:43,377 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2083ms - Started 478 of 684 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:34:46,491 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /server/index.jsp: org.apache.jasper.JasperException: JBWEB004113: The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:57)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:278)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:75)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.TagLibraryInfoImpl.generateTLDLocation(TagLibraryInfoImpl.java:236)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.TagLibraryInfoImpl.<init>(TagLibraryInfoImpl.java:131)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseTaglibDirective(Parser.java:412)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseDirective(Parser.java:475)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseElements(Parser.java:1462)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parse(Parser.java:143)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ParserController.doParse(ParserController.java:223)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ParserController.parse(ParserController.java:102)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:204)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:358)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:338)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:325)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:652)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:357)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.jsp@2.2.8.Final//io.undertow.jsp.JspFileHandler.handleRequest(JspFileHandler.java:32)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
+	at org.wildfly.security.elytron-web.undertow-server-servlet@4.1.0.Final//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:44)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:51)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:395)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1348)
+	at org.jboss.xnio@3.8.16.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+
+2024-10-15 01:35:21,877 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /server/: org.apache.jasper.JasperException: JBWEB004113: The absolute uri: http://java.sun.com/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:57)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:278)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:75)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.TagLibraryInfoImpl.generateTLDLocation(TagLibraryInfoImpl.java:236)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.TagLibraryInfoImpl.<init>(TagLibraryInfoImpl.java:131)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseTaglibDirective(Parser.java:412)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseDirective(Parser.java:475)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseElements(Parser.java:1462)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parse(Parser.java:143)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ParserController.doParse(ParserController.java:223)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ParserController.parse(ParserController.java:102)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:204)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:358)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:338)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:325)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:652)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:357)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.jsp@2.2.8.Final//io.undertow.jsp.JspFileHandler.handleRequest(JspFileHandler.java:32)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
+	at org.wildfly.security.elytron-web.undertow-server-servlet@4.1.0.Final//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:44)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:51)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:395)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1348)
+	at org.jboss.xnio@3.8.16.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+
+2024-10-15 01:38:04,357 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:38:04,359 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:38:04,360 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:38:04,364 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:38:04,366 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:38:04,366 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 83) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:38:04,367 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0019: Host default-host stopping
+2024-10-15 01:38:04,368 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:38:04,368 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:38:04,378 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:38:04,378 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:38:04,378 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:38:04,378 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:38:04,379 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:38:04,379 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 17ms
+2024-10-15 01:38:04,379 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 16ms
+2024-10-15 01:38:04,383 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 20ms
+2024-10-15 01:38:39,191 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:38:39,458 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:38:39,463 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:38:39,523 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:38:39,524 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:38:39,524 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:38:39,930 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:38:40,209 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 26) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/e3/46ad2398892f0f4c1ba94eec33d38558d9d39c/content
+2024-10-15 01:38:40,230 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:38:40,239 INFO  [org.xnio] (MSC service thread 1-7) XNIO version 3.8.16.Final
+2024-10-15 01:38:40,243 INFO  [org.xnio.nio] (MSC service thread 1-7) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:38:40,266 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:38:40,275 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:38:40,278 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:38:40,279 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:38:40,281 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:38:40,286 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:38:40,287 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:38:40,287 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:38:40,287 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:38:40,289 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:38:40,294 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:38:40,299 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:38:40,300 INFO  [org.jboss.remoting] (MSC service thread 1-4) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:38:40,307 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:38:40,307 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:38:40,307 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:38:40,318 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:38:40,319 INFO  [org.jboss.as.naming] (MSC service thread 1-7) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:38:40,320 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:38:40,323 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:38:40,343 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:38:40,360 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:38:40,395 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:38:40,421 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:38:40,421 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:38:40,426 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:38:40,432 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0012: Started server default-server.
+2024-10-15 01:38:40,433 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 01:38:40,434 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 01:38:40,472 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:38:40,543 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:38:40,549 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:38:40,564 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-7) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:38:40,573 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:38:40,606 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:38:41,008 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:38:41,154 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 93) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:38:41,185 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:38:41,186 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:38:41,212 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:38:41,216 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:38:41,216 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:38:41,217 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2225ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:38:44,114 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /server/: org.apache.jasper.JasperException: JBWEB004113: The absolute uri: http://jakarta.ee/jsp/jstl/core cannot be resolved in either web.xml or the jar files deployed with this application
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.DefaultErrorHandler.jspError(DefaultErrorHandler.java:57)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.dispatch(ErrorDispatcher.java:278)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.jspError(ErrorDispatcher.java:75)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.TagLibraryInfoImpl.generateTLDLocation(TagLibraryInfoImpl.java:236)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.TagLibraryInfoImpl.<init>(TagLibraryInfoImpl.java:131)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseTaglibDirective(Parser.java:412)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseDirective(Parser.java:475)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parseElements(Parser.java:1462)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Parser.parse(Parser.java:143)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ParserController.doParse(ParserController.java:223)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ParserController.parse(ParserController.java:102)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.generateJava(Compiler.java:204)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:358)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:338)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:325)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:652)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:357)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.jsp@2.2.8.Final//io.undertow.jsp.JspFileHandler.handleRequest(JspFileHandler.java:32)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
+	at org.wildfly.security.elytron-web.undertow-server-servlet@4.1.0.Final//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:44)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:51)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:395)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1348)
+	at org.jboss.xnio@3.8.16.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+
+2024-10-15 01:40:54,391 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:40:54,393 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:40:54,394 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:40:54,402 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 93) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:40:54,402 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:40:54,403 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 96) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:40:54,406 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 01:40:54,406 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:40:54,407 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:40:54,417 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:40:54,417 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:40:54,417 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:40:54,417 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:40:54,418 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:40:54,418 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 21ms
+2024-10-15 01:40:54,420 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 22ms
+2024-10-15 01:40:54,423 INFO  [org.jboss.as] (MSC service thread 1-4) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 26ms
+2024-10-15 01:41:32,332 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:41:32,606 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:41:32,610 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:41:32,670 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:41:32,671 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:41:32,672 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:41:33,087 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:41:33,382 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/21/a6d16b3917807581ef058ae3b661cd7d14cbe0/content
+2024-10-15 01:41:33,405 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:41:33,412 INFO  [org.xnio] (MSC service thread 1-7) XNIO version 3.8.16.Final
+2024-10-15 01:41:33,416 INFO  [org.xnio.nio] (MSC service thread 1-7) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:41:33,434 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:41:33,439 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:41:33,439 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:41:33,437 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:41:33,441 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:41:33,441 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:41:33,442 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:41:33,444 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:41:33,444 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:41:33,449 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:41:33,452 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:41:33,454 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:41:33,456 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:41:33,476 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:41:33,476 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:41:33,476 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:41:33,477 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:41:33,485 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:41:33,495 INFO  [org.jboss.as.naming] (MSC service thread 1-4) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:41:33,496 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:41:33,497 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:41:33,521 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:41:33,526 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:41:33,526 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:41:33,538 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:41:33,538 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:41:33,541 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0012: Started server default-server.
+2024-10-15 01:41:33,554 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) Queuing requests.
+2024-10-15 01:41:33,555 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0018: Host default-host starting
+2024-10-15 01:41:33,588 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:41:33,639 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:41:33,639 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:41:33,671 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:41:33,702 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-3) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:41:33,737 INFO  [org.jboss.ws.common.management] (MSC service thread 1-7) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:41:34,188 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:41:34,345 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 91) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:41:34,408 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:41:34,409 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:41:34,443 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:41:34,448 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:41:34,448 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:41:34,450 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2310ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:47:31,747 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:47:31,749 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:47:31,750 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:47:31,757 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:47:31,757 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 91) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:47:31,757 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 95) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:47:31,761 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0019: Host default-host stopping
+2024-10-15 01:47:31,762 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:47:31,762 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:47:31,772 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:47:31,772 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:47:31,773 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:47:31,773 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:47:31,773 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 20ms
+2024-10-15 01:47:31,774 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:47:31,777 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 01:47:31,778 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 26ms
+2024-10-15 01:47:43,351 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:47:43,614 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:47:43,619 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:47:43,680 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:47:43,681 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:47:43,681 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:47:44,127 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:47:44,415 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 21) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/f0/7bb4fda117bdfa730ec199504805f879cb9692/content
+2024-10-15 01:47:44,436 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:47:44,444 INFO  [org.xnio] (MSC service thread 1-1) XNIO version 3.8.16.Final
+2024-10-15 01:47:44,448 INFO  [org.xnio.nio] (MSC service thread 1-1) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:47:44,466 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:47:44,469 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:47:44,472 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:47:44,473 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:47:44,476 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:47:44,476 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:47:44,481 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:47:44,481 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:47:44,484 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:47:44,485 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:47:44,492 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:47:44,493 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:47:44,505 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:47:44,506 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:47:44,512 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:47:44,516 INFO  [org.jboss.remoting] (MSC service thread 1-3) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:47:44,524 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:47:44,534 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:47:44,534 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:47:44,539 INFO  [org.jboss.as.naming] (MSC service thread 1-7) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:47:44,542 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:47:44,608 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:47:44,617 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:47:44,629 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:47:44,640 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0012: Started server default-server.
+2024-10-15 01:47:44,642 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:47:44,642 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:47:44,644 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) Queuing requests.
+2024-10-15 01:47:44,645 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0018: Host default-host starting
+2024-10-15 01:47:44,689 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:47:44,738 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:47:44,754 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:47:44,771 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:47:44,784 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-1) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:47:44,831 INFO  [org.jboss.ws.common.management] (MSC service thread 1-5) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:47:45,231 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:47:45,360 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 96) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:47:45,397 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:47:45,397 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:47:45,425 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:47:45,430 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:47:45,431 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:47:45,432 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2280ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:52:14,503 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:52:14,506 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:52:14,506 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:52:14,514 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:52:14,515 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 102) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:52:14,515 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 101) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:52:14,519 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0019: Host default-host stopping
+2024-10-15 01:52:14,521 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:52:14,522 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:52:14,532 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:52:14,532 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:52:14,533 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:52:14,533 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:52:14,533 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 23ms
+2024-10-15 01:52:14,535 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:52:14,537 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 26ms
+2024-10-15 01:52:14,540 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 31ms
+2024-10-15 01:52:24,677 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:52:24,942 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:52:24,947 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:52:25,013 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:52:25,014 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:52:25,015 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:52:25,439 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:52:25,733 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/af/dc9287d9995b903bbbf84edc1c78a1960a00be/content
+2024-10-15 01:52:25,758 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:52:25,767 INFO  [org.xnio] (MSC service thread 1-8) XNIO version 3.8.16.Final
+2024-10-15 01:52:25,771 INFO  [org.xnio.nio] (MSC service thread 1-8) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:52:25,791 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:52:25,795 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:52:25,798 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:52:25,799 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:52:25,800 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:52:25,802 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:52:25,804 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:52:25,807 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:52:25,813 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:52:25,815 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:52:25,825 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:52:25,823 INFO  [org.jboss.as.connector] (MSC service thread 1-6) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:52:25,830 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:52:25,832 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:52:25,833 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:52:25,842 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:52:25,845 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:52:25,850 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:52:25,902 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:52:25,904 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:52:25,906 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:52:25,918 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:52:25,935 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:52:25,958 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:52:25,958 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:52:25,959 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:52:25,969 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0012: Started server default-server.
+2024-10-15 01:52:25,971 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 01:52:25,972 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 01:52:26,021 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:52:26,116 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:52:26,148 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:52:26,183 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-2) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:52:26,197 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:52:26,321 INFO  [org.jboss.ws.common.management] (MSC service thread 1-8) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:52:27,024 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:52:27,105 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 90) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:52:27,140 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:52:27,141 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:52:27,181 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:52:27,186 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:52:27,186 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:52:27,188 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2707ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 01:57:49,416 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 01:57:49,418 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:57:49,419 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 01:57:49,427 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 90) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 01:57:49,428 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 01:57:49,428 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 99) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 01:57:49,432 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0019: Host default-host stopping
+2024-10-15 01:57:49,433 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:57:49,434 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 01:57:49,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 01:57:49,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 01:57:49,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 01:57:49,444 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 01:57:49,445 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 01:57:49,445 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 23ms
+2024-10-15 01:57:49,448 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 25ms
+2024-10-15 01:57:49,450 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 28ms
+2024-10-15 01:58:00,023 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 01:58:00,303 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 01:58:00,307 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 01:58:00,369 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 01:58:00,370 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 01:58:00,370 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 01:58:00,803 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 01:58:01,118 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 18) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/e6/7b51c2f921e803bb55d29e5ff7e98ba1b1994d/content
+2024-10-15 01:58:01,140 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 01:58:01,149 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-15 01:58:01,154 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 01:58:01,172 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 01:58:01,170 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 01:58:01,179 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 01:58:01,180 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 01:58:01,180 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 01:58:01,186 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 01:58:01,187 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 01:58:01,187 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 01:58:01,190 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 01:58:01,192 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 01:58:01,195 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 01:58:01,200 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 01:58:01,194 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 01:58:01,209 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 01:58:01,210 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 01:58:01,229 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 01:58:01,237 INFO  [org.jboss.remoting] (MSC service thread 1-6) JBoss Remoting version 5.0.29.Final
+2024-10-15 01:58:01,240 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 01:58:01,240 INFO  [org.jboss.as.naming] (MSC service thread 1-8) WFLYNAM0003: Starting Naming Service
+2024-10-15 01:58:01,243 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 01:58:01,247 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 01:58:01,292 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 01:58:01,305 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 01:58:01,321 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 01:58:01,331 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 01:58:01,331 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 01:58:01,331 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0012: Started server default-server.
+2024-10-15 01:58:01,335 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 01:58:01,340 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 01:58:01,390 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 01:58:01,460 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 01:58:01,471 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 01:58:01,504 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-2) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 01:58:01,515 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-8) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 01:58:01,552 INFO  [org.jboss.ws.common.management] (MSC service thread 1-3) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 01:58:02,235 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 01:58:02,296 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 93) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 01:58:02,331 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 01:58:02,331 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 01:58:02,358 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 01:58:02,364 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 01:58:02,364 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 01:58:02,365 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2550ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:02:32,086 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:02:32,089 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:02:32,089 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:02:32,097 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:02:32,097 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 93) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:02:32,097 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:02:32,101 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0019: Host default-host stopping
+2024-10-15 02:02:32,102 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-4) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:02:32,103 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:02:32,112 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:02:32,112 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:02:32,113 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:02:32,113 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:02:32,113 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:02:32,114 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 21ms
+2024-10-15 02:02:32,116 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 02:02:32,118 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 27ms
+2024-10-15 02:02:46,184 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:02:46,450 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:02:46,454 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:02:46,512 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:02:46,513 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:02:46,513 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:02:46,938 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:02:47,241 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 36) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/93/df251736d3d514211a5f19940ae2d12fc00e45/content
+2024-10-15 02:02:47,267 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:02:47,276 INFO  [org.xnio] (MSC service thread 1-2) XNIO version 3.8.16.Final
+2024-10-15 02:02:47,281 INFO  [org.xnio.nio] (MSC service thread 1-2) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:02:47,311 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:02:47,313 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:02:47,310 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:02:47,320 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:02:47,321 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:02:47,322 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:02:47,323 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:02:47,324 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:02:47,325 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:02:47,331 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:02:47,333 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:02:47,328 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:02:47,335 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:02:47,332 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:02:47,342 INFO  [org.jboss.as.connector] (MSC service thread 1-7) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:02:47,349 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:02:47,355 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:02:47,356 INFO  [org.jboss.remoting] (MSC service thread 1-4) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:02:47,377 INFO  [org.jboss.as.naming] (MSC service thread 1-2) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:02:47,384 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:02:47,395 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:02:47,397 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:02:47,411 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:02:47,446 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:02:47,446 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:02:47,450 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:02:47,453 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0012: Started server default-server.
+2024-10-15 02:02:47,455 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) Queuing requests.
+2024-10-15 02:02:47,457 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0018: Host default-host starting
+2024-10-15 02:02:47,507 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:02:47,579 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:02:47,583 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:02:47,613 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:02:47,635 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-6) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:02:47,677 INFO  [org.jboss.ws.common.management] (MSC service thread 1-2) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:02:48,129 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:02:48,235 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:02:48,271 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:02:48,272 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:02:48,311 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:02:48,318 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:02:48,318 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:02:48,319 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2345ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:10:44,542 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:10:44,544 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:10:44,546 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:10:44,554 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:10:44,554 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:10:44,554 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 98) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:10:44,558 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0019: Host default-host stopping
+2024-10-15 02:10:44,559 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-8) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:10:44,560 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:10:44,570 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:10:44,570 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:10:44,571 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:10:44,571 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:10:44,571 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 22ms
+2024-10-15 02:10:44,571 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:10:44,573 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 02:10:44,576 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 29ms
+2024-10-15 02:11:29,952 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:11:30,216 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:11:30,220 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:11:30,278 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:11:30,278 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:11:30,279 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:11:30,698 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:11:30,989 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/13/9ce0aa33df7d526500a1f9ecbf0758fdfe525f/content
+2024-10-15 02:11:31,008 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:11:31,017 INFO  [org.xnio] (MSC service thread 1-4) XNIO version 3.8.16.Final
+2024-10-15 02:11:31,022 INFO  [org.xnio.nio] (MSC service thread 1-4) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:11:31,042 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:11:31,043 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:11:31,044 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:11:31,046 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:11:31,052 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:11:31,046 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:11:31,053 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:11:31,046 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:11:31,054 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:11:31,055 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:11:31,056 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:11:31,062 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:11:31,070 INFO  [org.jboss.as.connector] (MSC service thread 1-3) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:11:31,079 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:11:31,096 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:11:31,097 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:11:31,102 INFO  [org.jboss.remoting] (MSC service thread 1-1) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:11:31,104 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:11:31,108 INFO  [org.jboss.as.naming] (MSC service thread 1-2) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:11:31,109 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:11:31,125 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:11:31,136 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:11:31,143 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-3) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:11:31,146 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:11:31,150 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:11:31,161 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:11:31,166 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0012: Started server default-server.
+2024-10-15 02:11:31,168 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 02:11:31,171 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 02:11:31,217 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:11:31,273 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:11:31,280 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:11:31,325 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:11:31,344 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-7) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:11:31,383 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:11:31,817 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:11:31,928 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:11:31,963 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:11:31,964 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:11:31,991 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:11:31,997 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:11:31,997 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:11:31,999 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2243ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:14:29,151 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:14:29,153 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:14:29,154 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:14:29,160 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:14:29,161 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:14:29,161 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:14:29,164 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0019: Host default-host stopping
+2024-10-15 02:14:29,165 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:14:29,166 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:14:29,178 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:14:29,178 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:14:29,179 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:14:29,179 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:14:29,179 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 22ms
+2024-10-15 02:14:29,179 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:14:29,181 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 02:14:29,184 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 27ms
+2024-10-15 02:14:43,363 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:14:43,621 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:14:43,625 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:14:43,681 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:14:43,682 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:14:43,683 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:14:44,078 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:14:44,374 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 30) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/e4/71c1233c9d792a979f17c1a8a53b86509f5edf/content
+2024-10-15 02:14:44,397 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:14:44,407 INFO  [org.xnio] (MSC service thread 1-7) XNIO version 3.8.16.Final
+2024-10-15 02:14:44,415 INFO  [org.xnio.nio] (MSC service thread 1-7) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:14:44,439 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:14:44,441 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:14:44,441 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:14:44,449 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:14:44,444 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:14:44,446 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:14:44,450 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:14:44,445 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:14:44,452 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:14:44,457 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:14:44,459 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:14:44,473 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:14:44,475 INFO  [org.jboss.as.connector] (MSC service thread 1-4) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:14:44,488 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:14:44,488 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:14:44,492 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:14:44,496 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:14:44,502 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:14:44,506 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:14:44,509 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:14:44,523 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:14:44,555 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:14:44,576 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:14:44,589 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:14:44,589 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:14:44,598 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:14:44,606 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0012: Started server default-server.
+2024-10-15 02:14:44,607 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) Queuing requests.
+2024-10-15 02:14:44,610 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0018: Host default-host starting
+2024-10-15 02:14:44,652 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:14:44,717 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:14:44,726 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:14:44,759 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:14:44,766 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-3) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:14:44,813 INFO  [org.jboss.ws.common.management] (MSC service thread 1-8) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:14:45,319 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:14:45,416 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 92) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:14:45,457 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:14:45,457 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:14:45,495 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:14:45,501 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:14:45,502 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:14:45,503 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2336ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:14:57,314 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:17:32,002 INFO  [stdout] (default task-2) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:17:37,877 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:17:37,879 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:17:37,881 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:17:37,889 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 92) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:17:37,889 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:17:37,890 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:17:37,893 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0019: Host default-host stopping
+2024-10-15 02:17:37,895 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:17:37,896 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:17:37,906 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:17:37,906 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:17:37,906 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:17:37,906 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:17:37,907 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:17:37,907 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 24ms
+2024-10-15 02:17:37,910 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 24ms
+2024-10-15 02:17:37,912 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 28ms
+2024-10-15 02:17:46,524 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:17:46,798 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:17:46,803 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:17:46,863 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:17:46,864 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:17:46,865 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:17:47,301 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:17:47,599 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 18) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/16/2dc3fd004cd05798ab2270b1b49d05480a38b3/content
+2024-10-15 02:17:47,622 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:17:47,631 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-15 02:17:47,636 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:17:47,661 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:17:47,664 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:17:47,678 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:17:47,674 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:17:47,675 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:17:47,676 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:17:47,686 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:17:47,686 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:17:47,692 INFO  [org.jboss.as.connector] (MSC service thread 1-3) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:17:47,692 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:17:47,693 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:17:47,694 INFO  [org.jboss.remoting] (MSC service thread 1-5) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:17:47,696 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:17:47,697 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:17:47,697 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:17:47,704 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:17:47,720 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:17:47,726 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:17:47,730 INFO  [org.jboss.as.naming] (MSC service thread 1-5) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:17:47,736 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:17:47,738 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:17:47,760 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:17:47,810 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:17:47,834 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:17:47,834 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:17:47,839 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:17:47,844 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0012: Started server default-server.
+2024-10-15 02:17:47,846 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) Queuing requests.
+2024-10-15 02:17:47,847 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0018: Host default-host starting
+2024-10-15 02:17:47,874 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:17:47,914 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:17:47,924 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:17:47,945 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:17:47,975 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-1) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:17:48,017 INFO  [org.jboss.ws.common.management] (MSC service thread 1-7) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:17:48,449 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:17:48,561 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 93) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:17:48,604 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:17:48,605 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:17:48,642 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:17:48,647 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:17:48,647 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:17:48,649 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2329ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:17:59,384 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:18:06,825 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:22:23,199 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:22:23,200 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:22:23,202 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:22:23,210 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:22:23,210 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 18) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:22:23,210 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:22:23,214 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0019: Host default-host stopping
+2024-10-15 02:22:23,216 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-4) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:22:23,217 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:22:23,228 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:22:23,228 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:22:23,228 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:22:23,228 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:22:23,229 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 24ms
+2024-10-15 02:22:23,229 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:22:23,231 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 25ms
+2024-10-15 02:22:23,235 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 31ms
+2024-10-15 02:23:07,665 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:23:07,939 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:23:07,943 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:23:08,000 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:23:08,001 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:23:08,001 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:23:08,462 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:23:08,769 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 19) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/30/a5763f7aaeba14fbc6d1d6ecbaed89ee7169ec/content
+2024-10-15 02:23:08,793 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:23:08,801 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-15 02:23:08,805 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:23:08,829 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:23:08,832 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:23:08,836 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:23:08,838 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:23:08,838 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:23:08,839 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:23:08,837 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:23:08,838 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:23:08,844 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:23:08,849 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:23:08,851 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:23:08,851 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:23:08,851 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:23:08,855 INFO  [org.jboss.as.connector] (MSC service thread 1-4) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:23:08,860 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:23:08,862 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:23:08,871 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:23:08,875 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:23:08,876 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:23:08,884 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:23:08,894 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:23:08,918 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:23:08,929 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:23:08,961 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:23:08,963 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:23:08,963 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:23:08,966 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0012: Started server default-server.
+2024-10-15 02:23:08,969 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) Queuing requests.
+2024-10-15 02:23:08,970 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0018: Host default-host starting
+2024-10-15 02:23:09,019 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:23:09,092 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:23:09,106 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:23:09,139 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-4) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:23:09,154 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:23:09,199 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:23:09,874 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 78) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:23:10,006 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 86) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:23:10,040 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:23:10,041 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:23:10,068 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:23:10,072 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:23:10,073 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:23:10,074 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2610ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:23:21,344 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:23:30,799 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:23:44,831 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:25:05,401 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:25:13,018 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:25:28,899 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:25:42,422 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:26:21,156 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:26:41,902 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:32:41,082 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:32:41,084 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:32:41,085 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:32:41,094 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 86) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:32:41,094 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:32:41,095 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 98) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:32:41,099 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 02:32:41,102 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:32:41,102 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:32:41,111 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:32:41,111 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:32:41,118 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:32:41,118 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:32:41,119 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:32:41,122 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 33ms
+2024-10-15 02:32:41,123 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 33ms
+2024-10-15 02:32:41,131 INFO  [org.jboss.as] (MSC service thread 1-6) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 43ms
+2024-10-15 02:32:53,005 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:32:53,291 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:32:53,296 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:32:53,357 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:32:53,358 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:32:53,358 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:32:53,776 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:32:54,114 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:32:54,121 INFO  [org.xnio] (MSC service thread 1-6) XNIO version 3.8.16.Final
+2024-10-15 02:32:54,126 INFO  [org.xnio.nio] (MSC service thread 1-6) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:32:54,147 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:32:54,150 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:32:54,153 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:32:54,153 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:32:54,156 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:32:54,153 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:32:54,153 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:32:54,161 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:32:54,159 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:32:54,161 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:32:54,168 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:32:54,168 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:32:54,168 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:32:54,191 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:32:54,190 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:32:54,190 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:32:54,197 INFO  [org.jboss.remoting] (MSC service thread 1-3) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:32:54,207 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:32:54,228 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:32:54,239 INFO  [org.jboss.as.naming] (MSC service thread 1-2) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:32:54,240 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:32:54,258 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:32:54,264 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:32:54,291 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:32:54,291 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:32:54,293 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:32:54,302 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0012: Started server default-server.
+2024-10-15 02:32:54,305 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) Queuing requests.
+2024-10-15 02:32:54,309 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0018: Host default-host starting
+2024-10-15 02:32:54,340 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:32:54,417 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:32:54,423 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:32:54,502 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:32:54,559 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-2) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:32:54,635 INFO  [org.jboss.ws.common.management] (MSC service thread 1-5) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:32:55,083 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 78) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:32:55,182 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:32:55,210 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:32:55,211 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:32:55,238 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:32:55,243 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:32:55,243 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:32:55,244 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2435ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:33:01,161 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:35:51,333 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:36:01,111 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:36:32,662 INFO  [stdout] (default task-1) ControllerServlet: Forwarding directly to result.jsp
+2024-10-15 02:38:35,204 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:38:35,205 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:38:35,206 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:38:35,214 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 88) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:38:35,215 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:38:35,215 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:38:35,219 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0019: Host default-host stopping
+2024-10-15 02:38:35,220 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:38:35,221 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-8) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:38:35,231 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:38:35,231 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:38:35,231 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:38:35,232 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:38:35,232 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:38:35,232 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 23ms
+2024-10-15 02:38:35,235 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 24ms
+2024-10-15 02:38:35,238 INFO  [org.jboss.as] (MSC service thread 1-4) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 29ms
+2024-10-15 02:38:44,331 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:38:44,602 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:38:44,607 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:38:44,665 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:38:44,666 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:38:44,667 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:38:45,056 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:38:45,361 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 35) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/11/85002832f0c77a967d99cfabd6694be29128f7/content
+2024-10-15 02:38:45,380 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:38:45,388 INFO  [org.xnio] (MSC service thread 1-5) XNIO version 3.8.16.Final
+2024-10-15 02:38:45,392 INFO  [org.xnio.nio] (MSC service thread 1-5) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:38:45,409 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:38:45,414 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:38:45,417 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:38:45,414 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:38:45,425 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:38:45,426 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:38:45,428 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:38:45,434 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:38:45,434 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:38:45,439 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:38:45,439 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:38:45,440 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:38:45,441 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:38:45,464 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:38:45,465 INFO  [org.jboss.remoting] (MSC service thread 1-6) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:38:45,472 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:38:45,482 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:38:45,484 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:38:45,491 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:38:45,491 INFO  [org.jboss.as.naming] (MSC service thread 1-4) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:38:45,491 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:38:45,512 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:38:45,517 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:38:45,548 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:38:45,548 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:38:45,547 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:38:45,559 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-15 02:38:45,562 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) Queuing requests.
+2024-10-15 02:38:45,563 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0018: Host default-host starting
+2024-10-15 02:38:45,607 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:38:45,661 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:38:45,664 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:38:45,695 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-8) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:38:45,707 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-6) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:38:45,751 INFO  [org.jboss.ws.common.management] (MSC service thread 1-4) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:38:46,183 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:38:46,316 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:38:46,343 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:38:46,344 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:38:46,374 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:38:46,379 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:38:46,379 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:38:46,380 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2256ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:38:47,749 ERROR [io.undertow.request] (default task-1) UT005023: Exception handling request to /server/index.jsp: org.apache.jasper.JasperException: JBWEB004062: Unable to compile class for JSP: 
+
+JBWEB004060: An error occurred at line: 89 in the jsp file: /index.jsp
+Duplicate local variable resultBean
+86: 
+87: <script>
+88:     const results = <%
+89:         ResultBean resultBean = (ResultBean) session.getAttribute("resultBean");
+90:         if (resultBean != null && resultBean.getResults() != null) {
+91:             out.print(new com.google.gson.Gson().toJson(resultBean.getResults()));
+92:         } else {
+
+
+Stacktrace:
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.DefaultErrorHandler.javacError(DefaultErrorHandler.java:95)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.ErrorDispatcher.javacError(ErrorDispatcher.java:198)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.JDTCompiler.generateClass(JDTCompiler.java:507)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:363)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:338)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.compiler.Compiler.compile(Compiler.java:325)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.JspCompilationContext.compile(JspCompilationContext.java:652)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServletWrapper.service(JspServletWrapper.java:357)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.serviceJspFile(JspServlet.java:403)
+	at io.undertow.jsp@2.2.8.Final//org.apache.jasper.servlet.JspServlet.service(JspServlet.java:347)
+	at jakarta.servlet.api@6.0.0//jakarta.servlet.http.HttpServlet.service(HttpServlet.java:614)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
+	at io.undertow.jsp@2.2.8.Final//io.undertow.jsp.JspFileHandler.handleRequest(JspFileHandler.java:32)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.lambda$handleRequest$1(ElytronRunAsHandler.java:68)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.FlexibleIdentityAssociation.runAsFunctionEx(FlexibleIdentityAssociation.java:103)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAsFunctionEx(Scoped.java:161)
+	at org.wildfly.security.elytron-base@2.6.0.Final//org.wildfly.security.auth.server.Scoped.runAs(Scoped.java:73)
+	at org.wildfly.security.elytron-web.undertow-server@4.1.0.Final//org.wildfly.elytron.web.undertow.server.ElytronRunAsHandler.handleRequest(ElytronRunAsHandler.java:67)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
+	at io.undertow.core@2.3.17.Final//io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
+	at org.wildfly.security.elytron-web.undertow-server-servlet@4.1.0.Final//org.wildfly.elytron.web.undertow.server.servlet.CleanUpHandler.handleRequest(CleanUpHandler.java:38)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:44)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.GlobalRequestControllerHandler.handleRequest(GlobalRequestControllerHandler.java:51)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:276)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:135)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:132)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService$UndertowThreadSetupAction.lambda$create$0(UndertowDeploymentInfoService.java:1421)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:256)
+	at io.undertow.servlet@2.3.17.Final//io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:101)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.Connectors.executeRootHandler(Connectors.java:395)
+	at io.undertow.core@2.3.17.Final//io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:859)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1348)
+	at org.jboss.xnio@3.8.16.Final//org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+
+2024-10-15 02:40:42,431 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:40:42,433 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:40:42,434 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:40:42,442 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:40:42,442 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:40:42,443 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 99) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:40:42,447 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-15 02:40:42,448 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:40:42,449 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:40:42,459 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:40:42,459 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:40:42,461 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:40:42,461 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 23ms
+2024-10-15 02:40:42,461 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:40:42,462 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:40:42,463 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 24ms
+2024-10-15 02:40:42,466 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 29ms
+2024-10-15 02:40:51,510 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:40:51,780 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:40:51,785 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:40:51,847 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:40:51,848 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:40:51,848 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:40:52,252 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:40:52,542 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 32) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/ac/121103ece3ea8b0d66f0dc3545757eea7d1a4d/content
+2024-10-15 02:40:52,562 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:40:52,571 INFO  [org.xnio] (MSC service thread 1-4) XNIO version 3.8.16.Final
+2024-10-15 02:40:52,575 INFO  [org.xnio.nio] (MSC service thread 1-4) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:40:52,594 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:40:52,595 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:40:52,600 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:40:52,602 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:40:52,604 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:40:52,604 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:40:52,604 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:40:52,609 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:40:52,610 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:40:52,611 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:40:52,618 INFO  [org.jboss.as.connector] (MSC service thread 1-2) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:40:52,619 INFO  [org.jboss.remoting] (MSC service thread 1-5) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:40:52,621 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:40:52,623 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:40:52,627 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:40:52,628 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:40:52,637 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:40:52,644 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:40:52,650 INFO  [org.jboss.as.naming] (MSC service thread 1-6) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:40:52,650 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:40:52,664 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:40:52,682 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-1) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:40:52,726 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:40:52,734 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:40:52,748 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:40:52,749 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:40:52,755 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0012: Started server default-server.
+2024-10-15 02:40:52,757 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) Queuing requests.
+2024-10-15 02:40:52,759 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0018: Host default-host starting
+2024-10-15 02:40:52,794 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:40:52,852 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:40:52,853 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:40:52,877 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-6) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:40:52,886 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:40:52,910 INFO  [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:40:53,356 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:40:53,513 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:40:53,546 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:40:53,547 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:40:53,573 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:40:53,578 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:40:53,578 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:40:53,580 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2275ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:41:37,479 INFO  [stdout] (default task-1) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:41:44,761 INFO  [stdout] (default task-1) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:41:50,259 INFO  [stdout] (default task-1) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:46:51,272 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:46:51,274 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:46:51,275 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:46:51,283 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 87) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:46:51,284 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 98) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:46:51,284 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:46:51,288 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0019: Host default-host stopping
+2024-10-15 02:46:51,290 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:46:51,290 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:46:51,300 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:46:51,300 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:46:51,301 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:46:51,301 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:46:51,301 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 22ms
+2024-10-15 02:46:51,301 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:46:51,304 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 25ms
+2024-10-15 02:46:51,307 INFO  [org.jboss.as] (MSC service thread 1-4) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 29ms
+2024-10-15 02:47:01,175 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:47:01,438 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:47:01,442 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:47:01,497 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:47:01,498 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:47:01,498 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:47:01,914 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:47:02,231 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 26) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/ab/7a91908d62184e547bc4927391a50e3d2aa4b7/content
+2024-10-15 02:47:02,251 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:47:02,259 INFO  [org.xnio] (MSC service thread 1-1) XNIO version 3.8.16.Final
+2024-10-15 02:47:02,263 INFO  [org.xnio.nio] (MSC service thread 1-1) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:47:02,282 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:47:02,281 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:47:02,287 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:47:02,288 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:47:02,291 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:47:02,292 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:47:02,293 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:47:02,292 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:47:02,293 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:47:02,313 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:47:02,315 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:47:02,319 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:47:02,323 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:47:02,323 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:47:02,327 INFO  [org.jboss.remoting] (MSC service thread 1-4) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:47:02,340 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:47:02,346 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:47:02,351 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:47:02,351 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:47:02,351 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:47:02,378 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:47:02,384 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:47:02,388 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:47:02,406 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:47:02,406 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:47:02,413 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:47:02,433 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0012: Started server default-server.
+2024-10-15 02:47:02,435 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) Queuing requests.
+2024-10-15 02:47:02,436 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0018: Host default-host starting
+2024-10-15 02:47:02,474 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:47:02,525 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:47:02,526 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:47:02,556 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:47:02,572 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-8) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:47:02,626 INFO  [org.jboss.ws.common.management] (MSC service thread 1-2) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:47:03,042 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:47:03,223 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 92) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:47:03,259 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:47:03,260 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:47:03,293 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:47:03,298 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:47:03,298 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:47:03,299 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2325ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:51:28,075 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:51:28,078 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:51:28,079 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:51:28,087 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:51:28,087 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 92) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:51:28,087 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 96) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:51:28,091 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0019: Host default-host stopping
+2024-10-15 02:51:28,093 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:51:28,093 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:51:28,104 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:51:28,104 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:51:28,104 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:51:28,104 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:51:28,105 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:51:28,105 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 23ms
+2024-10-15 02:51:28,108 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 25ms
+2024-10-15 02:51:28,110 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 29ms
+2024-10-15 02:51:35,463 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:51:35,738 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:51:35,743 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:51:35,809 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:51:35,810 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:51:35,810 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:51:36,222 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:51:36,522 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 9) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/70/d6b3c9841e99f84bbb642ee51c44cb9b9ecddb/content
+2024-10-15 02:51:36,543 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:51:36,552 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-15 02:51:36,556 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:51:36,578 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:51:36,582 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:51:36,582 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:51:36,584 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:51:36,584 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:51:36,585 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:51:36,587 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:51:36,590 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:51:36,590 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:51:36,591 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:51:36,599 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:51:36,599 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:51:36,599 INFO  [org.jboss.remoting] (MSC service thread 1-4) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:51:36,602 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:51:36,603 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:51:36,619 INFO  [org.jboss.as.connector] (MSC service thread 1-3) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:51:36,627 INFO  [org.jboss.as.naming] (MSC service thread 1-7) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:51:36,629 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:51:36,633 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:51:36,638 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:51:36,650 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:51:36,703 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:51:36,713 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:51:36,724 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:51:36,731 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0012: Started server default-server.
+2024-10-15 02:51:36,734 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) Queuing requests.
+2024-10-15 02:51:36,735 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0018: Host default-host starting
+2024-10-15 02:51:36,739 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:51:36,739 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:51:36,767 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:51:36,823 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:51:36,830 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:51:36,854 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-5) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:51:36,855 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:51:36,901 INFO  [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:51:37,309 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:51:37,483 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:51:37,516 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:51:37,516 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:51:37,541 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:51:37,547 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:51:37,547 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:51:37,548 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2284ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:51:43,394 INFO  [stdout] (default task-1) ControllerServlet: Forwarding to /check
+2024-10-15 02:51:45,513 INFO  [stdout] (default task-1) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:52:09,321 INFO  [stdout] (default task-2) ControllerServlet: Forwarding to /check
+2024-10-15 02:52:11,504 INFO  [stdout] (default task-2) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:53:06,504 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:53:06,506 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:53:06,508 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:53:06,515 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:53:06,515 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:53:06,516 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:53:06,519 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0019: Host default-host stopping
+2024-10-15 02:53:06,520 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:53:06,521 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:53:06,531 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:53:06,531 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:53:06,531 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:53:06,532 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:53:06,532 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:53:06,532 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 21ms
+2024-10-15 02:53:06,535 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 02:53:06,537 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 27ms
+2024-10-15 02:53:14,130 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:53:14,405 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:53:14,409 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:53:14,464 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:53:14,465 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:53:14,465 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:53:14,861 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:53:15,172 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 11) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/f8/f7d9743cffeb479dafd27f1f190946d538ade0/content
+2024-10-15 02:53:15,195 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:53:15,204 INFO  [org.xnio] (MSC service thread 1-4) XNIO version 3.8.16.Final
+2024-10-15 02:53:15,210 INFO  [org.xnio.nio] (MSC service thread 1-4) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:53:15,229 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:53:15,231 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:53:15,233 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:53:15,236 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:53:15,236 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:53:15,238 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:53:15,239 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:53:15,238 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:53:15,242 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:53:15,244 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:53:15,246 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:53:15,250 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:53:15,260 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:53:15,260 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:53:15,263 INFO  [org.jboss.as.connector] (MSC service thread 1-6) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:53:15,262 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:53:15,272 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:53:15,289 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:53:15,291 INFO  [org.jboss.as.naming] (MSC service thread 1-2) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:53:15,294 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:53:15,298 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:53:15,305 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-3) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:53:15,315 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:53:15,337 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:53:15,337 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:53:15,337 INFO  [org.jboss.as.ejb3] (MSC service thread 1-4) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:53:15,344 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-15 02:53:15,345 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) Queuing requests.
+2024-10-15 02:53:15,346 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0018: Host default-host starting
+2024-10-15 02:53:15,374 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:53:15,435 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:53:15,446 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:53:15,474 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:53:15,494 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-6) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:53:15,532 INFO  [org.jboss.ws.common.management] (MSC service thread 1-1) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:53:15,971 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 79) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:53:16,061 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:53:16,087 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:53:16,088 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:53:16,112 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:53:16,116 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:53:16,117 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:53:16,118 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2197ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:53:30,812 INFO  [stdout] (default task-2) ControllerServlet: Forwarding to /check
+2024-10-15 02:53:31,960 INFO  [stdout] (default task-2) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:56:39,609 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:56:39,611 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:56:39,612 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:56:39,619 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:56:39,620 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 94) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:56:39,620 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:56:39,623 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0019: Host default-host stopping
+2024-10-15 02:56:39,624 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:56:39,625 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:56:39,633 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:56:39,633 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:56:39,634 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:56:39,634 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:56:39,634 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:56:39,635 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-6) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 19ms
+2024-10-15 02:56:39,637 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 21ms
+2024-10-15 02:56:39,640 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 25ms
+2024-10-15 02:56:47,833 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-15 02:56:48,110 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-15 02:56:48,114 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-15 02:56:48,175 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-15 02:56:48,176 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-15 02:56:48,176 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-15 02:56:48,616 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-15 02:56:48,909 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 17) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/2c/659ef583a131a7764c7eed3ee2d4fe69c5ced5/content
+2024-10-15 02:56:48,928 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-15 02:56:48,938 INFO  [org.xnio] (MSC service thread 1-2) XNIO version 3.8.16.Final
+2024-10-15 02:56:48,942 INFO  [org.xnio.nio] (MSC service thread 1-2) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-15 02:56:48,961 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-15 02:56:48,965 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-15 02:56:48,964 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-15 02:56:48,967 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-15 02:56:48,969 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-15 02:56:48,972 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-15 02:56:48,976 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-15 02:56:48,976 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-15 02:56:48,977 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-15 02:56:48,977 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-15 02:56:48,978 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-15 02:56:48,987 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-15 02:56:49,000 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-15 02:56:49,001 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-15 02:56:49,001 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "helloworld.war" (runtime-name: "helloworld.war")
+2024-10-15 02:56:49,009 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-15 02:56:49,012 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.29.Final
+2024-10-15 02:56:49,017 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-15 02:56:49,018 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-15 02:56:49,023 INFO  [org.jboss.as.naming] (MSC service thread 1-1) WFLYNAM0003: Starting Naming Service
+2024-10-15 02:56:49,026 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-15 02:56:49,054 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-15 02:56:49,058 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-15 02:56:49,064 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-15 02:56:49,065 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-6) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-15 02:56:49,084 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-15 02:56:49,090 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0012: Started server default-server.
+2024-10-15 02:56:49,101 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) Queuing requests.
+2024-10-15 02:56:49,103 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0018: Host default-host starting
+2024-10-15 02:56:49,135 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-15 02:56:49,190 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:56:49,208 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-15 02:56:49,226 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:56:49,249 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-6) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-15 02:56:49,287 INFO  [org.jboss.ws.common.management] (MSC service thread 1-7) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-15 02:56:49,707 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 80) WFLYUT0021: Registered web context: '/helloworld' for server 'default-server'
+2024-10-15 02:56:49,913 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 86) WFLYUT0021: Registered web context: '/server' for server 'default-server'
+2024-10-15 02:56:50,019 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "helloworld.war" (runtime-name : "helloworld.war")
+2024-10-15 02:56:50,019 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-15 02:56:50,170 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-15 02:56:50,180 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-15 02:56:50,181 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-15 02:56:50,186 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 2557ms - Started 782 of 988 services (332 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-15 02:56:52,923 INFO  [stdout] (default task-1) ControllerServlet: Forwarding to /check
+2024-10-15 02:56:54,322 INFO  [stdout] (default task-1) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:56:56,507 INFO  [stdout] (default task-2) ControllerServlet: Forwarding to /check
+2024-10-15 02:56:57,918 INFO  [stdout] (default task-2) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:57:13,362 INFO  [stdout] (default task-1) ControllerServlet: Forwarding to /check
+2024-10-15 02:57:14,623 INFO  [stdout] (default task-1) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:57:40,021 INFO  [stdout] (default task-2) ControllerServlet: Forwarding to /check
+2024-10-15 02:57:41,079 INFO  [stdout] (default task-2) ControllerServlet: Missing parameters, redirecting to index.jsp
+2024-10-15 02:58:22,028 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-15 02:58:22,030 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-15 02:58:22,032 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-15 02:58:22,039 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 17) WFLYUT0022: Unregistered web context: '/server' from server 'default-server'
+2024-10-15 02:58:22,040 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-6) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-15 02:58:22,040 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 97) WFLYUT0022: Unregistered web context: '/helloworld' from server 'default-server'
+2024-10-15 02:58:22,042 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0019: Host default-host stopping
+2024-10-15 02:58:22,045 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-4) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-15 02:58:22,045 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-15 02:58:22,054 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-15 02:58:22,054 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-15 02:58:22,055 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-15 02:58:22,055 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-15 02:58:22,055 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-15 02:58:22,056 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment helloworld.war (runtime-name: helloworld.war) in 22ms
+2024-10-15 02:58:22,058 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 23ms
+2024-10-15 02:58:22,060 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 27ms
diff --git a/wildfly/standalone/log/server.log.2024-10-14 b/wildfly/standalone/log/server.log.2024-10-14
new file mode 100644
index 0000000..cd98f35
--- /dev/null
+++ b/wildfly/standalone/log/server.log.2024-10-14
@@ -0,0 +1,2140 @@
+2024-10-14 23:25:32,571 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:25:32,865 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:25:32,869 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:25:32,936 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:25:32,938 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:25:32,938 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:25:33,352 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:25:33,622 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 34) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/34/12d842513f08b7b5527fd7f42afc14248e8f1e/content
+2024-10-14 23:25:33,645 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:25:33,654 INFO  [org.xnio] (MSC service thread 1-7) XNIO version 3.8.16.Final
+2024-10-14 23:25:33,658 INFO  [org.xnio.nio] (MSC service thread 1-7) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:25:33,685 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:25:33,690 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:25:33,690 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:25:33,691 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:25:33,694 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:25:33,698 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:25:33,699 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:25:33,699 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:25:33,700 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:25:33,717 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:25:33,717 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:25:33,719 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0027: Starting deployment of "server.jar" (runtime-name: "server.jar")
+2024-10-14 23:25:33,724 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:25:33,727 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:25:33,740 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:25:33,742 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:25:33,746 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:25:33,750 INFO  [org.jboss.as.naming] (MSC service thread 1-4) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:25:33,760 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:25:33,771 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-7) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:25:33,791 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:25:33,798 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:25:33,817 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:25:33,817 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:25:33,818 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:25:33,823 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0012: Started server default-server.
+2024-10-14 23:25:33,825 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) Queuing requests.
+2024-10-14 23:25:33,830 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0018: Host default-host starting
+2024-10-14 23:25:33,866 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:25:33,912 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:25:33,926 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:25:33,943 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:25:33,967 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-3) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:25:34,019 INFO  [org.jboss.ws.common.management] (MSC service thread 1-7) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:25:34,238 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.jar" (runtime-name : "server.jar")
+2024-10-14 23:25:34,266 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:25:34,270 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:25:34,270 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:25:34,271 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1913ms - Started 381 of 588 services (324 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-14 23:25:47,063 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-14 23:25:47,065 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:25:47,066 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-14 23:25:47,072 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-14 23:25:47,073 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-14 23:25:47,073 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:25:47,075 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-14 23:25:47,085 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-14 23:25:47,085 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-14 23:25:47,085 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment server.jar (runtime-name: server.jar) in 16ms
+2024-10-14 23:25:47,085 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-14 23:25:47,085 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-14 23:25:47,086 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-14 23:25:47,092 INFO  [org.jboss.as] (MSC service thread 1-4) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 23ms
+2024-10-14 23:26:19,066 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:26:19,333 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:26:19,338 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:26:19,394 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:26:19,395 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:26:19,395 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:26:19,804 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:26:20,068 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:26:20,075 INFO  [org.xnio] (MSC service thread 1-7) XNIO version 3.8.16.Final
+2024-10-14 23:26:20,080 INFO  [org.xnio.nio] (MSC service thread 1-7) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:26:20,094 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:26:20,095 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:26:20,103 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:26:20,105 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:26:20,106 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:26:20,107 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:26:20,107 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:26:20,108 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:26:20,109 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:26:20,114 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:26:20,117 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:26:20,122 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:26:20,123 INFO  [org.jboss.as.connector] (MSC service thread 1-5) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:26:20,125 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "server.jar" (runtime-name: "server.jar")
+2024-10-14 23:26:20,139 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:26:20,142 INFO  [org.jboss.as.naming] (MSC service thread 1-2) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:26:20,142 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:26:20,145 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-2) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:26:20,150 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:26:20,155 INFO  [org.jboss.remoting] (MSC service thread 1-8) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:26:20,217 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:26:20,226 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:26:20,232 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:26:20,232 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:26:20,234 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:26:20,235 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0012: Started server default-server.
+2024-10-14 23:26:20,236 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) Queuing requests.
+2024-10-14 23:26:20,237 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0018: Host default-host starting
+2024-10-14 23:26:20,286 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:26:20,340 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:26:20,347 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:26:20,369 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:26:20,374 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-4) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:26:20,408 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:26:20,597 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.jar" (runtime-name : "server.jar")
+2024-10-14 23:26:20,642 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:26:20,646 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:26:20,646 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:26:20,647 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1779ms - Started 381 of 588 services (324 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-14 23:36:50,376 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-14 23:36:50,378 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:36:50,379 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-14 23:36:50,385 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-14 23:36:50,385 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0019: Host default-host stopping
+2024-10-14 23:36:50,385 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:36:50,387 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-14 23:36:50,401 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-14 23:36:50,401 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-14 23:36:50,402 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-14 23:36:50,402 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-14 23:36:50,402 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-2) WFLYSRV0028: Stopped deployment server.jar (runtime-name: server.jar) in 20ms
+2024-10-14 23:36:50,402 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-14 23:36:50,406 INFO  [org.jboss.as] (MSC service thread 1-7) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 24ms
+2024-10-14 23:36:52,139 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:36:52,412 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:36:52,417 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:36:52,474 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:36:52,475 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:36:52,475 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:36:52,887 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:36:53,149 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:36:53,156 INFO  [org.xnio] (MSC service thread 1-8) XNIO version 3.8.16.Final
+2024-10-14 23:36:53,160 INFO  [org.xnio.nio] (MSC service thread 1-8) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:36:53,184 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:36:53,184 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:36:53,183 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:36:53,188 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:36:53,188 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:36:53,185 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:36:53,191 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:36:53,197 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:36:53,197 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:36:53,198 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:36:53,198 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:36:53,201 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:36:53,200 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:36:53,206 INFO  [org.jboss.as.connector] (MSC service thread 1-6) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:36:53,220 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0027: Starting deployment of "server.jar" (runtime-name: "server.jar")
+2024-10-14 23:36:53,221 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:36:53,227 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-3) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:36:53,236 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:36:53,236 INFO  [org.jboss.as.naming] (MSC service thread 1-8) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:36:53,237 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-8) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:36:53,265 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-2) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:36:53,269 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-3) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:36:53,273 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:36:53,279 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:36:53,285 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:36:53,301 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0012: Started server default-server.
+2024-10-14 23:36:53,302 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) Queuing requests.
+2024-10-14 23:36:53,304 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0018: Host default-host starting
+2024-10-14 23:36:53,344 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:36:53,387 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:36:53,401 INFO  [org.jboss.as.ejb3] (MSC service thread 1-5) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:36:53,432 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:36:53,444 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-4) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:36:53,485 INFO  [org.jboss.ws.common.management] (MSC service thread 1-6) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:36:53,667 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.jar" (runtime-name : "server.jar")
+2024-10-14 23:36:53,694 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:36:53,698 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:36:53,698 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:36:53,699 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0025: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started in 1766ms - Started 381 of 588 services (324 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-14 23:37:43,957 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-14 23:37:43,960 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:37:43,962 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-14 23:37:43,968 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-2) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-14 23:37:43,969 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0019: Host default-host stopping
+2024-10-14 23:37:43,969 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:37:43,970 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-14 23:37:43,985 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-14 23:37:43,985 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-14 23:37:43,986 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-1) WFLYSRV0028: Stopped deployment server.jar (runtime-name: server.jar) in 21ms
+2024-10-14 23:37:43,986 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-14 23:37:43,986 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-14 23:37:43,987 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-14 23:37:43,990 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 26ms
+2024-10-14 23:37:50,049 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:37:50,299 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:37:50,303 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:37:50,359 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:37:50,360 DEBUG [org.jboss.as.config] (MSC service thread 1-3) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:37:50,360 DEBUG [org.jboss.as.config] (MSC service thread 1-3) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:37:50,746 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:37:51,044 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:37:51,053 INFO  [org.xnio] (MSC service thread 1-4) XNIO version 3.8.16.Final
+2024-10-14 23:37:51,058 INFO  [org.xnio.nio] (MSC service thread 1-4) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:37:51,079 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:37:51,077 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:37:51,081 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:37:51,082 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:37:51,084 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:37:51,085 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:37:51,084 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:37:51,088 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:37:51,090 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:37:51,093 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:37:51,095 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:37:51,095 INFO  [org.jboss.as.connector] (MSC service thread 1-2) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:37:51,099 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:37:51,110 INFO  [org.jboss.remoting] (MSC service thread 1-6) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:37:51,113 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-5) WFLYSRV0027: Starting deployment of "server.jar" (runtime-name: "server.jar")
+2024-10-14 23:37:51,113 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-14 23:37:51,126 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:37:51,131 INFO  [org.jboss.as.naming] (MSC service thread 1-4) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:37:51,133 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:37:51,133 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-4) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:37:51,133 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-1) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:37:51,200 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:37:51,211 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-7) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:37:51,217 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:37:51,226 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:37:51,226 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:37:51,228 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-14 23:37:51,232 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) Queuing requests.
+2024-10-14 23:37:51,233 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0018: Host default-host starting
+2024-10-14 23:37:51,272 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:37:51,316 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:37:51,325 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-1) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:37:51,347 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-6) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:37:51,374 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-1) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:37:51,430 INFO  [org.jboss.ws.common.management] (MSC service thread 1-8) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:37:51,695 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:37:51,722 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:37:51,740 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:37:51,750 WARN  [org.jboss.modules.define] (MSC service thread 1-4) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:37:51,755 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-4) MSC000001: Failed to start service jboss.deployment.unit."server.war".POST_MODULE: org.jboss.msc.service.StartException in service jboss.deployment.unit."server.war".POST_MODULE: WFLYSRV0153: Failed to process phase POST_MODULE of deployment "server.war"
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:172)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: org.jboss.msc.service.DuplicateServiceException: Service jboss.naming.context.java.module.server.server is already registered
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceRegistrationImpl.set(ServiceRegistrationImpl.java:135)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl.startInstallation(ServiceControllerImpl.java:248)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceContainerImpl.install(ServiceContainerImpl.java:730)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceTargetImpl.install(ServiceTargetImpl.java:154)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ChildServiceTarget.install(ServiceControllerImpl.java:1893)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceTargetImpl.install(ServiceTargetImpl.java:154)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ChildServiceTarget.install(ServiceControllerImpl.java:1893)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceBuilderImpl.install(ServiceBuilderImpl.java:188)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.naming.ModuleContextProcessor.deploy(ModuleContextProcessor.java:54)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	... 8 more
+
+2024-10-14 23:37:51,759 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "server.war")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"server.war\".POST_MODULE" => "WFLYSRV0153: Failed to process phase POST_MODULE of deployment \"server.war\"
+    Caused by: org.jboss.msc.service.DuplicateServiceException: Service jboss.naming.context.java.module.server.server is already registered"}}
+2024-10-14 23:37:51,806 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.jar" (runtime-name : "server.jar")
+2024-10-14 23:37:51,807 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-14 23:37:51,809 INFO  [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report
+WFLYCTL0186:   Services which failed to start:      service jboss.deployment.unit."server.war".POST_MODULE: WFLYSRV0153: Failed to process phase POST_MODULE of deployment "server.war"
+
+2024-10-14 23:37:51,841 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:37:51,846 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:37:51,846 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:37:51,848 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started (with errors) in 1994ms - Started 394 of 602 services (1 services failed or missing dependencies, 326 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-14 23:39:11,077 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-14 23:39:11,082 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:39:11,083 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-14 23:39:11,089 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-4) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-14 23:39:11,089 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0019: Host default-host stopping
+2024-10-14 23:39:11,090 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-3) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:39:11,091 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-6) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-14 23:39:11,094 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-3) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 9ms
+2024-10-14 23:39:11,103 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-14 23:39:11,103 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0028: Stopped deployment server.jar (runtime-name: server.jar) in 19ms
+2024-10-14 23:39:11,104 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-14 23:39:11,107 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-14 23:39:11,107 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-14 23:39:11,107 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-14 23:39:11,112 INFO  [org.jboss.as] (MSC service thread 1-8) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 27ms
+2024-10-14 23:39:48,353 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:39:48,618 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:39:48,623 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:39:48,679 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:39:48,680 DEBUG [org.jboss.as.config] (MSC service thread 1-3) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:39:48,680 DEBUG [org.jboss.as.config] (MSC service thread 1-3) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:39:49,058 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:39:49,359 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:39:49,369 INFO  [org.xnio] (MSC service thread 1-7) XNIO version 3.8.16.Final
+2024-10-14 23:39:49,374 INFO  [org.xnio.nio] (MSC service thread 1-7) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:39:49,400 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:39:49,402 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:39:49,402 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:39:49,402 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:39:49,404 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:39:49,405 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:39:49,406 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:39:49,406 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:39:49,412 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:39:49,417 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:39:49,417 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:39:49,418 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:39:49,419 INFO  [org.jboss.remoting] (MSC service thread 1-7) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:39:49,427 INFO  [org.jboss.as.connector] (MSC service thread 1-3) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:39:49,430 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-14 23:39:49,445 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:39:49,448 INFO  [org.jboss.as.naming] (MSC service thread 1-3) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:39:49,448 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:39:49,464 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:39:49,464 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:39:49,492 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:39:49,505 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:39:49,518 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:39:49,526 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:39:49,526 INFO  [org.jboss.as.ejb3] (MSC service thread 1-6) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:39:49,526 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-14 23:39:49,527 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) Queuing requests.
+2024-10-14 23:39:49,529 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0018: Host default-host starting
+2024-10-14 23:39:49,576 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:39:49,612 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:39:49,614 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:39:49,638 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-5) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:39:49,672 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-4) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:39:49,700 INFO  [org.jboss.ws.common.management] (MSC service thread 1-8) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:39:49,952 WARN  [org.jboss.modules.define] (MSC service thread 1-8) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:39:49,965 WARN  [org.jboss.modules.define] (MSC service thread 1-8) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:39:49,974 WARN  [org.jboss.modules.define] (MSC service thread 1-8) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:39:49,980 WARN  [org.jboss.modules.define] (MSC service thread 1-8) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:39:50,066 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:39:50,067 WARN  [org.jboss.as.ee] (MSC service thread 1-3) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:39:50,078 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:39:50,079 WARN  [org.jboss.as.ee] (MSC service thread 1-3) WFLYEE0007: Not installing optional component servlet.AreaCheckServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:39:50,084 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:39:50,084 WARN  [org.jboss.as.ee] (MSC service thread 1-3) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.ScriptFreeTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:39:50,089 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:39:50,090 WARN  [org.jboss.as.ee] (MSC service thread 1-3) WFLYEE0007: Not installing optional component controller.ControllerServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:39:50,155 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-14 23:39:50,156 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-1) MSC000001: Failed to start null: org.jboss.msc.service.StartException in anonymous service: Failed to start service
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1609)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	... 6 more
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-14 23:39:50,159 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "server.war")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"server.war\".undertow-deployment.UndertowDeploymentInfoService" => "Failed to start service
+    Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module \"deployment.server.war\" from Service Module Loader): javax/servlet/http/HttpServlet
+    Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module \"deployment.server.war\" from Service Module Loader]"}}
+2024-10-14 23:39:50,201 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-14 23:39:50,204 INFO  [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report
+WFLYCTL0186:   Services which failed to start:      service jboss.deployment.unit."server.war".undertow-deployment.UndertowDeploymentInfoService: Failed to start service
+WFLYCTL0448: 2 additional services are down due to their dependencies being missing or failed
+2024-10-14 23:39:50,237 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:39:50,243 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:39:50,243 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:39:50,245 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started (with errors) in 2095ms - Started 698 of 909 services (4 services failed or missing dependencies, 327 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-14 23:51:03,962 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-14 23:51:03,964 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:51:03,965 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-14 23:51:03,974 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-4) WFLYUT0019: Host default-host stopping
+2024-10-14 23:51:03,975 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-14 23:51:03,977 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:51:03,978 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-14 23:51:03,991 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-14 23:51:03,991 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-14 23:51:03,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-14 23:51:03,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-14 23:51:03,992 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-14 23:51:03,993 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-4) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 24ms
+2024-10-14 23:51:03,999 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 31ms
+2024-10-14 23:51:34,518 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:51:34,779 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:51:34,783 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:51:34,840 INFO  [org.jboss.as] (MSC service thread 1-2) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:51:34,841 DEBUG [org.jboss.as.config] (MSC service thread 1-2) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:51:34,842 DEBUG [org.jboss.as.config] (MSC service thread 1-2) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:51:35,236 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:51:35,485 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 11) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/35/ff739652b1e20af2624753f3dc0a50d3dc358f/content
+2024-10-14 23:51:35,504 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:51:35,514 INFO  [org.xnio] (MSC service thread 1-8) XNIO version 3.8.16.Final
+2024-10-14 23:51:35,518 INFO  [org.xnio.nio] (MSC service thread 1-8) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:51:35,539 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:51:35,541 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:51:35,544 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:51:35,548 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:51:35,544 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:51:35,551 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:51:35,557 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:51:35,558 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:51:35,560 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-14 23:51:35,560 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:51:35,563 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:51:35,564 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:51:35,563 INFO  [org.jboss.remoting] (MSC service thread 1-6) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:51:35,562 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:51:35,575 INFO  [org.jboss.as.connector] (MSC service thread 1-1) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:51:35,583 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:51:35,586 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-5) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:51:35,597 INFO  [org.jboss.as.naming] (MSC service thread 1-5) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:51:35,598 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-5) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:51:35,643 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:51:35,651 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-5) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:51:35,668 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:51:35,687 INFO  [org.jboss.as.ejb3] (MSC service thread 1-1) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:51:35,687 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:51:35,690 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:51:35,696 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0012: Started server default-server.
+2024-10-14 23:51:35,698 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) Queuing requests.
+2024-10-14 23:51:35,699 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0018: Host default-host starting
+2024-10-14 23:51:35,724 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:51:35,776 INFO  [org.jboss.as.ejb3] (MSC service thread 1-3) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:51:35,782 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-2) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:51:35,802 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-1) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:51:35,810 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-7) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:51:35,858 INFO  [org.jboss.ws.common.management] (MSC service thread 1-5) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:51:36,136 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:51:36,150 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:51:36,157 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:51:36,162 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:51:36,230 WARN  [org.jboss.modules.define] (MSC service thread 1-7) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:51:36,231 WARN  [org.jboss.as.ee] (MSC service thread 1-7) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:51:36,240 WARN  [org.jboss.modules.define] (MSC service thread 1-7) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:51:36,240 WARN  [org.jboss.as.ee] (MSC service thread 1-7) WFLYEE0007: Not installing optional component servlet.AreaCheckServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:51:36,245 WARN  [org.jboss.modules.define] (MSC service thread 1-7) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:51:36,245 WARN  [org.jboss.as.ee] (MSC service thread 1-7) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.ScriptFreeTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:51:36,250 WARN  [org.jboss.modules.define] (MSC service thread 1-7) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:51:36,250 WARN  [org.jboss.as.ee] (MSC service thread 1-7) WFLYEE0007: Not installing optional component controller.ControllerServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:51:36,300 WARN  [org.jboss.modules.define] (MSC service thread 1-2) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-14 23:51:36,300 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-2) MSC000001: Failed to start null: org.jboss.msc.service.StartException in anonymous service: Failed to start service
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1609)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	... 6 more
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-14 23:51:36,303 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "server.war")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"server.war\".undertow-deployment.UndertowDeploymentInfoService" => "Failed to start service
+    Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module \"deployment.server.war\" from Service Module Loader): javax/servlet/http/HttpServlet
+    Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module \"deployment.server.war\" from Service Module Loader]"}}
+2024-10-14 23:51:36,345 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-14 23:51:36,347 INFO  [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report
+WFLYCTL0186:   Services which failed to start:      service jboss.deployment.unit."server.war".undertow-deployment.UndertowDeploymentInfoService: Failed to start service
+WFLYCTL0448: 2 additional services are down due to their dependencies being missing or failed
+2024-10-14 23:51:36,368 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:51:36,371 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:51:36,372 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:51:36,373 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started (with errors) in 2051ms - Started 698 of 909 services (4 services failed or missing dependencies, 327 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
+2024-10-14 23:55:00,742 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0272: Suspending server
+2024-10-14 23:55:00,744 INFO  [org.jboss.as.ejb3] (Thread-1) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:55:00,745 INFO  [org.jboss.as.server] (Thread-1) WFLYSRV0220: Server shutdown has been requested via an OS signal
+2024-10-14 23:55:00,756 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-5) WFLYUT0019: Host default-host stopping
+2024-10-14 23:55:00,757 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0002: Unbound mail session [java:jboss/mail/Default]
+2024-10-14 23:55:00,758 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-2) WFLYJCA0010: Unbound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:55:00,758 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-1) WFLYJCA0019: Stopped Driver service with driver-name = h2
+2024-10-14 23:55:00,768 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0008: Undertow HTTPS listener https suspending
+2024-10-14 23:55:00,768 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0008: Undertow HTTP listener default suspending
+2024-10-14 23:55:00,769 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0007: Undertow HTTP listener default stopped, was bound to 127.0.0.1:8080
+2024-10-14 23:55:00,769 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0007: Undertow HTTPS listener https stopped, was bound to 127.0.0.1:8443
+2024-10-14 23:55:00,769 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-3) WFLYUT0004: Undertow 2.3.17.Final stopping
+2024-10-14 23:55:00,771 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-8) WFLYSRV0028: Stopped deployment server.war (runtime-name: server.war) in 18ms
+2024-10-14 23:55:00,774 INFO  [org.jboss.as] (MSC service thread 1-3) WFLYSRV0050: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) stopped in 23ms
+2024-10-14 23:57:33,138 INFO  [org.jboss.modules] (main) JBoss Modules version 2.1.5.Final
+2024-10-14 23:57:33,399 INFO  [org.jboss.msc] (main) JBoss MSC version 1.5.5.Final
+2024-10-14 23:57:33,403 INFO  [org.jboss.threads] (main) JBoss Threads version 2.4.0.Final
+2024-10-14 23:57:33,458 INFO  [org.jboss.as] (MSC service thread 1-1) WFLYSRV0049: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) starting
+2024-10-14 23:57:33,459 DEBUG [org.jboss.as.config] (MSC service thread 1-1) Configured system properties:
+	[Standalone] = 
+	file.encoding = ANSI_X3.4-1968
+	file.separator = /
+	java.awt.headless = true
+	java.class.path = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar
+	java.class.version = 61.0
+	java.home = /usr/lib/jvm/java-17-openjdk
+	java.io.tmpdir = /tmp
+	java.library.path = /usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib
+	java.net.preferIPv4Stack = true
+	java.runtime.name = OpenJDK Runtime Environment
+	java.runtime.version = 17.0.12+7
+	java.security.manager = allow
+	java.specification.name = Java Platform API Specification
+	java.specification.vendor = Oracle Corporation
+	java.specification.version = 17
+	java.util.logging.manager = org.jboss.logmanager.LogManager
+	java.vendor = Arch Linux
+	java.vendor.url = https://openjdk.java.net/
+	java.vendor.url.bug = https://bugreport.java.com/bugreport/
+	java.version = 17.0.12
+	java.version.date = 2024-07-16
+	java.vm.compressedOopsMode = 32-bit
+	java.vm.info = mixed mode, sharing
+	java.vm.name = OpenJDK 64-Bit Server VM
+	java.vm.specification.name = Java Virtual Machine Specification
+	java.vm.specification.vendor = Oracle Corporation
+	java.vm.specification.version = 17
+	java.vm.vendor = Arch Linux
+	java.vm.version = 17.0.12+7
+	javax.management.builder.initial = org.jboss.as.jmx.PluggableMBeanServerBuilder
+	jboss.home.dir = /home/sanspie/Projects/web-2/wildfly
+	jboss.host.name = tanos
+	jboss.modules.system.pkgs = org.jboss.byteman
+	jboss.node.name = tanos
+	jboss.qualified.host.name = tanos
+	jboss.server.base.dir = /home/sanspie/Projects/web-2/wildfly/standalone
+	jboss.server.config.dir = /home/sanspie/Projects/web-2/wildfly/standalone/configuration
+	jboss.server.data.dir = /home/sanspie/Projects/web-2/wildfly/standalone/data
+	jboss.server.log.dir = /home/sanspie/Projects/web-2/wildfly/standalone/log
+	jboss.server.name = tanos
+	jboss.server.persist.config = true
+	jboss.server.temp.dir = /home/sanspie/Projects/web-2/wildfly/standalone/tmp
+	jdk.debug = release
+	jdk.serialFilter = maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000
+	line.separator = 
+
+	logging.configuration = file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties
+	module.path = /home/sanspie/Projects/web-2/wildfly/modules
+	native.encoding = ANSI_X3.4-1968
+	org.jboss.boot.log.file = /home/sanspie/Projects/web-2/wildfly/standalone/log/server.log
+	org.jboss.resolver.warning = true
+	os.arch = amd64
+	os.name = Linux
+	os.version = 6.10.9-arch1-2
+	path.separator = :
+	sun.arch.data.model = 64
+	sun.boot.library.path = /usr/lib/jvm/java-17-openjdk/lib
+	sun.cpu.endian = little
+	sun.io.unicode.encoding = UnicodeLittle
+	sun.java.command = /home/sanspie/Projects/web-2/wildfly/jboss-modules.jar -mp /home/sanspie/Projects/web-2/wildfly/modules org.jboss.as.standalone -Djboss.home.dir=/home/sanspie/Projects/web-2/wildfly -Djboss.server.base.dir=/home/sanspie/Projects/web-2/wildfly/standalone
+	sun.java.launcher = SUN_STANDARD
+	sun.jnu.encoding = ANSI_X3.4-1968
+	sun.management.compiler = HotSpot 64-Bit Tiered Compilers
+	sun.stderr.encoding = ANSI_X3.4-1968
+	sun.stdout.encoding = ANSI_X3.4-1968
+	user.country = US
+	user.dir = /home/sanspie/Projects/web-2
+	user.home = /home/sanspie
+	user.language = en
+	user.name = sanspie
+	user.timezone = Europe/Moscow
+2024-10-14 23:57:33,459 DEBUG [org.jboss.as.config] (MSC service thread 1-1) VM Arguments: -D[Standalone] -Djdk.serialFilter=maxbytes=10485760;maxdepth=128;maxarray=100000;maxrefs=300000 -Xms64m -Xmx512m -XX:MetaspaceSize=96M -XX:MaxMetaspaceSize=256m -Djava.net.preferIPv4Stack=true -Djboss.modules.system.pkgs=org.jboss.byteman -Djava.awt.headless=true --add-exports=java.desktop/sun.awt=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldap=ALL-UNNAMED --add-exports=java.naming/com.sun.jndi.url.ldaps=ALL-UNNAMED --add-exports=jdk.naming.dns/com.sun.jndi.dns=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-opens=java.base/java.lang.invoke=ALL-UNNAMED --add-opens=java.base/java.lang.reflect=ALL-UNNAMED --add-opens=java.base/java.io=ALL-UNNAMED --add-opens=java.base/java.net=ALL-UNNAMED --add-opens=java.base/java.security=ALL-UNNAMED --add-opens=java.base/java.util=ALL-UNNAMED --add-opens=java.base/java.util.concurrent=ALL-UNNAMED --add-opens=java.management/javax.management=ALL-UNNAMED --add-opens=java.naming/javax.naming=ALL-UNNAMED -Djava.security.manager=allow -Dorg.jboss.boot.log.file=/home/sanspie/Projects/web-2/wildfly/standalone/log/server.log -Dlogging.configuration=file:/home/sanspie/Projects/web-2/wildfly/standalone/configuration/logging.properties 
+2024-10-14 23:57:33,842 INFO  [org.wildfly.security] (Controller Boot Thread) ELY00001: WildFly Elytron version 2.6.0.Final
+2024-10-14 23:57:34,116 INFO  [org.jboss.as.repository] (ServerService Thread Pool -- 4) WFLYDR0001: Content added at location /home/sanspie/Projects/web-2/wildfly/standalone/data/content/41/c113ec3c9bf89524330bad19b8a0ba1d430161/content
+2024-10-14 23:57:34,135 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0039: Creating http management service using socket-binding (management-http)
+2024-10-14 23:57:34,143 INFO  [org.xnio] (MSC service thread 1-3) XNIO version 3.8.16.Final
+2024-10-14 23:57:34,148 INFO  [org.xnio.nio] (MSC service thread 1-3) XNIO NIO Implementation Version 3.8.16.Final
+2024-10-14 23:57:34,167 INFO  [org.jboss.as.clustering.infinispan] (ServerService Thread Pool -- 55) WFLYCLINF0001: Activating Infinispan subsystem.
+2024-10-14 23:57:34,168 INFO  [org.wildfly.extension.elytron.oidc._private] (ServerService Thread Pool -- 53) WFLYOIDC0001: Activating WildFly Elytron OIDC Subsystem
+2024-10-14 23:57:34,168 WARN  [org.jboss.as.txn] (ServerService Thread Pool -- 74) WFLYTX0013: The node-identifier attribute on the /subsystem=transactions is set to the default value. This is a danger for environments running multiple servers. Please make sure the attribute value is unique.
+2024-10-14 23:57:34,170 INFO  [org.wildfly.extension.microprofile.jwt.smallrye] (ServerService Thread Pool -- 66) WFLYJWT0001: Activating MicroProfile JWT Subsystem
+2024-10-14 23:57:34,170 INFO  [org.wildfly.extension.health] (ServerService Thread Pool -- 54) WFLYHEALTH0001: Activating Base Health Subsystem
+2024-10-14 23:57:34,172 INFO  [org.wildfly.extension.microprofile.config.smallrye] (ServerService Thread Pool -- 65) WFLYCONF0001: Activating MicroProfile Config Subsystem
+2024-10-14 23:57:34,179 INFO  [org.jboss.as.naming] (ServerService Thread Pool -- 67) WFLYNAM0001: Activating Naming Subsystem
+2024-10-14 23:57:34,185 INFO  [org.jboss.as.jaxrs] (ServerService Thread Pool -- 57) WFLYRS0016: RESTEasy version 6.2.10.Final
+2024-10-14 23:57:34,187 INFO  [org.wildfly.extension.io] (ServerService Thread Pool -- 56) WFLYIO001: Worker 'default' has auto-configured to 32 IO threads with 256 max task threads based on your 16 available processors
+2024-10-14 23:57:34,191 INFO  [org.jboss.as.jsf] (ServerService Thread Pool -- 62) WFLYJSF0007: Activated the following Jakarta Server Faces Implementations: [main]
+2024-10-14 23:57:34,191 INFO  [org.jboss.as.webservices] (ServerService Thread Pool -- 76) WFLYWS0002: Activating WebServices Extension
+2024-10-14 23:57:34,194 INFO  [org.wildfly.extension.metrics] (ServerService Thread Pool -- 64) WFLYMETRICS0001: Activating Base Metrics Subsystem
+2024-10-14 23:57:34,208 INFO  [org.jboss.as.connector] (MSC service thread 1-8) WFLYJCA0009: Starting Jakarta Connectors Subsystem (WildFly/IronJacamar 3.0.10.Final)
+2024-10-14 23:57:34,216 INFO  [org.jboss.as.server.deployment] (MSC service thread 1-7) WFLYSRV0027: Starting deployment of "server.war" (runtime-name: "server.war")
+2024-10-14 23:57:34,217 INFO  [org.jboss.remoting] (MSC service thread 1-2) JBoss Remoting version 5.0.29.Final
+2024-10-14 23:57:34,222 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-7) WFLYUT0003: Undertow 2.3.17.Final starting
+2024-10-14 23:57:34,223 INFO  [org.jboss.as.connector.subsystems.datasources] (ServerService Thread Pool -- 44) WFLYJCA0004: Deploying JDBC-compliant driver class org.h2.Driver (version 2.2)
+2024-10-14 23:57:34,223 INFO  [org.jboss.as.naming] (MSC service thread 1-7) WFLYNAM0003: Starting Naming Service
+2024-10-14 23:57:34,228 INFO  [org.jboss.as.connector.deployers.jdbc] (MSC service thread 1-7) WFLYJCA0018: Started Driver service with driver-name = h2
+2024-10-14 23:57:34,275 INFO  [org.jboss.as.mail.extension] (MSC service thread 1-3) WFLYMAIL0001: Bound mail session [java:jboss/mail/Default]
+2024-10-14 23:57:34,280 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-8) WFLYELY00023: KeyStore file '/home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore' does not exist. Used blank.
+2024-10-14 23:57:34,297 WARN  [org.wildfly.extension.elytron] (MSC service thread 1-4) WFLYELY01084: KeyStore /home/sanspie/Projects/web-2/wildfly/standalone/configuration/application.keystore not found, it will be auto-generated on first use with a self-signed certificate for host localhost
+2024-10-14 23:57:34,300 INFO  [org.wildfly.extension.undertow] (ServerService Thread Pool -- 75) WFLYUT0014: Creating file handler for path '/home/sanspie/Projects/web-2/wildfly/welcome-content' with options [directory-listing: 'false', follow-symlink: 'false', case-sensitive: 'true', safe-symlink-paths: '[]']
+2024-10-14 23:57:34,307 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0012: Started server default-server.
+2024-10-14 23:57:34,309 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) Queuing requests.
+2024-10-14 23:57:34,310 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0018: Host default-host starting
+2024-10-14 23:57:34,311 INFO  [org.jboss.as.ejb3] (MSC service thread 1-7) WFLYEJB0481: Strict pool slsb-strict-max-pool is using a max instance size of 256 (per class), which is derived from thread worker pool sizing.
+2024-10-14 23:57:34,311 INFO  [org.jboss.as.ejb3] (MSC service thread 1-2) WFLYEJB0482: Strict pool mdb-strict-max-pool is using a max instance size of 64 (per class), which is derived from the number of CPUs on this host.
+2024-10-14 23:57:34,345 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-8) WFLYUT0006: Undertow HTTP listener default listening on 127.0.0.1:8080
+2024-10-14 23:57:34,399 INFO  [org.jboss.as.ejb3] (MSC service thread 1-8) WFLYEJB0493: Jakarta Enterprise Beans subsystem suspension complete
+2024-10-14 23:57:34,403 INFO  [org.wildfly.extension.undertow] (MSC service thread 1-6) WFLYUT0006: Undertow HTTPS listener https listening on 127.0.0.1:8443
+2024-10-14 23:57:34,424 INFO  [org.jboss.as.connector.subsystems.datasources] (MSC service thread 1-7) WFLYJCA0001: Bound data source [java:jboss/datasources/ExampleDS]
+2024-10-14 23:57:34,438 INFO  [org.jboss.as.server.deployment.scanner] (MSC service thread 1-6) WFLYDS0013: Started FileSystemDeploymentService for directory /home/sanspie/Projects/web-2/wildfly/standalone/deployments
+2024-10-14 23:57:34,473 INFO  [org.jboss.ws.common.management] (MSC service thread 1-4) JBWS022052: Starting JBossWS 7.2.0.Final (Apache CXF 4.0.5) 
+2024-10-14 23:57:34,714 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:57:34,727 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:57:34,734 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:57:34,738 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:19)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.processComponentConfig(InterceptorAnnotationProcessor.java:67)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.InterceptorAnnotationProcessor.deploy(InterceptorAnnotationProcessor.java:60)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 27 more
+
+2024-10-14 23:57:34,809 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/PermittedTaglibsTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:57:34,810 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.PermittedTaglibsTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:57:34,816 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class servlet.AreaCheckServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link servlet/AreaCheckServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:57:34,817 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component servlet.AreaCheckServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:57:34,822 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class javax.servlet.jsp.jstl.tlv.ScriptFreeTLV in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link javax/servlet/jsp/jstl/tlv/ScriptFreeTLV (Module "deployment.server.war" from Service Module Loader): javax/servlet/jsp/tagext/TagLibraryValidator
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.jsp.tagext.TagLibraryValidator from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:57:34,823 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component javax.servlet.jsp.jstl.tlv.ScriptFreeTLV due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:57:34,827 WARN  [org.jboss.modules.define] (MSC service thread 1-1) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at java.base/java.lang.Class.forName0(Native Method)
+	at java.base/java.lang.Class.forName(Class.java:467)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.utils.ClassLoadingUtils.loadClass(ClassLoadingUtils.java:26)
+	at org.jboss.as.ee@34.0.0.Beta1//org.jboss.as.ee.component.deployers.EEModuleConfigurationProcessor.deploy(EEModuleConfigurationProcessor.java:63)
+	at org.jboss.as.server@26.0.0.Beta5//org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:165)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1363)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 25 more
+
+2024-10-14 23:57:34,828 WARN  [org.jboss.as.ee] (MSC service thread 1-1) WFLYEE0007: Not installing optional component controller.ControllerServlet due to an exception (enable DEBUG log level to see the cause)
+2024-10-14 23:57:34,890 WARN  [org.jboss.modules.define] (MSC service thread 1-3) Failed to define class controller.ControllerServlet in Module "deployment.server.war" from Service Module Loader: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-14 23:57:34,890 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-3) MSC000001: Failed to start null: org.jboss.msc.service.StartException in anonymous service: Failed to start service
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1609)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$ControllerTask.run(ServiceControllerImpl.java:1438)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:1990)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1486)
+	at org.jboss.threads@2.4.0.Final//org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1377)
+	at java.base/java.lang.Thread.run(Thread.java:840)
+Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module "deployment.server.war" from Service Module Loader): javax/servlet/http/HttpServlet
+	at java.base/java.lang.ClassLoader.defineClass1(Native Method)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1017)
+	at java.base/java.lang.ClassLoader.defineClass(ClassLoader.java:1095)
+	at org.jboss.modules.ModuleClassLoader.doDefineOrLoadClass(ModuleClassLoader.java:351)
+	at org.jboss.modules.ModuleClassLoader.defineClass(ModuleClassLoader.java:482)
+	at org.jboss.modules.ModuleClassLoader.loadClassLocal(ModuleClassLoader.java:276)
+	at org.jboss.modules.ModuleClassLoader$1.loadClassLocal(ModuleClassLoader.java:79)
+	at org.jboss.modules.Module.loadModuleClass(Module.java:798)
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:192)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.createServletConfig(UndertowDeploymentInfoService.java:634)
+	at org.wildfly.extension.undertow@34.0.0.Beta1//org.wildfly.extension.undertow.deployment.UndertowDeploymentInfoService.start(UndertowDeploymentInfoService.java:270)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1617)
+	at org.jboss.msc@1.5.5.Final//org.jboss.msc.service.ServiceControllerImpl$StartTask.execute(ServiceControllerImpl.java:1580)
+	... 6 more
+Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module "deployment.server.war" from Service Module Loader]
+	at org.jboss.modules.ModuleClassLoader.findClass(ModuleClassLoader.java:200)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClassUnchecked(ConcurrentClassLoader.java:408)
+	at org.jboss.modules.ConcurrentClassLoader.performLoadClass(ConcurrentClassLoader.java:396)
+	at org.jboss.modules.ConcurrentClassLoader.loadClass(ConcurrentClassLoader.java:115)
+	... 22 more
+
+2024-10-14 23:57:34,892 ERROR [org.jboss.as.controller.management-operation] (Controller Boot Thread) WFLYCTL0013: Operation ("deploy") failed - address: ([("deployment" => "server.war")]) - failure description: {"WFLYCTL0080: Failed services" => {"jboss.deployment.unit.\"server.war\".undertow-deployment.UndertowDeploymentInfoService" => "Failed to start service
+    Caused by: java.lang.NoClassDefFoundError: Failed to link controller/ControllerServlet (Module \"deployment.server.war\" from Service Module Loader): javax/servlet/http/HttpServlet
+    Caused by: java.lang.ClassNotFoundException: javax.servlet.http.HttpServlet from [Module \"deployment.server.war\" from Service Module Loader]"}}
+2024-10-14 23:57:34,921 INFO  [org.jboss.as.server] (ServerService Thread Pool -- 45) WFLYSRV0010: Deployed "server.war" (runtime-name : "server.war")
+2024-10-14 23:57:34,922 INFO  [org.jboss.as.controller] (Controller Boot Thread) WFLYCTL0183: Service status report
+WFLYCTL0186:   Services which failed to start:      service jboss.deployment.unit."server.war".undertow-deployment.UndertowDeploymentInfoService: Failed to start service
+WFLYCTL0448: 2 additional services are down due to their dependencies being missing or failed
+2024-10-14 23:57:34,942 INFO  [org.jboss.as.server] (Controller Boot Thread) WFLYSRV0212: Resuming server
+2024-10-14 23:57:34,946 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0060: Http management interface listening on http://127.0.0.1:9990/management
+2024-10-14 23:57:34,946 INFO  [org.jboss.as] (Controller Boot Thread) WFLYSRV0051: Admin console listening on http://127.0.0.1:9990
+2024-10-14 23:57:34,947 ERROR [org.jboss.as] (Controller Boot Thread) WFLYSRV0026: WildFly 34.0.0.Beta1 (WildFly Core 26.0.0.Beta5) started (with errors) in 2008ms - Started 698 of 909 services (4 services failed or missing dependencies, 327 services are lazy, passive or on-demand) - Server configuration file in use: standalone.xml - Minimum feature stability level: community
diff --git a/wildfly/welcome-content/bkg.gif b/wildfly/welcome-content/bkg.gif
new file mode 100644
index 0000000..523877c
Binary files /dev/null and b/wildfly/welcome-content/bkg.gif differ
diff --git a/wildfly/welcome-content/favicon.ico b/wildfly/welcome-content/favicon.ico
new file mode 100644
index 0000000..f19166c
Binary files /dev/null and b/wildfly/welcome-content/favicon.ico differ
diff --git a/wildfly/welcome-content/index.html b/wildfly/welcome-content/index.html
new file mode 100644
index 0000000..7973f96
--- /dev/null
+++ b/wildfly/welcome-content/index.html
@@ -0,0 +1,43 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<!DOCTYPE html>
+
+<html>
+<head>
+    <!-- proper charset -->
+    <meta http-equiv="content-type" content="text/html;charset=utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
+
+    <title>Welcome to WildFly</title>
+    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
+    <link rel="StyleSheet" href="wildfly.css" type="text/css">
+</head>
+
+<body>
+<div class="wrapper">
+    <div class="content">
+        <div class="logo">
+                <img src="wildfly_logo.png" alt="WildFly" border="0" />
+        </div>
+        <h1>Welcome to WildFly</h1>
+
+        <h3>Your WildFly instance is running.</h3>
+
+        <p><a href="https://docs.wildfly.org">Documentation</a> | <a href="https://github.com/wildfly/quickstart">Quickstarts</a> | <a href="/console">Administration
+            Console</a> </p>
+
+        <p><a href="https://wildfly.org">WildFly Project</a> |
+            <a href="https://groups.google.com/g/wildfly">User Forum</a> |
+            <a href="https://issues.jboss.org/browse/WFLY">Report an issue</a></p>
+        <p class="logos"><a href="https://www.jboss.org"><img src="jbosscommunity_logo_hori_white.png" alt="JBoss and JBoss Community" width=
+                "195" height="37" border="0"></a></p>
+
+        <p class="note">To replace this page simply deploy your own war with / as its context path.<br />
+            To disable it, remove the "welcome-content" handler for location / in the undertow subsystem.</p>
+    </div>
+</div>
+</body>
+</html>
diff --git a/wildfly/welcome-content/index_noconsole.html b/wildfly/welcome-content/index_noconsole.html
new file mode 100644
index 0000000..d5eacd8
--- /dev/null
+++ b/wildfly/welcome-content/index_noconsole.html
@@ -0,0 +1,43 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<!DOCTYPE html>
+
+<html>
+<head>
+    <!-- proper charset -->
+    <meta http-equiv="content-type" content="text/html;charset=utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
+
+    <title>Welcome to WildFly</title>
+    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
+    <link rel="StyleSheet" href="wildfly.css" type="text/css">
+</head>
+
+<body>
+<div class="wrapper">
+    <div class="content">
+        <div class="logo">
+            <img src="wildfly_logo.png" alt="WildFly" border="0"/>
+        </div>
+        <h1>Welcome to WildFly</h1>
+        
+        <h3>Your WildFly instance is running.</h3>
+
+        <p><a href="https://docs.wildfly.org">Documentation</a> | <a href="https://github.com/wildfly/quickstart">Quickstarts</a></p>
+
+        <p><a href="https://wildfly.org/">WildFly AS Project</a> |
+            <a href="https://community.jboss.org/en/wildfly">User Forum</a> |
+            <a href="https://issues.jboss.org/browse/WFLY">Report an issue</a></p>
+
+        <p class="logos"><a href="https://www.jboss.org"><img src="jbosscommunity_logo_hori_white.png" alt="JBoss and JBoss Community" width=
+                "195" height="37" border="0"></a></p>
+
+        <p class="note">To replace this page simply deploy your own war with / as its context path.<br />
+            To disable it, remove the "welcome-content" handler for location / in the undertow subsystem.</p>
+    </div>
+</div>
+</body>
+</html>
diff --git a/wildfly/welcome-content/jbosscommunity_logo_hori_white.png b/wildfly/welcome-content/jbosscommunity_logo_hori_white.png
new file mode 100644
index 0000000..52ac39d
Binary files /dev/null and b/wildfly/welcome-content/jbosscommunity_logo_hori_white.png differ
diff --git a/wildfly/welcome-content/noconsole.html b/wildfly/welcome-content/noconsole.html
new file mode 100644
index 0000000..1109266
--- /dev/null
+++ b/wildfly/welcome-content/noconsole.html
@@ -0,0 +1,37 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<!DOCTYPE html>
+
+<html>
+<head>
+    <!-- proper charset -->
+    <meta http-equiv="content-type" content="text/html;charset=utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
+
+    <title>WildFly - No Console Active</title>
+    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
+    <link rel="StyleSheet" href="wildfly.css" type="text/css">
+</head>
+
+<body>
+<div class="wrapper">
+    <div class="content">
+        <div class="logo">
+            <img src="wildfly_logo.png" alt="WildFly" border="0"/>
+        </div>
+        <h1>Welcome to WildFly</h1>
+
+        <h3>Your WildFly instance is running.</h3>
+
+        <h1>No Console Active</h1>
+
+        <p>The server configuration does not appear to have an active console. If you are running a standalone server
+            check the http interface is enabled in the standalone.xml configuration, if you are running a domain the
+            http interface can not be automatically detected so check the host.xml configuration and connect directly.</p>
+    </div>
+</div>
+</body>
+</html>
diff --git a/wildfly/welcome-content/noredirect.html b/wildfly/welcome-content/noredirect.html
new file mode 100644
index 0000000..ccd89a7
--- /dev/null
+++ b/wildfly/welcome-content/noredirect.html
@@ -0,0 +1,38 @@
+<!--
+  ~ Copyright The WildFly Authors
+  ~ SPDX-License-Identifier: Apache-2.0
+  -->
+
+<!DOCTYPE html>
+
+<html>
+<head>
+    <!-- proper charset -->
+    <meta http-equiv="content-type" content="text/html;charset=utf-8" />
+    <meta http-equiv="X-UA-Compatible" content="IE=EmulateIE8" />
+
+    <title>WildFly - Console Redirect Unavailable</title>
+    <link rel="shortcut icon" href="favicon.ico" type="image/x-icon">
+    <link rel="StyleSheet" href="wildfly.css" type="text/css">
+</head>
+
+<body>
+<div class="wrapper">
+    <div class="content">
+        <div class="logo">
+            <img src="wildfly_logo.png" alt="WildFly" border="0"/>
+        </div>
+        <h1>Welcome to WildFly</h1>
+
+        <h1>Unable to redirect.</h1>
+
+        <p>An automatic redirect to the Administration Console is not currently available. This is most likely
+            due to the administration console being exposed over a network interface different from the one to which
+            you are connected to.</p>
+
+        <p>To access the Administration console you should contact the administrator responsible for this
+            WildFly installation and ask them to provide you with the correct address.</p>
+    </div>
+</div>
+</body>
+</html>
diff --git a/wildfly/welcome-content/wildfly.css b/wildfly/welcome-content/wildfly.css
new file mode 100644
index 0000000..08b44c3
--- /dev/null
+++ b/wildfly/welcome-content/wildfly.css
@@ -0,0 +1,44 @@
+
+body {
+	background: url(bkg.gif) repeat-x;
+	color: #5B5B5B;
+	font-family: "Lucida Sans Unicode", "Lucida Grande", Geneva, Verdana, Arial, sans-serif;
+	margin-top: 100px;
+	text-align: center;
+}
+.wrapper {
+	margin-left: auto;
+	margin-right: auto;
+	width: 50em;
+	text-align: left;
+}
+a {
+	text-decoration: none;
+	color: #5e8a9a;
+}
+h1 {
+	padding-top: 20px;
+	color: #7b1e1e;
+}
+a:hover {
+	text-decoration: underline;
+	color: #8ec6d9;
+}
+.content {
+    margin: 0;
+    padding: 0;
+}
+.dualbrand {
+	padding-top: 20px;
+}
+.wildfly {
+	float:left;
+	margin-left: 10px;
+}
+.logo{
+    margin-bottom: 10px;
+}
+.note {
+	font-size: 8pt;
+	color: #aaaaaa;
+}
diff --git a/wildfly/welcome-content/wildfly_logo.png b/wildfly/welcome-content/wildfly_logo.png
new file mode 100644
index 0000000..51e55c3
Binary files /dev/null and b/wildfly/welcome-content/wildfly_logo.png differ